Learn Microsoft Intune Training with Free Lessons & Tips

To use Microsoft Intune, follow these steps: 1. _Sign in_: Go to the Microsoft Endpoint Manager admin center ((link unavailable)) and sign in with your work or school account. 2. _Set up_: Configure your Intune environment, including setting up device enrollment, creating groups, and assigning licenses. 3. _Enroll devices_: Enroll devices using various methods, such as: - Autopilot - Device Enrollment Manager (DEM) - Manual enrollment - Apple Business Manager or Google Workspace 4. _Configure policies_: Create and assign device configuration policies, including: - Security settings - Wi-Fi and VPN settings - Email and app settings - Compliance policies 5. _Deploy apps_: Deploy and manage apps across devices, including: - Microsoft Store apps - iOS and Android apps - Line-of-business apps 6. _Monitor and report_: Monitor device compliance, security, and app usage. Generate reports to gain insights into your device ecosystem. 7. _Troubleshoot_: Use remote assistance and troubleshooting tools to resolve device issues. 8. _Manage updates_: Manage Windows updates, feature updates, and quality updates for devices. 9. _Integrate with other Microsoft services_: Integrate Intune with other Microsoft services, such as Azure Active Directory, Microsoft 365, and Microsoft Defender for Endpoint. Microsoft Intune offers a comprehensive documentation library and tutorials to help you get started and master the platform. read less

Microsoft Intune is now part of Microsoft Endpoint Manager (MEM). Microsoft Endpoint Manager is a unified endpoint management solution that combines the capabilities of Microsoft Intune, Microsoft Configuration Manager (SCCM), and other Microsoft endpoint management tools. Microsoft Endpoint Manager includes: 1. Microsoft Intune (cloud-based endpoint management) 2. Microsoft Configuration Manager (SCCM) (on-premises endpoint management) 3. Microsoft Defender for Endpoint (endpoint security) 4. Microsoft Tunnel for Mobile (secure access to company resources) 5. Microsoft Endpoint Analytics (endpoint insights and analytics) Microsoft Intune is still referred to as Intune, but it's now a part of the broader Microsoft Endpoint Manager suite. This change reflects the evolution of endpoint management and the need for a more comprehensive and integrated approach to managing and securing endpoints. read less

Microsoft Intune is not directly included with Office 365, but it is included with certain Office 365 plans and Microsoft 365 plans. Here are the plans that include Microsoft Intune: 1. Microsoft 365 Business Premium 2. Microsoft 365 E3 3. Microsoft 365 E5 4. Office 365 Enterprise E3 (with additional licensing) 5. Office 365 Enterprise E5 (with additional licensing) If you have one of these plans, you can access Intune as part of your subscription. However, if you have a different Office 365 plan, such as Office 365 Business Basic or Office 365 Home, Intune is not included. To use Intune, you may need to purchase an additional license or upgrade to a plan that includes Intune. You can check with your organization's IT administrator or Microsoft representative to determine the best option for your needs. read less

In Microsoft Intune, a device owner refers to the user or entity that has administrative control over a device. The device owner is typically the primary user of the device and has the ability to: 1. Enroll the device in Intune 2. Configure device settings and policies 3. Install and manage apps 4. Access device information and reports 5. Wipe or retire the device (if necessary) There are two types of device owners in Intune: 1. *Personal device owner*: The user who owns and uses the device for personal and work purposes. 2. *Corporate device owner*: The organization or IT administrator who owns and manages the device for work purposes only. Device ownership is important in Intune because it determines the level of control and access the user or organization has over the device. For example, a corporate device owner may have more control over device settings and policies than a personal device owner. Intune also supports multiple device ownership scenarios, such as: 1. *BYOD (Bring Your Own Device)*: Personal device owners enroll their devices in Intune for work purposes. 2. *COPE (Corporate-Owned, Personally-Enabled)*: Corporate device owners provide devices to users for work and personal use. 3. *CYOD (Choose Your Own Device)*: Users select from a range of corporate-owned devices for work purposes. read less

To start with Android Enterprise work profiles in Microsoft Intune: 1. _Enable Android Enterprise_: In the Intune console, go to _Devices_ > _Android_ > _Android Enterprise_ and toggle _Enable Android Enterprise_ to _On_. 2. _Create an Android Enterprise enrollment token_: In the Intune console, go to _Devices_ > _Android_ > _Android Enterprise_ and click _Create token_. 3. _Configure work profile settings_: In the Intune console, go to _Devices_ > _Android_ > _Work profiles_ and configure settings, such as: - Work profile name - Organization name - Icon and color scheme 4. _Create an Android Enterprise work profile policy_: In the Intune console, go to _Devices_ > _Android_ > _Work profiles_ and click _Create policy_. 5. _Configure policy settings_: Configure settings, such as: - Device enrollment - App management - Security - Data sharing 6. _Assign the policy_: Assign the policy to a group of users or devices. 7. _Enroll devices_: Have users enroll their devices using the Android Enterprise enrollment token. 8. _Monitor and manage_: Monitor and manage work profiles in the Intune console. Additionally, ensure: - Devices are running Android 6.0 or later - Devices have Google Play Services installed - Users have a Google account Microsoft Intune provides detailed documentation and tutorials to help you get started with Android Enterprise work profiles. read less

To integrate Check Point Harmony Mobile with Microsoft Intune: 1. *Configure Check Point Harmony Mobile*: - Set up a Check Point Harmony Mobile server - Create a mobile security policy - Generate a certificate for Intune integration 2. *Configure Microsoft Intune*: - Go to the Intune console - Navigate to *Devices* > *Android* > *Android Enterprise* - Click *Advanced* and select *App protection policies* 3. *Create a new app protection policy*: - Choose *Check Point Harmony Mobile* as the app - Upload the certificate generated in step 1 - Configure policy settings (e.g., encryption, access controls) 4. *Assign the policy*: - Assign the policy to a group of users or devices 5. *Enroll devices*: - Have users enroll their devices in Intune - Ensure devices have Check Point Harmony Mobile installed 6. *Monitor and manage*: - Monitor device and app security in Intune - Manage Check Point Harmony Mobile settings and policies Check Point and Microsoft provide detailed documentation and guides for this integration. Ensure you follow the specific instructions for your environment and version. Note: This integration enables advanced mobile security features, including threat prevention, data protection, and access controls, leveraging Check Point Harmony Mobile and Microsoft Intune. read less

When you retire a device in Intune: 1. *Device removal*: The device is removed from Intune management. 2. *Policy removal*: All Intune policies and profiles are removed from the device. 3. *App removal*: Intune-managed apps are uninstalled or removed from the device. 4. *Data wipe*: Optionally, you can choose to wipe the device data (factory reset). 5. *Device de-enrollment*: The device is de-enrolled from Azure Active Directory (AAD). 6. *Device record removal*: The device record is removed from Intune and AAD. 7. *Certificate removal*: Any certificates issued to the device are revoked. Retiring a device in Intune: - Helps maintain device inventory accuracy - Removes access to corporate resources - Ensures data security by removing sensitive information - Allows for device re-deployment or re-assignment Note: Before retiring a device, ensure you have: - Backed up any necessary data - Removed any sensitive information - Considered re-deploying or re-assigning the device Retiring a device in Intune does not physically delete the device or its data. If you need to permanently erase the device, use the "Wipe" action instead. read less

SCCM stands for System Center Configuration Manager. It is a systems management software product developed by Microsoft for managing and deploying devices, applications, and operating systems across an organization. SCCM provides a comprehensive set of tools for: 1. Device management: Inventory, monitoring, and control of desktops, laptops, mobile devices, and servers. 2. Application management: Deployment, updating, and removal of software applications. 3. Operating System deployment: Installation and configuration of Windows operating systems. 4. Patch management: Deployment of security patches and updates. 5. Compliance management: Enforcement of security policies and configurations. 6. Reporting and analytics: Insights into device and application usage, health, and compliance. SCCM is part of the Microsoft System Center suite and is widely used by organizations to manage their IT infrastructure and ensure compliance with security policies. In 2019, Microsoft rebranded SCCM as Microsoft Endpoint Configuration Manager (MECM), reflecting its expanded capabilities and focus on modern device management. However, the term SCCM is still widely used and recognized in the industry. read less