Hi everyone,
We're in the process of deploying Defender for Endpoint and we're run into an issue. We want to deploy it to the North American region first. Leaving our other areas still on our old AV provider, for now.
We do not know the best method to deploy to devices only in the NA region and are seeking advice/help on how others have done this. We want NA region to have its own Defender for endpoint policies.
Any help is much appreciated.
@NathanBaker-0141, To set them automatically, maybe you can try one similar Powershell script in the following link:
https://www.myintunespace.com/forum/troubleshooting-1/how-to-change-intune-device-category-for-devices-using-powershell
Note: Non-Microsoft link, just for the reference.
Here is an example I test in my lab for the reference:
1, Check the Device category I want to set:
Get-DeviceManagement_DeviceCategories
2,Find out the device ids of the devices which we want to change the device category.
Get-IntuneManagedDevice | Get-MSGraphAllPages | Select ID, DeviceName
3,Run script for the specific device id.
4,Check and find the information changed on device side.
Hope it can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@NathanBaker-0141, Long time not heard from you. I am writing to see if the above information can help. If the answer is helpful, would you mind to click "Accept Answer" to help others find the useful information.
Thanks for the time and have a nice day!
Hi @Crystal-MSFT
Thanks for the help. I am going to assume because this is being done via PowerShell there isnt a other option to make this choice. Thank you for the hard work and time! I'll take this to my team and see what we can do!
Thank you,
@NathanBaker-0141, Thanks for marking our reply as answer. Yes, currently there isn't other option I find. I notice you will discuss this with you team. If there's anything else we can help in the future, feel free to post in our Q&A. We are always glad to help.
Thanks for your time and have a nice day!
@NathanBaker-0141, Thanks for posting in our Q&A. For these devices, we can create a category named one like "NA region". Then assign this category to these devices. After that, create a dynamic device group with this category set. After all the NA region devices come into this group, we can assign the specific policy to this group. To see more details, we can read the following link for the reference:
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping
Hope it can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@NathanBaker-0141, Hope things are going well. I am writing to see if there's anything else we can help. if yes, feel free to let us know.
Yes this is the correct direction we're looking for. One other question to this, can these categories be set in SCCM and be seen in Intune or are these categories entirely separate from SCCM categories?
Thank you!
@NathanBaker-0141, Thanks for the reply. Based as i know, they are separate, We need to set it directly in Intune.
Hope it can help.
Hi @Crystal-MSFT
One more question, sorry :D!
Can these categories be selected automatically and not require a end user to enroll or is there a way to make this done without end user interaction?
Thank you!
@NathanBaker-0141, Thanks for the reply. Yes, we can select it directly in Intune portal under the device Properties without user interaction. Here is one example I test in my lab:
Hope it can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
9 people are following this question.
