Forum Discussion

oryxway's avatar
oryxway
Iron Contributor
Dec 13, 2022

Windows 365 Cloud PC Configuration Profiles and Policies

We are rolling out Autopilot devices as well as Cloud PC. Is it possible to separate the Cloud PC configuration profile with Autopilot devices that gets enrolled (including Config profile, Compliance policies, Apps deployment etc... )from those of Autopilot? As, I see that all are falling under the All devices categories and whatever CSP we are applying for Autopilot devices gets applied to Cloud PC since we login with the same credentials on both?

 

Any suggestions, thoughts or am I clear what I am posting here?

best practices
enterprise
    • oryxway390's avatar
      oryxway390
      Brass Contributor
      Dec 20, 2022

      askaresh Thanks for the info. Yes, I started using filters and dynamic groups. Hopefully that helps but the one issue I saw is how do I apply the filter? I did not see where I can apply the filter. Should it be applied to the Dynamic Groups?

      • RGijsbersRademakers's avatar
        RGijsbersRademakers
        Iron Contributor
        Dec 21, 2022

        Hi oryxway390,

         

        You use filters during the assignment of the policies and applications. For example, you can assign a policy to All Users and then use the filter for the include or exclude all Windows 365 Cloud PC's

         

        Let's say you have a policy you want to assign to all users that don't use a W365 Cloud PC.

        • First you create a filter that contains all Cloud PC's. The rule to use will be (device.model -contains "Cloud PC") as described here.
        • Go to the assignment page of the policy you want to assign and Add all users
        • Then you click Edit filter to assign the filter. Here you will choose Exclude and you select the filter All Cloud PC's you created earlier

        Now the policy will apply to all users without a Cloud PC. I hope this helps.

  • Christian_Montoya's avatar
    Christian_Montoya
    Icon for Microsoft rankMicrosoft
    Dec 14, 2022

    oryxway - If you're trying to separate the policies that apply to Cloud PCs from policies that apply to other enrolled Windows devices, we have specific guidance on how to target Cloud PCs with a filter or with a dynamic group. Mostly, the device fields that are unique for Cloud PCs are:

    • Device model
    • Enrollment profile name
  • RGijsbersRademakers's avatar
    RGijsbersRademakers
    Iron Contributor
    Dec 13, 2022
    Hi oryxway, do i understand it correctly, that you want to assign a differen policy set to your cloud pc then to your autopilot devices? Or do you want to separate them for management purposes like role based access control? Grtz Ruud

Resources