Learn Microsoft Intune Training with Free Lessons & Tips

Windows Intune is a deprecated Microsoft product that was a cloud-based endpoint management solution for Windows devices. It was launched in 2011 and was designed to provide: 1. _PC management_: Inventory, software distribution, and settings management. 2. _Security_: Malware protection, firewall, and Windows Update management. 3. _Software distribution_: Deployment of Microsoft and third-party software. Windows Intune was replaced by Microsoft Intune (formerly Microsoft Enterprise Mobility + Security) in 2017. Microsoft Intune offers a broader range of features and supports multiple platforms, including Windows, iOS, Android, macOS, and Linux. Key differences between Windows Intune and Microsoft Intune: 1. _Platform support_: Windows Intune only supported Windows devices, while Microsoft Intune supports multiple platforms. 2. _Feature set_: Microsoft Intune offers more comprehensive endpoint management features, including mobile device management, conditional access, and data protection. 3. _Cloud-based architecture_: Microsoft Intune is built on a modern cloud-based architecture, providing greater scalability and flexibility. If you're still using Windows Intune, Microsoft recommends upgrading to Microsoft Intune for improved security, management, and support. read less

Yes, Microsoft Intune supports SAML (Security Assertion Markup Language) for authentication and authorization. Intune uses SAML to integrate with identity providers (IdPs) like Azure Active Directory (Azure AD) for secure authentication and authorization. As an MDM (Mobile Device Management) solution, Intune uses SAML to: 1. Authenticate users and devices 2. Authorize access to company resources 3. Enable single sign-on (SSO) for users 4. Integrate with Azure AD for conditional access and compliance policies Intune supports SAML 2.0 and can integrate with various IdPs that support SAML, including: 1. Azure AD 2. Active Directory Federation Services (AD FS) 3. Other third-party IdPs By using SAML, Intune provides a secure and standardized way to manage device authentication and authorization, ensuring that only authorized devices and users can access company resources. read less

Microsoft Intune is not directly included with Office 365, but it is included with certain Office 365 plans and Microsoft 365 plans. Here are the plans that include Microsoft Intune: 1. Microsoft 365 Business Premium 2. Microsoft 365 E3 3. Microsoft 365 E5 4. Office 365 Enterprise E3 (with additional licensing) 5. Office 365 Enterprise E5 (with additional licensing) If you have one of these plans, you can access Intune as part of your subscription. However, if you have a different Office 365 plan, such as Office 365 Business Basic or Office 365 Home, Intune is not included. To use Intune, you may need to purchase an additional license or upgrade to a plan that includes Intune. You can check with your organization's IT administrator or Microsoft representative to determine the best option for your needs. read less

Microsoft Intune offers several Android management options: 1. _Android Device Administrator (DA)_: Enroll devices using the device administrator API for basic management. 2. _Android Enterprise_: Leverage advanced management features, including: - Work profiles (separate work and personal data) - Managed devices (fully managed devices) - Managed apps (app-level management) 3. _Android Enterprise Fully Managed_: Enroll devices for comprehensive management, including: - Device and app management - Security policies - Kiosk mode 4. _Android Enterprise Dedicated Devices_: Manage dedicated devices for a single purpose, such as: - Kiosk mode - Single-app mode 5. _App Protection Policies (APP)_: Protect company data within apps, even on personal devices. 6. _Conditional Access_: Control access to company resources based on device compliance. 7. _Device Compliance_: Set policies for device security, encryption, and more. 8. _Software Updates_: Manage Android OS updates and security patches. 9. _Certificate Management_: Deploy and manage certificates for Wi-Fi, VPN, and apps. 10. _Custom Configuration_: Use XML files to configure custom settings on Android devices. Intune's Android management options provide flexibility and granularity to meet various organizational needs. read less

To integrate Check Point Harmony Mobile with Microsoft Intune: 1. *Configure Check Point Harmony Mobile*: - Set up a Check Point Harmony Mobile server - Create a mobile security policy - Generate a certificate for Intune integration 2. *Configure Microsoft Intune*: - Go to the Intune console - Navigate to *Devices* > *Android* > *Android Enterprise* - Click *Advanced* and select *App protection policies* 3. *Create a new app protection policy*: - Choose *Check Point Harmony Mobile* as the app - Upload the certificate generated in step 1 - Configure policy settings (e.g., encryption, access controls) 4. *Assign the policy*: - Assign the policy to a group of users or devices 5. *Enroll devices*: - Have users enroll their devices in Intune - Ensure devices have Check Point Harmony Mobile installed 6. *Monitor and manage*: - Monitor device and app security in Intune - Manage Check Point Harmony Mobile settings and policies Check Point and Microsoft provide detailed documentation and guides for this integration. Ensure you follow the specific instructions for your environment and version. Note: This integration enables advanced mobile security features, including threat prevention, data protection, and access controls, leveraging Check Point Harmony Mobile and Microsoft Intune. read less

When you retire a device in Intune: 1. *Device removal*: The device is removed from Intune management. 2. *Policy removal*: All Intune policies and profiles are removed from the device. 3. *App removal*: Intune-managed apps are uninstalled or removed from the device. 4. *Data wipe*: Optionally, you can choose to wipe the device data (factory reset). 5. *Device de-enrollment*: The device is de-enrolled from Azure Active Directory (AAD). 6. *Device record removal*: The device record is removed from Intune and AAD. 7. *Certificate removal*: Any certificates issued to the device are revoked. Retiring a device in Intune: - Helps maintain device inventory accuracy - Removes access to corporate resources - Ensures data security by removing sensitive information - Allows for device re-deployment or re-assignment Note: Before retiring a device, ensure you have: - Backed up any necessary data - Removed any sensitive information - Considered re-deploying or re-assigning the device Retiring a device in Intune does not physically delete the device or its data. If you need to permanently erase the device, use the "Wipe" action instead. read less

SCCM stands for System Center Configuration Manager. It is a systems management software product developed by Microsoft for managing and deploying devices, applications, and operating systems across an organization. SCCM provides a comprehensive set of tools for: 1. Device management: Inventory, monitoring, and control of desktops, laptops, mobile devices, and servers. 2. Application management: Deployment, updating, and removal of software applications. 3. Operating System deployment: Installation and configuration of Windows operating systems. 4. Patch management: Deployment of security patches and updates. 5. Compliance management: Enforcement of security policies and configurations. 6. Reporting and analytics: Insights into device and application usage, health, and compliance. SCCM is part of the Microsoft System Center suite and is widely used by organizations to manage their IT infrastructure and ensure compliance with security policies. In 2019, Microsoft rebranded SCCM as Microsoft Endpoint Configuration Manager (MECM), reflecting its expanded capabilities and focus on modern device management. However, the term SCCM is still widely used and recognized in the industry. read less