Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

In this post, you will see how to use filters for assigning Apps Policies and Profiles In Intune Portal. With the latest development, Microsoft recently added an exciting new feature, Filters in Microsoft Endpoint Manager. The feature adds greater flexibility for assigning apps and policies to groups of users or devices.

As Intune Admin, when you create a policy, you can use filters to assign a policy based on your creation rules. Using filters, you can now combine a group assignment with the characteristics of a device to achieve the right targeting outcome.

One of the features of Filters is to improve flexibility when assigning Intune policies and apps is in public preview. Microsoft fully supports public preview features for Microsoft Endpoint Manager. This helps the product team continuously work to provide them your valuable feedback about the new feature in the preview before the Microsoft product team finalizes the features.

How Filters Work – Architecture

Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager 1
Filter Architecture | Credit – Microsoft

Features and Benefits

Filters include the following features and benefits:

Patch My PC
  • Improve flexibility and granularity when assigning Intune policies and apps.
  • Filters are used when assigning app, policies, and profiles. They dynamically target devices based on the device properties you enter.
  • Filters can include or exclude devices in a specific group based on the criteria you enter.
  • Create a query of device properties based on the device platform, including Android, iOS/iPadOS, macOS, and Windows 10.
  • Filters can be used and reused in multiple scenarios in “Include” or “Exclude” mode.

Prerequisites

To enable or disable filters for your tenant, your account must have have the Intune Service Administrator (also known as Intune Administrator) permission.

Enable Filters Public Preview

If you are not part of the preview, join the preview to see the latest features and improvements. In Filters (preview), Select the banner at the top of the page to Try out the filters (preview) feature.

How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
  • To enable feature, Under Preview features toggle the switch to turn On and Click Apply.
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

Once the feature is available for you, you can see Create option at the top on the Filters (preview) page.

1E Nomad
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

Create a Filter

  • Select Tenant administration > Filters (preview) > Create.
  • In Basics, enter the following properties and Click Next.
    • Filter name: Enter the appropriate name for the filter.
    • Description: Enter a description for the filter. This setting is optional but recommended.
    • Platform: Select your platform from available options:
      • iOS/iPadOS
      • Windows 10
      • Android device administrator
      • macOS
      • Android Enterprise
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

There are two ways to create a rule in Rules: Use the rule builder or use the rule syntax. The expression you created with the rule builder is automatically added to the rule syntax editor.

Rule builder:

And/Or: After you add an expression, you can add to the expression using the and or or options.
Property: Select a property for your rule, such as device or operating system SKU.
Operator: Select the operator from the list, such as equals or contains.
Value: Enter the value in your expression. For example, enter 10.0.18362 for the OS version, or Microsoft for the manufacturer.
Add expression: After you add the property, operator, and value, select Add expression:

Rule syntax – You can also manually enter your rule expression and write your own rules in the rule syntax editor. In Rule syntax, select Edit:

How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
  • Select Next.
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
  • In Review + create, review your settings. When you select Create, your changes are saved. The filter is created, and ready to be used. The filter is also shown in the filters list.
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

Here you can see filter has been successfully created.

How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

Use Of Filter

After the filter is created, it’s ready to use when assigning your apps or policies.

  • Sign in to the Endpoint Manager admin center.
  • Go to your apps, compliance policies, or configuration profiles. For a list of what’s supported, see Supported workloads when creating filters.
  • Select an existing policy, or create a new policy. For example, select Apps > Windows and select an existing app. Select Properties > Assignments > Edit
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
  • To assign your policy to a users group or a devices group. Select Edit filter. You can choose to include filtered devices or exclude filtered devices. A list of filters that match the policy platform is shown.
  • Select your filter from the available option and click Select. For example, here, I selected Include filtered devices in assignment, and select the filter, Here you can see multiple options available that we had created.
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

Once you have selected filter behave, It will be shown Filter mode and Filter (preview) as below –

How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
  • To save your changes, select Review + save > Save.

When the device checks in with the Intune service, the properties defined in the filter are evaluated, and determine if the app or policy should be applied.

Change or Modify an Existing Filter

After a filter is created, it can be changed or updated.

  • Sign in to the Endpoint Manager admin center.
  • Select Tenant administration > Filters (preview). A list of all the filters is shown. You can also update filters in Devices > Filters (preview) or Apps > Filters (preview).
  • Select the filter you want to change. Select Rules > Edit, and make your changes –
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
  • To save your changes, select Review + save > Save.

Delete a Filter

  • Sign in to the Endpoint Manager admin center.
  • Select Tenant administration > Filters (preview). A list of all the filters is shown. You can also delete filters in Devices > Filters (preview) or Apps > Filters (preview).
  • Next to the filter, select the ellipses (…), and select Delete. A prompt will appear with a message Are you sure? Click OK to delete.

Important – To delete a filter, you must remove the filter from any policy assignments. Otherwise, when trying to delete the filter, you’ll get the following error.

How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager
How to Use Filters for Assigning Apps Policies and Profiles In Intune Portal | Endpoint Manager

Reports

Filter evaluation report for devices

This report shows every app or policy with a filter that’s been applied. For each evaluated app or policy, you can see the applied filters, and get more detailed information.

The filter evaluation results can take up to 30 minutes to show in the Endpoint Manager admin center from evaluation time.

  • Sign in to the Endpoint Manager admin center.
  • Select Devices > All Devices > select a device > Filter evaluation (preview). The following information is shown:
    • The evaluation results: Match or No match
    • If the filter was using Include or Exclude mode
    • The filter name, description, and rules.
    • The date and time the evaluation occurred.
    • The properties that were evaluated, such as deviceName.
  • The Filter information section is populated with the currently configured filter name, description, and rules. The information isn’t populated from log data. The filter name, syntax, and any other metadata may have changed since the last evaluation time. When troubleshooting, be sure to look at the Evaluation time and Last modified timestamps.

Explore these Filter reports and troubleshooting in Microsoft Endpoint Manager article to learn more about the reporting features, and to help troubleshoot filters and conflicts.

Known Issue

Since this feature is still in preview, You might encounter with unexpected delay in reporting or while editing or deleting an existing filter and many more..!! I will recommend you to visit to Microsoft Document Filters Public Preview – Overview and Known Issues.

Let us update with your comment, about your experience with new feature.

Resources

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.