New Staff Laptops - Windows 11 - Local Domain or Intune Managed?

[newpersn]

Hello,

 

Looking at our new staff laptops - and looking if we should move these devices to Intune or keep these on-prem managed. (Would need to rewrite GPO as these are all Windows 10 currently)

 

Just thinking out loud of the bits can i can think of..

 

We use Sims but staff have got desktop in classroom and we could deploy remote app -if needed, (we use RDS anyway)

Sophos AV - Looks like there a script that can be used to deploy via InTune.

Papercut - Follow me print - I assume i can use papercut mobility for staff to print (Not sure how this works at this time)

 

Wireless - I would need to look in to this unless they use a BYOD or if I'm able to import WPA2-Entpreise bits

Other software - I can assume i can install locally when needed (such as 2d Design, Visual studio etc.. )

 

We are moving to the cloud, 1:1 student device scheme in near future, SharePoint for department storage is being used, Very limited bits on site currently. (

 

Any thoughts on the above - I will attach a poll

Edited June 19, 2024 by newpersn

[MrEprise]

If Staff are required to work anywhere (and a number of Schools seem to be going this way) then you need to be able to manage them from anywhere. Imagine a call from a Teacher: "Such and such piece of software is missing from my laptop" and then you shoudl be able to package the application up and send it out to that or other laptops without having to get the Teacher to connect within the School to get the software installed.

[Olliedawg]

Correct answer : InTune (if you have licences for it).

 

We're still on A1 so all of our staff laptops are Domain Joined (Hybrid). We do however use Senso so that allows for remote support / remote scripting to install software etc.

[Roberto]

Intune is a good bet, but I would suggest it needs a bit more planning than it sounds like you have done so far to get a good experience.

[mukz]

We are Hybrid at the moment, our only reason for this is because of PKI and 802.1x

There are ways to achieve it but its too much of a faff in our environment.

 

We are in the process of trialling Cloud PKI so we might be moving fully to Intune (it is definitely the way to go! just not yet for us anyway.)

[rogerdnixon]

Chromebooks here. Where we "need" Windows we manage them directly in the Google Admin console using Google Advanced Desktop Security.

[Rob_D]

I'd say Intune if they're going to be used off-site (which it sounds like they are).

[RichFix]

I would say InTune and Entra/Azure device and user management is the way forward for cloud based solutions which is more cost effective than replacing on-premise hardware and the costs associated with that.

 

If you can utilise everything that the a3 license comes with and have a good business case, I would definitely say to invest in that.