{"id":16831,"date":"2023-04-04T04:00:27","date_gmt":"2023-04-04T04:00:27","guid":{"rendered":"https:\/\/www.insentragroup.com\/au\/insights\/uncategorized\/block-windows-home-devices-in-intune\/"},"modified":"2023-06-20T01:00:09","modified_gmt":"2023-06-20T01:00:09","slug":"block-windows-home-devices-in-intune","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/au\/insights\/geek-speak\/secure-workplace\/block-windows-home-devices-in-intune\/","title":{"rendered":"Block Windows Home Devices in Intune"},"content":{"rendered":"\n<p>If you are new to Intune I have written a high level yet extensive blog called \u201c<a href=\"https:\/\/www.insentragroup.com\/au\/insights\/geek-speak\/secure-workplace\/the-ultimate-guide-to-microsoft-intune\/\" target=\"_blank\" rel=\"noreferrer noopener\">The Ultimate Guide to Microsoft Intune\u201d.\u202f<\/a>Head over to this blog to get further information on what it can do for your organization. For those of you who have already adopted Microsoft Intune, please continue reading\u2026&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Requirement<\/h2>\n\n\n\n<p>Our customer, let\u2019s call them Contoso, expressed their willingness to embrace Bring Your Own Devices (BYOD) to enhance their progress towards the Modern Workplace strategy. However, Contoso had a specific external governance requirement whereby they had to block the \u201cWindows Home\u201d version of Windows 10 or Windows 11. \u202fFortunately, Microsoft Intune provides the capability to create\u202f<a href=\"https:\/\/learn.microsoft.com\/en-us\/mem\/intune\/fundamentals\/filters\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">filters<\/a>\u202fwhich will allow us to achieve our desired goal.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Solution<\/h2>\n\n\n\n<p>There are a couple of prerequisites to start.&nbsp;<\/p>\n\n\n\n<p>To implement this solution you need to have one of the below Azure AD admin roles assigned to your account:\u202f&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Intune Administrator (least privilege)\u202f<\/li>\n\n\n\n<li>Global Administrator\u202f\u202f&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>All users must have an Intune licensed assigned based on your current licensing model, for example, Microsoft 365 E5.\u202f\u202f&nbsp;<\/p>\n\n\n\n<p>All the configuration takes place within\u202f<a href=\"https:\/\/endpoint.microsoft.com\/#view\/Microsoft_Intune_DeviceSettings\/TenantAdminMenu\/~\/assignmentFilters\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Microsoft Intune admin centre<\/a>\u202f&gt; Tenant admin &gt; Filters. To create a new filter, please follow the below steps\u202f&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Create a new filter\u202f&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"819\" height=\"446\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/06\/image.png\" alt=\"\" class=\"wp-image-18526\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/06\/image.png 819w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/06\/image-300x163.png 300w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/06\/image-768x418.png 768w\" sizes=\"(max-width: 819px) 100vw, 819px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Give the filter a relevant name with the following settings&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-12.png\" alt=\"\" class=\"wp-image-19257\" title=\"\"><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Within Rules, you can set the specific syntax. Details of the supported device filter properties can be found\u202f<a href=\"https:\/\/learn.microsoft.com\/en-us\/mem\/intune\/fundamentals\/filters-device-properties#device-properties\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">here<\/a>&nbsp;<\/li>\n\n\n\n<li>To set the filter to detect Windows 10\/11 Home devices enter the following<\/li>\n<\/ul>\n\n\n\n<p>\u2013 (device.operatingSystemSKU -contains \u201cCore\u201d)\u202f&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"959\" height=\"508\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-13.png\" alt=\"\" class=\"wp-image-16836\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-13.png 959w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-13-300x159.png 300w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-13-768x407.png 768w\" sizes=\"(max-width: 959px) 100vw, 959px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Once you do that, you can now set the enrollment device platform restrictions. All the configuration takes place within\u202f<a href=\"https:\/\/endpoint.microsoft.com\/#view\/Microsoft_Intune_DeviceSettings\/TenantAdminMenu\/~\/assignmentFilters\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Microsoft Intune admin centre<\/a>\u202f&gt; Devices &gt; Enrolment device platform restrictions&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-14.png\" alt=\"\" class=\"wp-image-19259\" title=\"\"><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Select Create restriction and give it a name&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"725\" height=\"349\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-33.png\" alt=\"\" class=\"wp-image-16919\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-33.png 725w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-33-300x144.png 300w\" sizes=\"(max-width: 725px) 100vw, 725px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Set the following Platform settings<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"787\" height=\"301\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-35.png\" alt=\"\" class=\"wp-image-16922\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-35.png 787w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-35-300x115.png 300w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-35-768x294.png 768w\" sizes=\"(max-width: 787px) 100vw, 787px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Within Assignments, select Edit filter&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"235\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-36-1024x235.png\" alt=\"\" class=\"wp-image-16923\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-36-1024x235.png 1024w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-36-300x69.png 300w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-36-768x177.png 768w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-36.png 1083w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Select your previously created filter<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"437\" height=\"688\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-37.png\" alt=\"\" class=\"wp-image-16924\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-37.png 437w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-37-191x300.png 191w\" sizes=\"(max-width: 437px) 100vw, 437px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>When Contoso users now try to access Intune with Windows Home OS version, they will get the following<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"645\" height=\"185\" src=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-38.png\" alt=\"\" class=\"wp-image-16925\" title=\"\" srcset=\"https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-38.png 645w, https:\/\/www.insentragroup.com\/au\/wp-content\/uploads\/sites\/22\/2023\/04\/image-38-300x86.png 300w\" sizes=\"(max-width: 645px) 100vw, 645px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">CONCLUSION<\/h2>\n\n\n\n<p>To conclude, Microsoft Intune offers organizations a valuable solution for attaining their desired device management objectives, including the ability to block specific versions of Windows operating systems. By following the straightforward steps detailed earlier, Intune administrators can ensure their organization stays in line with any external governance mandates. I hope that this information has been enlightening and beneficial! If you require further clarification or would like a straightforward conversation, please reach out to us at <a href=\"https:\/\/www.insentragroup.com\/au\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">Insentra<\/a>. You can also explore more insightful content in our Insentra <a href=\"https:\/\/www.insentragroup.com\/au\/insights\/\" target=\"_blank\" rel=\"noreferrer noopener\">Insights section<\/a>.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">RELATED ARTICLES&nbsp;<\/h2>\n\n\n\n<p><a href=\"https:\/\/www.insentragroup.com\/au\/insights\/geek-speak\/secure-workplace\/the-ultimate-guide-to-microsoft-intune\/\" target=\"_blank\" rel=\"noreferrer noopener\">The Ultimate Guide to Microsoft Intune<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/www.insentragroup.com\/au\/insights\/videos\/late-night-brew\/late-night-brew-control-your-mam-microsoft-application-management-with-microsoft-intune\/\" target=\"_blank\" rel=\"noreferrer noopener\">Late Night Brew \u2013 Control your MAM (Microsoft Application Management) with Microsoft Intune<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/www.insentragroup.com\/au\/insights\/videos\/late-night-brew\/late-night-brew-lets-dive-into-microsoft-intune-device\/\" target=\"_blank\" rel=\"noreferrer noopener\">Late Night Brew \u2013 Let\u2019s Dive into Microsoft Intune Device<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how to block &#8220;Windows Home&#8221; devices on Microsoft Intune with this guide. Follow our step-by-step solution using Azure AD admin roles and filters.<\/p>\n","protected":false},"author":146,"featured_media":16850,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[20],"tags":[],"class_list":["post-16831","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-secure-workplace","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/16831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/users\/146"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/comments?post=16831"}],"version-history":[{"count":14,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/16831\/revisions"}],"predecessor-version":[{"id":18534,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/posts\/16831\/revisions\/18534"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/media\/16850"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/media?parent=16831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/categories?post=16831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/au\/wp-json\/wp\/v2\/tags?post=16831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}