Intune Dynamic Group Issue

Question

Hi,

I created a Dynamic group for Autopilot that query devices that has a specific tag.

(device.devicePhysicalIds -any (_ -eq "[OrderID]:Autopilot"))

When I refresh my group, I see it adds two computer objects for the same H.W ID. that might be a problem but the main problem is, once I remove the tag from the Device I assume my computer should be removed from the dynamic group. yes and no. One object is only is being removed , the other one is still there.

what is going on? is the problem the duplicated computer objects? why that is happening?

Answer 1

The behavior you're describing might be due to the way Azure Intune handles device records and dynamic group membership. Let's break down the situation and address your concerns:

1. Duplicate Computer Objects.

Dynamic Group Membership: Azure Intune dynamic groups evaluate membership based on the defined criteria (in your case, the tag [OrderID]:Autopilot), and the membership updates periodically. When you remove a tag from a device, Intune should evaluate this change during its next membership update cycle and remove the device from the dynamic group.

However, the presence of duplicate device records might be causing unexpected behavior:

• Only One Object Being Removed

To troubleshoot this issue check:

1. Duplicate Device Records
2. Membership Evaluation
3. Intune Service Health