Endpoint manager move device

[caffrey]

I'm a bit green with Endpoint manager but since taking on this tenant I've ran into a few things I don't understand - I'm not even sure I'm explaining this right!

 

In Endpoint manager I have a Dynamic Security Group that has the rule :-

 

(device.enrollmentProfileName -eq "AutoEnroll")

 

This group has members in it (PC's), but I can't move \ delete them because it's a dynamic group

 

The deployment profile (Autoenroll), has the Dynamic Group set as an included group.

 

I'm guessing when enrolling the device you can choose a group but I've not tested that far yet

 

Question is, how do I move the device to another group ? I just want to make sure the device is picking up all the proper config profiles like the rest of the fleet.

 

It's a tonne easier on GWFE for sure.

[NicholasEsping]

You can add a device to more the one group if the autoenroll group doesn't have any assigned policies or anything that will conflict with the group you want it in I would just add the device to both. if you are trying to add to a different dynamic group the device will just need to have whatever property you set in the dynamic rule.

[caffrey]

Think I figured out what was going on, it seems these devices were enrolled when there was still a Assign Profile option in intune (before it was endpoint) ?

 

I changed the dynamic group rules to (device.enrollmentProfileName -eq "AutoEnrol") or (device.devicePhysicalIds -any _ -eq "[OrderID]:MYGroupTag")

 

And added the group tag MYGroupTag to the enrolled device and it applied the profile fine and put the device in the correct group