Filters for Managed/Unmanaged Devices

Device type targeting for App Protection/MAM Policy in Intune has now been moved to the Assignments step in policy creation.

Now we can use Filters to target the device type (Managed/Unmanaged) while assigning a MAM policy in Intune.

Follow the below steps to create a Filter for managed/unmanaged devices –

1. Sign-in to the Intune admin center.
            Select Tenant administration > Filters > Create.

 You can also create filters in:

            • Devices > Filters
            • Apps > Filters

Or, Go here Tenant admin – Microsoft Intune admin center

(It is important to remember that the filters are available for –
• Managed Devices: Devices enrolled in Intune &
• Managed Apps: Apps which are managed by Intune (suitable for unenrolled BYOD devices))

2. Click on Create > Managed apps

3. Input the Filter Name, Description and Select and Platform.

4. Click Next

5. In Rules, Select deviceManagementType property Equals to Unmanaged (For Unmanaged devices) like in the following screenshot:

(For Managed devices- Select deviceManagementType property Equal to Managed)

Click Next and Create the filter.

 

Once you have created the filter go to an App Protection Policy for that platform and assign the filter by clicking on edit filter.

Restrictions :
There are some general restrictions when creating filters:
• For each tenant, there can be up to 200 filters.
• Each filter is limited to 3072 characters.
• For managed devices, the devices must be enrolled in Intune.
• For managed apps, filters apply to app protection policies and app configuration policies. They
don’t apply to other policies, like compliance or device configuration profiles