I was recently helping out a customer who wanted to manage Android mobile devices using Endpoint Manager for users in China. What is different from managing Android mobile devices for users in China and out of China? There is a significant difference and it is due to the services available on an Android mobile device that is required for managing the devices using Microsoft Intune. Microsoft Endpoint Manager provides 2 ways of protecting the mobile devices which are MAM-WE (Application management without enrollment) and Device enrollment (MDM). Following are some of the major differences between MDM vs MAM (app protection policies): MDM (Mobile Device Management) MAM(Mobile Application Management) Enroll devices Publish Apps Provision settings, certs, profiles Configure and update apps Auto install apps Secure corporate data within mobile apps Report and messure device compliance Report app inventory and usage Remove corporate data Remove corporate data Reset device Remote wipe (Corporate … Read More
How to use Windows Update for Business with Intune
Windows Update for Business is one of the new things Microsoft proposed along with Windows 10. It has come a long way since it’s release. Even if it isn’t perfect yet, or give all the flexibility that ConfigMgr (MEMCM) offer when managing monthly update or feature release, for many small/medium business, this brings a more simple approach to patching and maintaining Windows 10 up to date. In this post, we will detail how to configure Intune Windows Update for Business to patch Windows 10 devices managed by Intune Pre-requisites Windows 10 must be managed by Intune If Windows 10 is being co-managed with ConfigMgr(MEMCM), make sure the slider for Software Update is set to Intune Intune Windows Update Business – Update rings strategy Depending on multiple factors, the key for Windows Update for Business to be successful is to define the various update rings for your enterprise. Here, no magic … Read More
How to configure Delivery Optimization with Intune
Microsoft has been hard at work to optimize content delivery since the release of Windows 10 and Office 365. While not perfect at the beginning, the offer is now really great and offer many supported methods to ease the huge content that needs to be distributed month after month. Delivery Optimization is a key component included in Windows 10 since the beginning and recently added to Office 365. Combining Delivery Optimization Intune with Windows update for business will greatly help content download from the Internet. In this post, we will provide details to configure Delivery Optimization for Windows 10 and Office 365, by using Microsoft Intune. This post is part of a series on Windows Autopilot that will be published in the following weeks. In the next posts, we will cover the following subjects : Getting started with Windows Autopilot | Step-by-step guide How to deploy Win32 Applications in Microsoft … Read More
How to configure Windows Analytics with Log Analytics
Windows Analytics is the suite name following the original release of Upgrade readiness. The suite adds Device Health and Update Compliance under the same roof. Depending on the environment each sub-product will provide key information for end-user computer admins. Windows Analytics and Log Analytics is better together! Upgrade readiness can help assess applications and drivers compatibility prior to migrate from Windows 7/8.1 to Windows 10, or even from one Windows 10 build to another. Device Health provides extra information for admins to review various crash within their environment. Update compliance provides a way to track how updates and upgrades are doing in the environment. This will be particularly useful when mixed with Windows Update for Business. All of the Windows Analytics features sit on Log Analytic from Azure. Previously it was possible to host the data in OMS. OMS as retired and it is possible to move it into Log … Read More
How to deploy Office 365 with Intune
As part of a move away from standard OS deployment with SCCM toward Windows Autopilot with Intune, one of the usual key component is managing the installation of Office 365. Intune provides a built-in way of creating the application. While the end result will remain the same as other methods of installing Office 365, one of the great benefits of using this method is that it can automatically install the latest build available for the chosen channel, without a need for administrative modifications. In this post, we will detail how to prepare Office 365 application with Intune. This post is part of a series on Windows Autopilot that will be published in the following weeks. In the next posts, we will cover the following subjects : Getting started with Windows Autopilot | Step-by-step guide How to deploy Win32 Applications in Microsoft Intune How to customize Windows 10 with Microsoft Intune … Read More
How to join Autopilot devices to Hybrid AD
In our previous post, we covered how to set up computers using Windows Autopilot. While the main scenario is to join computers to Azure AD, leaving the on-prem domain aside is for sure not realist in many cases. Microsoft has added the ability to join the On-prem domain as part of the Autopilot setup. This feature is still currently in Preview, but worth testing and checking it out. In this post, we will detail the requirements and how to configure Azure and on-prem AD to allow Hybrid AD to join computers. Intune Autopilot Hybrid AD joined computers allows seamless integration. This post is part of a series on Windows Autopilot that will be published in the following weeks. In the next posts, we will cover the following subjects : Getting started with Windows Autopilot | Step-by-step guide How to deploy Win32 Applications in Microsoft Intune How to customize Windows 10 … Read More
Windows 10 Intune and Autopilot Customization
With the latest updates Microsoft released to Intune and Autopilot, it is becoming more realistic to leave the task sequence behind in favour of using Autopilot with Intune to deliver the computer standards required by an enterprise. While it will not be possible for all scenarios, a standard PC used for administrative tasks can be delivered with many, if not all, of the required windows 10 intune autopilot customization. While many of our previous Windows 10 Customization tricks are still gonna be useful, the delivery will be different from simply running various scripts from a Task Sequence. In this post, we will go over multiple Windows 10 customization all done with Intune in order to leverage Windows Autopilot. The ultimate goal is to be able to replicate a standard deployment made with a Task sequence from SCCM or MDT This post is part of a series on Windows Autopilot that … Read More
Getting Started with Microsoft Autopilot and Windows 10| Step-by-Step Guide
Since the announcement of Windows Autopilot there has been a lot of interest and questions about how it actually works, will it blend easily in our environment, etc. While at the beginning there was some major drawback compared to what a Task sequence’s configured computer can deliver, with the latest updates to the service, it is now a good time to start your journey with it. In this post, we will detail all the requirements and how to set up an environment for Microsoft AutoPilot and Windows 10 devices. This post is part of a series on Windows Autopilot that will be published in the following weeks. In the next posts, we will cover the following subjects : Getting started with Windows Autopilot | Step-by-step guide How to deploy Win32 Applications in Microsoft Intune How to customize Windows 10 with Microsoft Intune and Autopilot How to join Autopilot devices to … Read More
How to help Intune users Using Intune Troubleshooting Portal
The Intune troubleshooting portal can be used by Intune administrators to view information about a specific Intune user. It can be used to troubleshoot many problems for example, licensing problem, the devices assigned to a user, details about enrollment issues, compliance issues, app installation failure and much more. The Intune Troubleshooting portal can also give suggested remediation steps to resolve issues. You need at least the HelpDesk Operator role (RBAC) to use the troubleshooting portal. How to use the Intune Troubleshooting Portal Go to your Azure portal Select Microsoft Intune On the Intune pane, in the Help and Support section, select Troubleshoot On the left, click Select to select a user to troubleshoot Select a user, click Select at the bottom Once your user is selected, you can view the full dashboard for this device Let’s see what every section covers : #1 – Account Status Shows the status of the current Intune tenant as Active or Inactive #2 – User Status Shows the status of the user’s … Read More
Step-by-Step SCCM 1806 Upgrade Guide
It is now time to plan the migration of your SCCM Current Branch environment since Microsoft releases a new version of SCCM Current Branch. If you want to receive the latest updates, this post is a complete step-by-step SCCM 1806 upgrade guide. If you’re looking for a comprehensive SCCM installation guide, see our blog series which covers it all. You won’t be able to install 1806 if you are running SCCM 2012, the baseline version is 1802. To install SCCM 1806 as an update, you must have installed at least SCCM 1706, SCCM 1710 or SCCM 1802. Keeping your infrastructure up to date is essential. You can benefit from the new features and fixes issues, which some of them can be related to your SCCM. It’s also easier to upgrade to the latest version since Microsoft has implemented the new model of update servicing which is the in-console upgrade. SCCM 1806 New … Read More