Book Image

Microsoft Intune Cookbook

By : Andrew Taylor
Book Image

Microsoft Intune Cookbook

By: Andrew Taylor

Overview of this book

Microsoft Intune is a cloud-managed mobile device management (MDM) tool that empowers you to manage your end-user device estate across various platforms. While it is an excellent platform, the initial setup and configuration can be a daunting process, and mistakes made early on can be more challenging to resolve later. This book addresses these issues by guiding you through the end-to-end configuration of an Intune environment, incorporating best practices and utilizing the latest functionalities. In addition to setting up your environment, you’ll delve into the Microsoft Graph platform to understand the underlying mechanisms behind the web GUI. This knowledge will enable you to automate a significant portion of your daily tasks using PowerShell. By the end of this book, you’ll have established an Intune environment that supports Windows, Apple iOS, Apple macOS, and Android devices. You’ll possess the expertise to add new configurations, policies, and applications, tailoring an environment to your specific requirements. Additionally, you’ll have the ability to troubleshoot any issues that may arise and package and deploy your company applications. Overall, this book is an excellent resource for anyone who wants to learn how to use Microsoft Intune to manage their organization's end-user devices.
Table of Contents (17 chapters)

Enrolling and using Autopatch

If you have Windows Enterprise Licensing (Microsoft 365 E3, E5, or Windows E3), instead of manually configuring and populating your Windows update rings, you can use Windows Autopatch from Microsoft. This is a semi-managed service that automates updates for Windows, Microsoft Office, Microsoft Teams, Edge, Drivers, SQL ODBC, and .NET. When using Autopatch, Microsoft can also centrally pause updates so that if it notices a particular update is causing issues, it can block it before it is installed on your devices and then automatically resume it when the issue has been resolved.

As well as the click-and-forget option, you can also use Autopatch groups for more granular control over your updates. This will be covered in the There’s more… section of this recipe.

Getting ready

Before we deploy any configuration, you need to onboard your tenant into the service. For this, you will need two administrative contacts and a user account with...