O365 - Mobile Device Management / Security Groups

[The_W]

Hi,

 

Have configured O365s new Mobile Device Management tool with a policy and confirmed all is good with 2 test users and devices (when refreshing email, client is forced to enrol via Company Portal app and new policy settings are applied, pin etc).

 

However, when I nested a security group in and allowed DirSync to sync the newly nested group of users don't seem to have the new profile forced. Manually logging into the company Portal forces enrollement but the overall policy doesn't apply. This results in user having email on device, device showing as enrolled but no pin security features applied.

 

Anyone experienced this or can confirm nested groups work through o365 MDM?

 

Just to clarify this is not the full blown intune.

 

Thanks in advance

W