InTune - Where to start

[Warwick_Tech]

I've been hearing great things about inTune and wanted to get some 'boots on the ground' opinions;

 

* Do you use it with AD/GPO, more traditional security?

* Do you do staff and student devices?

* Do you purchase the kit, or can anyone setup a laptop (how?)

* What are the pitfalls for device management?

* What will it essentially do for us that an OEM straight out the box won't?

 

I figure InTune is the next big thing, but as with most MS products you either know if and like it, or you don't and it's got a mess of settings\costs\licences to configure

 

Can I get some honest opionions on use and setup?

[TechMonkey]

Part of the problem is it can do so much and when you get it, it is just a framework so very daunting. So we started using it for mobile phones, to set security. We then added in policies for personal devices, to make sure they had a PIN and the like. Now we have built some devices to it.

So to answer your questions:

1) No use it as standalone.

2) Staff and Student

3) We have a mix of both, personal devices are listed if they have accepted to our security baseline.

4) Most pitfalls are due to the change in mental model. Everything can be set as device or user and it isn't as well laid out, so if you find a device you then can't see easily (that I have found) what groups it is in, so troubleshooting or reverse engineering is trickier.

5) Should mean easier to deploy. So some laptops I have rebuilt today just joined the AAD and everything spooged down with barely any input from me. If I got it completely right I should be able to give a brand new laptop to someone and they get to open it turn it on and it would join our Azure domain and they get to choose things like language and keyboards.

[BroganOs]

I was in a similar position when I first started using it. There is so much you can do with it. Unfortunately I took the feet first figure it out as I go along approach and made some annoying enrollment errors that I can’t change now.

 

So I found a cheap Intune course on Udemy to give me a general overview of it. Then I started following these guys.