Microsoft Intune Suite The Essential Beginners Guide

In this session, Join me as I take you on a journey inside Microsoft Intune which is perfect for both beginners and seasoned Microsoft 365 IT Pro’s alike. We’ll discuss not simply what a Mobile Device Management (MDM) Platform is, but also how to configure it and how to get the most out of it. I’ll also show you how to join and manage devices and configure them. Finally we will discuss how to deploy apps as well as protecting them with device and compliance policies. So if you’re ready to learn all things Intune, then this is a session that you’ll not want to miss out on.
Visit me at Andymalone.org
Timecodes
00:00 Session Introductions
01:45 Intune device Management Core Skills
08:05 Joining a Windows 11 Device to Intune
10:28 Device management Management Options
13:59 Device Profiles & More
19:45 Compliance Policies
25:30 what about Apps?
27:54 EndPoint Security
29:49 Session conclusions

[@Clemcouanouz]

Excellent ! I'm swtiching to the IT as a Beginner after 9 years of IT sales and Coordination, you help me so much with your tips and high quality training !

[@johnmamuchmamuchjohn]

"Stay Tuned, you're going to learn something" Made me smile. Let's get learning!

[@Dwan5150]

Thanks Andy, I'm looking forward for more Intune videos.

[@AndyMaloneMVP]

My pleasure 👍😊

[@blackavalon508]

You saved my life! I changed from a really standardized environment to Intune and it has been a huge pressure to take all that responsability

[@AndyMaloneMVP]

Awesome thanks 👍

[@Strokecity1]

Excellent walkthrough. I certainly learnt a lot. Well done and thank you!

[@AndyMaloneMVP]

Glad it was helpful!

[@keithjenkins6232]

I would love to see a video explaining the process of moving devices, like laptops, from being managed by an on prem Configuration Manager to the cloud based InTune. Our district has thousands of laptops that are a still controlled/managed by Configuration Manager. I've tried researching this move process, but either the info is outdated or forums state "it can't be done in an automated way." I would prefer to use the Fresh Start method of cleaning laptops compared to re-imaging them! Any thoughts or guidance?

[@aidanjones9086]

Windows autopilot

[@VL2330]

Great training videos! I'm new to the Intune administation and your videos have helped me learn a great deal already in my path to becoming an IT Pro. Can you do a video on the new feature for AutoPatch? That would help out a lot as my organization is adopting this path for workstation patching and migrating it from on-prem SCCM.

[@stephane_TheRambler]

Thank you Andy for this guide. As always, great video

[@AndyMaloneMVP]

No problem 👍

[@corbul9225]

Great video, thank you!

[@auxxxua20]

Great guide. Liked. Subscribed.

[@AndyMaloneMVP]

Awesome, thank you!

[@Travus]

Hey Andy! First off, absolutely great video! That said, one of the huge troublemakers for me with Intune is making apps available for users via the company portal, as not all our users enjoy elevated priveliges to install software off the internet. Adding and updating the apps available to users feels like pulling teeth, and is often en excercise in trial and error without clear guidance on what went wrong. It's super indepth and very fiddly, do you think you could make a video on it?

[@AndyMaloneMVP]

Thanks very much for your request. At the moment, Microsoft are in the process of improving both elevation and app installation. In the next few months, you will see some changes that I think will make your life a lot easier. So yes I will add this request to my list. In the meantime, thanks for your support on my channel and keep watching 😊

[@l.s.zsuppressing9762]

Great video

[@Rusmiester]

I love this video, so easy to follow. My scenario is that I have 50 devices already enrolled into Azure AD before we implemented Endpoint. There does not seem to be an easy way to get them to enrol in Endpoint without having to disconnect them and rejoin them completely to Azure AD?

[@AndyMaloneMVP]

You are correct. Hopefully MS will improve this in due course.

[@brandynmckibben6174]

So what do you do for windows device enrollment if you already have all your devices joined to on prem AD? I have all the licensing and M365 tenancy setup.

[@AndyMaloneMVP]

They need reset. Autopilot reset / or reimage

[@user-ir7jn2tz9t]

Great video! So in hybrid environment, is the future way of thinking to have you're users on the Local AD (synching to Azure AD), but not join the machines to the Local AD, only the Azure AD? Can you join the Windows workstations to both a Local AD and Azure AD or is it just one or the other? If it's only one and all my workstations are already on a Local AD, do I need to disjoin them from the local domain before joining them to the Azure AD? Thanks.

[@AndyMaloneMVP]

Windows workstations can only be either joined to a domain, or via Intune, one or the other, but not Bills, I’m afraid

[@user-ir7jn2tz9t]

@@AndyMaloneMVP Thanks for the reply. So all my all current Windows workstations, I need to disjoin them from the local domain before joining them to the Azure AD So is this the way things are heading then, to have you're users on the Local AD (synching to Azure AD), but the workstations joined to the Azure AD?

[@YesMir]

Hi Andy, great video thank you, one question, within Endpoint Security, you mention ' Antivius - Windows Defender etc ' but can you define a 3rd party Antivirus software there ?

[@AndyMaloneMVP]

Why would you? Actually you can link with Microsoft partners

[@YesMir]

@@AndyMaloneMVP ok thanks I was just curious

[@frostwarlus]

Andy, what is the difference between clicking Turn this on Azure ID and the regular Intune? Do we have to pay more or something for it?

[@AndyMaloneMVP]

It's the same.

[@shaiknadimkhan4558]

Awesome

[@brandondunivant1742]

Is there a way to bulk upload all devices on the domain into the MDM? Would take forever to log into each computer and sign into the work/school account.

[@AndyMaloneMVP]

Yes via a CSV file check documentation on learn.microsoft.com

[@stephenmyatt5491]

Hi, I've got myself into a bit of a mess. I added a policy that restricted users being able to use elevated rights. I deleted that policy thinking that would solve my problem but it hasn't and I've since read that I need to apply a new policy to change the settings. Now I can't find which policy type to choose to reset this setting so that users can use elevated rights. Alternatively, is there a way of resetting all policies and starting again?

[@AndyMaloneMVP]

Oh dear. I hope this helps :-) learn.microsoft.com/en-us/mem/intune/protect/epm-guidance-for-creating-rules

[@AngryDadTech]

Hi Andy. With Hybrid joined AD DS / Azure. If I have local users and file server and then I join the DS can I link say on prem Acc BOB to Entra ID BOB? So that access to on-prem systems such as file shares and SQL servers still work?

[@AndyMaloneMVP]

I’d watch this video it will answer your questions👍😊 kzbin.info/www/bejne/iGfXiIqKnZyHf8Usi=Hsy6wUYkgA5TVN-Z

[@itsallmakebelieve9151]

You mentioned you can wipe a device if you lose it. Does that mean the next time it is powered on it will connect and start wiping?

[@AndyMaloneMVP]

Yea

[@johnrhines3473]

If we have M365 E3 and E5 licenses, do I also need to purchase separate Enterprise Mobility & Security licenses?

[@AndyMaloneMVP]

Yes

[@johnrhines3473]

@@AndyMaloneMVP Something strange, I noticed the "User Type" value is empty for domain users who existed before Azure AD came into existence. Do you have recommendations for changing the value to "Member" for the users in question? Thanks Andy!!

[@AndyMaloneMVP]

@@johnrhines3473 when you go into hybrid mode. Entra ID only brings across a subset of attributes. You can customise this in most cases it’s not necessary.

[@johnrhines3473]

@@AndyMaloneMVP I wasn't sure since most of our users were created between 2011 and 2014

[@clarkrichey933]

So I went ahead and joined my computer to Azure Active Directory before realizing I didn't have the adequate licensing. I changed the licensing and I am told I need to disconnect it and reconnect it before I can bring it into Intune. Is this right or is there some way to bring in Windows computers without having to do that?

[@clarkrichey933]

I love what you are doing here by the way!

[@AndyMaloneMVP]

I’d just do it. It won’t cause problems 😊

[@AndyMaloneMVP]

Thank you 😊👍

[@astraldrifter]

Hi there Andy am a student and want to set up an Azure lab to learn is there a free program i can take advantage of?

[@AndyMaloneMVP]

Here’s a good article redmondmag.com/articles/2023/06/02/how-to-get-a-microsoft-365-e5-subscription-for-free.aspx?m=1

[@on-linesafaritours]

Hey Andy, once again top video. However I do have a question in Intune > Devices > All Devices under the colum "Ownership" some are showing as "Personal" and some as "Corporate" can I change them to show as "Corporate"

[@AndyMaloneMVP]

This might help techcommunity.microsoft.com/t5/microsoft-intune/how-to-mark-a-device-ownership-as-quot-corporate-quot/m-p/1505826

[@myobfool]

Mate I hope in your later video's you bought a proper microphone. This is an oncamera mike and it's not very good

[@AndyMaloneMVP]

I think it was just this one my apologies