How to block creation of personal devices in CMDB coming from InTune integration

Mark Tuffey
Tera Expert

We have our Service Graph Connector for Microsoft InTune set up successfully. However, we have devices in InTune that are not corporate assets that are being bought over during our InTune imports and created as a CI. In the InTune import table sets here are two identifications, "Company" and "Personal" under the field ManagedDeviceOwnerType. Is there way to stop any device with a manageddeviceownertype of "personal" from being created as a CI in our CMDB? 

Cheers

Mark

1 ACCEPTED SOLUTION

Not applicable

Yes there is.  The easiest way would be to install the IntegrationHub ETL application and then modify the conditional mapping to the computer class as below:

find_real_file.png

This is in step 3 Map Data to CMDB and Add Relationships and can be access via the Edit Class button on the Computer class.

This will prevent any devices that have u_manageddeviceownertype != Company from being inserted or updated in the CMDB.

View solution in original post

6 REPLIES 6

Sandeep Dhungan
Tera Contributor

Hi Mark ,

If you or anyone is still looking for a solution, please see below instruction that i implemented when we first started intune sync . Please note for some reason this got overwritten somehow during our last upgrade. 

This is what i did to make it work again.

1. go to flow designer
2. go to actions

3. select application type as Service graph Connector for Microsoft intune

4. open mobileDevices  or  computers (whichever or both if you want to only sync corporate devices)

5. On the Inputs, there is nextlink which can be edited. Click the below to close the Data

SandeepDhungan_0-1691123648657.png


6. Click the down arrow

SandeepDhungan_1-1691123691502.png


7. Update below at the end of default value:

and managedDeviceOwnerType eq 'company'

The default value will look like this

SandeepDhungan_2-1691123764417.png


8. Hit save and publish

9.  remove all the junk data from handheld computing or computer table.
10. Run the Intune schedule 

Thanks,

SD







This worked for me, however, it was in Data Streams and not Actions for me. (Step 2).  I don't know if that's just a change in the past 2 years or not.