Groups — Articles by Jannik Reinhard

Intune Wave Deployment: Create Smart Device Groups

Intune Wave Deployment: Create Smart Device Groups

jannikreinhard12 Comments

How do you distribute configuration profile, apps or other configurations in Intune today? In this blog I want to explain and provide a script how you can easily roll out objects in Intune using waves. Here I will help you to create groups defined by you that will pack a specified percentage of your devices into the groups so that you can perform a slow rollout and thus guarantee the quality. The current script describes how you can create device groups. When you validate these rollout waves, it can also be helpful to get assignments of a device via PowerShell. If you are also interested in how to apply this to user groups or how to create a automation for the assignment, check out my new version of the Intune group assignment script.

Intune device groups for phased configuration deployment
Read More »
Introduction of the Intune Device Troubleshooter

Introduction of the Intune Device Troubleshooter

jannikreinhard10 Comments


If you follow my blog, you know that there are two things I really like: helping people with their problems, and automating or simplifying processes. In this blog, I want to introduce you to my new tool, the Intune Device Troubleshooter. This is a PowerShell UI application that will help you to check the status of your devices, as well as help you trigger remediation scripts to fix issues ad-hoc on single devices. It also provides you with intelligent recommendations on what to check on a single device to determine any possible issues. So let’s get started and look at the features of the tool.

Introduction of the Intune Device Troubleshooter
Read More »
Automate Intune App Assignment Groups with Azure Runbooks

Automate Intune App Assignment Groups with Azure Runbooks

jannikreinhard

Automatic assignment groups are useful when app deployment should stay consistent without manually creating a new Microsoft Entra group every time an Intune app is added. The pattern works best when group names, app names, and assignment intent follow the same convention.

In production tenants I recommend validating the group creation flow with one pilot application first. Check the created group, verify the Intune assignment, and document the naming rule before you let automation create groups for a larger application catalogue.

When creating a new app in the Intune admin center and not assigning it to AllUsers/AllDevices, this is always some work to create your own group for available/required and uninstall assignments for each app. You know I love automation. To save time and automate this work I will describe in this blog how you can create a runbook that takes this work completely over.

Microsoft Intune app overview with assignment groups
Read More »
Remove the primary user from Intune devices with powershell (Switch to shared device)

Remove the Primary User from Intune Devices with PowerShell (Shared Device)

jannikreinhard11 Comments

If an Intune device is not enrolled as a shared device or kiosk device, it always has a primary user. This creates a relation between the device and the user. This user is also used to license the device. This user only has the possibility to see this device in the company portal / company portal website and trigger certain self service actions. Also, while troubleshooting, an Intune admin can select this user in the Troubleshooting + support menu in Intune and directly see their devices.

The primary user is automatically added after the enrollment of an Intune managed device. It is possible to change the user to an other or remove this user to switch the device to a shared device.

Read More »
Group Windows 11 Devices with Intune

Group Windows 11 Devices with Intune

jannikreinhard

Once you start treating Windows 11 as a different deployment ring than Windows 10, you’ll need a clean way to scope policies, applications and Conditional Access to “all Windows 11 devices in the tenant” — without manually maintaining a static group. The good news is that Entra ID supports dynamic device groups with rich rule syntax, and you can target Windows 11 by OS version, build number or device-category attribute with a single line of dynamic-membership rule. This post lays out the membership rules I use in production tenants, with examples for Windows 11 21H2 through 23H2 and beyond.

With Windows 11 widely deployed across enterprise estates, you might want to test configurations or apps specifically on Windows 11 devices. For that testing you need a group in Microsoft Entra ID. In this blog I want to show you how to create a dynamic group that contains all Windows 11 devices. I also want to show you how to create a device filter for Windows 11.

Read More »
Microsoft Intune App Management: Ultimate MEM Tour Part 2

Microsoft Intune App Management: Ultimate MEM Tour Part 2

jannikreinhard

In this blog series, I’ll give you a tour through the features that Microsoft Intune offers us. In my first blog we looked at the Device Management features. In this blog I want to cover all the features around Application Management. Good apps are one of the foundations of a successful company. With Intune, you can ensure that end users have access to the apps they need to do their jobs.

Read More »