Intune - Windows 10 Autopilot changing profile via group tag

Ryan Brooks 1 Reputation point
2020-09-24T15:17:58.307+00:00

Hey Everyone,

Having some issues right now as I get my autopilot build ready to move systems to production. I can assign a group tag to a system and it grabs the correct profile, but if I change the group tag the profile sticks to what it was originally set as. I can see my dynamic group has properly updated, but the profile applied will not. Is this to be expected? Do I have to re-import these devices with the desired group tag to get the profile to properly apply? Any help would be appreciated, thanks.

Ryan

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,783 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,301 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,657 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Nick Hogarth 3,436 Reputation points
    2020-09-24T22:39:12.817+00:00

    The behavior works for me. Sometimes if I am setting the group tag in the portal, i need to change it a few times for it to update, then wait 15 min or so for it to update. After I change the group tag from the old group tag, it gets added to the other AAD group and then has the new appropriate Autopilot profile assigned. Have you tested it in PowerShell to see if it works better for you?

    Eg:
    Connect-MSGraph
    Set-AutopilotDevice -id <ID> -groupTag <GroupTag>

    Or even use PowerShell to see if it has set the new group tag or if it shows the old group tag just by using "Get-AutopilotDevice"

    0 comments
  2. CiciWu-MSFT 1,206 Reputation points
    2020-09-25T04:19:37.76+00:00

    Is it possible that the device hasn't had time to sync. Generally speaking, Intune uses different refresh cycles to check for updates to configuration profiles. If the device recently enrolled, the check-in runs more frequently. For Windows 10 device, it will sync every 3 minutes for 15 minutes, then every 15 minutes for 2 hours, and then around every 8 hours. You can also open the Company Portal app, Settings > Sync to immediately check for policy or profile updates.

    0 comments
  3. Ryan Brooks 1 Reputation point
    2020-09-25T18:03:23.56+00:00

    Yea I waited quite awhile changing it manually in the portal. The same issue happens with other devices as well. I went into powershell and configured grouptag there, and it's doing some sort of strange stuck state -

    deploymentProfileAssignmentStatus : assignedUnkownSyncState
    deploymentProfileAssignmentDetailedStatus : none
    deploymentProfileAssignedDateTime : 9/24/2020 8:34:08 AM

    That assigned date is from yesterday while I updated group tag ~30 mins ago. I know with dynamic groups it can take a bit. I'll let it sit a bit longer and report back.

    0 comments