Intune

[aac]

Hi all, I am currently in the process of setting up Intune to deploy some new staff laptops. I think I am 90% of the way there now however I am unsure how best to configure our wireless network for these devices which may at times be shared. Are other schools using some level of RADIUS authentication here of just a flat WiFi network. If anyone would be available for a quick chat please PM me and we can exchange numbers. We have a BYOD SSID using RADIUS authentication but I don't want to be faffing about every time a laptops is borrowed or swapped forgetting the SSID because it is logged in as the last person who used it...

[DavR]

We deploy our wireless settings to laptops, and we do this during initial setup (I normally re-image them with a LAN connection, to avoid ever having to have to enter the wifi details manually). For us, that puts all of our Intune laptops on the same SSID.

 

You could put a base wireless policy on, that gives a basic level of access, and then deploy additional wireless policies based on users and groups. But, given how ponderously slow the user-side policies are, I wouldn't rely on it. You could be waiting an hour at a time for the wireless SSID policy to catch up with your change of user.

 

In short, I don't think this is something you'd be easily able to achieve with Intune directly, you'd want another technology to allocate different users different SSIDs. 

 

What are you trying to achieve by putting different laptops on different SSIDs? If it's just different levels of Internet access, does your filtering solution have any AD / AAD group aware features to grant different levels of access?