Intune Assign a Dynamic group as members of local administrators on devices

Question

Hi All

Following Microsofts article it states you can get a group assigned to be a member of local administrators on devices which are in intune. I’d like to be able to assign a Dynamic group to be assigned to local administrators groups on machines.

https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-restrictedgroups

As per microsoft

<groupmembership> <accessgroup desc = “Group1”> <member name = “S-1-15-6666767-76767676767-666666777″/> <member name = “contosoAlice”/> </accessgroup> <accessgroup desc = “Group2”> <member name = “S-1-15-1233433-23423432423-234234324″/> <member name = “contosoGroup3“/> </accessgroup> </groupmembership>

in my scenario Group3 = [email protected]

I have attempted with object id also, as it is a azure group there is no sid.

However when attempting I’m always receiving remediation failed. Error code 0x87d1fde8

Has anyone had any luck to assign a group within the administrators group of a machine?

OMA-URI

ConfigureGroupMembership [./Device/Vendor/MSFT/Policy/Config/RestrictedGroups/ConfigureGroupMembership]

Answers ( 5 )

    0
    2020-09-07T19:06:42+05:30

    Hi just want to feedback on this if anyone else faces the issue. Groups is only managed from 2004 onwards.

  1. No response hence closing the thread

    0
    2020-08-15T16:39:15+05:30

    Thanks but is the request I have mentioned possible? or can you only assign individual users only?

  2. The best option is to check the event logs and registry to understand more details about errors

    I have explained how to troubleshoot in free intune training videos

Leave an answer

Sorry, you do not have permission to answer to this question .