Microsoft Intune Overview

3.25 Days

19.5 CPD hours

This course is intended for IT administrators with a minimum 2-5 years of experiencing working with Microsoft Windows Server, Windows 10, and Office 365 licensing.

The course will utilize a pre-provisioned lab environment which includes Microsoft 365 E5 licenses and Enterprise Mobility and Security E5 licenses for each student. Powershell management topics will be discussed where applicable in the respective topics. This course will address Windows devices only enrolled in Intune.

Configuring and Licensing Intune

• Endpoint Manager - quick discussion, portal access
• Discuss which licenses include Intune
• Discuss Microsoft Intune device-only subscription
• Discuss Azure Active Directory basic, P1, P2 licensing

Intune setup and overview of capabilities

• Supported configurations
• Logging in and using Intune Admin portal via Azure Portal and via Endpoint manager site
• Configure a domain name (needed to support labs though may be done already for E1B/district)
• Add users and groups in Azure Portal
• Configure Azure AD connect and discuss AAD Connect Health
• Assigning licenses manually, via Powershell, and via AAD groups
• Set the MDM authority and enable device enrollment
• Add Apps to Intune - covered in detail in a later topic
• Configuring device profiles - covered in detail in a later topic
• Company Portal discussion - covered in detail in a later topic
• Configure app policies - covered in detail in a later topic

Windows device management

• What is co-management - brief discussion on Endpoint Manager with Configuration Manager
• Registering, joining, hybrid join to Azure AD
• Enrollment method capabilities
• Azure AD joined
• Azure AD joined with Autopilot (User driven mode)
• Azure AD joined with Autopilot (Self deploying mode)
• Autopilot pre-provisioned deployment (formally known as white-glove)
• Device group tags for profile deployment
• Troubleshooting Autopilot
• Policy conflicts
• Known issues
• Using Powershell to connect to and manage Intune

Software deployment

• Add apps to Intune
• Windows Store apps
• Microsoft Store for Business apps
• LOB apps - Sideloading
• Adding Win32 apps
• Running Powershell Scripts on devices
• Assigning Apps
• Monitor Apps
• Discovered Apps
• Configure Apps
• App Configuration Policies
• Office app policys
• Custom OMA-URI Policies
• Troubleshooting

Managing devices

• Windows 10 Feature Updates
• Update rings to manage updates
• Mapping drives to SMB shares
• Discuss OneDrive for Business
• Manage Enterprise Wireless - Windows Configuration Designer, provisioning packages
• Implementing Conditional Access - device based, app based

Printer management

• Universal Print
• Deploying printer settings

Remote administration

• Intune Device Management
• Inventory
• Fresh Start
• Full Scan
• Remote Lock
• Restart
• Sync devices
• Bulk device actions
• Teamviewer integration requirements

Intune Reporting

• Accessing Reports
• Exporting Reports using Graph