Dynamic Security Group for all Servers in Intune/AD

Tonito Dux 956

Hi,

I am trying to create a dynamic security group for all servers in our company. There is no clear answer when I was searching throughout the web. We have only Windows Server in use, from 2008 (yes, i know, very bad) to 2022. And I want to incorporate them all in a group.

Cheers!

JamesTran-MSFT 36,531 Reputation points Microsoft Employee

2023-09-25T19:36:18.0666667+00:00

@Tonito Dux

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Tonito Dux 956 Reputation points

2023-09-26T05:55:36.2266667+00:00

Hi James,

it is clear that microsoft messed this one up. There is no clear/clean way to create a filter like before. The only thing which would help is to tag them, from what I understood, but this is an another manual step which could be avoided. Can you ask you colleagues how can we exactly filter only the server systems? Please?

1 answer

Niklas 181 Reputation points

2023-09-20T09:40:17.72+00:00

Hi Tonito,

dont get me wrong, but you are trying to put computer objects into a dynamic distribution group?
As far as i know, only mail related object can be put into DL´s

Maybe you mean a dynamic Security group?

To create Security Groups with Devices for Intune, you need to populate them to Azure. That means you need to hybrid join them to Azure AD. i belive only Server from OS Version 2019 can be joined to Azure AD.

https://learn.microsoft.com/en-us/azure/active-directory/devices/hybrid-join-plan
Please sign in to rate this answer.
Tonito Dux 956 Reputation points

2023-09-20T10:46:45.05+00:00

Hi Niklas,

you are right, I got carried away, I am trying to put them in a security group that is dynamic :D

The servers are in Azure AD, i just need the syntax:

The example above was added by our partner company but it shows only couple of servers, this is not enough.

Cheers

Niklas 181 Reputation points

2023-09-20T11:05:34.0933333+00:00

In case you have also Win10/11 devices, you cant use the device OS Version. Server 16/19/22 and Win 10/11 use the same OS Version starting with 10.xx
https://learn.microsoft.com/en-us/windows/win32/sysinfo/operating-system-version

Any chance to add maybe an extension attribut to the servers?

(device.extensionAttribute1 -eq "Server")

Niklas 181 Reputation points

2023-09-20T11:08:02.96+00:00

do the servers have any naming convention? Maybe you can use this in your syntax. If you click on "add expression" it will "build" the syntax for you

Tonito Dux 956 Reputation points

2023-09-20T12:41:33.3066667+00:00

The naming convention exists but we have some leftovers which are not up to standard. So there is no easy way in accomplishing this - tough love from Microsoft. I have set an OU and everything that is inside this OU will be marked as server, but I don't love this solution.
Sign in to comment

Share via

Dynamic Security Group for all Servers in Intune/AD

1 answer