Event banner
Event details
Good Afternoon/Evening Ryan, I found an engineer to assist, and they noted that this is still supported via Managed Apps Assignment Filters. There is help text in the admin console to guide customers for both new and existing APP policies: https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties#managed-app-properties. Best, Thomas
Hi Thomas, thanks for passing along that link. I have already tried creating a filter like that, but using the rule syntax of (app.deviceManagementType -eq "Managed") never populates any results, despite having tens of devices already managed via InTune. The filter preview never shows any devices listed, which prevents the filter from working as intended.
- Conferred with my engineer, who just tested this in on of my tenants and it is working properly. I expect it might be due to this: For iOS/iPadOS, for the Device Management type to be enforced to Intune managed devices, additional app configuration settings are required. These configurations will communicate to the APP service that a particular app is managed—and that APP settings will not apply: - IntuneMAMUPN and IntuneMAMOID must be configured for all MDM managed applications. For more information, see https://learn.microsoft.com/en-us/mem/intune/apps/data-transfer-between-apps-manage-ios#configure-user-upn-setting-for-microsoft-intune-or-third-party-emm. - IntuneMAMDeviceID must be configured for all third-party and line-of-business MDM managed applications. The IntuneMAMDeviceID should be configured to the device ID token. For example, key=IntuneMAMDeviceID, value={{deviceID}}. For more information, see https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios. If only the IntuneMAMDeviceID is configured, the Intune APP will consider the device as unmanaged.