Categories
Device and policy categories help organize your Intune resources into logical groups. Use categories to classify devices, apps, and policies for easier management and targeted deployment.
Device Categories
Purpose
Classify enrolled devices by department, location, or role. Categories enable dynamic group membership for targeted policy and app deployment.
Default Categories
| Category | Description |
|---|---|
| Standard | General-purpose employee devices |
| Executive | Leadership devices |
| Developer | Engineering workstations |
| Kiosk | Single or multi-app kiosk devices |
| Shared | Multi-user shared devices |
| Field | Field workers and mobile users |
Creating Device Categories
- Navigate to Enrollment then Device Categories
- Select Create Category
- Enter name and description
- Save
Dynamic Group Integration
Create Azure AD dynamic groups using device category rules:
- Rule:
device.deviceCategory -eq "CategoryName" - Devices auto-join groups based on category
- Use category-based groups for targeting
Policy Categories
Configuration Profile Categories
- Security Hardening
- User Experience
- Network Configuration
- Application Settings
- Compliance Requirements
App Categories
Group apps for Company Portal browsing:
- Productivity
- Communication
- Security
- Business
- Utilities
Managing Categories
- View all categories with counts
- Edit names and descriptions
- Delete unused categories
- Export assignments for reporting
Best Practices
- Align categories with business structure
- Keep the number manageable (5-15 per type)
- Use consistent naming conventions
- Create corresponding dynamic groups
- Document purpose and policies per category
API Reference
GET /api/devices/categories— List categoriesPOST /api/devices/categories— Create categoryPUT /api/devices/categories/:id— Update categoryDELETE /api/devices/categories/:id— Delete category
Last updated on