Filters in Intune

Home > Microsoft Intune > Filters in Intune

Filters in Intune

Overview

Filters allow administrators to dynamically target policies and apps to devices based on attributes such as operating system version, device model, or ownership type. They work in combination with Azure AD group assignments.

Prerequisites

• Intune Administrator or Global Administrator role.
• Devices must be enrolled in Intune.

Steps

1. Sign in

• Open Microsoft Intune Admin Center.
• Sign in with administrator credentials.

2. Navigate to Filters

• Go to: Tenant administration > Filters > Create.

3. Configure Filter Basics

• Provide:
  • Name: Windows 11 Devices
  • Description: Target Windows 11 devices only
  • Platform: Windows 10 and later

4. Define Filter Rules

• Build conditions based on device attributes.
• Example – Target Windows 11 devices:
  • Property: device.osVersion
  • Operator: StartsWith
  • Value: 10.0.22
• Example – Target corporate-owned devices:
  • Property: device.trustType
  • Operator: Equals
  • Value: AzureAD

5. Review and Create

• Verify conditions.
• Click Create.

6. Apply Filters to Assignments

• Navigate to an app, compliance policy, or configuration profile.
• During assignment:
  • Select target Azure AD group.
  • Apply filter to include or exclude devices.

7. Monitor Usage

• Navigate: Tenant administration > Filters > Select Filter > Usage.
• Review policies and apps using the filter.

Notes

• Filters allow more granular targeting without creating new AD groups.
• Common scenarios:
  • Separate Windows 10 vs. Windows 11.
  • Corporate vs. BYOD devices.
  • Targeting specific device models.

Home > Microsoft Intune > Filters in Intune