I have an (incorrectly configured) Intune instance I am trying to clean up for a project, currently have a bit of an issue where it appears that most policies were scoped either to all users or all devices.
The goal is to leave the existing managed devices as is (they will get autopilot'd when re-deployed at a later date) and set things up for proper zero touch from this point onwards (leaving the existing assignments as all users/devices is no bueno)
Apart from auditing each profile and making manual group/s for the targeted devices I'm not too sure how to remove the all users/devices assignment on the existing profiles...
Anyone got any ideas?