Intune Configuration Basics

[dsharman]

firstly, i do apologies if this has been asked before.

 

I'm looking at setting up Intune for our school from scratch.

 

I want to avoid just converting all of our GPO's as felt like a fresh start would be best.

 

but I don't know where to start with this, I've made some basic config settings such as i managed to change the timezone, but with there being so many settings and only ever taken on existing AD GPO setups, i don't know exactly what's required to get the usual school settings where students are very restricted down and then staff are still restricted but less so.

 

I'm not expecting to be told everything i need to set as all environments are different, but some pointers as to what settings you typically set would be good.

[Sylv3r]

Here's some Education InTune baselines which might be a good starting point, then just tweak suited to your school environment.

 

Common Education configuration overview - Microsoft Intune | Microsoft Learn

[ThatBoringBloke]

Using the Intune for Education Admin console would be a good place to start. 

It's far simpler to navigate than full blown Intune and lets you start with the basics.

[mridgway]

I originally started with Intune for Education, however, it became apparent that although this was simpler to use, I could not do everything I wanted, and ended up using the full Intune for certain things. At this time, we were only using Intune to Manage our iPads, as we were still on-premise AD for Windows devices.

 

When I come to start deploying Windows devices through Intune, I decided that I was just going to use the full Intune from this point forward. I basically worked my through the documentation to set things up https://learn.microsoft.com/en-gb/intune/

 

Key things for me were making sure Endpoint Security (Defender), Windows Update, Compliance policy were set, and then moving on other configuration policies based on our need, which I continue to add to / update as necessary.

 

I also did a fresh start rather than copying everything over, as this way I did not need to add any policies that were no longer needed and also configure things that were not in use before, but would now be useful in our Intune environment.

[TheHyperTechie]

Have a look at the OpenIntuneBaseline on Github - very useful starting ground for covering the basics in Intune.