The more I think about managing Windows 11 in Azure AD and Intune, the more I want to refine some of the configurations I have done. The recent Windows 11 Dev Channel build had me thinking about the Azure AD and Intune Filter blog posts and the configurations done there. Now if you are not doing any Windows Insidering at your company (first thing I’d ask is why not, but that’s a conversation for another time), then the configurations for Windows 11 in those blog posts should be perfectly fine until the next release of Windows 11 in 2022 (Remember,…

In a previous post I wrote about a way to create an Azure AD dynamic device group to identify Windows 11 devices. But what if you don’t want to add an additional group or groups, or do a bit of rework with your Intune configuration, or have Intune profiles and policies targeted at groups that only contain users? Fortunately a recent Intune feature (currently in preview) may be able to help here. Filters are a way to deploy Intune profiles and policies to user and/or device groups where there maybe (for example) both Windows 10 and Windows 11 devices, but…