Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question

Windows Enterprise multi-session hosts behave like shared devices. Configuration profiles that must affect all concurrent users must therefore run in the device context, not the user context. Assigning the profile to an Azure AD device group meets this requirement, ensuring that Intune processes the settings once for each session host and that the resulting configuration applies to every user who signs in. If you assign the profile to user groups, Intune will apply the policy in the user context for each signed-in user, causing redundant processing and inconsistent results on multi-session hosts. Dynamic user groups and filters still evaluate per user, so they do not change this behavior.