SOLVED

Servicing profiles & Azure AD registered devices

Iron Contributor

Hi, I wanted to know if Azure AD registered devices are supported with Servicing profile?

 

Asking because we're looking at moving from scoping with an Azure AD group to All devices, but, for now, we only want to target Azure AD and Hybrid AD joined devices.

 

So we want to make sure that by selecting all devices, the servicing profile will not target any non Azure AD/Hybrid AD joined devices.

 

Thank you and don't hesitate if you have any questions 

1 Reply
best response confirmed by lalanc01 (Iron Contributor)
Solution
The answer is yes & no at the same time 🙂 Let me explain:

If you use the "AzureAD group filtering" feature, you can target devices or users. If you target devices, those must be (H)AADJ. AADR does not work.

If you don't use the "AzureAD group filtering" feature (your desired state, selecting 'all devices' on the settings page) we don't have any requirement regarding the directory membership. Servicing profiles will take all devices from inventory and check them against all selection criteria. Devices which match all criteria will be added to the profile.

So in your scenario, it would include AADR or workgroup devices.

What is the scenario behind the approach to exclude all non-AAD-aware devices?
1 best response

Accepted Solutions
best response confirmed by lalanc01 (Iron Contributor)
Solution
The answer is yes & no at the same time 🙂 Let me explain:

If you use the "AzureAD group filtering" feature, you can target devices or users. If you target devices, those must be (H)AADJ. AADR does not work.

If you don't use the "AzureAD group filtering" feature (your desired state, selecting 'all devices' on the settings page) we don't have any requirement regarding the directory membership. Servicing profiles will take all devices from inventory and check them against all selection criteria. Devices which match all criteria will be added to the profile.

So in your scenario, it would include AADR or workgroup devices.

What is the scenario behind the approach to exclude all non-AAD-aware devices?

View solution in original post