Excellent ! I'm swtiching to the IT as a Beginner after 9 years of IT sales and Coordination, you help me so much with your tips and high quality training !
I would love to see a video explaining the process of moving devices, like laptops, from being managed by an on prem Configuration Manager to the cloud based InTune. Our district has thousands of laptops that are a still controlled/managed by Configuration Manager. I've tried researching this move process, but either the info is outdated or forums state "it can't be done in an automated way." I would prefer to use the Fresh Start method of cleaning laptops compared to re-imaging them! Any thoughts or guidance?
Great training videos! I'm new to the Intune administation and your videos have helped me learn a great deal already in my path to becoming an IT Pro. Can you do a video on the new feature for AutoPatch? That would help out a lot as my organization is adopting this path for workstation patching and migrating it from on-prem SCCM.
Hey Andy! First off, absolutely great video! That said, one of the huge troublemakers for me with Intune is making apps available for users via the company portal, as not all our users enjoy elevated priveliges to install software off the internet. Adding and updating the apps available to users feels like pulling teeth, and is often en excercise in trial and error without clear guidance on what went wrong. It's super indepth and very fiddly, do you think you could make a video on it?
Thanks very much for your request. At the moment, Microsoft are in the process of improving both elevation and app installation. In the next few months, you will see some changes that I think will make your life a lot easier. So yes I will add this request to my list. In the meantime, thanks for your support on my channel and keep watching 😊
I love this video, so easy to follow. My scenario is that I have 50 devices already enrolled into Azure AD before we implemented Endpoint. There does not seem to be an easy way to get them to enrol in Endpoint without having to disconnect them and rejoin them completely to Azure AD?
Hi Andy, great video thank you, one question, within Endpoint Security, you mention ' Antivius - Windows Defender etc ' but can you define a 3rd party Antivirus software there ?
You mentioned the requirement for having the mobility and security license along with E3. Is it still possible to enroll devices without the mobility and security license, or is that a non-starter if it doesn't exist?
Great video! So in hybrid environment, is the future way of thinking to have you're users on the Local AD (synching to Azure AD), but not join the machines to the Local AD, only the Azure AD? Can you join the Windows workstations to both a Local AD and Azure AD or is it just one or the other? If it's only one and all my workstations are already on a Local AD, do I need to disjoin them from the local domain before joining them to the Azure AD? Thanks.
@@AndyMaloneMVP Thanks for the reply. So all my all current Windows workstations, I need to disjoin them from the local domain before joining them to the Azure AD So is this the way things are heading then, to have you're users on the Local AD (synching to Azure AD), but the workstations joined to the Azure AD?
Is there a way to bulk upload all devices on the domain into the MDM? Would take forever to log into each computer and sign into the work/school account.
So what do you do for windows device enrollment if you already have all your devices joined to on prem AD? I have all the licensing and M365 tenancy setup.
@@AndyMaloneMVP Something strange, I noticed the "User Type" value is empty for domain users who existed before Azure AD came into existence. Do you have recommendations for changing the value to "Member" for the users in question? Thanks Andy!!
@@johnrhines3473 when you go into hybrid mode. Entra ID only brings across a subset of attributes. You can customise this in most cases it’s not necessary.
Hi Andy. With Hybrid joined AD DS / Azure. If I have local users and file server and then I join the DS can I link say on prem Acc BOB to Entra ID BOB? So that access to on-prem systems such as file shares and SQL servers still work?
Hi, I've got myself into a bit of a mess. I added a policy that restricted users being able to use elevated rights. I deleted that policy thinking that would solve my problem but it hasn't and I've since read that I need to apply a new policy to change the settings. Now I can't find which policy type to choose to reset this setting so that users can use elevated rights. Alternatively, is there a way of resetting all policies and starting again?
So I went ahead and joined my computer to Azure Active Directory before realizing I didn't have the adequate licensing. I changed the licensing and I am told I need to disconnect it and reconnect it before I can bring it into Intune. Is this right or is there some way to bring in Windows computers without having to do that?
Hey Andy, once again top video. However I do have a question in Intune > Devices > All Devices under the colum "Ownership" some are showing as "Personal" and some as "Corporate" can I change them to show as "Corporate"
You saved my life! I changed from a really standardized environment to Intune and it has been a huge pressure to take all that responsability
Awesome thanks 👍
I’m in the same boat as you, my friend. I see this comments from a year ago, so how was your in tune implementation and has it gotten easier for you?
Excellent ! I'm swtiching to the IT as a Beginner after 9 years of IT sales and Coordination, you help me so much with your tips and high quality training !
"Stay Tuned, you're going to learn something" Made me smile. Let's get learning!
Thanks Andy, I'm looking forward for more Intune videos.
My pleasure 👍😊
Excellent walkthrough. I certainly learnt a lot. Well done and thank you!
Glad it was helpful!
I would love to see a video explaining the process of moving devices, like laptops, from being managed by an on prem Configuration Manager to the cloud based InTune. Our district has thousands of laptops that are a still controlled/managed by Configuration Manager. I've tried researching this move process, but either the info is outdated or forums state "it can't be done in an automated way." I would prefer to use the Fresh Start method of cleaning laptops compared to re-imaging them! Any thoughts or guidance?
Windows autopilot
Thank you Andy for this guide. As always, great video
No problem 👍
Great training videos! I'm new to the Intune administation and your videos have helped me learn a great deal already in my path to becoming an IT Pro. Can you do a video on the new feature for AutoPatch? That would help out a lot as my organization is adopting this path for workstation patching and migrating it from on-prem SCCM.
Great video, thank you!
Hey Andy! First off, absolutely great video! That said, one of the huge troublemakers for me with Intune is making apps available for users via the company portal, as not all our users enjoy elevated priveliges to install software off the internet. Adding and updating the apps available to users feels like pulling teeth, and is often en excercise in trial and error without clear guidance on what went wrong. It's super indepth and very fiddly, do you think you could make a video on it?
Thanks very much for your request. At the moment, Microsoft are in the process of improving both elevation and app installation. In the next few months, you will see some changes that I think will make your life a lot easier. So yes I will add this request to my list. In the meantime, thanks for your support on my channel and keep watching 😊
Great guide. Liked. Subscribed.
Awesome, thank you!
What a relief…finally an instructor that speaks standard English. I just cannot understand the heavy Indian accents at all..very Annoying! Thank you 🙏
I love this video, so easy to follow. My scenario is that I have 50 devices already enrolled into Azure AD before we implemented Endpoint. There does not seem to be an easy way to get them to enrol in Endpoint without having to disconnect them and rejoin them completely to Azure AD?
You are correct. Hopefully MS will improve this in due course.
Hi Andy,
great video thank you, one question, within Endpoint Security, you mention ' Antivius - Windows Defender etc ' but can you define a 3rd party Antivirus software there ?
Why would you? Actually you can link with Microsoft partners
@@AndyMaloneMVP ok thanks I was just curious
You mentioned the requirement for having the mobility and security license along with E3. Is it still possible to enroll devices without the mobility and security license, or is that a non-starter if it doesn't exist?
You can join Entra ID for the purposes of SSO but will not be able to manage. Some basic controls via Conditional access.
Great video!
So in hybrid environment, is the future way of thinking to have you're users on the Local AD (synching to Azure AD), but not join the machines to the Local AD, only the Azure AD?
Can you join the Windows workstations to both a Local AD and Azure AD or is it just one or the other?
If it's only one and all my workstations are already on a Local AD, do I need to disjoin them from the local domain before joining them to the Azure AD?
Thanks.
Windows workstations can only be either joined to a domain, or via Intune, one or the other, but not Bills, I’m afraid
@@AndyMaloneMVP Thanks for the reply. So all my all current Windows workstations, I need to disjoin them from the local domain before joining them to the Azure AD
So is this the way things are heading then, to have you're users on the Local AD (synching to Azure AD), but the workstations joined to the Azure AD?
Is there a way to bulk upload all devices on the domain into the MDM? Would take forever to log into each computer and sign into the work/school account.
Yes via a CSV file check documentation on learn.microsoft.com
Great video
Andy, what is the difference between clicking Turn this on Azure ID and the regular Intune? Do we have to pay more or something for it?
It's the same.
You mentioned you can wipe a device if you lose it. Does that mean the next time it is powered on it will connect and start wiping?
Yea
good video
So what do you do for windows device enrollment if you already have all your devices joined to on prem AD? I have all the licensing and M365 tenancy setup.
They need reset. Autopilot reset / or reimage
If we have M365 E3 and E5 licenses, do I also need to purchase separate Enterprise Mobility & Security licenses?
Yes
@@AndyMaloneMVP Something strange, I noticed the "User Type" value is empty for domain users who existed before Azure AD came into existence. Do you have recommendations for changing the value to "Member" for the users in question? Thanks Andy!!
@@johnrhines3473 when you go into hybrid mode. Entra ID only brings across a subset of attributes. You can customise this in most cases it’s not necessary.
@@AndyMaloneMVP I wasn't sure since most of our users were created between 2011 and 2014
Hi Andy. With Hybrid joined AD DS / Azure. If I have local users and file server and then I join the DS can I link say on prem Acc BOB to Entra ID BOB? So that access to on-prem systems such as file shares and SQL servers still work?
I’d watch this video it will answer your questions👍😊 th-cam.com/video/R6tWWTh7TIc/w-d-xo.htmlsi=Hsy6wUYkgA5TVN-Z
Hi, I've got myself into a bit of a mess. I added a policy that restricted users being able to use elevated rights. I deleted that policy thinking that would solve my problem but it hasn't and I've since read that I need to apply a new policy to change the settings. Now I can't find which policy type to choose to reset this setting so that users can use elevated rights. Alternatively, is there a way of resetting all policies and starting again?
Oh dear. I hope this helps :-) learn.microsoft.com/en-us/mem/intune/protect/epm-guidance-for-creating-rules
Hi there Andy am a student and want to set up an Azure lab to learn is there a free program i can take advantage of?
Here’s a good article redmondmag.com/articles/2023/06/02/how-to-get-a-microsoft-365-e5-subscription-for-free.aspx?m=1
So I went ahead and joined my computer to Azure Active Directory before realizing I didn't have the adequate licensing. I changed the licensing and I am told I need to disconnect it and reconnect it before I can bring it into Intune. Is this right or is there some way to bring in Windows computers without having to do that?
I love what you are doing here by the way!
I’d just do it. It won’t cause problems 😊
Thank you 😊👍
Awesome
Hey Andy, once again top video. However I do have a question in Intune > Devices > All Devices under the colum "Ownership" some are showing as "Personal" and some as "Corporate" can I change them to show as "Corporate"
This might help techcommunity.microsoft.com/t5/microsoft-intune/how-to-mark-a-device-ownership-as-quot-corporate-quot/m-p/1505826
Mate I hope in your later video's you bought a proper microphone. This is an oncamera mike and it's not very good
I think it was just this one my apologies