Intune - idiots guide

[mdrabble]

Has anyone got an idiots guide to using intune?

 

Starting from scratch and no idea what I am doing as yet.

 

Any help greatly appreciated.

 

Cheers

[mw184]

I started with these to build a base knowledge. Really good modules I found and have lots of good info. Hope these help!

 

Manage devices by using Microsoft Intune - Learn | Microsoft Docs

Manage applications by using Microsoft Intune - Learn | Microsoft Docs

 

There might be more on the Learn site as well, lots on azure etc

[FragglePete]

I've been working my way through the series of videos here at Intune Training: https://www.youtube.com/channel/UCfmMlhX5TW8cicxHw6ExYVA

 

Been very helpful, just more annoying that the Intune interface has changed slightly compared to some of these videos but can generally work it out.

 

I've been impressed with Autopilot and stuff, but just hit a brick wall - I was originally informed P1 was enough to get Intune but it would appear not. Added that primarily for Conditional MFA which is working great, but for Intune I need to give Microsoft even more money. It sort works as is, but not completely but it was enough for me to get an handle on it.

 

Pete

[mw184]

I believe you can get Intune for education for free or a discounted price. Not 100% sure how it works as we went to the full Intune when we realised we needed more as well. Not sure which way we went to get it though as my boss set all of the licencing up etc. Might be worth a look at Intune for Education though

[mdrabble]

I've signed up for the trial so I can look at managing some student laptops which will be going off site.

 

Did look at AOVPN but if they dont have internet then not much use to them.

 

Once I've has a play I may look at purchase licences which I have already costed thanks to @VeryPC

Edited November 24, 2020 by mdrabble

[TomFreeman]

One of my colleagues in the process of doing this at the minute, and has got quite far. He's stuck on blocking powershell though, got a ticket open with Microsoft for it. Regedit / CMD etc all blocked ok but not powershell.

 

Just a heads up for anyone buying licenses, student licenses are free with staff licenses, which is a cheaper way of doing it.

[computer_expert]

Regedit / CMD etc all blocked ok but not powershell.

 

 

How are you doing that out of interest? Script to push a registry key or via config profiles?

[TomFreeman]

How are you doing that out of interest? Script to push a registry key or via config profiles?

 

He's trying to do it by script at moment.

 

Just as an update Windows version 2004 if you have imported device via hardware hash, it automatically enrols the device first turn on and removes the sign in with a personal account.

[Disease]

I bought Intune on my EES agreement cost around £600 quid for the year with unlimited devices based on number of FTE staff. I used it to manage the 100 odd iPads we got from the DfE but will look to do more with it later.

[mdrabble]

Just looking at intune training videos and come up across a section which talks about MDM Authority - but when I look on my intune portal, I cannot find it.

 

Has this been removed?

 

Cheers

[mdrabble]

Scratch that..... looks like it got set to Intune as the MDM Authority by default.

 

Next question..... Intune AD Connector...... yes or no??

[FragglePete]

Scratch that..... looks like it got set to Intune as the MDM Authority by default.

 

Next question..... Intune AD Connector...... yes or no??

 

I believe not - that's the advice given on the series of videos I mentioned in a previous post. It can just confuse matters if you start mixing in AD Policies with Intune Profiles - that's what I understood anyway.

 

I've just put the order in to get Intune added to our tenant - would have worked out better value if I got A3 in the first place, but I'll sort that out next year at renewal.

 

Pete

[Edu-IT]

I believe not - that's the advice given on the series of videos I mentioned in a previous post. It can just confuse matters if you start mixing in AD Policies with Intune Profiles - that's what I understood anyway.

 

I've just put the order in to get Intune added to our tenant - would have worked out better value if I got A3 in the first place, but I'll sort that out next year at renewal.

 

Pete

A3 is £60 per user, per year. Is this really the cheapest way to get Intune?

[snagrat]

Intune alone is about £6 per Staff per year on OVS-ES

[sparkeh]

Scratch that..... looks like it got set to Intune as the MDM Authority by default.

 

Next question..... Intune AD Connector...... yes or no??

 

If you are using Autopilot then you need it to join the device to the domain. If not then you don’t need it.

[DrCheese]

If you are using Autopilot then you need it to join the device to the domain. If not then you don’t need it.

 

Yea I've not bothered with it for 99% of our machines - If you join an Azure AD only joined machine to the domain as well (Hybrid), you need LOS(line of sight) to a DC during enrollment & for first sign in of any user that hasn't logged onto the device before.

[Edu-IT]

Intune alone is about £6 per Staff per year on OVS-ES

Thanks. That seems a cheaper way of doing it then. Do you have the part code?

[snagrat]

Thanks. That seems a cheaper way of doing it then. Do you have the part code?

 

FYS-00001 for the Faculty user. Reseller price 47p per month.

 

Then you can order FYT-00002 as the student advantage ones. You can generally order as many of these as you like and they all go into Office 365 as one product.

Edited January 17, 2021 by snagrat

[FWBD]

We're looking at going to Intune as an alternative to using MDT (Which I just got my head around!) as we are currently using it to manage all our iPads. Managing iPad's seems straight forward enough and we've slowly moved most of our fleet over from Lightspeed.

 

The trouble I have currently is getting my head around setting up Autopilot. I need to rewatch some of the training videos but has anyone else moved to Intune to replace hte likes of MDT/WDS?

 

I think once it's clicked in my head it will make sense but trying to get anything to stick during this lockdown is a chore!

[Katy]

We're looking at going to Intune as an alternative to using MDT (Which I just got my head around!) as we are currently using it to manage all our iPads. Managing iPad's seems straight forward enough and we've slowly moved most of our fleet over from Lightspeed.

 

The trouble I have currently is getting my head around setting up Autopilot. I need to rewatch some of the training videos but has anyone else moved to Intune to replace hte likes of MDT/WDS?

 

I think once it's clicked in my head it will make sense but trying to get anything to stick during this lockdown is a chore!

We're moving to Intune for staff devices once we replace desktops with... something portable. I did a couple of blog posts on Intune earlier in the year which, if the mods don't mind, I'll link here.

 

https://katystech.blog/2020/12/intune-part-1-autopilot-win10/

 

https://katystech.blog/2021/01/intune-part-2-autopilot-win10-applications/

 

(Won't bother linking Part 3 as that's iPads and you seem to already have that covered)

[rpain]

Katy - your guide is excellent. Thank you for taking the time to produce it.

 

Richard

[Katy]

We're moving to Intune for staff devices once we replace desktops with... something portable. I did a couple of blog posts on Intune earlier in the year which, if the mods don't mind, I'll link here.

 

Forgot to say - the key to this is to not need your devices to talk to local AD. You can hybrid AAD join them but it's worth the effort if you can to push everything so that it works as just pure Azure AD joined - the only thing we have in the way of this was printing but that's fixed by using Universal Print (and PaperCut has a UP connector, currently in beta requiring you to mess about with a configure.exe console program, but they're working it into the UI for 21.0).

 

Documents: Cloud (OneDrive)

Shared stuff: Cloud (Teams/SharePoint)

MIS: Cloud (iSAMS, or any other web based MIS)

 

Katy - your guide is excellent. Thank you for taking the time to produce it.

Thanks a lot it keeps me busy whilst my other half is playing warships and his other games

[mdrabble]

@Katy have you done anything about Intune and Always on VPN?

 

I'm currently struggling sorting out Certificates for devices etc - especially as they are not domain joined.

[Norphy]

The way I've done it is with a NDES server, which uses SCEP (Simple Certificate Enrolment Protocol) to acquire certificates.

 

https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure

 

This works for iOS, Android and Windows

[Katy]

@Katy have you done anything about Intune and Always on VPN?

 

I'm currently struggling sorting out Certificates for devices etc - especially as they are not domain joined.

Not something I've looked at - It's on my list of things to try out on my home domain/tenancy (I don't think I can configure Always on VPN for work due to the way our forest is set up - and we don't have any on-prem only services any more so no need for it.)