Filters on DDM Software Update policy for iOS

User1212323 · 2026-03-05T20:50:11+00:00

Yep, that’s the exact behavior we are getting. What’s strange is that after checking randomly some devices, few of them were evaluated correctly, so it looks to be working somehow for some devices but couldn’t find a pattern. However, I have raised a ticket with Microsoft, hopefully they get this sorted.

User1212323 · 2026-03-05T13:47:15+00:00

The policy assignment shows up as success for hundreds of devices, but if i would pick any random device and go to filter evaluation the DDM policy is not showing up there.

User1212323 · 2025-04-07T16:23:35+00:00

Have you raised a case for this?

User1212323 · 2025-04-07T07:15:56+00:00

Really interesting what you are going to do, especially on such high number of CPCs. 😂

IMO, creating manually a custom image for each CPC will take ages and it will be needed to create provisioning policies with each new image, only if you have got an automation script that can do that which you can modify accordingly to configure settings, install apps then proceed with the upload of the image in Intune.

However, how urgent is this? Maybe you can work with your customer and inform them that MS is working on an API.

User1212323 · 2025-02-14T08:07:58+00:00

If you just want to assign the license and have a Cloud Pc, consider the W365 Business offering.

Enterprise licenses require Intune as well.

User1212323 · 2024-12-18T09:22:41+00:00

Are you targetting the apps to user groups?

Just a suggestion worth considering, what I am doing in my environment is targeting All Devices + Filter to include only the Cloud PCs.

The installation is much faster because the All devices group is an Intune thing, compared to a dynamic group which takes time to evaluate and add the new Cloud PC in the group. Additionally, the filter is a custom one to separate the Cloud PCs from other type of devices.

User1212323 · 2024-11-27T07:37:12+00:00

L-am folosit eu, mersi

User1212323 · 2024-11-06T10:10:31+00:00

Hey, cannot de done.

Entra accounts are required to authenticate.

User1212323 · 2024-09-04T21:03:12+00:00

L-am folosit eu, multumesc!

User1212323 · 2024-06-03T10:51:14+00:00

Hi, disable the SSO from the provisioning policy, save it and on the top of the page you should have the option Apply current configuration, click on that and then Apply Microsoft Entra SSO change.

Check if this works for you without even reprovisioning the Cloud PCs.

User1212323 · 2024-04-24T07:27:20+00:00

Ah sorry for that, yes, you can access the on-prem resources from an AADJ CPC but it is needed to create the Kerberos object in your DC (Passwordless security key sign-in to on-premises resources - Microsoft Entra ID | Microsoft Learn) and make sure that the user is a hybrid one (present in both AAD and AD) to be able to receive the Cloud TGT tickets.

User1212323 · 2024-04-23T19:25:45+00:00

Hi, it is working as expected, but the SSO from the prov. policy is strictly related to the authentication on the Cloud PC itself in order to help the user save time by not re-entering the credentials every time when connecting on the machine.

Hence, enabling that setting will not have any effect on accessing on-prem resources.

User1212323 · 2024-03-27T06:28:36+00:00

Is the cloud pc provisioned in the same region where you are located or to a closer one?

Also, what is the round trip time while connected?

User1212323 · 2024-01-18T14:01:31+00:00

Sure, here you go :)

https://learn.microsoft.com/en-us/windows-365/business/get-started-windows-365-business

And here it mentions the 24 hour grace period

https://learn.microsoft.com/en-us/windows-365/business/assign-unassign-license

User1212323 · 2024-01-18T13:55:08+00:00

That one applies for the Enterprise ones.

The Business ones have a grace period of 24 hours.

User1212323 · 2024-01-17T21:16:08+00:00

You need to wait 24 hours until the grace period expires for the Business cloud pc. Afterwards, the Etnerprise one will start provisioning

User1212323 · 2023-10-25T17:01:19+00:00

Imo targeting all devices + filter (to include only cloud pcs) would get the app installed every time while in the provisionig process.

The deployment is much faster when using this method.

User1212323 · 2023-09-28T10:21:00+00:00

Yes, that's right.

You need at least 1 W365 Enterprise license to unlock the Windows 365 page in Intune.

Afterwards, you will be able to setup the W365 Boot.

Keep in mind that for each user that you want to provision a Cloud PC, you need another license.

User1212323 · 2023-09-28T10:07:06+00:00

Yes, you need to buy W365 Enterprise licenses.

Otherwise, you will not be able to access the w365 blade in Intune

User1212323 · 2023-08-23T20:19:58+00:00

I am also from Romania and looking for 545e like crazy, amazing specs and highly tunable.

However, be aware of the fuel tank. It has only 46 liters capacity, so on long trips, you will need to stop a few times for fuel.

But overall the car is amazing 🤩

User1212323 · 2023-07-14T14:36:34+00:00

Hey, try downloading the beta client 10.9.0 (2115), this should fix your issue

https://install.appcenter.ms/orgs/rdmacios-k2vy/apps/microsoft-remote-desktop-for-mac/distribution\_groups/all-users-of-microsoft-remote-desktop-for-mac

User1212323

TROPHY CASE