Forum Discussion
Dynamic groups based on device.enrollmentProfileName for WIndows 10 devices
Didn't really find an answer to this and getting a proper answer from support seemed hard because the functionality spans multiple teams. So here it goes. As I read in the dynamic group document...
ShellBlazer I'm curious about this too. Were you ever able to find a solution for this?
Check the profileenrollmentname value via the Graph API. It's a good option but it's not always clear to me which policy is applied to which device.
https://c7solutions.com/2020/09/what-is-the-value-of-enrollmentprofilename
enrollmentProfileName (Enrollment profile name): Create a filter rule based on the enrollment profile name. This property is applied to a device when the device enrolls. It's a string value created by you, and matches the Windows Autopilot, Apple Automated Device Enrollment (ADE), or Google enrollment profile applied to the device. To see your enrollment profile names, sign in to the Intune admin center, and go to Devices > Enroll devices.
Enter the full string value (using -eq, -ne, -in, -notIn operators), or partial value (using -startswith, -contains, -notcontains operators).
Examples:
(device.enrollmentProfileName -eq "DEP iPhones")
(device.enrollmentProfileName -startsWith "Autopilot Profile")
(device.enrollmentProfileName -ne $null)
This property applies to:
Android Enterprise
iOS/iPadOS
Windows 11
Windows 10
https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties
https://c7solutions.com/2020/09/what-is-the-value-of-enrollmentprofilename
enrollmentProfileName (Enrollment profile name): Create a filter rule based on the enrollment profile name. This property is applied to a device when the device enrolls. It's a string value created by you, and matches the Windows Autopilot, Apple Automated Device Enrollment (ADE), or Google enrollment profile applied to the device. To see your enrollment profile names, sign in to the Intune admin center, and go to Devices > Enroll devices.
Enter the full string value (using -eq, -ne, -in, -notIn operators), or partial value (using -startswith, -contains, -notcontains operators).
Examples:
(device.enrollmentProfileName -eq "DEP iPhones")
(device.enrollmentProfileName -startsWith "Autopilot Profile")
(device.enrollmentProfileName -ne $null)
This property applies to:
Android Enterprise
iOS/iPadOS
Windows 11
Windows 10
https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties
