no assignment groups found

Modern Device Management

Jannik reinhard.

List all Intune assignments of an Azure AD Group

All assignments in Intune are based on Azure AD groups. I think you also already had the problem that you wanted to find out to which Intune Object a certain AAD group in already assigned, but there is no way in the portal to find this out. To solve this problem I have written a script that gives you exactly this output.

How does it work

• First we authenticate to the Azure AD to get an authentication token.

• After that we read in the group we want to searched for and check if it exists. If the group exist we get the group id. If the input does not exist, we list all groups and ask until the input is correct.

• After that we check all device configurations, ADMX, apps, compliance policies and scripts if there is an assignment or exclude for this group.

What you have to do

• First you need to download my script from my Git hub repository .
• Run the script and enter your UPN with sufficient permissions.

• Enter the name of an Azure AD group (If you want to list all groups press enter without content).

• That is it. Now you get all assignments and excludes of the group listed.

I hope I could help you with this script if you are looking for the Intune assignment of an Azure AD group in the future. If you are using the script in a larger environment it may take some time to run the script as it has to go through all the objects and look at the assignment. If you are missing a category in the script then let me know so I can add it.

Stay healthy, Cheers Jannik

Update 02.08.2022

You can also download my script from the PowerShell Gallery:

Share this:

• Click to share on Twitter (Opens in new window)
• Click to share on LinkedIn (Opens in new window)
• Click to share on Facebook (Opens in new window)
• Click to email a link to a friend (Opens in new window)
• Click to share on WhatsApp (Opens in new window)

5 thoughts on “ List all Intune assignments of an Azure AD Group ”

Hi Jannik! Thank you for creating this!

I have a couple of comments. The first is that i had to change line 29 and 30 to this to make the script run: Add-Type -Path $adal Add-Type -Path $adalforms

Otherwise it would just throw exceptions, and not log me in.

The second thing is that it seems your script only returns the first 100 groups in your ‘Get-GraphCall’ function when you populate $groups on line 156. I think you’ll need to do a ‘do while’-loop on the .nextlink from the Invoke-RestMethod to get a complete result in an enviroment with more than 100 groups.

Other than that, great script, and thank you again for providing this! It’s gonna be awsome! :o)

Hey @Trond Kristiansen many thanks for your feedback. When I run the script I don’t get the exception but anyway I changed it then hopefully it runs stable for everyone. Regarding the limitation of 100 groups this I have fixed it now all groups are fetched. Sorry for the bug and thanks for the feedback.

Wow. I was just talking about this capability, thank you.

Great script but I think it is missing some areas: – Endpoint Security items like Security Baseline, Antivirus, Encryption, etc. – Settings Catalogs – Update rings – Feature updates

Hey Ron, do you have an need for the script. If you want I can further develop this

Comments are closed.

• Already have a WordPress.com account? Log in now.
• Subscribe Subscribed
• Copy shortlink
• Report this content
• View post in Reader
• Manage subscriptions
• Collapse this bar

• Stack Overflow for Teams Where developers & technologists share private knowledge with coworkers
• Advertising & Talent Reach devs & technologists worldwide about your product, service or employer brand
• OverflowAI GenAI features for Teams
• OverflowAPI Train & fine-tune LLMs
• Labs The future of collective knowledge sharing
• About the company Visit the blog

Collectives™ on Stack Overflow

Find centralized, trusted content and collaborate around the technologies you use most.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Get early access and see previews of new features.

User account does not show application assignments

Log into Azure B2C

Click Users

Select a user

Click Applications

I created users in my B2C tenant by logging into my website using various OAuth identity providers. So for any user selected using the above steps I expect to see at least one application listed - that being the one the user signed into when their user record was created in Azure.

When I perform the above steps I only see applications listed under my own user name. I created all the users I see in my tenant so I know there should be apps listed with each user name.

More formally stated my questions are:

Given an Azure AD Application, how do I get a list of users that are authorized to log into that app?

Given an Azure AD User, how do I get a list of applications that user is authorized to log into?

I would like to accomplish the above tasks using Azure portal - I don't want to write script. Also, my purpose in asking these questions is to be able to delete or disable users as needed.

• azure-active-directory
• azure-ad-b2c

2 Answers 2

Azure AD B2C does not hold a mapping of Users who signed into an App to a specific Application Registration. By default, all users are authorized to sign into your apps if you have OAuth IdPs configured against the AAD B2C policy that allows authentication to your App.

You can use the AAD B2C Sign In logs to see which users have been logging into what applications.

Assigning or not assigning Users to Apps in the Azure Portal does not enforce any authorization, this is an Azure AD only concept and doesnt apply to Azure AD B2C.

The process you followed(Users->select user->application) will only be able to see the applications listed under your tenant.

In the same manner when you choose an application and select the users/Groups you will only be able to see the users who have accessed your application.

Based on application/user->application you can remove the access from that application.

Regarding the

Given an Azure AD Application, how do I get a list of users that are authorized to log into that app? Given an Azure AD User, how do I get a list of applications that user is authorized to log into?

The list of users/application authorized details are completely depend on the application consent flow.

Application developers can dictate what types of permissions are being requested and if they want to guide users through the user consent flow or the admin consent flow. If the application is provided with user consent flow based on the consent acceptance any user can access that particular application.

Admin consent flow is when an application developer directs users to the admin consent endpoint with the intent to record consent for the entire tenant. Application access grant to the requested data on behalf of the entire tenant.

For more details on the consent and permission please go through the document

• Thank you for your reply. Sorry, but I do not understand what this has to do with consent. The user consented to use the app otherwise I would not see their login credentials in my AD. The problem here is that the information is not complete - I want to know what application the user logged into. –  user3230660 Commented Jul 6, 2020 at 21:38
• > only be able to see the applications listed under your tenant. All the applications and users are listed in my tenant. –  user3230660 Commented Jul 6, 2020 at 22:15
• Regarding the Users authorization for login to applications is depended on the Consent levels and the you will only be able to see the list of application access by the user up to your tenant itself you cant see the details of external apps accessed information. –  Raghavendra beldona Commented Jul 7, 2020 at 19:09
• > you will only be able to see the list of application access by the user up to your tenant itself This is what I need to see. I have two sites: A.com and B.com. You log into B.com. After that, under users I need to see Raghavendra, under Raghavendra I need to see B.com as an Application. –  user3230660 Commented Jul 7, 2020 at 22:15

Your Answer

Reminder: Answers generated by artificial intelligence tools are not allowed on Stack Overflow. Learn more

Sign up or log in

Post as a guest.

Required, but never shown

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy .

• The Overflow Blog
• The evolution of full stack engineers
• One of the best ways to get value for AI coding tools: generating tests
• Featured on Meta
• Bringing clarity to status tag usage on meta sites
• Join Stack Overflow’s CEO and me for the first Stack IRL Community Event in...
• Feedback requested: How do you use tag hover descriptions for curating and do...
• Staging Ground Reviewer Motivation
• What does a new user need in a homepage experience on Stack Overflow?

Hot Network Questions

• How resiliant is a private key passphase to brute force attacks?
• Can someone confirm this observed bug for `bc`? `scale=0` has no effect!
• Why doesn't SiLU suffer from a worse version of a "dying ReLU" problem?
• What are the intermediate semisimple groups of type A?
• Key fob frequency filter design
• Can I land on the "EuroAirport Basel-Mulhouse-Freiburg" with a German National Visa as first destination (NON-EU Citizen)?
• About Jesus's reading of Isaiah in the synagogue
• Engaging students in the beauty of mathematics
• Why would the GPL be viral, while EUPL isn't, according to the EUPL authors?
• How do I go about writing a tragic ending in a story while making it overall satisfying to the reader?
• Starting with 2014 "+" signs and 2015 "−" signs, you delete signs until one remains. What’s left?
• A probably Fantasy middle-length fiction about a probable vampire during the Blitz
• Is this a misstatement of Euclid in Halmos' Naive Set Theory book?
• Can the Fourier transform of a test function vanish on an interval?
• Is the white man at the other side of the Joliba river a historically identifiable person?
• Consistency-proof of ZFC
• A journal has published an AI-generated article under my name. What to do?
• Canonical decomposition as wedge sum up to homotopy equivalence
• Can we use "day and night time" instead of "day and night"?
• sum() of aggregate count()?
• What are the steps to write a book?
• Understanding the parabolic state of a quantum particle in the infinite square well
• Colossians 1:16 New World Translation renders τα πάντα as “all other things” but why is this is not shown in their Kingdom Interlinear?
• Paying a parking fine when I don't trust the recipient

• Troubleshooting Guides
• Common Errors
• Tech Tutorials
• Apps & Programs
• About our team & mission

Local Users and Groups is Missing on Windows 11: How to Add it

Identify the installed edition of Windows 

updated on August 23, 2024

Share this article

Improve this guide

Read our disclosure page to find out how can you help Windows Report sustain the editorial team Read more

A few users found Local Users and Groups missing in Windows 11. And, for some who can access it, the message reads, This snapin may not be used with this edition of Windows 10. To manage user accounts for this computer, use the User Accounts tool in the Control Panel .

Below, we’ll explain how to add local users & groups in Windows Management:

How do I enable local users and Groups in Windows 11?

Before we proceed, make sure to verify which edition of Windows 11 is installed . If it’s Home , you will need to manually enable Local Users and Groups in Windows 11. For the Pro or Enterprise editions, the problem likely lies with the user profile.

1. Download lusrmgr.exe on Windows 11 Home

• Click Yes in the UAC prompt.
• The Local users and groups console will pop up.

The downloadable version of Local Users and Groups (lusrmgr.exe) differs slightly from the built-in console in terms of usability and interface, but it allows users pretty much the same functionality.

2. Use an alternative tool

If you use lusrmgr.exe to configure user profiles, grant administrative privileges, view the list of users, or fix things when users don’t appear on the login screen , the built-in User Accounts (netplwiz) utility will do the trick.

To open User Accounts , press Windows + R to open Run > type netplwiz in the text field > click OK .

We don’t recommend using third-party tools for user management in Windows. It’s a critical task, which should be handled by the integrated tools unless you want to expand the functionality or add features. 

• Windows Server Preview Build 26280 is now out but it has dozens of known issues
• Windows 11 now lets users pin apps to the taskbar by dragging them from Windows Search
• ERROR_TOO_MANY_CMDS: 4 Methods To Fix It

3. Upgrade to the Pro edition

• Change the product key : Use this when you already have an activation key for the Pro edition. When selected, Windows will prompt you to enter the new product key.

The Local Users and Groups console is not available in the Home Edition, just like the Local Security Policy utility. And if you don’t want to use the downloadable version or an alternative, it’s best to upgrade to Windows 11 Pro.

4. Manage users from Command Prompt

• To view all users: Type net user and press Enter.

• To rename an existing account: Type wmic useraccount where name=”[oldusername]” rename [newusername] and press Enter.
• To add a user to a specified local group to grant additional permissions Type net localgroup [groupname] [username] /add and press Enter.

Why are Local Users and Groups missing in Windows 11?

• You are running the Home edition of Windows, and Local Users and Groups is available on Pro and upwards editions.
• The active user profile doesn’t have administrator privileges.
• A recent Windows update broke the functionality.
• The system files are corrupt.

How do I access & use local users and Groups in Windows 11?

To access Local Users and Groups , press Windows + R to open Run > type lusrmgr.exe in the text field > click OK .

Using Local Users and Groups is just as simple as opening it. You can create new accounts or groups, delete an existing one, change the password, and much more!

The Local Users and Groups utility is built into Computer Management and can be accessed from the console or independently

While Local Users and Groups would have been a great addition to Windows 11 Home, some features are exclusive to the Pro edition. The Home edition is developed for relative simplicity.

Remember, just getting the lusrmgr.exe utility won’t do! You will have to effectively manage users and groups for an error-free Windows experience.

For any queries or to share your review of the lusrmgr.exe console, drop a comment below.

More about the topics: user accounts , Windows 11

Windows Hardware Expert

Kazim has always been fond of technology, be it scrolling through the settings on his iPhone, Android device, or Windows PC. He's specialized in hardware devices, always ready to remove a screw or two to find out the real cause of a problem. Long-time Windows user, Kazim is ready to provide a solution for your every software & hardware error on Windows 11, Windows 10 and any previous iteration. He's also one of our experts in Networking & Security.

Sort by: Latest Oldest Most Votes

Leave a Reply Cancel reply

Commenting as . Not you?

Save information for future comments

Was this page helpful?

Let us know if you managed to solve your tech problem reading this article.

We’re happy to hear that!

You can subscribe to our newsletter to stay up to date with the latest news and best deals!

Do you have a suggestion?

We know how frustrating could be to look for an universal solution.

If you have an error which is not present in the article, or if you know a better solution , please help us to improve this guide.

You're signed out

Sign in to ask questions, follow content, and engage with the Community

• Canvas Question Forum

Import Assignment Groups

• Subscribe to RSS Feed
• Mark Topic as New
• Mark Topic as Read
• Float this Topic for Current User
• Printer Friendly Page

• Mark as New
• Report Inappropriate Content

Solved! Go to Solution.

View solution in original post

• All forum topics
• Previous Topic

Images not showing in Announcement RSS Feed

Display any page/module "assign to" availability d..., blueprint assignment sync to sis, video file submission window size, observer and student role in same course, imported class with broken assignments, community help, view our top guides and resources:.

To participate in the Instructure Community, you need to sign up or log in:

Get the Reddit app

Join us in discord here: https://aka.ms/azurediscord.

Can't assign license to AAD group

I've difficulties on Azure portal.

I've created AAD (sec) group - called "XYZ-Licenses-MicrosoftTeamsPhone"). Purpose of this group is that all added members (there are no members at this moment) get assigned with "Teams Essentials" + "Teams Domestic Calling plan" licenses.

I've added "Teams Essentials" to the group with no problem, but when I want to add "Domestic Calling plan" - I receive this error:

"License operation failed. Make sure that the group has necessary services before adding or removing a dependent service. The service Microsoft 365 Domestic Calling Plan requires Microsoft 365 Phone System to be enabled as well. For more details on how to resolve products dependencies, see here ."

Now, my question is - how is this all related, why would I need to have something additional to assign to a group? Am I missing something?

By continuing, you agree to our User Agreement and acknowledge that you understand the Privacy Policy .

Enter the 6-digit code from your authenticator app

You’ve set up two-factor authentication for this account.

Enter a 6-digit backup code

Create your username and password.

Reddit is anonymous, so your username is what you’ll go by here. Choose wisely—because once you get a name, you can’t change it.

Reset your password

Enter your email address or username and we’ll send you a link to reset your password

Check your inbox

An email with a link to reset your password was sent to the email address associated with your account

Choose a Reddit account to continue

This browser is no longer supported.

Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.

Is there a way to see what software has been assigned to a specific group?

We have numerous groups for software deployment and I would like to be able to have a query like "Show me all the software assigned to group <GroupName>". Is there a way to do this? This also makes me wonder what the "Applications" blade is supposed to show on the group detail blade?

Microsoft Intune Application management Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities. Application management: The process of creating, configuring, managing, and monitoring applications. 935 questions Sign in to follow Follow

Microsoft Intune A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities. 4,951 questions Sign in to follow Follow

You can do it with PowerShell, assuming you have the correct permissions:

https://endpointers.wordpress.com/2023/02/17/get-all-windows-apps-assigned-to-a-group/

Hello there,

You can see the Apps that are assigned to a group. Just not in the regular Intune but in the Education portal. No Idea why it is that way.

Check your group here:

https://intuneeducation.portal.azure.com/#view/Microsoft_Intune_Edu/GroupsSummaryBlade

Hope this gets implemented sometime into the regular Intune.

We also have found that the regular Intune portal shows no apps assigned to a group that has apps assigned, but if you look in the intune for education portal, it does show the apps assigned to the group. In the regular portal, we can see the managed apps assigned under each device as well.

Based on my researching, currently, we don't find a place to query the software assigned to a specific group in the portal. But we can check the application assigned to a specific user or a device instead in the following location:

The application assigned to a specific user

• Login Microsoft Endpoint Manager admin center.

The application assigned to a device:

Hope it can help.

best regards. Crystal

Hi everyone, I created a C# app to check the Intune Assignments using MSGraph. Maybe this can help everyone:

https://github.com/sibranda/GetIntuneAssignments

Navigation Menu

Search code, repositories, users, issues, pull requests..., provide feedback.

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly.

To see all available qualifiers, see our documentation .

• Notifications You must be signed in to change notification settings

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement . We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

when adding role assignment in Azure Portal, it says 'No users, groups, or service principals found.' #1588

ramasif commented May 3, 2020

ramasif commented May 4, 2020

Sorry, something went wrong.

No branches or pull requests

• Help Center
• Privacy Policy
• Terms of Service
• Submit feedback
• Announcements

• Departments
• Audiology & Speech-Language Pathology
• Behavior Analysis
• Criminal Justice
• Emergency Management & Disaster Science
• Public Administration
• Rehabilitation & Health Services
• Social Work
• HPS IT Services
• Degree Programs
• Undergraduate Degrees
• Graduate Degrees
• Minors & Certificates
• Student Resources
• Graduate Advising
• Scholarships
• HPS Graduate Admissions Appeal
• HPS Philanthropy Cord
• Student Orgs
• HPS Research
• HPS Grant & Funding Resources
• Search HPS Faculty Research
• HPS Student Research
• HPS Research Seminars
• HPS Global Projects
• HPS Faculty Publications
• Faculty & Staff Resources
• Request for Space Allocation
• HPS Incentive Program for Grant Writing
• HPS Small Seed Grants Program
• Give to HPS
• Faculty & Staff Directory
• HPS Community Engagement & Service
• Notify Niki
• Search Type THIS SITE ALL of UNT Search Search
• Quicklinks:
• STUDENT EMAIL
• UNT DIRECTORY

Internships

• Current Students
• Future Students
• EADP Academic Advising
• EMDS Scholarships
• Research and Engagement in EADP
• EMDS Alumni Directory
• EMDS Faculty and Staff
• Give to EMDS

Bridging Classroom Learning to Real-World Emergency Management

Purpose of the Internship

The purpose of the internship is to provide the fledgling emergency manager with the opportunity to gain first-hand experience related to all four phases of Emergency Management. The internship is a key component of the Emergency Administration and Planning program and provides pre-career students an opportunity to apply classroom knowledge and develop professional skills that will lead to a successful career. Moreover, the internship experience frequently provides the student with an entry into a permanent position.

Emergency Administration and Planning students must complete an internship of at least 240 hours of employment. Students must register for EADP 4800, EADP Internship Preparation, and complete the course before beginning an internship appointment. This three hour course meets four times during the semester and prepares students for an internship. Career testing, resume and interview preparation, and discussions of professional and ethical conduct are covered. When the student is ready to begin an internship, the internship coordinator will assist in identifying internships, but the student is ultimately responsible for securing an appointment.

Internships may be completed during the summer months, on a part-time basis during the academic year, or once all course work has been completed.

Internship Resources

Internship Guidelines

Career Center Internship Information

Current EADP Internship Placements

Internship Practicum Testimonials

Internship Waiver Request   - Please include your current resume with this form.

For more information, please contact the EADP Internship Coordinator,   Dr. Ron Timmons .

Internship Details

There are three categories for internships in the EADP program:

Students with NO Professional Work Experience: 48 Hours in Major

Required: Internship Preparation (EADP 4800)

Required: Internship Practicum (EADP 4810) and a 240 hour internship.

Students with Professional Work Experience (but not in EADP field): 45 Hours in Major

Not required: Internship Preparation (EADP 4800)

This change must be approved. Please contact  Dr. Ron Timmons , the EADP Internship Coordinator (Chilton 204J), to request a waiver for EADP 4800.

Students with Three (3) years Professional Work Experience in Emergency Management: 42 Hours in Major

Not required: Internship Practicum (EADP 4810) and a 240 hour internship.

This change must be approved. Please see   Dr. Ron Timmons ,  EADP Internship Coordinator (Chilton Hall 204J) to request a waiver for EADP 4800/4810.

If you choose the 42 hour degree plan, you may not complete an internship for credit.

EADP 4810 (Internship Practicum) is a restricted enrollment course and requires a permission code for registration. You MUST contact the Internship Coordinator prior to your registration date. It is best to acquire your code at least two weeks prior to your registration date. DO NOT wait until the day you are scheduled to register to try to obtain your registration code.

EADP 4800 - Internship Preparation 

During Internship Preparation, students will meet with the internship coordinator to begin arranging their internship. The internship coordinator will assist the student in securing a practicum, but the final responsibility for finding an internship rests with the student.

Enroll in Internship Preparation at least one semester before beginning an internship.

Prerequisites:  Enrollment is restricted to EADP majors who have completed EADP 3010, 3035, and 3045, and consent of the Internship Coordinator.

Topics covered in this course include: career counseling, resume development, professionalism and interviewing skills.

EADP 4810 - Internship Practicum 

Students will meet during scheduled classes to monitor progress, discuss experiences, turn in documentation and resolve concerns. The dates, locations and time for the class will be announced at the beginning of each semester via student email.

Internship Coordinator must approve internship prior to beginning internship. If it is not approved, it will not count.

Pre-requisites: Enrollment is restricted to EADP majors who have completed EADP 4800, 3010, 3035, 3045, plus 3 additional hours of EADP coursework. After a student has arranged for an internship, they must register for Internship Practicum (EADP 4810).

EADP 4810 is a restricted enrollment course and requires a restriction code for registration. You MUST contact the Internship Coordinator prior to registration in order to enroll in this course. It is best to acquire your code at least two weeks prior to your registration date. Do NOT wait until the day you are scheduled to register to try to obtain your registration code.

Obtaining an Internship

Internship opportunities are available with a variety of public agencies and departments, as well as at various levels of government. Students may also serve as interns in the private and nonprofit sectors. Internships complement coursework in the major field with practical, hands on knowledge. Students gain a better understanding of emergency management principles while also obtaining experience, credentials, and identity in the field. EADP internships, therefore, serve a very important step in the student's career preparation and development.

When anticipating an internship, you should begin by thinking about the type of work experience you would like to complete.  For example, consider whether you hope to work in the public, private or nonprofit sector.  Then, narrow the choice further by specific organization (e.g. municipal, state or federal government) and functional area (e.g. planning or response).  The internship preparation course will also help to identify student's strengths and areas of professional interest.  All students enrolled in EADP 4810 must register with Eagle Careers through the UNT Career Center. Students may find an internship searching opportunities posted on Eagle Careers, through networking, and reading professional newsletters.  To qualify for course credit, the internship must be approved by the Internship Coordinator prior to beginning the internship, be related to Emergency Administration and Planning, and supervised by a professional in the field.

If you have any questions about internship requirements or procedures, please contact the Internship Coordinator,  Dr. Ron Timmons.

Internship Waiver Form

Occasionally, students will enter the Emergency Administration and Planning program with professional experience in the field. Students who feel they have a great deal of experience directly related to emergency management can appeal for an internship waiver. Students will need to be able to articulate in a scholarly manner how their full-time professional experiences directly relate to all four phases of emergency management. A faculty committee will carefully review the request. If a student is waived from the internship requirement, their degree plan will be altered.

Additionally, a few students will have sufficient experience in a professional setting although not necessarily related to emergency management. In this situation, students may appeal to be waived from the Internship Preparation class, but still expect to do an internship. In order to be waived from the Internship Preparation Course, students will fill out the Internship Waiver Request. If the student is granted a waiver from EADP 4800, then the student will need to meet with the Internship Coordinator BEFORE accepting an internship for academic credit.