garethEds Posted June 22, 2017 Posted June 22, 2017 Someone talk to me about inTune for Education - can it save me money? We are fully licensed for W10, we need to move totally over to the Office 365/Hwb ecosystem. Would taking ITfE and Windows 10 be the way forward and ditching our school AD? Is this even making sense? I have the idea... but not sure of the logistics. Gareth - - - Updated - - - For example - we need a mapped drive for SIMS - how would this be configured using inTune For Ed? Can the new School PC Configuration application do this sort of thing without inTune?
CHiLL Posted June 26, 2017 Posted June 26, 2017 I have just done a little Googling of this and I too would like some more info. I'm not sure how it works with AD, I can't imagine it replacing it, as a lot of schools have already incorporated AD and Azure/Office 365. According to Microsoft's info vid about Intune for Education there are '150' settings/restrictions that can be enabled, such as the camera. I don't think it will replace GPO, so I'd be keeping my GPOs in place for drive mappings, etc. We have SCCM implemented to deploy operating systems, Windows updates and applications. SCCM has an 'Intune' section, though it isn't 'Intune for Eduaction'. I can't seem to find any information on whether I should be using the standalone Intune for Education, or use it in SCCM. The pros of the standalone appear to be that you don't need to pay for SCCM and SQL licenses to use it...but we are already paying them. So I'm still unsure which to use.
mavhc Posted June 26, 2017 Posted June 26, 2017 Microsoft want you to scrap your Windows Servers, pay them per everything per day to only use Windows 10, Store Apps, and have hardly any settings, I assume because they're all crazy
abaxter2 Posted June 26, 2017 Posted June 26, 2017 I have purchased Intune for Education. My plan is: All my laptops / tablets will be Azure AD joined and managed via Intune for Education. Desktop Pc's will still be local joined / managened via GPO Will be using Azure Ad connect for SSO. Office 365 will replace remote access. Laptops via Azure AD / Intune for Education are very quick logons (under 20 secs) these devices will be used for Office 365 / internet access / research. I use the setup schools Pc's app to enroll these devices. Resource hungry programs like Adobe suite will be accessed via desktop pc with local lan access to shared drives etc, but of course with SSO will give cloud access. Intune for Education is easy to use but does not have as much control as local GPO BUT and I mean BUT at current Intune for Education is not ready! I have at current 8 support calls open with microsoft, yes we are getting there but there are a number of bugs!
garethEds Posted June 27, 2017 Author Posted June 27, 2017 The main reason I have been looking at this is to save a double log on for users. First logon is onto our curriculum domain, then they have to log onto Hwb/Office 365 with a different set of credentials. I've been told that I can have Windows 10 machines log straight into Office 365/Azure. That is great as it means OneDrive would work better too. HOWEVER - and this is the big one... How do I keep the settings from the school curriculum domain. Nobody seems to be able to give me an answer. We have mapped drives etc. Gareth
CHiLL Posted June 27, 2017 Posted June 27, 2017 The main reason I have been looking at this is to save a double log on for users. First logon is onto our curriculum domain, then they have to log onto Hwb/Office 365 with a different set of credentials. I've been told that I can have Windows 10 machines log straight into Office 365/Azure. That is great as it means OneDrive would work better too. We have ADFS configured, which has SSO enabled and works for users, logged into Windows 8.1/Windows 10 computers using Internet Explorer. We found that when using the default Microsoft login page for Office 365, after the user has entered their email address and clicks into the password field...it would redirect the page to their 'organisation's sign-in page' (which is actually the on-site ADFS server). To cut out this step (as it confused and annoyed a lot of people), we simply changed the shortcut to point to the ADFS server, albeit with a very specific URL which was: https://outlook.office.com/.
mavhc Posted June 27, 2017 Posted June 27, 2017 I just install Azure AD connect, added my email domain as an alias in AD, used bulk ad modify Bulk AD Users - Bulk Modify and pointed users at https://login.microsoftonline.com/?whr=domain.school.uk When they're on the domain it just logs them in automatically.
CHiLL Posted June 27, 2017 Posted June 27, 2017 I just install Azure AD connect, added my email domain as an alias in AD, used bulk ad modify Bulk AD Users - Bulk Modify and pointed users at https://login.microsoftonline.com/?whr=domain.school.uk When they're on the domain it just logs them in automatically. What attribute did you modify?
abaxter2 Posted June 27, 2017 Posted June 27, 2017 As mavhc has said, if you are just after SSO then Azure AD connect is the way to go and just keep using your local network. Intune for Education is for managing devices that are not joined to your local domain.
abaxter2 Posted June 27, 2017 Posted June 27, 2017 What attribute did you modify? UPN Suffixes: https://support.office.com/en-gb/article/How-to-prepare-a-non-routable-domain-such-as-local-domain-for-directory-synchronization-e7968303-c234-46c4-b8b0-b5c93c6d57a7
snagrat Posted June 27, 2017 Posted June 27, 2017 When setting up Azure AD what Sync option do you select? Is it the one that is in Preview for the SSO to work without ADFS?
TechMonkey Posted June 27, 2017 Posted June 27, 2017 Preview SSO doesn't pass through credentials for Office Activation so be wary.
mavhc Posted June 27, 2017 Posted June 27, 2017 I use the preview thing as I don't have ADFS setup, so it's single sign on if you're connected to the domain. It doesn't work perfectly, warn your users to just press the Back button if it fails to log in
mrbios Posted June 27, 2017 Posted June 27, 2017 I have purchased Intune for Education. My plan is: All my laptops / tablets will be Azure AD joined and managed via Intune for Education. Desktop Pc's will still be local joined / managened via GPO Will be using Azure Ad connect for SSO. Office 365 will replace remote access. Laptops via Azure AD / Intune for Education are very quick logons (under 20 secs) these devices will be used for Office 365 / internet access / research. I use the setup schools Pc's app to enroll these devices. Resource hungry programs like Adobe suite will be accessed via desktop pc with local lan access to shared drives etc, but of course with SSO will give cloud access. Intune for Education is easy to use but does not have as much control as local GPO BUT and I mean BUT at current Intune for Education is not ready! I have at current 8 support calls open with microsoft, yes we are getting there but there are a number of bugs! How long does it take for microsoft to activate your InTune for Edu account? Mine has been sat on "We're updating accounts to be able to take advantage of Intune for Education. Please check back again soon." for about a week now...
abaxter2 Posted June 27, 2017 Posted June 27, 2017 (edited) How long does it take for microsoft to activate your InTune for Edu account? Mine has been sat on "We're updating accounts to be able to take advantage of Intune for Education. Please check back again soon." for about a week now... Don't even get me started, it has been shocking! Do you by any chance use Office 365 MDM? if so the reason you are seeing this error is because you will need to allow the standard Intune (Silverlight version) to coexistance with the Azure version, what you will need to do is the following: Open internet explorer (must be in internett explorer) and go to manage.microsoft.com > Admin > Mobile Device Management. Here, you should see “Mobile Device Management Authority" click here and add Intune. It should then read "Set To Microsoft Intune and Office 365" Once I did this and waited 24 hours I was able to sign into Intune for Education. Edited June 27, 2017 by abaxter2 2
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now