Event banner
Event details
What is the best practice for Application Deployment to User groups. If app is required to a user group, will it get installed on any machineswhere the user logs in? (shared machines, or helpdesk users logging in for helping a user. The user logging in is not a primary user of the machine for this case scenario)
BTW, I love primary user concept in Config Manager 🙂
- I would like to know the answer to this as well, because we have many users who will log into different machines at times, we assign apps per device rather than per user, as we don't want apps installing on devices that are not required. Curious what the best practice is for this.
- Mike-Danoski
Microsoft
Some people really like targeting devices and some people really like targeting users and there are good cases for either approach. Targeting a device ensures that that device has that policy no matter who uses it and targeting a user ensures that those settings or apps or resources follow that user no matter which device they interact with. For large general policies that impact security I recommend targeting devices and using filters to avoid applying that policy where it should not apply. For personalization settings or application installations I like to target users because those are more in line with a single user's experience or a job role. If that job role or user's persona requires special security handling that's when I will again target additional security settings to that user or user group. More info here https://techcommunity.microsoft.com/t5/intune-customer-success/intune-grouping-targeting-and-filtering-recommendations-for-best/ba-p/2983058
