Book Image

Microsoft Intune Cookbook

By : Andrew Taylor
Book Image

Microsoft Intune Cookbook

By: Andrew Taylor

Overview of this book

Microsoft Intune is a cloud-managed mobile device management (MDM) tool that empowers you to manage your end-user device estate across various platforms. While it is an excellent platform, the initial setup and configuration can be a daunting process, and mistakes made early on can be more challenging to resolve later. This book addresses these issues by guiding you through the end-to-end configuration of an Intune environment, incorporating best practices and utilizing the latest functionalities. In addition to setting up your environment, you’ll delve into the Microsoft Graph platform to understand the underlying mechanisms behind the web GUI. This knowledge will enable you to automate a significant portion of your daily tasks using PowerShell. By the end of this book, you’ll have established an Intune environment that supports Windows, Apple iOS, Apple macOS, and Android devices. You’ll possess the expertise to add new configurations, policies, and applications, tailoring an environment to your specific requirements. Additionally, you’ll have the ability to troubleshoot any issues that may arise and package and deploy your company applications. Overall, this book is an excellent resource for anyone who wants to learn how to use Microsoft Intune to manage their organization's end-user devices.
Table of Contents (17 chapters)

Setting Up Enrollment and Updates for Windows

Now that we have our security and configuration policies in place for our Windows devices, we are almost ready to enroll our first device (we will cover application deployment in Chapter 11, Packaging Your Windows Applications, but that is not essential for enrollment).

Before we start enrollment, we have to consider that we are working with devices directly from the manufacturer/distributor that could have been sitting in a warehouse or on a container ship for several months. Therefore, it makes sense to configure our Windows update policies ahead of enrollment so that we can sleep safely at night, knowing that even a newly provisioned device will be kept up to date.

In this chapter, we will look at configuring update rings manually and using Windows Update for Business (WUfB) as well as Windows Autopatch, which you can think of as Windows Updates as a Service, where Microsoft does the heavy lifting for you.

Once we have our updates...