Setting Up Dynamic Groups with Membership Type = Dynamic Device
Question
Hi All,
Hey everyone! I’m attempting to setup dynamic grps with membership type = dynamic device. The issue I’m facing is, when I configure the rule and try to validate the rule I get an error. These devices are in the organizational unit in AD and we’re in a hybrid setup with AADC. I’ve already checked AADC to ensure all the organizational units are synced and performed a sync. The purpose behind all of this is to perform workstations updating in update rings and key off of these org units.
Posted by Stephon Singh in HTMD FB Group
Answers ( 2 )
Replied by Jami Susijärvi
You try to use OU name from onpremise active directory?
Replied by Jami Susijärvi
“The organizational Unit attribute is no longer listed and should not be used. This string is set by Intune in specific cases but is not recognized by Microsoft Entra ID, so no devices are added to groups based on this attribute.”
https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership
Replied by Stephon Singh
Jami Susijärvi ahh I see, any other suggestions on what property I can key off of then to target computer objects in on prem ad?
Replied by Stephon Singh
Lukas DeejayTechpro ahh I see, any other suggestions on what property I can key off of then to target computer objects in on prem ad?
Replied by Jami Susijärvi
You try to use OU name from on premise active directory?
Replied by Jami Susijärvi
“The organizational Unit attribute is no longer listed and should not be used. This string is set by Intune in specific cases but is not recognized by Microsoft Entra ID, so no devices are added to groups based on this attribute.”
https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership