Dynamic Device group based on installed application
We have a situation where we allow users to install apps from the appstore on their corporate device but a situation came up where a lot of heavy data usage apps are causing large bills.
We want the option to be able to deploy app restriction policies and take control of an unmanaged app without having to deploy it to all users.
Being able to make a dynamic device group based on a specific discovered app would allow us to target only those with the application installed for the restriction policy rather than having to deploy the app to everyone to get the application managed.
This was such a useful feature when managing workstations in SCCM, I'm very surprised its not functional in Intune
Bo Bertelsen commented
We want to offer Outlook as an app available for all users. When they install it we would like to remove (exclude) the Configuration policy for native mail that we have deployed.
So we have a default config for those who prefer native mail on iOS, and then users who prefer Outlook can chose that (which removes the mail config from native mail).
Is there any update on this? Any work around?
Michael W. commented
Absolutely necessary - use case: Due to a security issue, we have to update all Adobe Reader installations to the latest version. For that we want to have a dynamic group that contains all devices with Adobe Reader installed. Then we deploy the latest Adobe Reader version to this group. Like it exists in SCCM...
+ Use case for this feature : deploy a provisioning profile to devices that have installed a specific app (which has been made available for "all users/devices")
This feature is much needed for us to automate a lot of our workflows. Otherwise we have to resort to manually placing devices in groups or using device categorizations in a way they aren't really meant to be leveraged.
Andrew Estcourt commented
I agree that this would be a great idea. From my perspective, I want to use this as a way to keep applications up to date on devices where they are installed and they are only deployed as available from the Company Portal.
Currently it is up to the user to go into the portal and install the new version - like that ever happens.