I know this is 10 months old, but I have a question related to Hybrid Joined devices. Since local AD is authoritative, is there any issue with Endpoint security policy bumping heads with existing GPO's? I mean, why would one wish to have TWO PLACES to administer this? Example: PC's are deployed via WDS/MDT and updated drivers and Windows patches post "image" to include gpupdate /force prior to employee picking-up gear or sending to their home (in work from home scenario). New user profiles logged-on and MFA established as well as full config of Outlook and Teams. Users connect via VPN so should still get updates to GP. But some employees have little need to connect VPN nowadays since so much is now in the cloud (SharePoint/OneDrive).
Thank you for your comment. We understand your concern about having two places to administer the Endpoint Security Policy. We recommend using the Microsoft Endpoint Security Policy for the devices that are connected to the local AD and the GPO for the devices that are not connected to the AD. This will allow you to have the most up-to-date security policy for all the devices and ensure that they are secure. If you have any further questions, please feel free to reach out to us at trainings@memcourse.com. Thank you.
@@PaddyMaddy26 Thanks for these wonderful videos. It would be great if you can share detailed video on windows update for business, taking care of patching. Also how could we use intune to push the softwares and update those softwares vis Intune. Thanks.
Microsoft Intune Analyze your on-premises GPOs using Group Policy Analytics DEMO
I know this is 10 months old, but I have a question related to Hybrid Joined devices. Since local AD is authoritative, is there any issue with Endpoint security policy bumping heads with existing GPO's? I mean, why would one wish to have TWO PLACES to administer this? Example: PC's are deployed via WDS/MDT and updated drivers and Windows patches post "image" to include gpupdate /force prior to employee picking-up gear or sending to their home (in work from home scenario). New user profiles logged-on and MFA established as well as full config of Outlook and Teams. Users connect via VPN so should still get updates to GP. But some employees have little need to connect VPN nowadays since so much is now in the cloud (SharePoint/OneDrive).
Thank you for your comment. We understand your concern about having two places to administer the Endpoint Security Policy. We recommend using the Microsoft Endpoint Security Policy for the devices that are connected to the local AD and the GPO for the devices that are not connected to the AD. This will allow you to have the most up-to-date security policy for all the devices and ensure that they are secure. If you have any further questions, please feel free to reach out to us at trainings@memcourse.com. Thank you.
Hi @PaddyMaddy
In real-time environment will company / requester share any source copy which policy they need and when they need ?
Hi sir can i know are u training on intune if yes how to contact u sir ur videos are very helpful
I am sharing the content here.. what other topics you wanted .... I can make few videos for you in TH-cam and Udemy
@@PaddyMaddy26 Thanks for these wonderful videos. It would be great if you can share detailed video on windows update for business, taking care of patching. Also how could we use intune to push the softwares and update those softwares vis Intune. Thanks.
Hi sir
@@PaddyMaddy26 can you please do an video how to patching/windows updates which was pushed by Microsoft on every month second Tuesday