{"id":27001,"date":"2021-01-22T14:12:10","date_gmt":"2021-01-22T21:12:10","guid":{"rendered":"https:\/\/moderneuc.com\/?p=27001"},"modified":"2026-02-18T13:02:21","modified_gmt":"2026-02-18T20:02:21","slug":"windows-autopilot-group-tags","status":"publish","type":"post","link":"https:\/\/jorgep.com\/blog\/windows-autopilot-group-tags\/","title":{"rendered":"Windows Autopilot Group Tags"},"content":{"rendered":"\n<p>Windows Autopilot group tag refer to an optional field (&nbsp;groupTag )  in the Microsoft device manager console (actually maps to the Azure AD device property&nbsp; ) that can be use to help automate deployment and configuration of Windows 10 devices when used with Windows Autopilot process.  Currently only one group tag is supported by Microsoft.<\/p>\n\n\n\n<p>With Windows Autopilot, Microsoft provides the ability to add group tag to each device to support automation during device enrollment and deployment.    <\/p>\n\n\n\n<p>There are four types of Windows Autopilot deployment:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/docs.microsoft.com\/windows\/deployment\/windows-autopilot\/self-deploying\">Self Deploying Mode<\/a>&nbsp;for kiosks, digital signage, or a shared device<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.microsoft.com\/windows\/deployment\/windows-autopilot\/white-glove\">White Glove<\/a>&nbsp;enables partners or IT staff to pre-provision a Windows 10 PC so that it&#8217;s fully configured and business-ready<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.microsoft.com\/windows\/deployment\/windows-autopilot\/existing-devices\">Autopilot for existing devices<\/a>&nbsp;enables you to easily deploy the latest version of Windows 10 to your existing devices<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.microsoft.com\/windows\/deployment\/windows-autopilot\/user-driven\">User Driven Mode<\/a>&nbsp;for traditional users.<\/li>\n<\/ul>\n\n\n\n<p>Typically a group tag is registered at the same time new devices are registered to Windows Autopilot by  the OEM or CSP partner.<\/p>\n\n\n\n<p>However enterprises have still a large number of existing devices that they may want to prep for a time they want to refresh (old term:  reimage) by utilizing the Modern Device Management workflow (self -deploy) and tools and the Windows 10 reset capability.     <\/p>\n\n\n\n<p>Please note that devices must be registered into Windows Autopilot in order to assign group tag.   I have written a blog post on this topic:  <a href=\"https:\/\/jorgep.com\/blog\/gathering-existing-devices-windows-autopilot-device-ids\/\" data-type=\"post\" data-id=\"8940\">Gathering Existing Devices Windows Autopilot Device IDs<\/a><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>Windows Autopilot device registration can be done within your organization by manually collecting the hardware identity of devices (hardware hashes) and uploading this information in a comma-separated-value (CSV) file. Capturing the hardware hash for manual registration requires booting the device into Windows 10. Therefore, this process is intended primarily for testing and evaluation scenarios.<\/em><\/p>\n<cite><a href=\"https:\/\/docs.microsoft.com\/en-us\/mem\/autopilot\/add-devices\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.microsoft.com\/en-us\/mem\/autopilot\/add-devices<\/a> <\/cite><\/blockquote>\n\n\n\n<p>Prior to version 1911 of Microsoft Intune, the only way to change an existing group tag was to removing the device hash and re-importing the device hash. In the 1911 service release it became possible to change the group tag of Autopilot devices.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/oofhours.files.wordpress.com\/2019\/11\/image_thumb-21.png\" alt=\"image\"\/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Adding \/ Changing Group Tags to existing Devices.<\/h4>\n\n\n\n<p>You can add a group tag to existing devices once they have been registered to the Microsoft console as Windows Autopilot (see <a href=\"https:\/\/jorgep.com\/blog\/gathering-existing-devices-windows-autopilot-device-ids\/\">blog post<\/a> ).     According to <a rel=\"noreferrer noopener\" href=\"https:\/\/docs.microsoft.com\/en-us\/mem\/autopilot\/enrollment-autopilot#edit-autopilot-device-attributes\" target=\"_blank\">Microsoft documentation<\/a>, to add group tags to existing devices: <\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In the&nbsp;<a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2109431\">Microsoft Endpoint Manager admin center<\/a>, select&nbsp;<strong>Devices<\/strong>&nbsp;&gt;&nbsp;<strong>Windows<\/strong>&nbsp;&gt;&nbsp;<strong>Windows enrollment<\/strong>&nbsp;&gt;&nbsp;<strong>Devices<\/strong>&nbsp;(under&nbsp;<strong>Windows Autopilot Deployment Program<\/strong>.<\/li>\n\n\n\n<li>Select the device you want to edit.<\/li>\n\n\n\n<li>In the pane on the right of the screen, you can edit:\n<ul class=\"wp-block-list\">\n<li>Device name.<\/li>\n\n\n\n<li>Group tag.<\/li>\n\n\n\n<li>User Friendly Name (if you&#8217;ve assigned a user).<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p>You can also use PowerShell scripts to bulk update group tags.   There is a great blog post explaining this and pointing to the script can be <a href=\"https:\/\/tech.nicolonsky.ch\/bulk-update-windows-autopilot\/\" data-type=\"URL\" data-id=\"https:\/\/tech.nicolonsky.ch\/bulk-update-windows-autopilot\/\" target=\"_blank\" rel=\"noreferrer noopener\">found here<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Multiple Group Tags (kind of)<\/h4>\n\n\n\n<p>Currently Microsoft supports a single group tag to be added in the field.   However I know a couple of very creative customers that have created a single group tag that contains multiple levels so that when deploying a query against a subset of the tag so that branching of the deployment sequence can executed based on its content.     (pretty slick!) <\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Additional blog posts you may find useful: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/mem\/autopilot\/enrollment-autopilot\" data-type=\"URL\" data-id=\"https:\/\/learn.microsoft.com\/en-us\/mem\/autopilot\/enrollment-autopilot\" target=\"_blank\" rel=\"noreferrer noopener\">\u2022 Create device groups for Windows Autopilot | Microsoft Learn<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/intune-customer-success\/support-tip-using-group-tags-to-import-devices-into-intune-with\/ba-p\/815336#:~:text=%20Support%20Tip%3A%20Using%20group%20tags%20to%20import,a%20dynamic%20device%20group%20and%20add...%20See%20More.\">\u2022 Support Tip: Using group tags to import devices into Intune with Autopilot &#8211; Microsoft Community Hub<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/andrewstaylor.com\/2022\/04\/26\/intune-group-tags-scope-tags-what-are-they-and-why-do-i-need-them\/\">Intune Group Tags, Scope Tags &#8211; What are they and why do I need them? &#8211; Andrew Taylor (andrewstaylor.com)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.anoopcnair.com\/ps-script-group-tag-of-autopilot-devices-intune\/\">PS Script To Add Or Modify Group Tag Of Autopilot Devices In Intune HTMD Blog (anoopcnair.com)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/oofhours.com\/2020\/04\/08\/fun-with-windows-autopilot-group-tags\/\">Fun with Windows Autopilot Group Tags<\/a> by Michael Niehaus<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/archive\/blogs\/mniehaus\/autopilot-profile-assignment-using-intune\">Autopilot profile assignment using Intune | Microsoft Docs<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.reddit.com\/r\/Intune\/comments\/fkch5z\/windows_autopilot_group_tag_automation\/\">Group Tag Automation Reddit<\/a> <\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/MicrosoftDocs\/IntuneDocs\/blob\/master\/intune\/enrollment\/enrollment-autopilot.md\">Microsoft Intune Docs on Github<\/a><\/li>\n\n\n\n<li><a rel=\"noreferrer noopener\" href=\"https:\/\/tech.nicolonsky.ch\/bulk-update-windows-autopilot\/\" data-type=\"URL\" data-id=\"https:\/\/tech.nicolonsky.ch\/bulk-update-windows-autopilot\/\" target=\"_blank\">Bulk update Windows Autopilot groupTags<\/a> by Nicola Suter<\/li>\n\n\n\n<li><a href=\"https:\/\/www.sysmansquad.com\/2020\/08\/24\/bulk-updating-autopilot-enrolled-devices-with-graph-api-and-assigning-a-group-tag-based-on-purchase-orderid\/\">Bulk Updating Autopilot enrolled devices with Graph API and assigning a Group Tag based on Purchase OrderID &#8211; Systems Management Squad (sysmansquad.com)<\/a><\/li>\n\n\n\n<li>A great Blog to follow:    <a href=\"https:\/\/www.petervanderwoude.nl\/\">All about Microsoft Endpoint Manager<\/a>\/<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Windows Autopilot group tag refer to an optional field (&nbsp;groupTag ) in the Microsoft device manager console (actually maps to the Azure AD device property&nbsp; ) that can be use to help automate deployment and configuration of Windows 10 devices when used with Windows Autopilot process. Currently only one group tag is supported by Microsoft&#8230;.<\/p>\n","protected":false},"author":2,"featured_media":368607,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","ngg_post_thumbnail":0,"episode_type":"","audio_file":"","podmotor_file_id":"","podmotor_episode_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","itunes_episode_number":"","itunes_title":"","itunes_season_number":"","itunes_episode_type":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[681,441],"tags":[729,742,769,782],"class_list":["post-27001","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-moderneuc2","category-tech-talk","tag-mem","tag-moderneuc1","tag-uem","tag-windows-autopilot"],"taxonomy_info":{"category":[{"value":681,"label":"ModernEUC"},{"value":441,"label":"Tech Talk"}],"post_tag":[{"value":729,"label":"MEM"},{"value":742,"label":"ModernEUC"},{"value":769,"label":"UEM"},{"value":782,"label":"Windows Autopilot"}]},"featured_image_src_large":["https:\/\/jorgep.com\/blog\/wp-content\/uploads\/GroupTags-Featured.jpg",730,430,false],"author_info":{"display_name":"Jorge Pereira","author_link":"https:\/\/jorgep.com\/blog\/author\/jorge\/"},"comment_info":0,"category_info":[{"term_id":681,"name":"ModernEUC","slug":"moderneuc2","term_group":0,"term_taxonomy_id":691,"taxonomy":"category","description":"","parent":0,"count":261,"filter":"raw","cat_ID":681,"category_count":261,"category_description":"","cat_name":"ModernEUC","category_nicename":"moderneuc2","category_parent":0},{"term_id":441,"name":"Tech Talk","slug":"tech-talk","term_group":0,"term_taxonomy_id":451,"taxonomy":"category","description":"","parent":0,"count":671,"filter":"raw","cat_ID":441,"category_count":671,"category_description":"","cat_name":"Tech Talk","category_nicename":"tech-talk","category_parent":0}],"tag_info":[{"term_id":729,"name":"MEM","slug":"mem","term_group":0,"term_taxonomy_id":739,"taxonomy":"post_tag","description":"","parent":0,"count":18,"filter":"raw"},{"term_id":742,"name":"ModernEUC","slug":"moderneuc1","term_group":0,"term_taxonomy_id":752,"taxonomy":"post_tag","description":"","parent":0,"count":284,"filter":"raw"},{"term_id":769,"name":"UEM","slug":"uem","term_group":0,"term_taxonomy_id":779,"taxonomy":"post_tag","description":"","parent":0,"count":47,"filter":"raw"},{"term_id":782,"name":"Windows Autopilot","slug":"windows-autopilot","term_group":0,"term_taxonomy_id":792,"taxonomy":"post_tag","description":"","parent":0,"count":22,"filter":"raw"}],"_links":{"self":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/27001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/comments?post=27001"}],"version-history":[{"count":1,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/27001\/revisions"}],"predecessor-version":[{"id":518830,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/27001\/revisions\/518830"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/media\/368607"}],"wp:attachment":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/media?parent=27001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/categories?post=27001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/tags?post=27001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}