Intune Assignment Filter Not Working: A Read-First Filter Evaluation, Include/Exclude, and Property Triage

Helpdesk: "We put an assignment filter on the Wi-Fi profile so only corporate Surface devices get it. Half the Surfaces still don't have Wi-Fi, and the other half of the fleet somehow got the profile