Skip to content

Commit a47c122

Browse files
v-dihansv-dihans
authored
Merge pull request #6700 from ChristianMontoya/filters
Include (Intune) Filters in W365 documentation
2 parents b541855 + aca8ec5 commit a47c122

4 files changed

Lines changed: 184 additions & 19 deletions

File tree

‎windows-365/enterprise/TOC.yml‎

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -83,10 +83,8 @@ items:
8383
items:
8484
- name: Create a dynamic device group
8585
href: create-dynamic-device-group-all-cloudpcs.md
86-
- name: Create a dynamic device group for a specific configuration
87-
href: create-dynamic-device-group-for-specific-configuration.md
88-
- name: Create a dynamic device group from a specific policy
89-
href: create-dynamic-device-group-from-specific-policy.md
86+
- name: Create a filter
87+
href: create-filter.md
9088
- name: Create device configuration profile
9189
href: create-device-configuration-profile.md
9290
- name: User settings

‎windows-365/enterprise/create-device-configuration-profile.md‎

Lines changed: 17 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -30,26 +30,34 @@ ms.collection: M365-identity-device-management
3030

3131
# Create device configuration profile
3232

33-
In this example, we’ll apply a **Device restrictions** [device configuration profile](/mem/intune/configuration/device-profile-create) and apply it to **All Cloud PCs**.
33+
In this example, we’ll apply a **Device restrictions** [device configuration profile](/mem/intune/configuration/device-profile-create) and apply it to **All Cloud PCs**. You will need either a dynamic device group or a filter to accomplish this task.
3434

3535
> [!NOTE]
36-
> If you haven’t created a dynamic device group for all Cloud PCs, follow the steps in [Create a dynamic device group containing all Cloud PCs](create-dynamic-device-group-all-cloudpcs.md), then return here to create the device configuration profile.
36+
> If you haven’t already, follow the steps to either [create a dynamic device group containing all Cloud PCs](create-dynamic-device-group-all-cloudpcs.md#create-a-dynamic-device-group-for-all-cloud-pcs) or [create a filter for all Cloud PCs](create-filter.md#create-a-filter-for-all-cloud-pcs), then return here to create the device configuration profile.
3737
38-
Now that you’ve created a dynamic device group for all Cloud PCs, you can target policies to apply to all Cloud PCs in the tenant. To do so, follow these steps:
38+
Now that you’ve created a dynamic device group or a filter for all Cloud PCs, you can target policies to apply to all Cloud PCs in the tenant. To do so, follow these steps:
3939

4040
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Devices** > **Configuration profiles** > **Create profile**.
4141
![Screenshot of delete policy](./media/create-device-configuration-profile/create-profile.png)
42-
2. On the **Create profile** page, select **Windows 10 and later** for the **Platform** and **Device restrictions** for **Profile**.
42+
2. On the **Create profile** page, select **Windows 10 and later** for the **Platform**, **Templates** for the **Profile Type**, then **Device restrictions**.
4343
3. Select **Create**.
4444
4. Enter a **Name** for the policy, like "All Cloud PCs – Device restrictions" and a useful **Description**.
4545
5. Select **Next**.
4646
6. On the **Configuration settings** page, select that settings and restrictions that you want applied with this profile.
4747
7. Select **Next**.
48-
8. On the **Assignments** page, choose **Add groups** > search for and select **All Cloud PCs** > **Select**.
49-
9. Choose **Select** > **Next**.
50-
10. On the **Applicability Rules** page, select **Next**.
51-
11. On the **Review + create** page, review the settings. You’ll see all the settings you selected along with the assignment to “All Cloud PCs”.
52-
12. Select **Create** to deploy the profile.
48+
8. On the **Scope tags** page, select any desired scope tags to apply, then select **Next**.
49+
9. On the **Assignments** page, choose the following selections, based on if you're using a dynamic device group or a filter:
50+
51+
a. **Dynamic device group**: Select **Add groups** > search for and select the dynamic device group for all Cloud PCs > **Select**.
52+
53+
b. **Filter**: Select an existing user group, **Edit filter** > **Include filtered devices in assignment** > search for and select the filter for all Cloud PCs.
54+
55+
c. **Filter**: Select **Add all devices** or **Add all users**, **Edit filter** > **Include filtered devices in assignment** > search for and select the filter for all Cloud PCs.
56+
57+
10. Choose **Select** > **Next**.
58+
11. On the **Applicability Rules** page, select **Next**.
59+
12. On the **Review + create** page, review the settings. You’ll see all the settings you selected along with the assignment to “All Cloud PCs”.
60+
13. Select **Create** to deploy the profile.
5361

5462
<!-- ########################## -->
5563
## Next steps

‎windows-365/enterprise/create-dynamic-device-group-all-cloudpcs.md‎

Lines changed: 58 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
# required metadata
3-
title: Create a dynamic device group for all Cloud PCs
3+
title: Create a dynamic device group containing your Cloud PCs
44
titleSuffix:
5-
description: Learn how to create dynamic device groups for all Cloud PCs.
5+
description: Learn how to create dynamic device groups containing your Cloud PCs.
66
keywords:
77
author: ErikjeMS
88
ms.author: erikje
@@ -28,11 +28,17 @@ ms.custom: intune-azure; get-started
2828
ms.collection: M365-identity-device-management
2929
---
3030

31-
# Create a dynamic device group containing all Cloud PCs
31+
# Create a dynamic device group containing your Cloud PCs
3232

33-
You can create a dynamic device group that contains all Cloud PCs in your environment. Policies targeting this device group will apply to Cloud PCs.
33+
You can create a dynamic device group that contains your Cloud PCs. Policies targeting this device group will target all or some Cloud PCs, depending on the rules you configure. There are three different categories of groups you can create for Cloud PCs:
3434

35-
In these steps, you’ll use the Device Model device property to create a dynamic device group.
35+
- [All Cloud PCs](#create-a-dynamic-device-group-for-all-cloud-pcs): This type of group is useful for applying policies and configurations to all Cloud PCs in your organization.
36+
- [All Cloud PCs from a specific provisioning policy](#create-a-dynamic-device-group-for-all-cloud-pcs-from-a-specific-provisioning-policy): This type of group is useful for applying policies and configurations to Cloud PCs based on the same image and location.
37+
- [All Cloud PCs with a specific configuration](#create-a-dynamic-device-group-for-all-cloud-pcs-with-a-specific-configuration): This type of group is useful for applying policies and configurations to Cloud PCs based on computing power (vCPU and RAM) or internal storage.
38+
39+
## Create a dynamic device group for all Cloud PCs
40+
41+
In these steps, you’ll use the Device Model device property to create the dynamic device group.
3642

3743
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Groups** > **New Group**.
3844
![Screenshot of delete policy](./media/create-dynamic-device-group-all-cloudpcs/create-group.png)
@@ -49,7 +55,53 @@ In these steps, you’ll use the Device Model device property to create a dynami
4955
7. To validate that it works, select **Validate Rules (Preview)** > **+Add devices** > select some Cloud PCs and non-Cloud PC devices.
5056
8. After the validation completes, select **Save** > **Create**.
5157

58+
## Create a dynamic device group for all Cloud PCs from a specific provisioning policy
59+
60+
For the example below, we use "UX Engineering" as the name of the provisioning policy. Anywhere you see "UX Engineering" replace it with the name of your provisioning policy.
61+
62+
In these steps, you’ll use the Enrollment Profile Name device property to create the dynamic device group.
63+
64+
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Groups** > **New Group**.
65+
![Screenshot of delete policy](./media/create-dynamic-device-group-all-cloudpcs/create-group.png)
66+
2. Select the **New Group** page, choose **Security** for **Group type**.
67+
3. Enter the following:
68+
1. **Group name** = "All UX Engineering Cloud PC devices"
69+
2. **Group description** = "A dynamic device group containing all UX Engineering Cloud PC devices."
70+
4. For **Membership type**, choose **Dynamic Device**.
71+
5. Select **Add dynamic query**.
72+
6. On the **Dynamic membership rules** page, enter the following:
73+
1. **Property** = "enrollmentProfileName"
74+
2. **Operator** = "Equals"
75+
3. **Value** = "UX Engineering"
76+
7. To validate that it works, select **Validate Rules (Preview)** > **Add devices** > select some Cloud PCs that were provisioned from the "UX Engineering" provisioning policy, some Cloud PCs that were provisioned from a different provisioning policy, and some non-Cloud PCs.
77+
8. After the validation completes, select **Save** > **Create**.
78+
79+
## Create a dynamic device group for all Cloud PCs with a specific configuration
80+
81+
For the example below, we use 2 vCPU and 4GB RAM as the configuration. Anywhere you see "2vCPU/4GB" replace it with the desired configuration. You can also target a specific Cloud PC size by adding the OS storage as part of the configuration. You can follow the below steps and create a filter for any of the configurations that make up Cloud PC sizes.
82+
83+
In these steps, you will use the Device Model device property to create the dynamic device group.
84+
85+
1. Sign in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/) > **Groups** > **New Group**.
86+
![Screenshot of delete policy](./media/create-dynamic-device-group-all-cloudpcs/create-group.png)
87+
2. Select the **New Group** page, choose **Security** for **Group type**.
88+
3. Enter the following:
89+
1. **Group name** = “All 2vCPU/4GB RAM Cloud PCs".
90+
2. **Group description** = “A dynamic device group containing all Cloud PCs with the 2vCPU/4GB RAM configuration.
91+
4. For **Membership type**, choose **Dynamic Device**.
92+
5. Select **Add dynamic query**.
93+
6. On the **Dynamic membership rules** page, enter the following:
94+
1. **Property** = “deviceModel”
95+
2. **Operator** = “Contains”
96+
3. **Value** = “Cloud PC”
97+
7. Select **Add expression** and enter the following:
98+
1. **Property** = “deviceModel”
99+
2. **Operator** = “Contains”
100+
3. **Value** = “2vCPU/4GB”
101+
8. To validate that it works, select **Validate Rules (Preview)** > **Add devices** > select some Cloud PCs that have the 2vCPU/4GB RAM configuration, some Cloud PCs that have a different configuration, and some non-Cloud PC devices.
102+
9. After the validation completes, select **Save** > **Create**.
103+
52104
<!-- ########################## -->
53105
## Next steps
54106

55-
[Create a dynamic device group containing all Cloud PCs for a specific configuration](create-dynamic-device-group-for-specific-configuration.md).
107+
[Create a filter](create-filter.md).

‎windows-365/enterprise/create-filter.md‎

Lines changed: 107 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,107 @@
1+
---
2+
# required metadata
3+
title: Create a filter for your Cloud PCs
4+
titleSuffix:
5+
description: Learn how to create a filter for Windows 365 Cloud PCs.
6+
keywords:
7+
author: ErikjeMS
8+
ms.author: erikje
9+
manager: dougeby
10+
ms.date: 02/03/2021
11+
ms.topic: how-to
12+
ms.service: cloudpc
13+
ms.subservice:
14+
ms.localizationpriority: high
15+
ms.technology:
16+
ms.assetid:
17+
18+
# optional metadata
19+
20+
#ROBOTS:
21+
#audience:
22+
23+
ms.reviewer: chrimo
24+
ms.suite: ems
25+
search.appverid: MET150
26+
#ms.tgt_pltfrm:
27+
ms.custom: intune-azure; get-started
28+
ms.collection: M365-identity-device-management
29+
---
30+
# Create a filter for Cloud PCs
31+
32+
You can create a filter to use when creating Intune policies and configurations. The filter you create can target all or some Cloud PCs, depending on the rules you configure. You can also use the filter that you create to exclude Cloud PCs from existing policies that are intended for physical devices only. There are three different categories of filters you can create for Cloud PCs:
33+
34+
- [All Cloud PCs](#create-a-filter-for-all-cloud-pcs): This type of filter is useful for applying policies and configurations to all Cloud PCs in your organization.
35+
- [All Cloud PCs from a specific provisioning policy](#create-a-filter-for-all-cloud-pcs-from-a-specific-provisioning-policy): This type of filter is useful for applying policies and configurations to Cloud PCs based on the same image and location.
36+
- [All Cloud PCs with a specific configuration](#create-a-filter-for-all-cloud-pcs-with-a-specific-configuration): This type of filter is useful for applying policies and configurations to Cloud PCs based on computing power (vCPU and RAM) or internal storage.
37+
38+
## Create a filter for all Cloud PCs
39+
40+
In these steps, you’ll use the Model device property to create the filter.
41+
42+
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Tenant Administration** > **Filters**.
43+
2. Select **Create**, then enter the following:
44+
1. **Filter name** = "All Cloud PCs" (or some other name indicating it will contain all Cloud PCs)
45+
2. **Description** = "A filter containing all Cloud PC devices"
46+
3. **Platform** = "Windows 10 and later"
47+
3. On the **Rules** page, enter the following:
48+
1. **Property** = "model (Model)"
49+
2. **Operator** = "Contains"
50+
3. **Value** = "Cloud PC"
51+
4. To validate that it works, select **Preview devices**.
52+
5. After the validation completes, select **Next**.
53+
6. On the **Scope tags** page, select any desired scope tags to apply, then select **Next**.
54+
7. On the **Review + create** page, select **Create**.
55+
56+
## Create a filter for all Cloud PCs from a specific provisioning policy
57+
58+
For the example below, we use "UX Engineering" as the name of the provisioning policy. Anywhere you see "UX Engineering" replace it with the name of your provisioning policy.
59+
60+
In these steps, you’ll use the Enrollment Profile Name and Device Model device property to create the filter.
61+
62+
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Tenant Administration** > **Filters**.
63+
2. Select **Create**, then enter the following:
64+
1. **Filter name** = "All UX Engineering Cloud PC devices"
65+
2. **Description** = "A filter containing all UX Engineering Cloud PC devices"
66+
3. **Platform** = "Windows 10 and later"
67+
3. On the **Rules** page, enter the following:
68+
1. **Property** = "enrollmentProfileName (Enrollment profile name)"
69+
2. **Operator** = "Equals"
70+
3. **Value** = "UX Engineering"
71+
4. To validate that it works, select **Preview devices**.
72+
5. After the validation completes, select **Next**.
73+
6. On the **Scope tags** page, select any desired scope tags to apply, then select **Next**.
74+
7. On the **Review + create** page, select **Create**.
75+
76+
## Create a filter for all Cloud PCs with a specific configuration
77+
78+
For the example below, we use 2 vCPU and 4GB RAM as the configuration. Anywhere you see "2vCPU/4GB" replace it with the desired configuration. You can also target a specific Cloud PC size by adding the OS storage as part of the configuration. You can follow the below steps and create a filter for any of the configurations that make up Cloud PC sizes.
79+
80+
In these steps, you will use the Model device property to create the filter.
81+
82+
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Tenant Administration** > **Filters**.
83+
2. Select **Create**, then enter the following:
84+
1. **Filter name** = "All 2vCPU/4GB RAM Cloud PCs"
85+
2. **Description** = "A filter containing all Cloud PCs with the 2vCPU/4GB RAM configuration"
86+
3. **Platform** = "Windows 10 and later"
87+
3. On the **Rules** page, enter the following:
88+
1. **Property** = "model (Model)"
89+
2. **Operator** = "Contains"
90+
3. **Value** = "2vCPU/4GB"
91+
4. To validate that it works, select **Preview devices**.
92+
5. After the validation completes, select **Next**.
93+
6. On the **Scope tags** page, select any desired scope tags to apply, then select **Next**.
94+
7. On the **Review + create** page, select **Create**.
95+
96+
Once you have created the filter, you can use the filter in the assignment page in [supported policies](/mem/intune/fundamentals/filters-supported-workloads).
97+
98+
For additional information on using filters in Intune, see the following how-to guides:
99+
100+
- [Create a filter (Intune how-to guide)](/mem/intune/fundamentals/filters)
101+
- [Supported filter properties](/mem/intune/fundamentals/filters-device-properties)
102+
- [Filter reporting and troubleshooting](/mem/intune/fundamentals/filters-reports-troubleshoot)
103+
104+
<!-- ########################## -->
105+
## Next steps
106+
107+
[Create device configuration profile](create-device-configuration-profile.md).

0 commit comments

Comments
 (0)