You have an Azure AD group named Group1. Group1 contains two Windows 10 Enterprise devices named Device1 and Device2.
You create a device configuration profile named Profile1. You assign Profile1 to Group1.
You need to ensure that Profile1 applies to Device1 only.
What should you modify in Profile1?
The correct approach to ensure that Profile1 applies only to Device1 is by modifying the assignments. By changing the assignments, you can directly specify that Profile1 applies only to Device1 instead of the entire Group1. This involves either creating a new group that contains only Device1 or using filters to exclude Device2. Options like Settings, Scope (Tags), and Applicability Rules do not provide direct control over which specific devices receive the profile.
there is no option, You have to modify assignments
I will go for A
To ensure that Profile1 applies to Device1 only, even though it's originally assigned to Group1 which contains both Device1 and Device2, you should use: C. Scope (Tags)
Answer is A. You need add the device in the exclusions. Also scope does nothing. It's only a thing to make it easier to know what de policy does. It's only information, nothing else!
Scope tags in Microsoft Intune allow administrators to divide devices in their organization into logical groups. These groups, also known as tags, can be used to make certain settings, applications, and policies available only to specific users or devices. By using Intune scope tags, you can streamline your IT infrastructure, improve security and make your life easier.
A. Assignments By modifying the assignments, you can target specific devices or groups. In this case, you can remove the assignment of Profile1 from Group1 and directly assign it to Device1. This way, Profile1 will only apply to Device1 and not Device2.
In the assignments you can choose "filter" and filter devices out of it. Be aware: exclusions is not an option since you can only exclude groups and we can't assume there is a group made for the device itself.
Applicability Rules: Intune allows you to define applicability rules within a configuration profile. These rules act as filters to determine which devices in an assigned group actually receive the profile.
Answer A. Assignments in combination with a filter.
I think C is correct. Because Group1 contains both Device1 and Device2. You configure Profile1 and assign it to Group1. But Profile1 should apply on Device1. So you do that witch ScopeTag. Otherwise you should configure two Profiles and two Groups which is not the question.
The correct answer is **A. Assignments**. In Azure AD, the Assignments section of a device configuration profile determines which users, devices, or groups the profile applies to. If you want Profile1 to apply to Device1 only, you should modify the Assignments of Profile1 to include only Device1. The other options (Settings, Scope (Tags), and Applicability Rules) do not directly control which devices a profile applies to. Please note that this will only work if Device1 and Device2 are not in the same Azure AD group that Profile1 is assigned to. If they are, you might need to create a new group for Device1 and assign the profile to that group.
using include/exclude
You can add filters under scope Answer is C
applicability rules would not make it.
Applicability rules Applies to: Windows 11 Windows 10 Applicability rules allow administrators to target devices in a group that meet specific criteria. For example, you create a device restrictions profile that applies to the All Windows 10/11 devices group. And, you only want the profile assigned to devices running Windows Enterprise.
To ensure that Profile1 applies only to Device1 within Group1, you need to modify the assignments to target only Device1. This can be done by creating a separate Azure AD group that contains only Device1 and then assigning Profile1 to that new group. Therefore, the correct answer is: A. Assignments
A is correct answer Sign in to the Microsoft Intune admin center. Navigate to Devices > Configuration profiles. Select Profile1 and go to Properties > Assignments > Edit.
If you update the assignments, you remove both devices. If you configure applicability rules in the same configuration policy you can filter the other device out.