Deploying Config/App to Users installs on personal devices

[AndrewManning]

We have all our devices configured for AutoPilot.

We deploy several Configuration and Apps to User Groups and we find that these will install on personal devices which we do not want.

Is there a way to select deployment to User Group but only on certain devices, or Company Owned devices?

[#2]

@AndrewManning Looks like some personal devices ended up in Intune. 

You could create a dynamic group with only Autopilot devices, but since you are using user groups (something that would do too) you are triggering all (managed) devices of that user. 

Intune cannot install apps to non-managed devices, so I suggest removing these devices from MDM.