iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To target Windows 11 devices with an Intune assignment filter, create a filter for managed devices on the Windows 10 and later platform and build the rule with device.operatingSystemVersion. Add a comparison operator such as -gt or -ge, choose your organization’s version boundary, preview the matches, and then save the filter.
What an Intune OS version filter does
An assignment filter narrows which enrolled, managed devices are eligible for an Intune assignment. In this case, the filter evaluates the operating-system version reported by each device and includes or excludes devices according to the expression you define. It is not a universal “Windows 11” switch and it does not establish a minimum build for every organization. You must state the version boundary that represents your own deployment, support, or rollout policy.
The filter property to use for a new managed-device rule is device.operatingSystemVersion. Microsoft identifies osVersion as deprecated: existing filters that use it continue to work, but new filters using that property cannot be created. Starting with device.operatingSystemVersion avoids building a new rule on the retired property.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Assignment-filter properties are evaluated when a device checks in with Intune. The preview you see while creating the filter is therefore a snapshot of matching enrolled devices at that time, not a permanent promise that the same devices will match after an operating-system update, enrollment change, or later check-in.
#1 Best Overall
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Choose the version boundary before writing syntax
Windows version filtering is only useful when the comparison reflects a clear decision. Decide what the rule is intended to represent before entering an expression:
- Minimum supported version: include the boundary build and anything newer. This normally calls for
-ge(greater than or equal to). - Strictly newer than a baseline: exclude the boundary itself and match only higher versions. Use
-gt(greater than). - Maximum allowed version: include versions up to and including the stated value with
-le(less than or equal to), or exclude the stated value with-lt(less than). - One exact version: use
-eq(equal to). - Exclude one exact version: use
-ne(not equal to).
There is no organization-specific Windows 11 cutoff supplied by the Intune documentation. A feature-release policy, a security baseline, and a pilot ring may all require different boundaries. Record the policy decision in the filter name or description so another administrator can understand why the number was chosen.
Use the documented property and operators
The rule follows the general form ([entity].[property] [operation] [value]). For this task, the entity and property are device.operatingSystemVersion. Microsoft documents these comparison operators for operating-system version values:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Operator | Meaning | Use it when |
|---|---|---|
-eq |
Equal to | You need one exact version value. |
-ne |
Not equal to | You need to exclude one exact value. |
-gt |
Greater than | The boundary itself must not match. |
-ge |
Greater than or equal to | The boundary version should match along with newer versions. |
-lt |
Less than | You need versions below a ceiling. |
-le |
Less than or equal to | You need versions up to and including a ceiling. |
A Microsoft-documented Windows example is:
(device.operatingSystemVersion -gt 10.0.22000.1000)
Rank #2
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
This is an illustrative syntax example, not a recommendation that every Windows 11 deployment should use build 22000.1000. With -gt, a device must report a version higher than the value shown. If the boundary itself should be included, change the operator to -ge:
(device.operatingSystemVersion -ge 10.0.22000.1000)
Keep the value in the version format used by the assignment-filter examples: Windows versions are shown with a 10.0.<build> prefix in this context. Do not substitute a number simply because it appears in a different Intune feature’s documentation.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Create the managed-device filter
The labels in the Intune admin center can change, but the workflow consists of the following operations.
Rank #3
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
- Open the filter workflow. In the Intune admin center, start creating an assignment filter and choose the option for Managed devices. This filter type is the context in which
device.operatingSystemVersionapplies. - Name the filter clearly. Include the purpose and boundary in the name, such as “Windows 11 pilot above 10.0.22000.1000.” A descriptive name is especially important when several rings or servicing policies use different thresholds.
- Select the platform. Choose Windows 10 and later. This is the documented platform selection for Windows device version rules; do not choose a different platform merely because the policy is intended for a particular Windows 11 release.
- Open Rules. Use the visual rule builder if you are entering one straightforward comparison. If you need the full expression, select the syntax editor supplied by the filter page.
- Enter the property. Select or type
device.operatingSystemVersion. Do not use the deprecatedosVersionproperty when creating a new filter. - Select the operator. Choose
-gt,-ge, or another operator according to whether the boundary is exclusive, inclusive, exact, or an upper limit. - Enter the version value. Use the assignment-filter format shown in Microsoft’s examples, such as
10.0.22000.1000, and use the build that your organization has actually selected as its policy boundary. - Review the complete expression. Confirm the parentheses, property spelling, operator, and every digit in the version. A valid-looking rule with the wrong operator can reverse the intended result.
- Preview devices. Choose Preview devices and inspect the enrolled devices that currently match. Check a sample you expect to be included and a sample you expect to be excluded.
- Continue through review and create. Save the filter only after the preview and rule summary agree with the policy you intended to implement.
Rule builder or syntax editor?
| Entry method | Best for | Trade-off |
|---|---|---|
| Visual rule builder | A single property, operator, and version value. | Easier to enter and inspect, but less flexible for advanced expressions. |
| Syntax editor | Administrators who need direct control over the complete expression and parentheses. | More control, but a typo in the property, operator, or value can produce an empty or incorrect match set. |
Microsoft notes that unsupported advanced syntax can disable the basic builder. If the page no longer lets you switch back to the builder, validate the expression in the syntax editor and rely on the preview rather than trying to force it into the visual form. Parentheses, including nested parentheses in advanced syntax, are supported. Properties, operations, and values are case-insensitive, but consistent spelling and capitalization make administrative review easier.
Understand the Windows version prefix
Intune documentation uses different version examples in different feature contexts. Assignment-filter examples for Windows use values such as 10.0.22000.1000. Microsoft’s Windows compliance-settings documentation separately discusses including an 11.0 prefix before build numbers for that compliance-settings context.
Those instructions should not be merged automatically. The compliance-setting prefix guidance does not establish that an 11.0 value belongs in an assignment-filter rule. For an assignment filter, follow the syntax shown for the assignment-filter property itself and verify the result with Preview devices. If the preview is empty or unexpectedly broad, recheck the prefix and the full version value before changing the policy boundary.
Validate what the preview means
The preview answers a narrow question: which enrolled devices match the rule at the moment you create it. It is valuable for catching a reversed operator, a mistyped build, or a device that reports a value different from the one you expected.
Rank #4
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
- Confirm that an intentionally included device appears in the result.
- Confirm that a device exactly at the boundary behaves as intended. It should appear with
-geand not appear with-gt. - Check a device below the boundary and one above it.
- Review whether the devices are enrolled and managed; the filter is not a general inventory query for unmanaged computers.
After the filter is saved, devices can change state. A device that upgrades, rolls back, enrolls, or reports a different version may no longer match. Because Intune evaluates the defined properties at device check-in, allow for the next check-in before judging a later assignment result. The creation-time preview should not be described as a guarantee of every future policy outcome.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Common mistakes and precise fixes
Using osVersion in a new filter
Symptom: You are following an old example or cannot create a new rule with that property. Fix: replace it with device.operatingSystemVersion. Existing filters that use osVersion may continue to function, but Microsoft marks the property deprecated and does not allow it for new filters.
Choosing -gt when the boundary should be included
Symptom: Devices reporting exactly the selected build are missing from the preview. Fix: use -ge when the minimum build itself is supported. Keep -gt only when the policy intentionally starts above that value.
Treating the example build as a universal Windows 11 minimum
Symptom: The filter uses 10.0.22000.1000 without a documented organizational reason. Fix: select a boundary from your own servicing or support policy, state it in the filter description, and describe the Microsoft value as an example rather than a mandatory Windows 11 cutoff.
Best Value
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Copying the 11.0 compliance-setting prefix
Symptom: The rule was copied from a compliance-settings page and the assignment-filter preview does not match expectations. Fix: return to the assignment-filter version format, which Microsoft illustrates with a 10.0. prefix, then preview again.
Skipping preview
Symptom: A policy appears to target too many or too few devices after assignment. Fix: edit the filter, inspect the expression character by character, and use Preview devices with known boundary cases before saving the corrected version.
Maintain the filter as Windows servicing changes
A version filter encodes a point-in-time policy decision. When your supported Windows release changes, create a controlled change: document the new build, decide whether the comparison remains inclusive, update the filter, and preview the expected population. If different deployment rings require different boundaries, use separate descriptively named filters rather than silently reusing one threshold for every assignment.
Keep the original policy rationale with the filter’s description or your configuration records. The numeric value alone does not explain whether it represents a minimum supported build, a pilot gate, a temporary exclusion, or a release-specific requirement. Clear records reduce the risk that a later administrator will “correct” a deliberate boundary because it looks arbitrary.
Quick Recap
A final rule check
- The filter type is Managed devices.
- The platform is Windows 10 and later.
- The property is
device.operatingSystemVersion, not deprecatedosVersion. - The operator matches the boundary decision:
-gtexcludes the boundary, while-geincludes it. - The version uses the assignment-filter example format, such as
10.0.<build>. - The selected build is an explicit organizational choice, not an assumed universal Windows 11 minimum.
- The preview includes and excludes the devices you expect before you create the filter.
- You understand that matching is evaluated again when devices check in.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
