I would love to see a video explaining the process of moving devices, like laptops, from being managed by an on prem Configuration Manager to the cloud based InTune. Our district has thousands of laptops that are a still controlled/managed by Configuration Manager. I've tried researching this move process, but either the info is outdated or forums state "it can't be done in an automated way." I would prefer to use the Fresh Start method of cleaning laptops compared to re-imaging them! Any thoughts or guidance?
Excellent ! I'm swtiching to the IT as a Beginner after 9 years of IT sales and Coordination, you help me so much with your tips and high quality training !
Great training videos! I'm new to the Intune administation and your videos have helped me learn a great deal already in my path to becoming an IT Pro. Can you do a video on the new feature for AutoPatch? That would help out a lot as my organization is adopting this path for workstation patching and migrating it from on-prem SCCM.
Hey Andy! First off, absolutely great video! That said, one of the huge troublemakers for me with Intune is making apps available for users via the company portal, as not all our users enjoy elevated priveliges to install software off the internet. Adding and updating the apps available to users feels like pulling teeth, and is often en excercise in trial and error without clear guidance on what went wrong. It's super indepth and very fiddly, do you think you could make a video on it?
Thanks very much for your request. At the moment, Microsoft are in the process of improving both elevation and app installation. In the next few months, you will see some changes that I think will make your life a lot easier. So yes I will add this request to my list. In the meantime, thanks for your support on my channel and keep watching 😊
I love this video, so easy to follow. My scenario is that I have 50 devices already enrolled into Azure AD before we implemented Endpoint. There does not seem to be an easy way to get them to enrol in Endpoint without having to disconnect them and rejoin them completely to Azure AD?
Hi Andy, great video thank you, one question, within Endpoint Security, you mention ' Antivius - Windows Defender etc ' but can you define a 3rd party Antivirus software there ?
Great video! So in hybrid environment, is the future way of thinking to have you're users on the Local AD (synching to Azure AD), but not join the machines to the Local AD, only the Azure AD? Can you join the Windows workstations to both a Local AD and Azure AD or is it just one or the other? If it's only one and all my workstations are already on a Local AD, do I need to disjoin them from the local domain before joining them to the Azure AD? Thanks.
@@AndyMaloneMVP Thanks for the reply. So all my all current Windows workstations, I need to disjoin them from the local domain before joining them to the Azure AD So is this the way things are heading then, to have you're users on the Local AD (synching to Azure AD), but the workstations joined to the Azure AD?
Is there a way to bulk upload all devices on the domain into the MDM? Would take forever to log into each computer and sign into the work/school account.
Hi, I've got myself into a bit of a mess. I added a policy that restricted users being able to use elevated rights. I deleted that policy thinking that would solve my problem but it hasn't and I've since read that I need to apply a new policy to change the settings. Now I can't find which policy type to choose to reset this setting so that users can use elevated rights. Alternatively, is there a way of resetting all policies and starting again?
So what do you do for windows device enrollment if you already have all your devices joined to on prem AD? I have all the licensing and M365 tenancy setup.
Hi Andy. With Hybrid joined AD DS / Azure. If I have local users and file server and then I join the DS can I link say on prem Acc BOB to Entra ID BOB? So that access to on-prem systems such as file shares and SQL servers still work?
@@AndyMaloneMVP Something strange, I noticed the "User Type" value is empty for domain users who existed before Azure AD came into existence. Do you have recommendations for changing the value to "Member" for the users in question? Thanks Andy!!
@@johnrhines3473 when you go into hybrid mode. Entra ID only brings across a subset of attributes. You can customise this in most cases it’s not necessary.
Hey Andy, once again top video. However I do have a question in Intune > Devices > All Devices under the colum "Ownership" some are showing as "Personal" and some as "Corporate" can I change them to show as "Corporate"
So I went ahead and joined my computer to Azure Active Directory before realizing I didn't have the adequate licensing. I changed the licensing and I am told I need to disconnect it and reconnect it before I can bring it into Intune. Is this right or is there some way to bring in Windows computers without having to do that?
"Stay Tuned, you're going to learn something" Made me smile. Let's get learning!
You saved my life! I changed from a really standardized environment to Intune and it has been a huge pressure to take all that responsability
Awesome thanks 👍
I would love to see a video explaining the process of moving devices, like laptops, from being managed by an on prem Configuration Manager to the cloud based InTune. Our district has thousands of laptops that are a still controlled/managed by Configuration Manager. I've tried researching this move process, but either the info is outdated or forums state "it can't be done in an automated way." I would prefer to use the Fresh Start method of cleaning laptops compared to re-imaging them! Any thoughts or guidance?
Windows autopilot
Excellent ! I'm swtiching to the IT as a Beginner after 9 years of IT sales and Coordination, you help me so much with your tips and high quality training !
Thanks Andy, I'm looking forward for more Intune videos.
My pleasure 👍😊
Excellent walkthrough. I certainly learnt a lot. Well done and thank you!
Glad it was helpful!
Great training videos! I'm new to the Intune administation and your videos have helped me learn a great deal already in my path to becoming an IT Pro. Can you do a video on the new feature for AutoPatch? That would help out a lot as my organization is adopting this path for workstation patching and migrating it from on-prem SCCM.
Thank you Andy for this guide. As always, great video
No problem 👍
Hey Andy! First off, absolutely great video! That said, one of the huge troublemakers for me with Intune is making apps available for users via the company portal, as not all our users enjoy elevated priveliges to install software off the internet. Adding and updating the apps available to users feels like pulling teeth, and is often en excercise in trial and error without clear guidance on what went wrong. It's super indepth and very fiddly, do you think you could make a video on it?
Thanks very much for your request. At the moment, Microsoft are in the process of improving both elevation and app installation. In the next few months, you will see some changes that I think will make your life a lot easier. So yes I will add this request to my list. In the meantime, thanks for your support on my channel and keep watching 😊
Great video, thank you!
I love this video, so easy to follow. My scenario is that I have 50 devices already enrolled into Azure AD before we implemented Endpoint. There does not seem to be an easy way to get them to enrol in Endpoint without having to disconnect them and rejoin them completely to Azure AD?
You are correct. Hopefully MS will improve this in due course.
good video
Great video
Great guide. Liked. Subscribed.
Awesome, thank you!
Andy, what is the difference between clicking Turn this on Azure ID and the regular Intune? Do we have to pay more or something for it?
It's the same.
Hi Andy,
great video thank you, one question, within Endpoint Security, you mention ' Antivius - Windows Defender etc ' but can you define a 3rd party Antivirus software there ?
Why would you? Actually you can link with Microsoft partners
@@AndyMaloneMVP ok thanks I was just curious
Great video!
So in hybrid environment, is the future way of thinking to have you're users on the Local AD (synching to Azure AD), but not join the machines to the Local AD, only the Azure AD?
Can you join the Windows workstations to both a Local AD and Azure AD or is it just one or the other?
If it's only one and all my workstations are already on a Local AD, do I need to disjoin them from the local domain before joining them to the Azure AD?
Thanks.
Windows workstations can only be either joined to a domain, or via Intune, one or the other, but not Bills, I’m afraid
@@AndyMaloneMVP Thanks for the reply. So all my all current Windows workstations, I need to disjoin them from the local domain before joining them to the Azure AD
So is this the way things are heading then, to have you're users on the Local AD (synching to Azure AD), but the workstations joined to the Azure AD?
Awesome
You mentioned you can wipe a device if you lose it. Does that mean the next time it is powered on it will connect and start wiping?
Yea
Is there a way to bulk upload all devices on the domain into the MDM? Would take forever to log into each computer and sign into the work/school account.
Yes via a CSV file check documentation on learn.microsoft.com
Hi, I've got myself into a bit of a mess. I added a policy that restricted users being able to use elevated rights. I deleted that policy thinking that would solve my problem but it hasn't and I've since read that I need to apply a new policy to change the settings. Now I can't find which policy type to choose to reset this setting so that users can use elevated rights. Alternatively, is there a way of resetting all policies and starting again?
Oh dear. I hope this helps :-) learn.microsoft.com/en-us/mem/intune/protect/epm-guidance-for-creating-rules
So what do you do for windows device enrollment if you already have all your devices joined to on prem AD? I have all the licensing and M365 tenancy setup.
They need reset. Autopilot reset / or reimage
Hi Andy. With Hybrid joined AD DS / Azure. If I have local users and file server and then I join the DS can I link say on prem Acc BOB to Entra ID BOB? So that access to on-prem systems such as file shares and SQL servers still work?
I’d watch this video it will answer your questions👍😊 th-cam.com/video/R6tWWTh7TIc/w-d-xo.htmlsi=Hsy6wUYkgA5TVN-Z
Hi there Andy am a student and want to set up an Azure lab to learn is there a free program i can take advantage of?
Here’s a good article redmondmag.com/articles/2023/06/02/how-to-get-a-microsoft-365-e5-subscription-for-free.aspx?m=1
If we have M365 E3 and E5 licenses, do I also need to purchase separate Enterprise Mobility & Security licenses?
Yes
@@AndyMaloneMVP Something strange, I noticed the "User Type" value is empty for domain users who existed before Azure AD came into existence. Do you have recommendations for changing the value to "Member" for the users in question? Thanks Andy!!
@@johnrhines3473 when you go into hybrid mode. Entra ID only brings across a subset of attributes. You can customise this in most cases it’s not necessary.
@@AndyMaloneMVP I wasn't sure since most of our users were created between 2011 and 2014
Hey Andy, once again top video. However I do have a question in Intune > Devices > All Devices under the colum "Ownership" some are showing as "Personal" and some as "Corporate" can I change them to show as "Corporate"
This might help techcommunity.microsoft.com/t5/microsoft-intune/how-to-mark-a-device-ownership-as-quot-corporate-quot/m-p/1505826
So I went ahead and joined my computer to Azure Active Directory before realizing I didn't have the adequate licensing. I changed the licensing and I am told I need to disconnect it and reconnect it before I can bring it into Intune. Is this right or is there some way to bring in Windows computers without having to do that?
I love what you are doing here by the way!
I’d just do it. It won’t cause problems 😊
Thank you 😊👍
Mate I hope in your later video's you bought a proper microphone. This is an oncamera mike and it's not very good
I think it was just this one my apologies