This is a great feature and i only wish i can get this to work.
I am following this article: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices
I have a registered device which is not in Intune. I'm guessing that makes it in the category of "Registered not managed by Intune" vs "registered". (What is the difference between the two anyway, wouldn't these two be the same? why differentiate?
I have a conditional access policy based on a value in ExtensionAttribute1. Regardless of what value i put it keeps matching it. Why is that?