Assignments: invisible wiring versus every policy mapped to every target
Before: policies target groups but no one can see the whole wiring, including targets pointing at deleted groups. After: a read-only report maps every policy to every group, dynamic rules and broken targets included.
Ketan Kamble
BEFORE · WIRES YOU CAN’T SEE
AFTER · EVERY TARGET MAPPED
STEP 1 · ASSIGNED TO… WHAT?
INTUNE · POLICY
Win10 Baseline · Assigned to: 4 groups
which groups? off-screen
STEP 2 · OPEN ONE AT A TIME
TARGETS, ONE POLICY AT A TIME
dynamic group · membership rule unknown from here
STEP 3 · HIDDEN TARGETS
× 112
policies, targets buried
one broken target, easy to miss
a group was deleted — the target still points at it
▶ Collect-PolicyAssignments.ps1
read-only → map policy ↔ group → assignment graph
ASSIGNMENT MAP
BROKEN TARGET
every policy → every group · dynamic rules resolved
group deleted — assignment orphaned
SURFACED
every policy · every target ·
incl. the dead wires
Pause