Microsoft Intune is the SaaS solution provided by Microsoft. Microsoft Intune is a cloud-based desktop and mobile device management tool. This supports Mac-OS, iOS, Android, and Windows 10. This cloud solution is used as a modern management tool. This MDM solution can be integrated SCCM, Azure AD, and Active Directory. This place gives you a great opportunity Learn Microsoft Intune and become an expert with Intune.
This solution can be used to deploy UWP applications, Security policies, Configuration policies, WiFi profiles, PKI certificates, and so on.
This solution is the future-proof When you take a look at the Desktop (43.29%) Vs. Mobile (52.29%) Vs. Tablet (4.42%) Market Share Worldwide for last one year, you could see the mobile devices are leaders. So, Mobile Device Management is very critical, and this is a new world of opportunities for IT Pros like us. From my perspective, learning this solution is very important for SCCM admins.
Intune is an enterprise mobility management (EMM) solution from Microsoft. The EMM provider helps to manage mobile devices, network settings, and other mobile services and settings. This solution is nothing but a combination of Device, Application, Information Protection, Endpoint Protection (antivirus software) and Security/Configuration policy management solution (SaaS) facilitated by Microsoft in Cloud.
Additionally, this solution has features called compliance policy which can be integrated with the Azure AD “Conditional Access” policy to restrict access to company resources.
Video Tutorial to Learn about Intune MAM Policies and App Reporting by Specific User Endpoint Manager? In this post, I would like to share the video tutorial to explain
MAM policies created in the MEM portal are different from the MAM policies which we create from Intune portal for MDM enrolled devices. Outlook Groups is the newest application included in the Azure portal for Intune MAM-enabled applications.
Intune MAM Policies and App Reporting?
Also, I can see the PREVIEW option to add custom applications for MAM policies without MDM enrollment. This is an excellent feature. Settings –>Preview – Line-of-business apps –> Preview – Add a custom app.
Video Tutorial to Learn about Intune MAM Policies App Reporting by Specific User Endpoint Manager
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…
Learn How to Setup Dynamic Device Groups in Intune? Do you want to add mobile devices automatically to Microsoft Intune Device Groups? Intune Dynamic groups are always a customer request for a long back.
This feature is similar to dynamic collections in SCCM/ConfigMgr. There is two way to do it. One is using the Azure AD Premium feature called AAD Dynamic Groups, and another one is pretty new in Intune, something called Device Group Mapping.
Navigate via – Directory –> Groups –> Open the group (MDM Group) –> Configure. Enable Dynamic Group (Only available for AAD Premium subscriptions) Membership –> Add Users where <Department> is equal to “IT”.
Login to AAD.Portal.Azure.com.
Navigate to the Azure Active Directory -> Groups node -> Click on the New Group button.
Group Type -> Security
Group Name -> HTMD AAD Group based on Dept
Group Description -> To add all devices or users from a dept
Membership Type -> Dynamic User
In this scenario, all the users from the IT department will get added to the AAD Dynamic Security Group called MDM Groups.
Don’t panic if the group is not reflecting with users immediately, give it some time. It will get updated.
Once the AAD Dynamic Group is created and updated, login to Intune portal (endpoint.microsoft.com) and Create a New User Group to fetch all the devices of IT department users.
Learn How to Setup Dynamic Device Groups in Intune
Whenever a new user joins to IT department, that user will automatically get added to Intune MDM group as well. Provisioning and de-provisioning of groups made easy with this.
There are two options to build the Azure AD dynamic group query. You can use the rule builder or rule syntax text box to create or edit an AAD device group dynamic membership rule.
Rule Builder -> Graphical interface – Easy to create the dynamic query.
Rule Syntax -> Advanced technical users for complex queries.
You need to follow the steps mentioned below to use Azure AD dynamic group Rule Builder to create dynamic query rules for Hybrid Azure AD joined devices.
Under Configure Rules -> Choose Property drop-down list.
Select deviceTrustType as the property from the drop-down list.
How to Add Devices automatically to Intune Device Groups using Device Group Mapping?
Learn How to Setup Dynamic Device Groups in Intune?
Click on the Admin tab in Intune console. Navigate via Device Group Mapping – enable Device Group Mapping – Create a Device Group and ADD a CATEGORY to manage device group mapping rules. Once you click on Create Device Group, it will guide you through creating one device group.
When every user enrolls (During Enrollment Process) to Intune using the Microsoft Intune Company Portal application, the User will get an extra/additional screen to select “Choose the best category for this device”. Right now, I have only created one category, “ADMIN” for users to select. You are free to create Intune device category for each department !!
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…
