Jump to content


How can I create a dynamic group containing all Windows 10 version 1709 in Intune in Azure ?

Recommended Posts


Microsoft released Windows 10 version 1709 to VLSC and MSDN yesterday, so of course people are deploying it and testing it in their environments. If you want to create a dynamic Group (that auto populates) of Windows 10 version 1709 in Microsoft Intune then do as follows.

Note: In this blog post I assume you have configured MDM auto-enrollment in Azure. This isn't mandatory but makes enrollment into Microsoft Intune for Windows devices much easier. To see how to enable that functionality, click here.

Step 1. Login to Azure

Login to https://portal.azure.com and select the Intune service.

intune in azure.png

Step 2. Create a dynamic devices group

Click on Groups. Select New Group (highlighted with the Red Arrow).

new group.png

In the New Group blade, use the following options

  • Name: All Windows 10 version 1709
  • Description: Windows 10 Fall Creators Update
  • Membership Type: Dynamic Device

group name.png

In the Dynamic Device members Add Dynamic Query option, enter the following

  • Add device membership rule: SimpleRule
  • Add devices where




starts with.png

Next, click on Add Query

add query.png

Followed by Create.


You'll get a notification in the top right that the group was successfully created.

successfully created group.png

Step 3. AzureAD join a Windows 10 version 1709 device

Go through OOBE on a Windows 10 version 1709 device, at the account screen enter your Azure AD credentials.

azuread jin.png

and after the device has joined Azure AD, it'll show up in Intune soon after in the correct Group.

computer in correct group.png

Job done !

You can verify the build number on a Windows 10 version 1709 device by opening a command prompt, in this screenshot it's 10.0.16299.15, the .15 at the end will increase as new cumulative updates are installed on this base build number.


and that full string can be seen in Intune in Devices, select All Devices, select the device in question and click on Hardware.

devices device hardware.png

Note: If you'd like to create a collection in SCCM for Windows 10 version 1709 please see the following blog post.

For a list of deployment resources for Windows 10 version 1709 please see here.


Share this post

Link to post
Share on other sites


Thanks for the informative post.

A quick question: The process you have mentioned can be used for limiting the devices from getting updated (Feature update). However, what happens when I try installing these clients to 20H2 for eg. using ask sequence. 
Would I be able to update the Clients?



Share this post

Link to post
Share on other sites

this guide is about creating dynamic azure ad groups, is that what you are trying to do, or are you trying to do something else ? if it's something else please raise a new topic

Share this post

Link to post
Share on other sites

1. Sign in to the Microsoft Intune admin center > Groups > New Group.
2. Select the New Group page, choose Security for Group type.
3. Enter the following information:
Group name = “All 2vCPU/4GB RAM Cloud PCs".
Group description = “A dynamic device group containing all Cloud PCs with the 2vCPU/4GB RAM configuration.
4. For Membership type, choose Dynamic Device.
5. Select Add dynamic query.
6. On the Dynamic membership rules page, enter the following:
Property = “deviceModel”.
Operator = “Contains”.
Value = “Cloud PC”.
7. Select Add expression and enter the following:
Property = “deviceModel”
Operator = “Contains”
Value = “2vCPU/4GB”
8. To validate that it works, select Validate Rules (Preview) > Add devices > select some Cloud PCs that have the 2vCPU/4GB RAM configuration, some Cloud PCs that have a different configuration, and some non-Cloud PC devices.
9. After the validation completes, select Save > Create.


Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.