Azure AD Dynamic Group for Windows Devices

Question

Azure AD Dynamic Group for Windows Devices

Sohil M 21

I am attempting to create and AzureAD Group (Dynamic) for Windows 10+ Devices.

There is a Device Configuration Profile setup which is assigned to a device Group which, at this time, has devices added to it manually. In addition, there exists a Device Configuration Profile for Windows devices assigned to this group.

The goal is for each Windows Client (which is not "Server" Operating System) device that is AzureAD Joined or Registered, should get Device Configuration defined in Endpoint Manager.

What dynamic query should I use so that such devices are added to the group automatically?

Thank you

Answer accepted by question author

1 additional answer

Your answer

Answer 1

Dillon Silzer 60,751 Volunteer Moderator

Hi @Sohil M

I'd recommend using this guide to create a group:

https://learn.microsoft.com/en-us/mem/autopilot/enrollment-autopilot

--------------------------------------

If this is helpful please accept answer.

Sohil M 21 Reputation points

2022-12-13T21:29:40.553+00:00

I attempted to follow that; but received errors.

I did, however, setup a Dynamic Group with this simple expression:
(device.deviceOSType -contains "Windows") and (device.deviceOSType -notContains "Server")

Thanks to your link which drove me to look at similar articles. The jist was to get a [internal] baseline security enabled for each Windows 'clienet' used to access company resources from SharePoint and Office365 portals to more complex and critical

Answer 2

Pavel yannara Mirochnitchenko 13,436 MVP

Please be informed, that Microsoft's new recommendation is to use All Devices instead of manual All Windows Devices - group. Try to use filters instead if you pilot stuff etc.

Share via

Azure AD Dynamic Group for Windows Devices

1 additional answer

Your answer