Machines Azure AD Joined

[lmrogers]

Afternoon,

 

Just wondering if anyone has managed to get student machines joined to Azure AD and managed through Intune. If you have, how have have you managed to deploy them and how restricted are they computers?

 

Thanks,

[chaplic]

Working on it now, have a few test laptops out there. Intune is very frustrating and limited in terms of ease of management - most of the interesting things I want do, I've had to use a create a powershell script. To give you a feel, here's my current PS scripts

 

[lmrogers]

Yeah, I'm looking at it more. The network manager before me moved all the staff laptops over to Azure AD and they are generally alright, few little bits to sort out. I just want to try and move everything over now so I only have to manage the computers in one place. At the minute he hybrid joined the IT suites so they are applying both GPOs and Intune policies.

 

The only annoying part with the Powershell scripts I've found is that they only ever apply to the machines once but do not re run. So for a login script you would need a script to create a scheduled task to run at login, which is a bit of a pain.

 

Also I have not managed to get the Edition Upgrade policy to work for activating Windows.

[sted]

Yeah, I'm looking at it more. The network manager before me moved all the staff laptops over to Azure AD and they are generally alright, few little bits to sort out. I just want to try and move everything over now so I only have to manage the computers in one place. At the minute he hybrid joined the IT suites so they are applying both GPOs and Intune policies.

 

The only annoying part with the Powershell scripts I've found is that they only ever apply to the machines once but do not re run. So for a login script you would need a script to create a scheduled task to run at login, which is a bit of a pain.

 

Also I have not managed to get the Edition Upgrade policy to work for activating Windows.

 

or simpler instead of just running that script set the initial script to copy your logon script to the users start menu startup folder. cheat

[snagrat]

Working on it now, have a few test laptops out there. Intune is very frustrating and limited in terms of ease of management - most of the interesting things I want do, I've had to use a create a powershell script. To give you a feel, here's my current PS scripts

 

[ATTACH=CONFIG]56655[/ATTACH]

 

Would be interested in your Printer Map script

[snagrat]

Yeah, I'm looking at it more. The network manager before me moved all the staff laptops over to Azure AD and they are generally alright, few little bits to sort out. I just want to try and move everything over now so I only have to manage the computers in one place. At the minute he hybrid joined the IT suites so they are applying both GPOs and Intune policies.

 

The only annoying part with the Powershell scripts I've found is that they only ever apply to the machines once but do not re run. So for a login script you would need a script to create a scheduled task to run at login, which is a bit of a pain.

 

Also I have not managed to get the Edition Upgrade policy to work for activating Windows.

 

I have the Edition Upgrade working. Upgrades from Pro to Education and activates with MAK

[chaplic]

Would be interested in your Printer Map script

 

It's nothing fancy, as we are a small outfit. Drivers are baked into the build, teachers know to add their pin in the printer driver UI to print.

start-sleep -seconds 60
add-printerdriver -name "Sharp MX 4070N PCL6"  -ErrorAction SilentlyContinue
add-printerport -Name "Officeprint:" -printerhostaddress 10.162.123.121 -ErrorAction SilentlyContinue
add-printer -drivername "Sharp MX 4070N PCL6" -portname "OfficePrint:" -Name "Office Printer"  -ErrorAction SilentlyContinue
set-printconfiguration -Printername "Office Printer" -PaperSize A4  -color $false -duplexingmode TwoSidedLongEdge  -ErrorAction SilentlyContinue
add-printerdriver -name "Sharp MX 4070N PCL6"  -ErrorAction SilentlyContinue
add-printerport -Name "StaffPrint:" -printerhostaddress 10.162.123.122  -ErrorAction SilentlyContinue
add-printer -drivername "Sharp MX 4070N PCL6" -portname "StaffPrint:" -Name "Staffroom Printer"  -ErrorAction SilentlyContinue
set-printconfiguration -Printername "Staffroom Printer" -PaperSize A4  -color $false -duplexingmode TwoSidedLongEdge  -ErrorAction SilentlyContinue

Edited February 7, 2020 by chaplic

[free780]

I don't think intune is ready for shared devices. If your willing to adopt a light touch then it can work for 1:1 laptops. I thought it may be good for programming PCs where less restrictions are needed. But there's no GPP. No Remote Control like SCCM and smoothwall can't authenticate against AzureAD.

[chaplic]

Fair criticism. My initial plan was to have by intune/ Azure AD build PC out in the summer, it's still not quite ready yet (admittedly I'm doing it in my spare time, like now) but I've sunk hundreds of hours into it and it's not exactly my first desktop build rodeo.

 

The MS answer for remote control is the teamviewer connector, which tbf is a better answer but chuffing expensive. I have the MS remote access (MSRA) tool just about working to do remote control via seriously hacky methods. Working fine when I launch the powershell script I've written manually, fails when done via intune. no useful logging. Le sigh.