S01E06 - Configuring Modern Roaming Profiles with Microsoft Intune - (I.T)

00:00 - Intro
01:15 - Creating ADMX-backed policies
docs.microsoft.com/windows/cl...
08:38 - Redirect and move Windows known folders to OneDrive
docs.microsoft.com/onedrive/r...
15:24 - Enable Enterprise State Roaming in Azure Active Directory
docs.microsoft.com/azure/acti...
16:13 - How to manage the local administrators group on Azure AD joined devices
docs.microsoft.com/azure/acti...
Configure device settings using the Azure portal
docs.microsoft.com/azure/acti...
25:05 - OneDrive guide for enterprises
docs.microsoft.com/onedrive/p...
35:059 - Wrapping up
Visit our websites and social media for more or to get in touch with us
Steve Hosking - Microsoft MMD Team
/ onpremcloudguy
steven.hosking.com.au/
mvp.microsoft.com/en-us/Publi...
github.com/onpremcloudguy
Adam Gross - Microsoft MVP - Enterprise Mobility
/ adamgrosstx
www.asquaredozen.com
github.com/AdamGrossTX
mvp.microsoft.com/en-us/Publi...
Ben Reader - Microsoft MVP - Enterprise Mobility
/ powers_hell
www.powers-hell.com/
github.com/tabs-not-spaces
mvp.microsoft.com/en-us/Publi...

[@DylanTownsend]

finally, a super helpful intune tutorial channel!

[@ggeter]

Awesome tutorial. The years of experience are evident

[@KEBARDi]

Thanks again Steve and Adam. Keep 'em coming 👍👍👍

[@KevinSchmitt77]

As of November of 2019 there are 111 pages of settings in Administrative Templates. I've got just about all of them memorized. Just kidding. I love this series and look forward to the next couple of videos I have left to go. Keep up the great work, guys!

[@Ramsas154]

Video still keeps up to this day even the UI changed slightly. I always come to this video when implementing this for customers :)

[@timbourke-finn5090]

Great content guys watching them all now as i have a couple of MDM projects coming up

[@mekiosan]

Doing it Live! Rock on! Good job ya'll. Great work on the blog, and simple to take in and digest. thank you.

[@IntuneTraining]

Thank you!! We are having a blast!

[@mrkingskintim]

Great work Steve. Well blagged Adam!

[@stevebutterworth5504]

Moved their cheese, best quote ever. :D thanks, really loving these tutorials.

[@SwampySi]

Great job guys.. keep up the good work.

[@RichardGailey]

One thing that would be great is, when you were to Wipe/reset a users machine via Intune, it would also check first, that the user had their OneDrive set up and fully synced first; if not, then give options first. I've wiped a users profile before at work, without double checking that FolderRedirection was enabled in their AD Profile Members Of section. By default we have this set for everyone, but for some reason, this one person had had that missing for a while. We do have weekly reports running on the machines to check for user who may be missing this, but things happen.

[@chriswork3358]

Great. Haven't yet played around with InTune, but should be soon. Very helpful.

[@gurdevluck]

Really good content guys...Thank you for sharing it.

[@umbrellageeks9421]

excellent content ! . more videos like this deserve more likes and shares! keep going guys !

[@alexcooper9622]

Great content guys! Really helpful!

[@sethbucy]

Great stuff. Thank you both!

[@peterreilly9322]

Thanks for video. Very helpful

[@brushenas]

Great videos and contents. Thank you Guys

[@WilliamButtel]

Thanks guys, i learnt alot

[@manolito7045]

I'm a bit late but thank you very much for this channel !

[@masterbjohnson2]

Super useful, will reach out to invite you onto the Need to know Podcast.

[@yaserrafiq7482]

great video I appreciate you.

[@ronnyhuybrechts717]

Great tutoria,l easy and up to date Maybe a bit more information about different policy's for different security group And some information about device configuration 🖥️☁️🔐

[@jacobcannamela784]

I just recently had a breakthrough that is worth sharing. We use SentinelOne AntiVirus and I followed your guides on deploying Win32 apps. It works great auto deploying AV.. Except, when I have our AV auto deployed on a brand new out of the box setup, our AV prevents the automatic redirection of onedrive folders. If anyone is having issues getting the auto redirection to work, check your AV. Our AV doesnt even show any event to exclude , and google doesnt show anything about AV blocking KFM. The solution is to not auto install AV, let redirection do its thing, and then use company portal to manually install AV after redirection hits.

[@yashpreetricky]

Great Stuff!!

[@reyville1]

Thank you Guys for a very informative episode. Have any you found any difficulties moving computers with the old folder redirect policies applied to Onedrive known folders? if so, would you share how did you overcome the problems?

[@ivan_i_am]

Great series of vids, keep it up! What happens if the environment had folder redirection enabled by GPO, how will one drive policy execute KFM? Would it be a conflict or redirected folders (my documents) would be redirected from file share server to one drive?

[@jktification]

Good Stuff

[@huwweatherhead2725]

Great videos!, I'm trying to use the 'configure team site libraries to sync automatically' I've set a policy for each department with their library and assigned it to the group for the users in that department. It works ok if people are only in one department but we have some who are in two departments, for these people it's showing a conflict. I can sort of understand, if you could only have one library sync, but as you can have multiple this seems a strange limitation. any thoughts?

[@deejayblacklight]

Great Video, one thing though, my "KNown Windows Folder" do not move to OneDrive even though everything has synced successfully to the device.

[@alexpetrenko5952]

Is it possible to exclude a particular folder, for example, Desktop? It seems quite strange to sync shortcuts across all devices, it will be a terrible mess...

[@TheRealJLucas]

Its in onedrive settings ->backup

[@KrumBoy]

I don't think Device Settings is still there, it doesn't seem to appear on my Intune

[@yashpreetricky]

i tried signing out from one drive and after that it didn't sign the user in, is there any work around to fix it?

[@bilange]

25:00 wait, what? You can re-order systray icons in real time by dragging them?! Holy cow, how I didn't know THAT 😂

[@Pethers]

What about Favourites/Bookmarks etc. Other than folders, what else is roamed?

[@abdavey]

Do you need E3/E5 licensing for everything discussed in this video or would this apply to Business premium as well?

[@gregthomson4777]

Chicken and egg question. A new user is issued with a mobile phone and a laptop. What is best practice for setting up MFA when MFA is required to join the devices to AAD?

[@arjanv]

Thanks. great work. I can watch these series over and over. What about other folders like video, music and downloads witth KFM? Also the background image policy still not working.......;)

[@AttitudeAdjustment12]

I am also curious about this

[@richardberry8231]

I`ve got a real real question this time, when at the assignment phase you make reference to your group Win10_Intune_Baseline, are we assigning this to a dynamic device group for say all enrolled devices in my tenant, or all AAD joined devices, or is it say for All Users. I’m unsure where to assign the profile to as the settings enabled for OneDrive are a mixture of User and Device setting.

[@IntuneTraining]

Check out the Microsoft docs for detailed guidance on this. Our recommendation these days is to split policies into user and device policies based on the settings in the policies. Settings catalog and Admin Template policies have them tagged as user or device. Any other settings should rely on how you expect the settings to apply. docs.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#user-groups-vs-device-groups

[@MichaelKelly0]

Hey Steve / Adam, to facilitate faster boot times by users logging onto PCs (where it creates their profile). What is (if any) the speed boost given by "Enterprise State Roaming profiles" and compared to local, and how does this effect logon times (if the users profile has existed before , yet this is the first time on that particular computer) This is for a large University , so students may "roam" on campus, but I want to get the fastest logon times for them, we have to blank profiles on the PCs regularly or the disk fills up, and in a library environment, you just want to get them to the desktop fast. Or anyone on the channel have any ideas on this. (All Windows 10 machines).

[@stevensmith7258]

How are you handling Edge and MS Teams shortcuts being added multiple times if the user roams?

[@IntuneTraining]

I'm not sure what you're asking. The shortcuts should only appear once. If you are seeing something different, there may be an issue with your config.

[@richardberry8231]

Using Endpoint Manager to work through your awesome video. Point of clarification in your video you say enable “Prevent users from synching Personal One drive accounts” in the new Endpoint manager, I can’t find that option. Any suggestions. Newbie to this cloudy management world so be gentle.

[@IntuneTraining]

Most of the topics in Season 1 are relevant from a topical perspective but the UI has significantly changed since the video was released. The new Settings Catalog template should contain MOST of the settings these days. We have a video on settings catalog that may be helpful to get you started. kzbin.info/www/bejne/qaKsfJaNjbWpr6s

[@SPbBoY]

Guys, you are doing a great job! Thank you! I am just started with Intune pilot and found some difficulty with deploying Adobe Reader DC with Intune, It looks like Adobe Reader goes not like a single MSI file and I am clearly don't know what to do, deploy it with PowerShell or something else... I think it's a pretty popular topic and I'd like to hear an expert's opinion, could you please make a video about this process or just give me the right direction?

[@SPbBoY]

Thanks again, I am successfully deployed Adobe Reader as a Win32 App after watching your next video)))

[@KrumBoy]

I think the upload rate has now been removed as an option on this, I might be wrong but I can't find it. Settings for OneDrive seem to be less than what is on the video (I appreciate changes may have occurred since then)

[@justinniotobias]

Upload rate is available under the user settings

[@digitaldynamics6540]

Gather no one else got the "See You Next Tuesday" gag? An Aussie thing.

[@IntuneTraining]

😁 thanks for watching until the end!

[@ThePranshuarora]

Hi, i am looking for a solution via Intune to connect the users on premise share/network drive to AAD registered devices. I am planning to setup AO VPN, but not sure how to connect the network drives. Can you suggest some idea.

[@IntuneTraining]

I would convert the users to OneDrive for business then the user's data won't be tied to your on-premises data center and will be securely backed up in the cloud.

[@adrianomucci3276]

Would it be possible to redirect the AppData folder to OneDrive as well?

[@IntuneVitaDoctrina]

Hi, that is possible, like they showed about Download folder, you go in Explorer and change "location" of C:\Users\%USERNAME%\AppData\Roaming but be careful! if you do this each TEMP file that is written there will trigger an OneDrive upload... some applications such as Slack install itself in those folders and write every second there, meaning you will see the OneDrive icon flash all the time.... I would not recommend redirect whole AppData folder, is it Chrome/Firefox bookmarks or such you want? then I would redirect only certain folders there too, but same warning, if they update all the time while browser is started you will have constant upload traffic from OneDrive

[@masterbjohnson2]

I changed the max upload rate from 30% to 70% due to co-authoring issues. Microsoft recommends +50%

[@richardberry8231]

Chaps forget my last comment was filtering on device settings. Found it in User setting.

[@BlackV27]

see you next tuesday.... really

[@cloudlessx]

why don't you make your browser font bigger?

[@IntuneTraining]

Yeah. We were learning. We’ve improved the quality (well first we made the quality much worse in the “teens” then it gets better in the 20’s)