Assign Configuration Profile Only for Affinity User, or what can we use the primary user for?

[Nayuta]

Can I assign an Intune configuration profile for a primary user of Windows 10 computer?

In my environment, when I assign a configuration profile to a machine and log in the machine with the second user, the Intune also assigns the configuration profile to the second user.

Otherwise, how could we use the primary user? In my last post, I got an answer; we cannot limit a login user.

https://techcommunity.microsoft.com/t5/microsoft-intune/intune-windows-10-login-restriction-with-aff...

Regards,
nayuta

[#2]

Hi @Nayuta,

there is no user affinity for configuration profiles in Intune. The primary user is used during app targeting, for example a secondary user can't install apps on devices where he is not primary user, see some details for app targeting here: 

Intune application targeting for Windows 10 Win32 apps explained

https://oliverkieselbach.com/2020/02/19/intune-application-targeting-for-windows-10-win32-apps-expla...

Currently the primary user can't be changed, but this is announced to be in-development, check here:
https://docs.microsoft.com/en-us/intune/fundamentals/in-development

So to summarize I would suggest to study this article as it describes the current behavior:

Assign user and device profiles in Microsoft Intune

https://docs.microsoft.com/en-us/intune/configuration/device-profile-assign

especially see section: User groups vs. device groups

In addition to user and device targeting you can use applicability rules which currently support only OS Version and OS Edition, see here:

https://docs.microsoft.com/en-us/intune/configuration/device-profile-create#applicability-rules

best,

Oliver

[#3]

Hi @Oliver Kieselbach,

Thank you for your answer.

Intune also supports changing the primary user now.

I also try to use "UserPrincipalName" in the common name of the scep profile. I'll report when I finished.

Thanks!

nayuta