how to create device group in intune?

[Vanshika_Parmar]

I have a policy where the client wants to block USB and it's requirement is that it's assigned to some devices in included groups and in excluded groups want to block other devices. how to do this ? can we create device group in intune? I am making this policy under device configuration profile?kindly help it would be much favour?

[#2]

Yes, you can assign a Configuration Profile broadly (All Devices, though I prefer not to use that group but a more specific one like a Dynamic group containing all Autopilot devices (Perhaps with GroupTag queries if you use Group Tags))

And then an Exclude device group containing the devices that should not get the Configuration Profile. Just ensure that both include and exclude groups have only devices, not mixed devices and users.

[#3]

Did that help you out?

[#4]

yes thank you! have a great day ;)

[#5 · Accepted solution]

No problem, please mark my answer as solution to mark this topic as solved