Azure dynamic device group issues

[pb_jbergener1165]

Hello,

We have a dynamic device group in Azure that is what we use to assign compliance policies to.  We are having issues with devices showing up in this group in a timely manner.  The query is rather simple.  If the device is tagged as a corporate device, add it to the group.  It does work but it takes a long time for the device to show up in the group.  This slows down our enrollment process since the device compliance is not assigned until the device is in this group.

Thanks in advance for any advice.

[#2 · Accepted solution]

Microsoft added device filters in Intune for this very issue. If you create a device filter for your corporate devices then you can use it as a filter in your policy assignment.

[#3]

I have a device filter setup. That's what is not working. For example, I had a phone yesterday that I was trying to get into my dyamic group. It would not go after waiting hours. I finally went into the phone, changed the ownership from Company to Personal. Went back in and changed it back from Personal to Company and then almost instantly it was added to the group. I'm not sure why my filter is not working properly.

[#4]

Your first post - "We have a dynamic device group in Azure that is what we use to assign compliance policies to."

Your second post - "I have a device filter setup. That's what is not working. For example, I had a phone yesterday that I was trying to get into my dyamic group."

What are you using? Device Filter or Dynamic group?

Device filter is not same as Dynamic groups. https://rahuljindalmyit.blogspot.com/2021/06/a-pinch-of-settings-catalog-dash-of.html

[#5]

Sorry.  So you are saying this would be better handled with a device filter instead of a dynamic group?

[#6]

Absolutely. Intune team added device filter to cut down on the policy assignment latency.

[#7]

Would you then assign the policy all devices and then filter?

[#8]

That’s right.

[#9]

Perfect, thanks. We will try this out. Appreciate the assistance.