AD to Intune move

[petben]

Hello, we are looking to hand out staff laptops, have classroom docking, and move to Intune for all our devices. We currently have some Intuned SLT laptops that get used as 1-1 devices, and a small bank of loan laptops which work OK, but I am concerned to move all our multi-user IT rooms, losing our rock solid, easily managed AD environment to Intune which (in my limited experience) is a slow to respond, more difficult to troubleshoot etc.

 

So a few thoughts:

- Is Intune fit for purpose for multi user devices? Each IT room computer has potentially 1500 users.

- Does educational software deploy/work happily - Cubase, Adobe CC, Sibelius etc.

- Has the distribution and move to laptops for teachers, docking stations in classrooms been an easy move?

- How do you decide who has a school supplied laptop? We are thinking that school systems can only be accessed on school supplied devices. So no laptop means no 365 email from home for example.

- Is the insecurity of AD a driving factor?

 

Thanks for any thoughts

[FN-GM]

One major issue that you will face with InTune is the policies don't apply on first login like they do with AD. You will need to wait or manually sync, then reboot. I can't see how this can work in an IT suite.

 

In terms of app deployment, if you can do it in SCCM you can do it in InTune.

 

It is one of the big downsides with InTune

[ITGuyNW]

Plenty of others will have more experience of this than me however when I have looked into it, Intune is fine for 1:1 devices, where changes are minimal however it really isn't good enough for shared devices or wanting to make sudden changes. At this stage, I'd never consider moving my shared PCs to Intune.

[foofighterjim]

Intune is fine but you basically need to forget about user level policies, settings need to be at the device level for them to be applied reliably. So, shared devices can work without a problem, but everyone that uses them will have the same policies apply, in our scenario this lead to two device types; staff and students.

[petben]

If we move completely to Intune has anyone kept a couple of onsite servers but got rid of AD? Can servers like this even go in Azure?

[ITtech95]

One major issue that you will face with InTune is the policies don't apply on first login like they do with AD. You will need to wait or manually sync, then reboot. I can't see how this can work in an IT suite.

 

In terms of app deployment, if you can do it in SCCM you can do it in InTune.

 

It is one of the big downsides with InTune

 

What's the length of the waiting period? I'm surprised that a newer SAAS such as intune has a wait period which "older legacy" AD does instantaneously.

[ITtech95]

Intune is fine but you basically need to forget about user level policies, settings need to be at the device level for them to be applied reliably. So, shared devices can work without a problem, but everyone that uses them will have the same policies apply, in our scenario this lead to two device types; staff and students.

 

This is encouraging to hear as we will be deploying InTune soon and have 1:1 laptops for staff members & shared laptops for students. You're saying to forget user level policies, does this include installation as well which only apply to a users first logon? E.g. Computer Science student whom logs in to find that Visual Studio 2022 is installed.

[foofighterjim]

This is encouraging to hear as we will be deploying InTune soon and have 1:1 laptops for staff members & shared laptops for students. You're saying to forget user level policies, does this include installation as well which only apply to a users first logon? E.g. Computer Science student whom logs in to find that Visual Studio 2022 is installed.

 

Effectively yes, everything at the device level. You could look into using Company Portal to allow users to pull a specific application to a device but that really is geared more towards the 1:1 devices.