Learn Microsoft SCCM with Free Lessons & Tips

Windows Intune is a deprecated Microsoft product that was a cloud-based endpoint management solution for Windows devices. It was launched in 2011 and was designed to provide: 1. _PC management_: Inventory, software distribution, and settings management. 2. _Security_: Malware protection, firewall, and Windows Update management. 3. _Software distribution_: Deployment of Microsoft and third-party software. Windows Intune was replaced by Microsoft Intune (formerly Microsoft Enterprise Mobility + Security) in 2017. Microsoft Intune offers a broader range of features and supports multiple platforms, including Windows, iOS, Android, macOS, and Linux. Key differences between Windows Intune and Microsoft Intune: 1. _Platform support_: Windows Intune only supported Windows devices, while Microsoft Intune supports multiple platforms. 2. _Feature set_: Microsoft Intune offers more comprehensive endpoint management features, including mobile device management, conditional access, and data protection. 3. _Cloud-based architecture_: Microsoft Intune is built on a modern cloud-based architecture, providing greater scalability and flexibility. If you're still using Windows Intune, Microsoft recommends upgrading to Microsoft Intune for improved security, management, and support. read less

Microsoft Intune is a cloud-based endpoint management solution used for: 1. *Device Management*: Manage Windows, iOS, Android, macOS, and Linux devices from a single console. 2. *Mobile Device Management (MDM)*: Secure and manage mobile devices, including smartphones and tablets. 3. *Mobile Application Management (MAM)*: Manage and secure mobile apps across devices. 4. *Endpoint Security*: Protect devices from threats with advanced security features, including threat protection and data encryption. 5. *Conditional Access*: Control access to company resources based on device compliance and user identity. 6. *Software Distribution*: Deploy and manage software applications across devices. 7. *Configuration Management*: Configure device settings and enforce compliance with company policies. 8. *Inventory Management*: Track device inventory, hardware, and software details. 9. *Remote Assistance*: Remotely troubleshoot and assist devices. 10. *Compliance Management*: Ensure devices comply with company policies and regulatory requirements. Microsoft Intune helps organizations: - Secure devices and data - Simplify device management - Improve user productivity - Reduce costs - Ensure compliance with regulatory requirements It's a powerful tool for managing and securing endpoints in a modern, mobile-first, cloud-first world. read less

Yes, Microsoft Intune supports SAML (Security Assertion Markup Language) for authentication and authorization. Intune uses SAML to integrate with identity providers (IdPs) like Azure Active Directory (Azure AD) for secure authentication and authorization. As an MDM (Mobile Device Management) solution, Intune uses SAML to: 1. Authenticate users and devices 2. Authorize access to company resources 3. Enable single sign-on (SSO) for users 4. Integrate with Azure AD for conditional access and compliance policies Intune supports SAML 2.0 and can integrate with various IdPs that support SAML, including: 1. Azure AD 2. Active Directory Federation Services (AD FS) 3. Other third-party IdPs By using SAML, Intune provides a secure and standardized way to manage device authentication and authorization, ensuring that only authorized devices and users can access company resources. read less

No, Microsoft Intune is not free. It is a paid service offered by Microsoft as part of its Enterprise Mobility + Security (EMS) suite and Microsoft 365 plans. However, there are some scenarios where you can get Intune at no additional cost or with a free trial: 1. _Microsoft 365 plans_: Intune is included in some Microsoft 365 plans, such as Microsoft 365 Business Premium, Microsoft 365 E3, and Microsoft 365 E5. 2. _Enterprise Mobility + Security (EMS)_: Intune is part of the EMS suite, which offers a free trial for 30 days. 3. _Free trial_: Microsoft offers a 30-day free trial for Intune as a standalone service. 4. _Education and non-profit discounts_: Eligible education and non-profit organizations may be eligible for discounted or free Intune licenses through Microsoft's volume licensing programs. In general, Intune pricing varies depending on the plan and subscription: - Microsoft Intune Plan 1: $8.00 per user/month (annual commitment) - Microsoft Intune Plan 2: $4.00 per user/month (annual commitment) - Microsoft Intune Suite: $10.00 per user/month (annual commitment) Please note that prices may vary depending on your location, and it's best to check the official Microsoft website for the most up-to-date pricing information. read less

To configure the Microsoft Intune company portal app: 1. Sign in to the Microsoft Intune admin center. 2. Go to _Apps_ > _Company Portal_. 3. Click on _Configure_. 4. Select the platforms (Android, iOS, Windows) for which you want to configure the Company Portal. 5. Upload your company logo and customize the app's appearance. 6. Configure the app's behavior, such as: - Allow users to reset their PIN or password. - Enable or disable device enrollment. - Set up terms and conditions. 7. Click _Save_ to apply the changes. Additionally, you can also configure: 1. _Branding_: Customize the app's name, logo, and color scheme. 2. _Security_: Set up PIN or biometric authentication. 3. _Enrollment settings_: Configure device enrollment options. 4. _Notifications_: Set up notification preferences. 5. _Intune app SDK_: Integrate the Company Portal with your custom apps. Note: The Company Portal app is used by end-users to access company resources, enroll devices, and install apps. Configuring the app correctly ensures a seamless user experience. read less

Microsoft Intune offers several Android management options: 1. _Android Device Administrator (DA)_: Enroll devices using the device administrator API for basic management. 2. _Android Enterprise_: Leverage advanced management features, including: - Work profiles (separate work and personal data) - Managed devices (fully managed devices) - Managed apps (app-level management) 3. _Android Enterprise Fully Managed_: Enroll devices for comprehensive management, including: - Device and app management - Security policies - Kiosk mode 4. _Android Enterprise Dedicated Devices_: Manage dedicated devices for a single purpose, such as: - Kiosk mode - Single-app mode 5. _App Protection Policies (APP)_: Protect company data within apps, even on personal devices. 6. _Conditional Access_: Control access to company resources based on device compliance. 7. _Device Compliance_: Set policies for device security, encryption, and more. 8. _Software Updates_: Manage Android OS updates and security patches. 9. _Certificate Management_: Deploy and manage certificates for Wi-Fi, VPN, and apps. 10. _Custom Configuration_: Use XML files to configure custom settings on Android devices. Intune's Android management options provide flexibility and granularity to meet various organizational needs. read less

To change the ownership of an Intune device: 1. *Open the Intune console*: Go to the Microsoft Endpoint Manager admin center ((link unavailable)). 2. *Devices*: Navigate to *Devices* > *All devices*. 3. *Select the device*: Choose the device for which you want to change ownership. 4. *Device properties*: Click on *Device properties*. 5. *Ownership*: Scroll down to the *Ownership* section. 6. *Change ownership*: Click on *Change ownership*. 7. *Select new owner*: Choose the new owner from the list of users or enter their email address. 8. *Save changes*: Click *Save* to update the ownership. Alternatively, you can also use PowerShell to change device ownership: 1. *Install the Intune PowerShell module*: Install the Microsoft.Graph.Intune module. 2. *Connect to Intune*: Use the `Connect-MSGraph` cmdlet to connect to Intune. 3. *Get the device*: Use the `Get-IntuneManagedDevice` cmdlet to retrieve the device object. 4. *Update ownership*: Use the `Update-IntuneManagedDevice` cmdlet to update the ownership. Note: Ensure you have the necessary permissions to change device ownership in Intune. read less

To import a device into Intune: 1. *Autopilot*: Use Windows Autopilot to automatically enroll devices in Intune. 2. *Device Enrollment Manager (DEM)*: Use DEM to enroll devices in bulk. 3. *Manual Enrollment*: Manually enroll devices using the Company Portal app or the Intune portal. 4. *CSV Import*: Import devices from a CSV file using the Intune console. 5. *Partner connectors*: Use partner connectors like Apple Business Manager or Google Workspace to import devices. *CSV Import Steps*: 1. Prepare a CSV file with device information (e.g., serial number, asset tag). 2. Go to the Intune console > Devices > All devices. 3. Click "Import" and select "CSV import". 4. Upload the CSV file and map columns to Intune attributes. 5. Review and confirm the import. *Manual Enrollment Steps*: 1. Install the Company Portal app on the device. 2. Open the app and sign in with a work or school account. 3. Follow prompts to enroll the device. *Autopilot and DEM*: 1. Configure Autopilot or DEM in the Intune console. 2. Devices will automatically enroll during setup or when joined to a network. Ensure devices meet Intune's requirements and have the necessary configurations for successful enrollment. read less

To reset a device in Intune: 1. *Wipe*: Removes all data and settings, restoring the device to its factory default state. 2. *Retire*: Removes the device from Intune management, but doesn't erase data. 3. *Fresh Start*: Resets Windows 10 devices to a pristine state, removing apps and settings. To perform a wipe or retire action: 1. Go to the Intune console. 2. Select *Devices* > *All devices*. 3. Choose the device you want to reset. 4. Click *...* (more actions) and select: - *Wipe* (factory reset) - *Retire* (remove from management) 5. Confirm the action. For Fresh Start: 1. Go to the Intune console. 2. Select *Devices* > *Windows* > *Device configurations*. 3. Create or edit a device configuration profile. 4. Add the *Fresh Start* setting and configure options. 5. Assign the profile to the device. Note: - Wipe and Retire actions are irreversible. - Fresh Start requires Windows 10, version 1709 or later. - Before resetting, ensure you have backed up any necessary data. Remember to carefully consider the implications of resetting a device before taking action. read less