{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "slug": "dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation", "url": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/" }, "title": "Capture the actual Zebra LifeGuard deployment population at creation", "summary": "Will later changes to an Intune group alter an already-created Zebra LifeGuard deployment?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:30:04+00:00", "modified_at": "2026-09-10T00:52:38+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 1, "word_count": 207, "potentially_affected": "Use this check when scheduling or auditing an Intune-integrated Zebra LG OTA deployment. Confirm service enrollment and device eligibility before treating current group membership as the target list.", "dse_recommendation": "Retain the eligible device population at creation alongside the deployment identifier.", "primary_source": { "name": "Zebra LifeGuard Over-the-Air Integration with Microsoft Intune - Microsoft Intune | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/device-updates/android/setup-zebra-lifeguard", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Intune sends eligible Zebra devices to LifeGuard OTA when the deployment is created. Devices added to the assigned group afterward are not included. Removing a device from the group afterward may not prevent its update. These deployments cannot be edited after creation. A deployment for later additions must be created separately. Microsoft Learn.

\n

Applicability

\n

Use this check when scheduling or auditing an Intune-integrated Zebra LG OTA deployment. Confirm service enrollment and device eligibility before treating current group membership as the target list.

\n

DSE recommendation

\n

Retain the eligible device population at creation alongside the deployment identifier. Plan a separate reconciliation for devices enrolled later, and handle removal requests as a deployment-control issue rather than a group-edit shortcut. Have the operations owner approve the captured population before a future-dated deployment is submitted.

\n

Verification

\n

Compare the submitted population, present group members, and device-level deployment results. In an authorized pilot, distinguish a later-added device from one included at creation, without relying on a production firmware downgrade for testing. Resolve any removal request against the actual deployment state. Preserve device identifiers and observed firmware outcomes so a later auditor can explain why current membership differs from the machines processed.

\n

Official references

\n

Microsoft Learn: Zebra LifeGuard Over-the-Air Integration with Microsoft Intune.

", "content_text": "Source facts\nIntune sends eligible Zebra devices to LifeGuard OTA when the deployment is created. Devices added to the assigned group afterward are not included. Removing a device from the group afterward may not prevent its update. These deployments cannot be edited after creation. A deployment for later additions must be created separately. Microsoft Learn.\nApplicability\nUse this check when scheduling or auditing an Intune-integrated Zebra LG OTA deployment. Confirm service enrollment and device eligibility before treating current group membership as the target list.\nDSE recommendation\nRetain the eligible device population at creation alongside the deployment identifier. Plan a separate reconciliation for devices enrolled later, and handle removal requests as a deployment-control issue rather than a group-edit shortcut. Have the operations owner approve the captured population before a future-dated deployment is submitted.\nVerification\nCompare the submitted population, present group members, and device-level deployment results. In an authorized pilot, distinguish a later-added device from one included at creation, without relying on a production firmware downgrade for testing. Resolve any removal request against the actual deployment state. Preserve device identifiers and observed firmware outcomes so a later auditor can explain why current membership differs from the machines processed.\nOfficial references\nMicrosoft Learn: Zebra LifeGuard Over-the-Air Integration with Microsoft Intune.", "content_markdown": "## Source facts\n\nIntune sends eligible Zebra devices to LifeGuard OTA when the deployment is created. Devices added to the assigned group afterward are not included. Removing a device from the group afterward may not prevent its update. These deployments cannot be edited after creation. A deployment for later additions must be created separately. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/device-updates/android/setup-zebra-lifeguard).\n\n## Applicability\n\nUse this check when scheduling or auditing an Intune-integrated Zebra LG OTA deployment. Confirm service enrollment and device eligibility before treating current group membership as the target list.\n\n## DSE recommendation\n\nRetain the eligible device population at creation alongside the deployment identifier. Plan a separate reconciliation for devices enrolled later, and handle removal requests as a deployment-control issue rather than a group-edit shortcut. Have the operations owner approve the captured population before a future-dated deployment is submitted.\n\n## Verification\n\nCompare the submitted population, present group members, and device-level deployment results. In an authorized pilot, distinguish a later-added device from one included at creation, without relying on a production firmware downgrade for testing. Resolve any removal request against the actual deployment state. Preserve device identifiers and observed firmware outcomes so a later auditor can explain why current membership differs from the machines processed.\n\n## Official references\n\n[Microsoft Learn: Zebra LifeGuard Over-the-Air Integration with Microsoft Intune](https://learn.microsoft.com/en-us/intune/device-updates/android/setup-zebra-lifeguard)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "url": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Capture the actual Zebra LifeGuard deployment population at creation", "item": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "url": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/", "headline": "Capture the actual Zebra LifeGuard deployment population at creation", "description": "Will later changes to an Intune group alter an already-created Zebra LifeGuard deployment?", "abstract": "Will later changes to an Intune group alter an already-created Zebra LifeGuard deployment?", "articleBody": "Source facts\nIntune sends eligible Zebra devices to LifeGuard OTA when the deployment is created. Devices added to the assigned group afterward are not included. Removing a device from the group afterward may not prevent its update. These deployments cannot be edited after creation. A deployment for later additions must be created separately. Microsoft Learn.\nApplicability\nUse this check when scheduling or auditing an Intune-integrated Zebra LG OTA deployment. Confirm service enrollment and device eligibility before treating current group membership as the target list.\nDSE recommendation\nRetain the eligible device population at creation alongside the deployment identifier. Plan a separate reconciliation for devices enrolled later, and handle removal requests as a deployment-control issue rather than a group-edit shortcut. Have the operations owner approve the captured population before a future-dated deployment is submitted.\nVerification\nCompare the submitted population, present group members, and device-level deployment results. In an authorized pilot, distinguish a later-added device from one included at creation, without relying on a production firmware downgrade for testing. Resolve any removal request against the actual deployment state. Preserve device identifiers and observed firmware outcomes so a later auditor can explain why current membership differs from the machines processed.\nOfficial references\nMicrosoft Learn: Zebra LifeGuard Over-the-Air Integration with Microsoft Intune.", "datePublished": "2026-09-10T00:30:04+00:00", "dateModified": "2026-09-10T00:52:38+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-112-capture-the-actual-zebra-lifeguard-deployment-population-at-creation/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Capture the actual Zebra LifeGuard deployment population at creation" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 207, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Zebra LifeGuard Over-the-Air Integration with Microsoft Intune - Microsoft Intune | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/device-updates/android/setup-zebra-lifeguard" } } ] } }