Event banner
Event details
I would like to know the answer to this as well, because we have many users who will log into different machines at times, we assign apps per device rather than per user, as we don't want apps installing on devices that are not required. Curious what the best practice is for this.
Mike-Danoski
Microsoft
MicrosoftSome people really like targeting devices and some people really like targeting users and there are good cases for either approach. Targeting a device ensures that that device has that policy no matter who uses it and targeting a user ensures that those settings or apps or resources follow that user no matter which device they interact with. For large general policies that impact security I recommend targeting devices and using filters to avoid applying that policy where it should not apply. For personalization settings or application installations I like to target users because those are more in line with a single user's experience or a job role. If that job role or user's persona requires special security handling that's when I will again target additional security settings to that user or user group. More info here https://techcommunity.microsoft.com/t5/intune-customer-success/intune-grouping-targeting-and-filtering-recommendations-for-best/ba-p/2983058