Microsoft Intune Suite - All You Need to Know in 30mins

TL;DR

Learn how to get started with Microsoft InTune, a suite for managing mobile solutions, with a step-by-step guide and demos.

Transcript

in this week's episode we're going to take a look at the all updated and shiny Microsoft InTune suite for managing your entire mobile solution how does it work and most importantly how do you get started well you've come to the right place check it out hello there how are you Andy Malone Microsoft MVP so nice to see you and welcome back to my chann... Read More

Key Insights

• 📱 Microsoft InTune has undergone significant changes in the past year, necessitating an updated guide on getting started with the suite.
• 🏢 In order to connect devices to Microsoft Azure Active Directory, users need to go to the device settings and specify the configurations for device joining and device registration.
• 🔐 Switching on Azure Multi-Factor Authentication is considered good practice for device registration to enhance security, and users can specify the maximum number of devices allowed per user.
• 🖥️ Joining a Windows 11 workstation to Azure Active Directory involves going to the Windows settings, selecting the "Access work or school" option, and providing the necessary credentials for Azure AD join.
• 🔗 Seamless single sign-on is possible with Azure AD join, allowing users to sign into Microsoft 365 without being prompted for credentials and enabling access to services like Office.com.
• 💼 In the Microsoft 365 admin portal, administrators can view the devices that have been registered in Azure AD and their details, but managing the devices in InTune requires additional configuration and the correct license.
• 🗄️ InTune allows for multi-platform device management, including Windows, Apple, and Android devices, and offers various features such as creating compliance policies, configuring user profiles, and managing device restrictions.
• 📊 InTune provides comprehensive reporting capabilities, allowing administrators to generate reports on device compliance, security, and other relevant metrics, providing valuable insights into the managed devices.

Questions & Answers

Q: How can users join devices into Microsoft Azure Active Directory?

Users can join devices into Microsoft Azure Active Directory by going into the Azure Active Directory admin center, accessing the device settings, and enabling users' ability to join devices. The settings can be customized to allow specific user groups or all users to join devices.

Q: What is the difference between Azure AD join and Hybrid Azure AD join?

Azure AD join refers to joining a device directly to Azure Active Directory, while Hybrid Azure AD join allows devices to be connected to both Azure Active Directory and a local Active Directory domain. The level of manageability may differ between the two join types, with the full functionality of InTune requiring additional configuration for Hybrid Azure AD join devices.

Q: How can administrators configure user profiles and device profiles in Microsoft InTune?

User profiles can be configured through the Enterprise State Roaming feature in Azure Active Directory, allowing users' desktop settings and configurations to roam across devices. Device profiles can be created through configuration policies, enabling administrators to manage computer settings and apply restrictions. Compliance policies can also be set to ensure devices meet certain security requirements.

Q: What is the role of Apple's DEP (Device Enrollment Program) in Microsoft InTune?

Apple's DEP is used in Microsoft InTune to streamline the enrollment and management of Apple devices. By joining the DEP program and obtaining a push certificate, organizations can deploy configuration settings, compliance policies, and apps to a large number of Apple devices with zero-touch installation. This simplifies the onboarding process for users and ensures consistent settings across devices.

Answer: The video tutorial provides a comprehensive guide on getting started with Microsoft InTune, covering Azure Active Directory setup, device enrollment, user and device profile configuration, compliance policies, and reporting capabilities. It offers step-by-step demonstrations and explores various features and settings in Microsoft InTune. Whether you're new to InTune or looking to update your knowledge, this video provides a valuable resource for understanding and implementing mobile device management solutions.

Summary & Key Takeaways

• The video provides a step-by-step guide on getting started with Microsoft InTune, covering configuration settings and device management.

• The first part focuses on setting up Azure Active Directory and configuring device settings, such as joining devices, enabling Azure multi-factor authentication, and managing local administrator passwords.

• The second part demonstrates joining a Windows 11 workstation to Azure Active Directory and how seamless single sign-on works. It also explores device management and viewing enrolled devices in the Microsoft 365 admin portal.

• The third part introduces the concept of user profiles and device profiles in Azure Active Directory, including managing user and computer settings through group policies and configuration profiles.

• The video also touches on mobile device restrictions, compliance policies, and reporting capabilities in Microsoft InTune.