Creating A Dynamic Group for InTune Enrolled Devices

Question

Hello,

I'd like to figure out the dynamic membership rules for a group I'm trying to create. I'd like the group to include only Windows 10 and 11 devices, no servers, and I'd like it to include only devices that are enrolled in InTune. Does anyone have a custom query for that? I'm finding that Server 2016 and 2019 servers show as version 10.x and that's made it challenging.

Thanks

Answer 1

@Richard Long,Thanks for posting in Q&A.

From your description, I know you want to create a dynamic group for only Intune enrolled Windows devices but exclude servers.

For the built in Dynamic group rule, based on my checking, I find there's no attribute to distinguish windows client and server.

https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership#rules-for-devices

But maybe we can assign device categories to windows 10/11 devices and then create Dynamic group according the deviceCategory.

https://learn.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping

Meanwhile, based as I know, windows serve can't enroll into Intune. If the windows devices are all enrolled into Intune, we can use device.deviceOSType -eq "Windows" and device.managementType -eq "MDM" for the dynamic group rule.

Hope it can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.