MDM Intune

[T_Lister]

Dear forum,

 

Last year I managed to get two laptops enrolled into Intune MDM without having to upgrade our licensing. I'm not 100% sure how I actually managed to do it, but I did. I am now trying to do it again, but it feels like something has changed? We only have standard A1 licensing, and as a Google school we are not looking to purchase any upgrades. The limited ability I have with Google is to lock out Drive and Sign Out users on GCPW. I think I just signed into the laptop as admin, then added my work account and allowed the Device Management, I also got to this via another settings window which looked familiar, but it denies MDM due to a missing license.

 

Do I now need to purchase something InTune, or is there a free work around so I have the power to lock and wipe Windows devices?

[tmoon-mint]

When you say you enrolled in Intune are you sure you haven't just joined the devices to Azure AD (now called Microsoft Entra).

[T_Lister]

If I do, it's on a page called InTune. Sorry, I've been a bit out of the 365 network since moving jobs to a Google school. Attached screenshot.

 

[NicholasEsping]

If I do, it's on a page called InTune. Sorry, I've been a bit out of the 365 network since moving jobs to a Google school. Attached screenshot.

 

[ATTACH=CONFIG]70423[/ATTACH]

If you don't have A3 or A5 or standalone Intune licenses you will need to have SCCM set up to add devices as co-managed to Intune. That would allow you to use Intune policies without Intune licenses.

[XiJ]

Last time I looked Intune licenses were ~£6 per device per year. Go that route imo. And connect google with 365 (assuming you can still do that with A1 licenses).

[T_Lister]

We do have SCCM setup, so I will go with that first if it involves paying nothing extra. Failing that, then if Intune is as cheap as that then we will consider it.

[T_Lister]

ahh, I have found the error of my ways. The laptop was still on our domain, and it would appear it cannot be on the domain as well as in Intune/Entra. It is now joined.

 

Although... what I hadn't realised with the original two devices, I can only reboot, wipe, format etc. I cannot actually 'lock' the device. Is this correct if it's all done this way for free? Or does setting up SCCM correctly for Azure help in this matter?

[XiJ]

 

Although... what I hadn't realised with the original two devices, I can only reboot, wipe, format etc. I cannot actually 'lock' the device. Is this correct if it's all done this way for free? Or does setting up SCCM correctly for Azure help in this matter?

 

Yes, I believe the Edu A1 license comes with a very small subset of Intune features. It did this when I was looking at enrolling OSX machines at the beginning of the year. For anything really useful you need the full intine license. (Per device)

[NicholasEsping]

ahh, I have found the error of my ways. The laptop was still on our domain, and it would appear it cannot be on the domain as well as in Intune/Entra. It is now joined.

 

Although... what I hadn't realised with the original two devices, I can only reboot, wipe, format etc. I cannot actually 'lock' the device. Is this correct if it's all done this way for free? Or does setting up SCCM correctly for Azure help in this matter?

 

If you have SCCM set up you should be able to set the co-management to use Intune policies. Below is some information on licensing the section on co-management talks about not needing individual licenses if using SCCM.

 

Product and licensing FAQ - Configuration Manager | Microsoft Learn

[DavR]

I was looking at Intune just yesterday, just playing around, with a view of moving staff laptops onto there and seeing where we go in future. Desktops and student devices I'll keep on the domain and under Group Policy for now.

 

Like you we've only got A1 / A1 Plus, and I found that Intune really is too restrictive under those conditions. We'll be looking to bite the bullet and go A3, or buy Intune separately, before we attempt to use it in production I think.

[Olliedawg]

Yes, I believe the Edu A1 license comes with a very small subset of Intune features. It did this when I was looking at enrolling OSX machines at the beginning of the year. For anything really useful you need the full intine license. (Per device)

This is what is stopping me from using InTune at the moment. We're on A1 Edu, very barebones indeed. Lack of configuration is keeping me on local domain joined setups / group policy, even for laptops. ( Don't get me wrong this method works fine, but for mobile devices especially inTune is far superior if you have the licences for it.