Forum Discussion
Targeting different intune policies to different devices for the same users.
Hi Robert,
wouldn't it be a possibility to use dynamic groups yet?
In my case we donÄt use DEP oder Android Zero Touch.
The users can enroll their devices by their own. In the enrollment process they choose a device type (BYOD or COPE/CORP).
I've set up a dynamic group like this:
e.g.
Name: Intune_BYOD_Devices_IOS
Rule: (device.deviceOSType -eq "iPad") -or (device.deviceOSType -eq "iPhone") -and (device.deviceCategory -eq "BYOD")
or for Android:
Rule: (device.deviceOSType -eq "Android") -and (device.deviceCategory -eq "BYOD")
Be carefull: The OS Type for iOS Devices isn't "iOS" (Strange, i know).
It is "iPad" and "iPhone".
With the device.devicecategory you can distinguish BYOD and CORP or the types you have. (BYOD is just a string i used. If you use "Company Device" you have to use this string in the dynamic rule.
Hi Robert,
wouldn't it be a possibility to use dynamic groups yet?
In my case we donÄt use DEP oder Android Zero Touch.
The users can enroll their devices by their own. In the enrollment process they choose a device type (BYOD or COPE/CORP).
I've set up a dynamic group like this:
e.g.
Name: Intune_BYOD_Devices_IOS
Rule: (device.deviceOSType -eq "iPad") -or (device.deviceOSType -eq "iPhone") -and (device.deviceCategory -eq "BYOD")
or for Android:
Rule: (device.deviceOSType -eq "Android") -and (device.deviceCategory -eq "BYOD")
Be carefull: The OS Type for iOS Devices isn't "iOS" (Strange, i know).
It is "iPad" and "iPhone".
With the device.devicecategory you can distinguish BYOD and CORP or the types you have. (BYOD is just a string i used. If you use "Company Device" you have to use this string in the dynamic rule.
- Thank you for your response Patrick, I was looking at this already and I'm delighted to see someone using it and confirming it should work. I think the longer term answer here for me is to implement DEP but with your validation that it works I think Device Categories feeding Dynamic Device Groups is a good solution for now.
- This works very well for me.
The only negative aspect is, that it needs some time before the dynamic group is updated, after a device is enrolled.- Because of a new techcommunity account, this is just a short response to follow up the thread. :)
