Microsoft InTune - An Intro to Mobile Device Management

Microsoft Intune is a cloud-based service that’s used for mobile device management and mobile application management. In this lesson, we’ll take a look at what InTune is and at what it offers.

In this lesson, you’ll learn about common mobile device management goals and mobile application management goals. As we work through this lesson, we’ll cover 7 key tasks that you must complete when planning and completing a successful InTune Rollout.

In this lesson, we’ll quickly walk through the steps that you should take to enable mobile device management via InTune.

In this lesson, we’ll take a look at the role of RBAC in InTune

Most licenses that include Microsoft InTune also grant rights to use Microsoft Endpoint Configuration Manager. In this brief lesson, I just want to show you which license include InTune.

In this lesson, we’ll review the different enrollment options that are available for Android devices in InTune.

In this lesson, here, we are going to review the different options that are available when enrolling iOS an iPadOS devices. We’ll cover Automated device enrollment (ADE), Apple Configurator, and BYOD: User and Device enrollment.

An Apple MDM Push certificate is required for Intune to manage iOS/iPadOS and macOS devices. After you add the certificate to Intune, your users can enroll their devices. In this video demo, I'll show you how to acquire and configure an MDM Push Certificate.

In this video demonstration, I'll show you how to create an iOS enrollment profile in InTune.

In this video demonstration, I'll show you how a user can enroll an iPhone in InTune via the Company Portal.

In this lesson, we are going to take a look at the different Windows enrollment options available in Microsoft InTune. More specifically, we’ll look at Windows 10 Automatic enrollment, Windows Autopilot, Group policy, and Co-management.

Autopilot deployment profiles are used to configure the Autopilot devices. You can create up to 350 profiles per tenant. In this video demo, I'll show you how to create an Autopilot deployment profile in Microsoft InTune.

In this lesson, we are going to look at the different MacOS enrollment options that are available. We’ll look at BYOD: Device enrollment, and we’ll look at Automated device enrollment (ADE).

In this lesson, we’ll take a look at capabilities that become available once you’ve enrolled your devices in InTune.

As an admin, it's your job to ensure that users can use their devices to get work done, while ensuring your corporate data is protected. In this lesson, we'll take a look at key device management concepts.

Microsoft InTune helps protect organizational data allowing you to require that users and devices to meet certain requirements before accessing that data. This is accomplished through compliance policies. In this lesson, we are going to take a look at where compliance fits into InTune.

Using compliance policies in InTune, you can define rules and settings that users and devices must meet to be considered compliant. In this video demonstration, I'll show you how to create a device compliance policy in Microsoft InTune.

Integrating Microsoft Defender for Endpoint with Microsoft Intune allows you to create a complete Mobile Threat Defense solution. In this lesson, we’ll take a look at how you can integrate Defender for Endpoint with InTune, and why you’d do it.

In this lesson, you’ll be introduced to the policy types that you can use in InTune to configure BitLocker Drive Encryption on devices that run Windows 10 or later.

In this labIT PRO Microsoft InTune lab simulation, you'll create an endpoint security policy for BitLocker in the Microsoft Endpoint Manager Admin Center.

In this labIT PRO Microsoft InTune lab simulation, you'll create a device configuration profile for Windows 10 BitLocker in the Endpoint Manager Admin Center.

Microsoft InTune provides settings that you can enable or disable on different devices. These settings are added to what are called "configuration profiles" that you can create for different devices and platforms. In this lesson, you'll be introduced to important device configuration concepts.

In this lesson, I'll show you how to create and assign an email device profile for iOS and iPadOS devices in the Endpoint Manager Admin Center.

In this labIT PRO Microsoft InTune lab simulation,  you'll create and assign an email device profile for iOS and iPadOS devices in the Endpoint Manager Admin Center.

Microsoft InTune provides device restriction policies that can be used to control Android devices, iOS devices, iPadOS devices, macOS devices, and Windows devices. You can use the restrictions to control device settings and features on the devices themselves. In this quick lesson, I'll talk a little bit about device restrictions.

In this labIT PRO Microsoft InTune lab simulation, you'll create a device restrictions policy in the Endpoint Manager Admin Center.

While InTune does a great job as far as device management goes, you can also use it to manage client apps that your organization uses. In this lesson, we'll review important InTune app management concepts.

In this labIT PRO Microsoft InTune lab simulation,  you'll add and assign an app in the Endpoint Manager Admin Center.

App protection policies are sets of rules that you use to ensure that your organization's data remains safe or contained within a managed app. In this lesson, we are going to take a look at what app protection policies are and what they do.

In this Microsoft InTune lab simulation, you'll create an App Protection Policy in the Endpoint Manager Admin Center.

In this demonstration, you'll see how you can extract hardware IDs from Windows 10 machines, using PowerShell. The hardware IDs are used to register machines with InTune.

To complete this lab successfully, Berks Builders needs an Azure AD Premium P2 subscription.

To demonstrate how basic branding is performed, we'll upload a custom logo in this lab demo.

To complete this lab successfully, test user (Lester Murphy) needs to be licensed for Azure AD Premium P2 and Microsoft InTune.

The MDM User scope in Azure AD is used to define which users will be able to enroll their devices into InTune as part of automatic enrollment.

In this demonstration, you'll see how to register a machine in Autopilot, via the import of the CSV file created during the Hardware ID Capture that was performed.

In this demo, we'll create a device group called “Autopilot Machines” and we'll add WKSTN1 to the group. We'll also create a deployment profile called "Autopilot Lab". This profile will be assigned to the “Autopilot Machines” group.

In this demo, you'll get to see how Autopilot works.