W11 S Mode for InTune

[Warwick_Tech]

Hi All,

 

Looking for advice and opinions -

 

We've recently been tinkering with InTune and rather than essentially re-inventing the wheel and creating a load of lockdown policies for student devices (The import from GPO feature is good, but limited) how does everyone feel about S-Mode?

 

We've dabbled in the past and found it great for PRU, and arguably as tech becomes more cloud based this seems like a logical step - granted with InTune you can add web shortcuts and even some Win32 apps (apparently) so that covers AV, maybe even Chrome, though since Edge when chrome based it's a lot better -

 

What are peoples thoughts? Mobile devices in S Mode, desktops still in full 'fat' mode

[NicholasEsping]

I used S Mode with Windows 10 from 2017 until switching to Windows 11 over the summer. Traditional S Mode is no longer a thing with Windows 11 you can look into Windows 11 SE but you will need to purchase new devices that come pre loaded that way. When we made the switch to Windows 11, we implemented WDAC and replicated the S Mode settings. We did loosen things up a little by adding IME as a managed installer to allow for easier application installs. Overall, I would highly recommend using WDAC on student devices but there is a pretty significant learning curve.