Great videos Andy. Thank you very much for making the videos. It would be great if you could make a complete demo video instead of just touching the topics. A complete demo with output would clarify how to set it up and how it actually works. Cheers
Another excellent tutorial Andy. Really enjoy your videos. As orhers have said, a brief overview of how Windows Autopatch fits into the update rings equation would be really handy 👍
@@extramild1 unfortunate there is no courseware available yet John. I do however believe that it’s being released shortly, which will hopefully then allow me to develop something. However, I would say that both of my recent videos to cover quite a bit of the content.
Great tutorial!! Just a small doubt though. Are update ring policies a combination of feature and quality update policies? Do we need to configure feature and quality update policies if we are using update ring policies?
Hi Andy, I enjoy watching your guides, they are very easy to understand, and you have a great way to teach Intune. To the end you talk about windows update rings and how to make them yourself. But as we now have Autopatch, I think Microsoft have taken update management to a new level in Intune. Are you comming with an episode on Autopatch and all the new functions in the May 2023 release?
What kind of groups is best practise to assign to update rings, devices or users? When applying to users, like your Sales group it is applying to all device where the users are logging in.
Hey Andy! Thanks for another great video! Question: I noticed that App protection policies and Windows configurations>Templates>Device restrictions seem to have the same applicable configurations, but is there a difference between the two? If so, is it the app protection policies applies to the app and the device restrictions polices applies to the device?
@@AndyMaloneMVP Thank you for your quick response! It would be really helpful if you could create a video example for this. Also, do you have any in-depth videos on managing local administrators? By the way, I like to say, your TH-cam videos are the best out there. Your voice, gestures, and everything else are just awesome!
Hey Andy, the Intune series has been really useful. What’s the best way of licencing if for example in a 200 person org, 150 users only use a mobile for day to day work, using the Outlook & Teams mobile apps with a business basic licence, and the other 150 users use workstations and have a business premium licence & managed by Intune. The 150 mobile users therefore can’t be managed by intune but upgrading to premium is cost prohibitive
Hi Cris, thanks for the question. Business basic is exactly that, it’s a very basic addition of Microsoft 365. However, that said, all versions of Microsoft 365, come with a version of MDM on mobile device management, which includes mobile devices, but not PCs or Macs. You would need to upgrade to business premium for the full in tune suite but yes, you can use a combination of both, although you may find your business basic users limited in what they can do. Check out M365 maps.com and compare the plans through the visual aid it may help. Thanks again, and all the best, Andy
@@AndyMaloneMVP thanks for the reply. Right now my company is having a hard time dealing with updating these other applications through InTune and they seem pretty manual heavy. I heard MSFT is going to flesh this out more for non-Microsoft products. The only thing I am finding on the web is using 3rd party tools such as Patch My PC as the answer. Can a video be done detailing on how you would go about patching 3rd party applications or is there a resource out there already on this that I am missing? Thanks again.
Great Video, However would like to have a inputs on How to notify users about unused apps on windows set to specific days in Microsoft defender, As an example notifying user for an app unused for 45 day?
Good day Mr. Malone. Thank you for informative video. I would like to ask how to configur policy which allows apps o a windows device access location? Thank you in advace for response in advance.
Hi, Great video. I have configure update ring to download windows and office updates on monthly base but i'm only getting windows update. Office 365 is not updating. Do I need configure any configuration profile
365. Uses a separate mechanism to download office updates. But this can be done within the tune portal or separately in the Microsoft 365 portal for more documentation visit, learn.microsoft.com.
Is there any way to auto updates for non windows apps & window app ?? I deploy the app in intune and How we know that new version is available or not??
Hello Andy, thanks for the video. When i click on zoom in microsoft apps(new), i get an error message that says...""The selected app does not have a valid latest package version", what could be the reason?? thanks
Hi Andy, I noticed when I retire a device in intune, users who are logged on to edge browser ( edge for business), the profile is not removed and they can access one drive, sharepoint. I did a restart and still they were able to access. After that I unjoin the device from Domain and restarted. This time I could see the work profile still on edge browser but I was asked to switch to edge profile and forced me to register on intune. Now I have set policies in place to block personal device but my worry is that browser will remain active even when I retire the device in intune. And if sync is enabled there could be other devices with access if somehow they managed to log on. If there is a breach attacker could potentially get access to confidential sites. Is there a solution to this
Hi, why would we want to deffer updates these days. Is it not true that updates etc are first made available for home editions etc, and after a while made available for the "business" OS's ?
What would be the best way to update pre-existing Windows App packages with a newer version of the software? For instance, with an app type of Line-of-business, can I simply replace the MSI with the newer version of the application or would it be better to create another identical app with the new version and deploy that then come back to the old app and uninstall from all users by changing the assignment. Thanks
You can do this in configuration policies in inches. More details I will check out lined up microsoft.com opposite the Microsoft community. Either way, I wish you success.
Is it possible to deploying apps that have alot of installation steps? Like importing a lisence file, choosing server address, choosing a database etc?
These types of apps require a special deployment method as they are classed as Legacy applications. He is more details. learn.microsoft.com/en-us/mem/intune/apps/apps-win32-add
Do you know when win32 apps will be available for instalaltion through th enew intunes? all o fthem seem to say currently unsupported in preview for example zoom, teams etc
If you go to learn.microsoft.com, there is an article on converting Win32 based apps into an Intuwin file. Once package to you, then decline like any regular app in Intune.
I love the amount of depth being covered in this video! Thank you Andy! I will need to watch this a few times to catch everything.
Thank you for the awesome tutorial once again Andy! I have been binge watching your playlists! Learning so much
First! Great Video Andy, thank you for putting this together very helpful
Another great video Andy. You really rock.
Another good tutorial Andy thanks very much
Amazing & awesome tutorials Sir.
Great videos Andy. Thank you very much for making the videos. It would be great if you could make a complete demo video instead of just touching the topics. A complete demo with output would clarify how to set it up and how it actually works. Cheers
I do, but you have to pay for that I'm afraid. Full courses are available to my Patreon Subscribers :-) I have to make a living somehow you know :-)
Another excellent tutorial Andy. Really enjoy your videos. As orhers have said, a brief overview of how Windows Autopatch fits into the update rings equation would be really handy 👍
No worries, I’ll add it to my list 😊
Amazing and SO helpful
Cheers Andy - thanks for this.
Thanks John
@@AndyMaloneMVP Hey Andy - do have any plans to do a vid on MD 102 MCP exam?
@@extramild1 unfortunate there is no courseware available yet John. I do however believe that it’s being released shortly, which will hopefully then allow me to develop something. However, I would say that both of my recent videos to cover quite a bit of the content.
Great tutorial!! Just a small doubt though. Are update ring policies a combination of feature and quality update policies? Do we need to configure feature and quality update policies if we are using update ring policies?
You can do together or separately. Learn.Microsoft.com
Hi Andy, I enjoy watching your guides, they are very easy to understand, and you have a great way to teach Intune. To the end you talk about windows update rings and how to make them yourself. But as we now have Autopatch, I think Microsoft have taken update management to a new level in Intune. Are you comming with an episode on Autopatch and all the new functions in the May 2023 release?
I’ll do a video on that n due course 👍
What kind of groups is best practise to assign to update rings, devices or users? When applying to users, like your Sales group it is applying to all device where the users are logging in.
Security Groups - Devices
Hey Andy! Thanks for another great video! Question: I noticed that App protection policies and Windows configurations>Templates>Device restrictions seem to have the same applicable configurations, but is there a difference between the two? If so, is it the app protection policies applies to the app and the device restrictions polices applies to the device?
Probably the same settings
Thanks for your amazing video, What is the difference between Scope tags and assignments?
Scope tags are used in search and filtering procedures. Assignments are where you assign apps, configurations or policies to users or devices.
@@AndyMaloneMVP Thank you for your quick response! It would be really helpful if you could create a video example for this. Also, do you have any in-depth videos on managing local administrators? By the way, I like to say, your TH-cam videos are the best out there. Your voice, gestures, and everything else are just awesome!
Hey Andy, the Intune series has been really useful. What’s the best way of licencing if for example in a 200 person org, 150 users only use a mobile for day to day work, using the Outlook & Teams mobile apps with a business basic licence, and the other 150 users use workstations and have a business premium licence & managed by Intune. The 150 mobile users therefore can’t be managed by intune but upgrading to premium is cost prohibitive
Hi Cris, thanks for the question. Business basic is exactly that, it’s a very basic addition of Microsoft 365. However, that said, all versions of Microsoft 365, come with a version of MDM on mobile device management, which includes mobile devices, but not PCs or Macs. You would need to upgrade to business premium for the full in tune suite but yes, you can use a combination of both, although you may find your business basic users limited in what they can do. Check out M365 maps.com and compare the plans through the visual aid it may help. Thanks again, and all the best, Andy
Thanks for the vid. What is the best and easiest method for third party app updates?
Intune :-0)
@@AndyMaloneMVP thanks for the reply. Right now my company is having a hard time dealing with updating these other applications through InTune and they seem pretty manual heavy. I heard MSFT is going to flesh this out more for non-Microsoft products. The only thing I am finding on the web is using 3rd party tools such as Patch My PC as the answer. Can a video be done detailing on how you would go about patching 3rd party applications or is there a resource out there already on this that I am missing? Thanks again.
@@deitybnb8217Give a try to "Winget AutoUpdate", maybe it's not the most powerful option but very simple to implement on InTune
Great Video, However would like to have a inputs on How to notify users about unused apps on windows set to specific days in Microsoft defender, As an example notifying user for an app unused for 45 day?
I’ve not seen this personally, but if you’ll check out the documentation and learn.microsoft.com I’m sure the answer will be there thanks anyway.
Good day Mr. Malone. Thank you for informative video. I would like to ask how to configur policy which allows apps o a windows device access location? Thank you in advace for response in advance.
You would do that via Conditional Access & trusted network address or location.
Hi, Great video. I have configure update ring to download windows and office updates on monthly base but i'm only getting windows update. Office 365 is not updating. Do I need configure any configuration profile
365. Uses a separate mechanism to download office updates. But this can be done within the tune portal or separately in the Microsoft 365 portal for more documentation visit, learn.microsoft.com.
Great 😊
Is there any way to auto updates for non windows apps & window app ?? I deploy the app in intune and How we know that new version is available or not??
You can do this in Intune, but the vendor has to support it. You need to check the vendor support pages.
@@AndyMaloneMVP What about auto update app in intune ?? I don't want to update app version manually so what we have to follow??
Hello Andy, thanks for the video. When i click on zoom in microsoft apps(new), i get an error message that says...""The selected app does not have a valid latest package version", what could be the reason?? thanks
So a fresh download of the app and try to re publish. Sounds like a corruption.
Hi Andy, I noticed when I retire a device in intune, users who are logged on to edge browser ( edge for business), the profile is not removed and they can access one drive, sharepoint. I did a restart and still they were able to access. After that I unjoin the device from
Domain and restarted. This time I could see the work profile still on edge browser but I was asked to switch to edge profile and forced me to register on intune. Now I have set policies in place to block personal device but my worry is that browser will remain active even when I retire the device in intune. And if sync is enabled there could be other devices with access if somehow they managed to log on. If there is a breach attacker could potentially get access to confidential sites. Is there a solution to this
Enterprise roaming stores these settings. Disable it for the user / device
Hi,
why would we want to deffer updates these days. Is it not true that updates etc are first made available for home editions etc, and after a while made available for the "business" OS's ?
For small organisations, it’s not an issue, but for large organisations with thousands of PCs, it could be a problem. This is why 😊
What would be the best way to update pre-existing Windows App packages with a newer version of the software?
For instance, with an app type of Line-of-business, can I simply replace the MSI with the newer version of the application or would it be better to create another identical app with the new version and deploy that then come back to the old app and uninstall from all users by changing the assignment.
Thanks
You can do this in configuration policies in inches. More details I will check out lined up microsoft.com opposite the Microsoft community. Either way, I wish you success.
Use supersedence.
Is there a way to block auto updates for non windows apps (apps from for example Apple store)
You can block apps from the update store, I’m not sure about updates. But I’ve heard it will be added as a feature in the future.
@@AndyMaloneMVP Thank you for the clarification!
Is it possible to deploying apps that have alot of installation steps? Like importing a lisence file, choosing server address, choosing a database etc?
These types of apps require a special deployment method as they are classed as Legacy applications. He is more details. learn.microsoft.com/en-us/mem/intune/apps/apps-win32-add
What about auto update app in intune ?? I don't want to update app version manually so what we have to follow??
I would read the accompanying documentation which can be found on lynne.microsoft.com for more details.
Do you know when win32 apps will be available for instalaltion through th enew intunes? all o fthem seem to say currently unsupported in preview for example zoom, teams etc
If you go to learn.microsoft.com, there is an article on converting Win32 based apps into an Intuwin file. Once package to you, then decline like any regular app in Intune.
@@AndyMaloneMVP Sorry is this different than Win32 apps ? Is this referring to the new Microsoft Store (New) ?
Is it possible to update ios apps via intune? We hide the app store and can't figure out how to push out updates
Yes, you can update apps within in tune, but you do not have control of which particular non-Windows updates at the moment.
@@AndyMaloneMVP ok thanks
you didn't show the full process after creating the APP you should show how it gets deployed to the machine or how to manually pull down the app.
good