You administer computers that run Windows 8 Enterprise in an Active Directory domain in a single Active
Directory Site. All user account objects in Active Directory have the Manager attribute populated.
The company has purchased a subscription to WindowsIntune. The domain security groups are synchronized
with the Microsoft Online directory.
You create a Windows Intune group that specifies a manager as a membership criterion. You notice that the
group has no members.
You need to ensure that users that meet the membership criteria are added to the Windows Intune group.
What should you do?

A.
Force Active Directory replication within the domain.

B.
Ensure that all user accounts are identified as synchronized users.

C.
Ensure that the user who is performing the searchhas been synchronized with the Microsoft Online
directory.

D.
Synchronize the Active Directory Domain Service (AD DS) with the Microsoft Online directory.

Explanation:
Add Computers, Users, and Mobile Devices
Reference:
http://technet.microsoft.com/library/hh441723.aspx
For users and security groups to appear in the Windows Intune administrator console, you must sign in to the
Windows Intune account portal and do one of the following:
Manually add users or security groups, or both, to the account portal.
Use Active Directory synchronization to populate the account portal with synchronized users and security
groups.
Windows Intune
The Windows Intune cloud service enables you to centrally manage and secure PCs through a single web-based console so you can keep your computers, IT staff, and users operating at peak performance from
virtually anywhere without compromising the essentialscost, control, security, and compliance.
Reference 2:
http://technet.microsoft.com/en-us/windows/intune.aspx