Entra Policy Suite settings · Settings > Device tagging
Also tag a device at once when it changes
| Key | DeviceTagging.RunOnDirectoryChange |
|---|---|
| Where | Settings > Device tagging |
| Type | On / off |
| Default | Off |
| Feature | Device tagging · Community |
| Confirmation | Entra Policy Suite asks you to confirm before it is switched on. |
What it does
Besides the schedule, tag a NEW or CHANGED device within about 5 minutes: only the devices whose rule properties changed (a Graph delta of exactly those properties), not every device.
When enabled
From the next tick, every 5 minutes: the changed devices are tagged in the job's mode (Settings: Device tagging mode); a check that finds no change records no run. The first check only notes where Entra is now.
When disabled
Off (the default): devices are tagged by the schedule only; every scheduled run reads every device, so new ones are picked up there.
Risk and how to reverse it
In a directory with many device changes this is a run every 5 minutes. Reversible: switch it off.
Requires
Admin. 'Device tagging' switched on.
Recommended
Off, unless new devices must be tagged within minutes.
Related settings
- Device tagging DeviceTagging.Enabled
- Device tagging mode (scheduled runs) DeviceTagging.Mode
- Never tag these devices DeviceTagging.ExcludeObjects
Documented for Entra Policy Suite 2.0.107. Written by the Entra Policy Suite team; Invardia publishes it. · All settings · Security review pack