SOLVED
Home

Dynamic Group with Advanced rule

%3CLINGO-SUB%20id%3D%22lingo-sub-394538%22%20slang%3D%22en-US%22%3EDynamic%20Group%20with%20Advanced%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-394538%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20come%20across%20bug.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20created%20a%20Dynamic%20Device%20Group%20i%20used%20the%20property%20%22EnrollmentProfileName%22%20with%20the%20operator%20%22Equals%22%20and%20the%20value%20%22BP%20User%20Driven%22%20-%20This%20is%20where%20it%20get's%20strange%2C%20if%20you%20make%20a%20value%20that%20is%20equal%20to%20your%20enrollmentprofilename%20with%20%22spaces%22%20the%20dynamic%20group%20wont%20work.%3C%2FP%3E%3CP%3ESo%20you%20have%20to%20make%20the%20DEP%20profile%20or%20Autopilot%20Profile%20without%20spaces%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDEP%20profile%20allows%20you%20to%20use%20special%20characters(like%20%22-%22)%20and%20spaces.%3C%2FP%3E%3CP%3EAutopilot%20profile%20does%20not%20allow%20special%20characters%20only%20spaces.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20if%20you%20name%20your%20Deployment%20profile%20with%20spaces%20the%20dynamic%20group%20wont%20work.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3ESolution%3A%3CBR%20%2F%3EMake%20a%20Deployment%20profile%20without%20spaces%20so%20its%20the%20same%20on%20both%20Deployment%20programs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-394538%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-439065%22%20slang%3D%22en-US%22%3ERe%3A%20Dynamic%20Group%20with%20Advanced%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-439065%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F160328%22%20target%3D%22_blank%22%3E%40Jonas%20B%C3%B8gvad%3C%2FA%3E%20thanks%20for%20sharing%20this%20information.%26nbsp%3B%20Dynamic%20Device%20Groups%20are%20actually%20handled%20by%20Azure%20Active%20Directory%2C%20even%20though%20they%20are%20often%20used%20in%20association%20with%20Intune.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDid%20this%20work%20if%20you%20used%20a%20simple%20rule%20instead%3F%20Unless%20you%20are%20making%20it%20more%20complicated%20than%20just%20creating%20the%20membership%20on%20the%20enrollmentProfileName%2C%20a%20Simple%20Rule%20should%20suffice.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20have%20future%20Dynamic%20Device%20Group%20issues%2C%20here%20is%20the%20AAD%20forum%20for%20your%20reference%3A%26nbsp%3B%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FAzure-Active-Directory%2Fbd-p%2FAzure-Active-Directory%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FAzure-Active-Directory%2Fbd-p%2FAzure-Active-Directory%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-701456%22%20slang%3D%22en-US%22%3ERe%3A%20Dynamic%20Group%20with%20Advanced%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701456%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F160328%22%20target%3D%22_blank%22%3E%40Jonas%20B%C3%B8gvad%3C%2FA%3E%26nbsp%3BI%20think%20this%20issue%20is%20fixed%2C%20just%20tested%20that%20with%20space%20in%20Autopilot%20deployment%20profile%20name%2C%20dynamic%20group%20works.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-763424%22%20slang%3D%22en-US%22%3ERe%3A%20Dynamic%20Group%20with%20Advanced%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-763424%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20the%20update%20%3A)%3C%2Fimg%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F11453%22%20target%3D%22_blank%22%3E%40Yinghua%20Zeng%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Jonas Bøgvad
Occasional Contributor

I have come across bug.

 

I created a Dynamic Device Group i used the property "EnrollmentProfileName" with the operator "Equals" and the value "BP User Driven" - This is where it get's strange, if you make a value that is equal to your enrollmentprofilename with "spaces" the dynamic group wont work.

So you have to make the DEP profile or Autopilot Profile without spaces

 

DEP profile allows you to use special characters(like "-") and spaces.

Autopilot profile does not allow special characters only spaces.

 

But if you name your Deployment profile with spaces the dynamic group wont work.

Solution:
Make a Deployment profile without spaces so its the same on both Deployment programs.

 

3 Replies

@Jonas Bøgvad thanks for sharing this information.  Dynamic Device Groups are actually handled by Azure Active Directory, even though they are often used in association with Intune.

 

Did this work if you used a simple rule instead? Unless you are making it more complicated than just creating the membership on the enrollmentProfileName, a Simple Rule should suffice.

 

If you have future Dynamic Device Group issues, here is the AAD forum for your reference: https://techcommunity.microsoft.com/t5/Azure-Active-Directory/bd-p/Azure-Active-Directory

Solution

@Jonas Bøgvad I think this issue is fixed, just tested that with space in Autopilot deployment profile name, dynamic group works. 

Thank you for the update :) @Yinghua Zeng 

Related Conversations
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies