If not already in place you have to enable the sync between MSfB and Intune. The Lenovo Vantage app can be deployed with Intune as Microsoft Store for Business (MSfB) App. Add Lenovo Vantage to the Microsoft Store for Business and sync it to Intune Then select Dynamic device members, switch the slider to Advanced rule and insert the followingĪfter a while all MDM Lenovo Windows 10 devices will show up in the group. The membership type should be dynamic ( requires Azure AD Premium P1 or higher). Go to groups in the Device Management Portal or the Azure AD Portal and click on New Group.Ĭhoose Group Type Security and a distinct Group name. In order to deploy Lenovo Vantage to all managed Lenovo Windows 10 devices create a new group in your Azure AD. Create a dynamic group of Lenovo devices in Azure AD In this article I want you to show how to deploy and configure the Lenovo Vantage with Intune to your Windows 10 Lenovo devices using Microsoft Store for Business, Win32 applications, ADMX ingesting and Azure AD dynamic group memberships. If you want to use the tool of the hardware vendor you have to be clear about the fact that this can be a security risk as Dell has shown here and here. System Updater) and Windows Update for several years and have gainedgood experiences with that.Įach major vendor of Business PCs provides such a tool and some are better than others. I have been using the combination of Lenovo Vantage (f.k.a. I would recommend to useone of the last two options or both in combination. Let Windows Update for Business handle it.Create your own packages and deploy them as Application or Script.Do not update drivers (not a good idea).One key consideration regarding Windows Devices in a modern management scenario is the handling of drivers and BIOS updates. When you decide to use Modern Client Management with Intune you have to do some things differently than in the classic onprem world.

Lenovo system update application