Flag "Enrollment State" into Intune Dynamic Group

Question

Flag "Enrollment State" into Intune Dynamic Group

Andrea Franz 0

Hi,

I'm trying to create a Dynamic group into Intune to select all Windows Devices AND only devices with an enrollment profile assigned. I've seen that exists the parameter "Enrollment State" (i.e. enrolled) but I don't know (and I wasn't able to find this info anywhere) if I can use it into the dynamic group's query and which is the correct sintax.

Thanks in advance.

Andrea.

Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-08-21T14:12:03.7833333+00:00

You can't use enrollment state for creating a dynamic Entra ID group. What is your requirement?
Andrea Franz 0 Reputation points

2023-08-21T14:22:01.9+00:00

If I create a D.G. using Windows as deviceOSType this group contains every device (enrolled or not) presents into the Azure AD Group (pratically, every device that has a domain user related). So I've got 320 devices used with a domain account but only 100 devices enrolled.. I need to create a D.G. with enrolled Windows devices only.
Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-08-21T20:59:23.33+00:00

Maybe this can give some direction - https://rahuljindalmyit.blogspot.com/2022/10/creating-single-azure-ad-dynamic-group.html
Andrea Franz 0 Reputation points

2023-08-22T06:27:08.7866667+00:00

Thanks very much. Using (device.deviceManagementAppId -eq "0000000a-0000-0000-c000-000000000000") it works.

Solved.

Your answer

Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-08-21T14:12:03.7833333+00:00

You can't use enrollment state for creating a dynamic Entra ID group. What is your requirement?
Andrea Franz 0 Reputation points

2023-08-21T14:22:01.9+00:00

If I create a D.G. using Windows as deviceOSType this group contains every device (enrolled or not) presents into the Azure AD Group (pratically, every device that has a domain user related). So I've got 320 devices used with a domain account but only 100 devices enrolled.. I need to create a D.G. with enrolled Windows devices only.
Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-08-21T20:59:23.33+00:00

Maybe this can give some direction - https://rahuljindalmyit.blogspot.com/2022/10/creating-single-azure-ad-dynamic-group.html
Andrea Franz 0 Reputation points

2023-08-22T06:27:08.7866667+00:00

Thanks very much. Using (device.deviceManagementAppId -eq "0000000a-0000-0000-c000-000000000000") it works.

Solved.

Share via

Flag "Enrollment State" into Intune Dynamic Group

Your answer