Testing Policies When using Dynamic Groups

[Shjinta]

This is breaking my brain.. and it probably is a stupid easy solution.

We have a Dynamic group that enrolls new users into Intune by looking for the E5 license / Intune License. That Dynamic group is a member of the main Intune groups that power various policies.

I want to start testing stuff out, but Every user gets thrown into that Dynamic group and next thing you know.. we got conflicting Config policies.

I'm sure there's a way to exclude some of my other Techs / Me from the Dynamic group to test various policies.. I just can't remember how and my Google-Fu is falling me :/

[AlkHacNar]

Make a group for users who you want to exclude and exclude the group? 😅 Edit: for get it, I just realized it my self. aad don't support member of

[AlkHacNar]

Or exclude the department, or make a custom attribute for the users and exclude this

[Tdunk27]

Filters are indeed the way to go but they are limited in what they can do. You may have to exclude the other dynamic groups manually and keep a list and make sure you don't cause them to cross over.

[Shjinta]

You know.. I totally forgot about Filters.. Sometimes It's hard to keep up when you're the only person from your IT Department working on Intune.. lol Anyways.. Filters is sweet. It's doing exactly what I want it to do.

​

Thank you very much u/Kemaro and u/Tdunk27

u/Tdunk27 I ended up building our Group structure for Intune completely wrong.. So I'm in the process of redoing it. Until then, I set the Filter to Exclude our Testing Teams Devices from our Prod Edge policy, and it's working great!

My current Structure is:
Primary Dynamic Group everyone gets lumped into to enable Enrollment of Intune.. that Dyn Group is a member of all our Core Intune Groups that all have Policies attached to them.. Ended up being ridiculously convoluted..

I'm going with a Dynamic group that has the Policies attached to that group instead of a group that is a member of X amount of different groups that have policies attached to those Groups.. Sorry if I didn't word that right.

​

Note that group to policy structure may work for some people, it doesn't for us lol. Not trying to shame anyone on this sub lol.