How do I manage Group Tags for Windows Autopilot Devices?

Overview

This article outlines how to assign, or re-assign, a Group Tag on devices that have been registered in Windows Autopilot. This applies to devices imported by an Intune device manager, or those registered by a vendor. Group Tags help automate profile assignment through dynamic groups in Microsoft Intune.

Information on how to navigate the Intune Admin Center interface can be found at https://learn.microsoft.com/en-us/intune/intune-service/fundamentals/tutorial-walkthrough-endpoint-manager

Prerequisites

• Management access to https://intune.microsoft.com.
  • If your IT admins are not already able to manage devices in Intune, please have your IT unit submit a request to be on-boarded using the Request for Intune Endpoint Management form.
• Devices must be registered in Windows Autopilot
• Device serial number
• Group Tags must be defined and used in dynamic group rules

Steps to manage Group Tags

Using Intune Admin Center:

1. Sign in to https://intune.microsoft.com
2. Select Devices on the left navigation menu

3. Select Enrollment under “Device onboarding”

4. From the Windows tab of the resulting pane, Select Devices in the “Windows Autopilot” section
5. In the Search box, provide the serial number of the device to update
6. Select the resulting device and edit the Group tag field from the properties blade that slides out from the right
7. Click Save

Note: Changes may take a few minutes to reflect in dynamic group membership.

Verification

Navigate to Azure AD > Groups > your dynamic group.
Confirm the device appears in the group based on the new Group Tag.