Moving our Windows client platform to Modern Management, we are looking at configuring more settings with MEM and moving away from Group Policies. Note: we are hybrid Joined + Co-Managed for all our clients.
What are the Best Practices (technical efficiency) to target Configuration Policies to Devices in MEM?
- Static AAD groups
- Dynamic AAD groups ?
- Filters etc.
... and in what order should they be used (for example, first use a Dynalic group, the refine using filter)