Microsoft Copilot for Security is Generally Available April 1, 2024
As a proud Microsoft Solutions Partner, CloudServus is excited to dive into Microsoft Copilot for Security, set to be globally available on April 1,...
2 min read
cloudservuscom Jun 2, 2020 4:53:57 AM
Previously when creating queries for dynamic membership rules in Azure AD, you would have to create the group, then provide the syntax, and then wait anywhere from 5-10 minutes while Azure AD evaluates the group members. When first starting out, this can add up to hours of timing waiting for results. Microsoft now has added rules validation into Azure AD Dynamic groups. This is currently in preview, and saves quite a bit of time when unsure about the syntax of your queries. When getting started Microsoft does provide some documentation below:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership
In this example, I am creating an Azure AD Dynamic Device group for Windows 10 1909 devices. Once I add my syntax, I can now click on Validate Rules and test.
Next click on +Add Devices to provide test cases for your rule syntax.
Add your test workstation devices from Azure AD and click Validate.
Click View details to find out why a device does not match the query.
In this case, the workstation was a BYOD device instead of Company owned.
This small, but nice, quality of life addition to Azure AD groups can save you quite a bit of time when setting up Dynamic User or Dynamic Device groups in Azure AD. Here are some common syntax strings useful when managing Windows 10 with Intune in Azure AD as well:
(device.deviceOSType -eq “Windows”) and (device.deviceOwnership -eq “Company”)
(device.deviceOSVersion -startsWith “10.0.18363”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.18362”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17763”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17134”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSType -eq “Windows”) and (device.deviceOwnership -eq “Personal”)
(device.deviceOSVersion -startsWith “10.0.18363”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.18362”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17763”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17134”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
As a proud Microsoft Solutions Partner, CloudServus is excited to dive into Microsoft Copilot for Security, set to be globally available on April 1,...
Unless you’ve been living under a rock for the past year, you have heard and seen the buzz around Copilot for Microsoft 365. Copilot for Microsoft...
Discover the benefits and advantages of migrating enterprise applications to Microsoft Azure and why it is the best decision for your business. With...