Exclude a device

Important

The information in this article or section only applies if you have Windows Enterprise E3+ or F3 licenses (included in Microsoft 365 F3, E3, or E5) licenses and have activated Windows Autopatch features.

Feature activation is optional and at no additional cost to you if you have Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) licenses.

For more information, see Licenses and entitlements. If you choose not to go through feature activation, you can still use the Windows Autopatch service for the features included in Business premium and A3+ licenses.

To avoid end-user disruption, excluding a device in Windows Autopatch only deletes the Windows Autopatch device record itself. Excluding a device can't delete the Microsoft Intune and/or the Microsoft Entra device records. Microsoft assumes you manage those devices yourself in some capacity.

When you exclude a device from the Windows Autopatch service, the device is flagged as Excluded so Windows Autopatch doesn't try to restore the device into the service again. The exclusion command doesn't trigger device membership removal from any other Microsoft Entra group, used with Autopatch groups.

Important

The Microsoft Entra team doesn't recommend appending query statements to remove specific device from a dynamic query due to dynamic query performance issues.

To exclude a device:

  1. Sign into the Intune admin center.
  2. Select Windows Autopatch in the left navigation menu.
  3. Select Devices.
  4. Select the devices you want to exclude.
  5. Once a device or multiple devices are selected, select Device actions. Then, select Exclude device.

Warning

Excluding devices from the Windows Autopatch Device Registration group, or any other Microsoft Entra group, used with Autopatch groups doesn't exclude devices from the Windows Autopatch service.

Only view excluded devices

You can view the excluded devices in the Devices report to make it easier for you to bulk restore devices that were previously excluded from the Windows Autopatch service.

To view only excluded devices:

  1. Sign into the Intune admin center.
  2. Select Windows Autopatch in the left navigation menu.
  3. Select Devices.
  4. Select Excluded from the filter list. Leave all other filter options unselected.

Restore a device or multiple devices previously excluded

To restore a device or multiple devices previously excluded:

  1. Sign into the Intune admin center.
  2. Select Windows Autopatch in the left navigation menu.
  3. Select Devices.
  4. Select the devices you want to restore.
  5. Once a device or multiple devices are selected, select Device actions. Then, select Restore excluded device.