SOLVED
Home

Device in Include and Exclude group

%3CLINGO-SUB%20id%3D%22lingo-sub-1191297%22%20slang%3D%22en-US%22%3EDevice%20in%20Include%20and%20Exclude%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1191297%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20we%20have%20a%20config%2Fupdate%20policy1%20with%20assignment%3A%3C%2FP%3E%3CP%3Einlclude%3DGroup1%3C%2FP%3E%3CP%3Eexclude%3DGroup2%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20we%20have%20device1%20that%20is%20member%20of%20Group1%20and%20Group2%20what%20would%20be%20the%20result%20%3F%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fnl-nl%2Fintune%2Fconfiguration%2Fdevice-profile-assign%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fnl-nl%2Fintune%2Fconfiguration%2Fdevice-profile-assign%3C%2FA%3E%3C%2FP%3E%3CP%3EIs%20it%20so%20that%20exclude%20wins%20over%20include%20%3F%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1191297%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eexclude%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1192329%22%20slang%3D%22en-US%22%3ERe%3A%20Device%20in%20Include%20and%20Exclude%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1192329%22%20slang%3D%22en-US%22%3EIn%20my%20case%20sometime%20ago%2C%20tried%20to%20push%20policy%20and%20test%20computer%20was%20on%20Include%20and%20exclude%20group-%20exclude%20won%20scratched%20my%20head%20on%20why%20the%20policy%20wasn%E2%80%99t%20applied.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1192552%22%20slang%3D%22en-US%22%3ERe%3A%20Device%20in%20Include%20and%20Exclude%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1192552%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F294994%22%20target%3D%22_blank%22%3E%40fatshark_2k%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheck%20out%20this%20link%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapps%2Fapps-inc-exl-assignments%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapps%2Fapps-inc-exl-assignments%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrom%20the%20article%3A%3C%2FP%3E%3CP%3EExclusion%20takes%20precedence%20over%20inclusion%20in%20the%20following%20same%20group%20type%20scenarios%3A%3C%2FP%3E%3CUL%3E%3CLI%3EIncluding%20user%20groups%20and%20excluding%20user%20groups%20when%20assigning%20apps%3C%2FLI%3E%3CLI%3EIncluding%20device%20groups%20and%20excluding%20device%20group%20when%20assigning%20apps%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

When we have a config/update policy1 with assignment:

inlclude=Group1

exclude=Group2

 

And we have device1 that is member of Group1 and Group2 what would be the result ?

https://docs.microsoft.com/nl-nl/intune/configuration/device-profile-assign

Is it so that exclude wins over include ?  

2 Replies
Highlighted
In my case sometime ago, tried to push policy and test computer was on Include and exclude group- exclude won scratched my head on why the policy wasn’t applied.
Highlighted
Solution

Hi @fatshark_2k 

 

Check out this link: https://docs.microsoft.com/en-us/intune/apps/apps-inc-exl-assignments

 

From the article:

Exclusion takes precedence over inclusion in the following same group type scenarios:

  • Including user groups and excluding user groups when assigning apps
  • Including device groups and excluding device group when assigning apps