How to create security group based on Operating system SKU

Question

I need to install Media Feature Pack to all Windows N machines and for that I need to create group that cointains all the Windows N versions. Dynamic Group won´t work here and I can´t use Filters either, since they only work on Compliance policies etc.

Any idea, how to proceed?

Answer 1

@SauPom, Thanks for posting in Q&A. Based on my checking, there's no existing property to filter the Operating system SKU in Dynamic group. You can feedback to Microsoft Entra ID support to see if the property can be added into the rule in the future.

https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership#rules-for-devices

For the devices with Windows N versions, you can create category for this and assign to these devices. Then create dynamic rule according to the device category.

https://learn.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping

For the operatingSystemSKU, it can create in Intune Filter. I want to confirm how we deploy the Media Feature Pack? Is it deployed via Intune application? For app deploy in Intune, I find we can also add filter for it as well. If we deploy via this, we can consider adding filter.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.