Intune targeting is architecture. Groups define broad scope, filters refine assignments, categories classify devices and dynamic groups should be used carefully when attributes are stable. This interactive guide helps Microsoft 365 admins and Intune admins design a targeting model that is scalable, predictable and easy to troubleshoot.

An enrolled device is not a trusted device — not until it meets your compliance baseline. This part builds the compliance policy and Conditional Access rules that enforce it, safely.

Before you configure compliance or deploy software, you need the right licence, the right groups, and a device that successfully talks to Intune. This first part gets you there from a blank tenant.