Edit

Share via

List of platforms, policies, and app types supported by assignment filters in Microsoft Intune

Assignment filters in Intune help you target policies to specific devices and apps based on criteria, like OS version or device properties. You can use filters when assigning apps, compliance policies, device configuration profiles, and app configuration policies to managed devices (devices enrolled in Intune) and managed apps (apps managed by Intune).

This article lists the app types, compliance policies, device configuration profiles, and app configuration policies that support assignment filters. It also lists the workloads that aren't supported.

Important

Android device administrator (DA) management is deprecated and no longer available for devices with access to Google Mobile Services (GMS). If you currently use DA management, we recommend switching to another Android management option. Support and help documentation remain available for some Android 15 and earlier devices without GMS. For more information, see Ending support for Android device administrator on GMS devices.

Before you begin

  • ✅: Supports assignment filters.
  • ❌: Doesn't support assignment filters.
  • N/A: Doesn't apply to the platform.

Important

On October 14, 2025, Windows 10 reached end of support and won't receive quality and feature updates. Windows 10 is an allowed version in Intune. Devices running this version can still enroll in Intune and use eligible features, but functionality won't be guaranteed and can vary.

Supported app types for managed devices

You can use assignment filters for some common app policies on the following platforms. For a list of what's not supported on managed devices, go to not supported (in this article).

Windows

App type Supported
Store app ✅
Microsoft 365 apps ✅
Microsoft Edge version 77 and newer ✅
Microsoft Defender for Endpoint N/A
Web link ❌
Windows web link ✅
Line-of-business apps ✅
Windows app (Win32) ✅
Microsoft Store for Business ✅

App configuration policies

  • For managed apps, you can use assignment filters for app configuration policies on the following platforms:

    • Android
    • iOS/iPadOS
    • Windows

  • For managed devices, you can use assignment filters for app configuration policies on the following platforms:

    • Android Enterprise
    • iOS/iPadOS

App protection policies

  • For managed apps, you can use assignment filters for app protection policies on the following platforms:

    • Android
    • iOS/iPadOS
    • Windows

  • For managed devices, assignment filters aren't supported for app protection policies. For other features not supported on managed devices, go to not supported (in this article).

Compliance policies

  • For managed apps, assignment filters aren't supported for compliance policies.

  • For managed devices, you can use assignment filters for all compliance policies on the following platforms:

    • Android device administrator
    • Android Enterprise
    • Android (AOSP)
    • iOS/iPadOS
    • macOS
    • Windows

Device configuration profiles and Endpoint security

  • For managed apps, assignment filters aren't supported for device configuration profiles and endpoint security policies.

  • On managed devices, you can use filters for some common device configuration policies on the platforms listed in the following tables. For a list of what's not supported, go to not supported (in this article).

Note

Some profile types are only available for specific platforms. For example, the Device features profile type includes settings that are only available for iOS/iPadOS and macOS devices.

For a list of all device configuration profiles, and the platforms they apply to, go to Apply features and settings on your devices.

Windows

Profile type Supported
Update rings for Windows ✅
   
Device configuration profile  
Custom ✅
Derived credential N/A
Delivery optimization ✅
Device restrictions ✅
Device Restrictions (Windows 10 Team) ✅
Device Features N/A
Device Firmware Configuration Interface (DFCI) on Windows on supported UEFI ✅
Domain Join ✅
Edition upgrade and S mode switch ✅
Email ✅
Endpoint analytics Remediations scripts ✅
Endpoint Protection ✅
Enrollment device platform restrictions ✅
Support for a subset of filter properties including device osVersion, operatingSystemSKU, and enrollmentProfileName
Kiosk ✅
Network boundary ✅
PKCS certificate ✅
PKCS imported certificate ✅
SCEP certificate ✅
Secure assessment (Education) ✅
Settings catalog ✅
Shared multi-user device ✅
Trusted certificate ✅
VPN ✅
Wi-Fi ✅
Wired network ❌
Windows health monitoring ✅
   
Endpoint Security profile  
Account protection ✅
Account protection, Local user group membership, and Local admin password solution (Windows LAPS)
Antivirus ✅
Attack surface reduction ✅
Excludes Web protection (Microsoft Edge Legacy), Application control, and App and browser isolation
Disk encryption ✅
Endpoint detection and response ✅
Endpoint Privilege Management (EPM) ✅
Firewall ✅
Microsoft Defender for Endpoint (Windows Desktop) ✅
Security baselines ❌

Not supported on managed devices

The following features on managed devices don't support using assignment filters:

  • Custom compliance policies for Windows (preview)

  • App protection policies for Android and iOS/iPadOS

    You can use assignment filters on app protection policies for managed apps. For more information on managed apps, go to Use filters when assigning your apps, policies, and profiles in Intune.

  • End user experiences customization policies

  • iOS/iPadOS app provisioning profiles

  • Partner device management

  • Policies for Office apps

  • Policy sets

  • PowerShell scripts for Windows

  • S mode supplemental policies for Windows

  • Shell scripts for macOS

  • Terms and conditions

  • Update policies for iOS/iPadOS

  • Feature updates for Windows

  • Enrollment notifications

  • Linux platform workloads

  • Devices that are targeted with Endpoint Security configuration using Microsoft Defender for Endpoint integration, such as servers. These devices aren't enrolled in Intune.

Related content

  • Last updated on