Zehadi Alam
Introduction
During the deployment of policies and applications, administrators often require a method to target a specific subset of their overall devices. Although creating additional device groups is one approach, Intune provides a more efficient assignment mechanism using filters. The following section demonstrates the process of creating an Intune filter and using it to scope the assignment of an app to specific members of a device group.
Note: The following procedure is not just limited to apps. It can also be used to scope the assignment of configuration profiles and compliance profiles.
Procedure
1. Navigate to the Filters section, click Create, and select Managed devices: https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMenu/~/assignmentFilters
2. Name the filter and select the platform
3. Choose a property, operator, and value. You can also create conjunctive or disjunctive expressions using the And/Or dropdown.
The following is an example of a filter that targets Lenovo devices.
4. Once your filter expression is complete, proceed through the remaining steps and create the filter.
5. To use a filter during an app deployment, select click on None below the Filter column.
6. Select whether the filter should include or exclude targeted devices and then select one of your created filters from the list.
In our example, we are deploying the Lenovo System Update app. The most efficient way to do this is to assign the app to an "All devices" group and use a filter to scope the assignment to Lenovo devices.
Once the app is deployed, any computers that do not meet the filter criteria will not have the app installed. Intune's application status chart will mark these computers as Not applicable.
Further investigation into the device status will show the status detail Filter criteria are not met for the devices where the installation was skipped due to not meeting the script conditions.
To provide ideas on the types of filters you can create, below are examples of some filters we use at CAES.
