5,569 questions
Instead of using an AAD group for this, I suggest using the model property of filters.
For reference: https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties#device-properties
Create dynamic groups for Mac devices of the same "Processor Archetecture". For example, 1 group for M1, 1 group for Intel.
Gary Zhang
1
Reputation point
Our company has a lot of Mac devices. Some of them are of M1 processor, some of them are Intel.
I need to assign an app called "weMeet" to the devices, however, the install package is different between M1 and Intel. We need to assign M1 package to M1 devices, Intel Package to Intel devices.
Manually create 2 different groups is a way, but it's not acceptable because we need a way to do it automatically. Dynamic groups is a good idea, but there's no suitable attribute to differenciate M1 and Intel devices.
We found an attribute in "hardware" page in Intune, it's "processor Architecture", The M1 Value for that attribute is "aRM64" , the Intel Value is "x64".
But this attribute could not be used to create a dynamic group. Is there any ideas?
Manually creating groups is really not possible for us. we have about 2000 Macs.
Thank you.
Microsoft Security Intune Other
{count} votes
-
Gary Zhang 1 Reputation point
2021-11-23T11:59:10.3+00:00 I'm right here waiting. ^_^
-
Gary Zhang 1 Reputation point
2021-11-25T08:00:50.187+00:00 Please help. Thank you so much.
-
Simon Ren-MSFT 40,341 Reputation points Microsoft External Staff2021-11-29T02:57:29.513+00:00 Hi,
For this issue, I have done a lot of research, but without luck. With Q&A limitation, it is suggested to open an online support ticket to get the further help. It is free. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-supportThanks for your understanding. Have a nice day!
Best regards,
Simon -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 50%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGV%3C/text%3E%3C/svg%3E)
Gabriele Vidali 6 Reputation points2023-05-30T07:23:43.1833333+00:00 Another workaround could be applied by using intune device categories
Sign in to comment
2 answers
Sort by: Most helpful
-
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator2021-11-19T20:49:50.353+00:00 -
Gary Zhang 1 Reputation point
2021-11-21T03:58:15.86+00:00 Hi Jason,
Thank you for the suggestion.
However, for the Mac of M1 and Mac of Intel, the value for both of them is "MacBook Pro", which cannot tell the difference.The only differenet value we found is the attribute "Processor Architecture".
Thank you.
-
Gary Zhang 1 Reputation point
2021-11-22T08:50:39.137+00:00 Anybody has any other ideas? Thank you so much.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 56.00000000000001%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Maier, Michael 0 Reputation points2025-04-15T14:17:16.2633333+00:00 Creating filters is possible, but these filters cannot be used to separate dynamic client groups into Apple Silicon and Intel.
It is still impossible to create dynamic groups in Intune for the based cpuArchitecture. I am looking for a best practice to deploy some apps for different platforms and I absolutely do not want install rosetta2 on the Apple Silicon Clients to run an Intel version of the app, because I have a version for arm64, too.
-
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator
2025-04-15T20:16:57.6733333+00:00 Yes, they can. We added a new filterable property last year for
cpuArchitecturethat enables exactly this without again involving Entra groups: https://learn.microsoft.com/en-us/intune/intune-service/fundamentals/filters-device-properties#managed-device-properties -
Maier, Michael 0 Reputation points
2025-04-16T12:46:28.2633333+00:00 @Jason Sandys Hi Jason, thank you for your response. I know that document, you linked above. I created a filter for Apple intel and a second one for arm64. The filters are working fine, but I wasn't able to build dynamic client groups with these filters. I wanted to create a client group for Intel processors and one for arm64 processors. My goal was, to add a macOS application and serve that application via the Company Portal.app to our users. The user only should see the app for his cpuArchitecture and this is the point, I am struggling at this time. If there is a way to reach that goal, I would be very happy, if you would help me to reach it. Kind regards, Michael
-
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator
2025-04-16T13:40:48.0533333+00:00 Filters aren't about creating groups, they are about "filtering" the targeting of an assignment in Intune. In addition to the linked Learn docs, check out this blog post: https://techcommunity.microsoft.com/blog/intunecustomersuccess/intune-grouping-targeting-and-filtering-recommendations-for-best-performance/2983058
-
Maier, Michael 0 Reputation points
2025-05-08T09:05:24.49+00:00 Hi Jason,
thank you again for your response.
All the documents are good tools to dive in for creating filters and groups and other "Intune stuff. What I am currently missing, is a description for the way to go for assign an application to only x86 Mac or to assign it to only Mac with Silicon processors. I still cannot build this scenario after reading all the documents, you recommended to me. Maybe I am too new on Intune to do this, but exactly this is the reason why I am asking for help for this theme. I am still looking for a guide "How to assign an application to a group of mac with a specific processor architecture". If there is anywhere a guide, I really would be glad to get it.
Best regards,
MichaelEDIT:
OK, here is my solution to my quest:
After studying a lot of Microsoft documents about managing apps for macOS, I found out, that there is no way to assign an app to a device group at the point "available for enrolled devices". At that section, there is only an assignment to personal groups, but not to device groups possible. (If you touch the little "i"- symbol with your mouse cursor, you will get this information, too).
And this is the thing: I you will assign an app as "available for users to install", you only can assigned it to personal groups, like "all users" or any other user group , but not to technical groups, like device groups. Including scope tags does not matter anything. You can work with scope tags or without, every user contained in the group that is assigned to an app will see every version of that app (Intel oder Apple Silicon), in the app list in company portal app. And usergroups cannot be sorted by processor architectures.
It would be nice, if it would be possible to use technical groups at the section "available to user for installation", like at the points "required" and "uninstall",too. At this point I understand the system, Intune is following. It is different from our usage. Here, all users can use all served applications, we only have to separate the processor architecture. Intune suggest, that apps are delivered to a group of users, no matter, what processor architecture they have.
So I am at the point to name the available app with the extension "Intel" or "arm68" and hope, that the user will pay the necessary attention for the installation.
Sign in to comment -
-
Gabriele Vidali 6 Reputation points
2023-05-30T07:20:22.5966667+00:00 Considering the bug of latest powerpoint which does not allow to save files to sharepoint, I'd like to avoid autoupdates via intunes for Apple Arm64 devices.
I'm now creating a user group but it's not a great solution for the future