[Intune/EndPoint Manager] - Make a dynamic devices group based on the owner and its membership

Arnaud Godillon 41

Hello,

I would like apply some policies on specific devices inside our tenant.

I've already categorized the user of this specific company into a dynamic user group.

I would like to know, if it's possible to create a dynamic devices group with a rule saying "Add all devices owned by user.memberof "TheDynamicGroupID"

Do you think it's possible ?

It's to remove the admin rights and apply other specific policies later.

Thanks you all for your advice.

Accepted answer

Jason Sandys 31,151 Reputation points Microsoft Employee

2022-11-30T14:46:50.373+00:00

Is there a reason you can't or don't want to deploy the policies to the user group you already have? This will apply those policies to the device that the user logs into.
Please sign in to rate this answer.
Arnaud Godillon 41 Reputation points

2022-11-30T14:54:23.727+00:00

I was sure some policies were still for devices only and not users.

Am I wrong ?

Jason Sandys 31,151 Reputation points Microsoft Employee

2022-11-30T15:19:44.937+00:00

Don't conflate targeting with applicability. You can definitely target users with "device" settings and they will apply to the device(s) that the user(s) logs onto (and vice versa, you can target devices with user settings and they will apply to the users that log onto those devices). More info at https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#user-groups-vs-device-groups

Arnaud Godillon 41 Reputation points

2022-11-30T15:25:58.1+00:00

Thanks you for your reply Jason.

I will set up things for users mostly. Thanks you.
Sign in to comment

[Intune/EndPoint Manager] - Make a dynamic devices group based on the owner and its membership

0 additional answers