How can I create a dynamic group containing all Windows 10 version 1709 in Intune in Azure ?

[anyweb]

Introduction

Microsoft released Windows 10 version 1709 to VLSC and MSDN yesterday, so of course people are deploying it and testing it in their environments. If you want to create a dynamic Group (that auto populates) of Windows 10 version 1709 in Microsoft Intune then do as follows.

Note: In this blog post I assume you have configured MDM auto-enrollment in Azure. This isn't mandatory but makes enrollment into Microsoft Intune for Windows devices much easier. To see how to enable that functionality, click here.

Step 1. Login to Azure

Login to https://portal.azure.com and select the Intune service.

Step 2. Create a dynamic devices group

Click on Groups. Select New Group (highlighted with the Red Arrow).

In the New Group blade, use the following options

• Name: All Windows 10 version 1709
• Description: Windows 10 Fall Creators Update
• Membership Type: Dynamic Device

In the Dynamic Device members Add Dynamic Query option, enter the following

• Add device membership rule: SimpleRule
• Add devices where

DeviceOsVersion

StartsWith

10.0.16299

Next, click on Add Query

Followed by Create.

You'll get a notification in the top right that the group was successfully created.

Step 3. AzureAD join a Windows 10 version 1709 device

Go through OOBE on a Windows 10 version 1709 device, at the account screen enter your Azure AD credentials.

and after the device has joined Azure AD, it'll show up in Intune soon after in the correct Group.

Job done !

You can verify the build number on a Windows 10 version 1709 device by opening a command prompt, in this screenshot it's 10.0.16299.15, the .15 at the end will increase as new cumulative updates are installed on this base build number.

and that full string can be seen in Intune in Devices, select All Devices, select the device in question and click on Hardware.

Note: If you'd like to create a collection in SCCM for Windows 10 version 1709 please see the following blog post.

For a list of deployment resources for Windows 10 version 1709 please see here.

 

[Banna_Rathore]

Hi,

Thanks for the informative post.

A quick question: The process you have mentioned can be used for limiting the devices from getting updated (Feature update). However, what happens when I try installing these clients to 20H2 for eg. using ask sequence. 
Would I be able to update the Clients?

Regards
Rathore

 

[anyweb]

this guide is about creating dynamic azure ad groups, is that what you are trying to do, or are you trying to do something else ? if it's something else please raise a new topic

[petergroft]

1. Sign in to the Microsoft Intune admin center > Groups > New Group.
2. Select the New Group page, choose Security for Group type.
3. Enter the following information:
Group name = “All 2vCPU/4GB RAM Cloud PCs".
Group description = “A dynamic device group containing all Cloud PCs with the 2vCPU/4GB RAM configuration.
4. For Membership type, choose Dynamic Device.
5. Select Add dynamic query.
6. On the Dynamic membership rules page, enter the following:
Property = “deviceModel”.
Operator = “Contains”.
Value = “Cloud PC”.
7. Select Add expression and enter the following:
Property = “deviceModel”
Operator = “Contains”
Value = “2vCPU/4GB”
8. To validate that it works, select Validate Rules (Preview) > Add devices > select some Cloud PCs that have the 2vCPU/4GB RAM configuration, some Cloud PCs that have a different configuration, and some non-Cloud PC devices.
9. After the validation completes, select Save > Create.

Greetings,
Peter