Best Practice for targeting Configuration Policies in MEM

[Johan Vanaken]

Moving our Windows client platform to Modern Management, we are looking at configuring more settings with MEM and moving away from Group Policies. Note: we are hybrid Joined + Co-Managed for all our clients.

What are the Best Practices (technical efficiency) to target Configuration Policies to Devices in MEM?

- Static AAD groups

- Dynamic AAD groups ?

- Filters etc. 

... and in what order should they be used (for example, first use a Dynalic group, the refine using filter)

[#2 · Accepted solution]

We talked about this a couple of months back on Unpacking Endpoint Management - our podcast. https://www.youtube.com/watch?v=jzhUVJ8yfaw

We also have this excellent post on the Tech Community blog from the MEM support team - https://techcommunity.microsoft.com/t5/intune-customer-success/intune-grouping-targeting-and-filteri...