{"id":2880,"date":"2023-11-19T14:13:21","date_gmt":"2023-11-19T13:13:21","guid":{"rendered":"http:\/\/rolig.dk\/?p=2880"},"modified":"2024-04-28T09:01:06","modified_gmt":"2024-04-28T08:01:06","slug":"modern-management-part-1-azure-preparation","status":"publish","type":"post","link":"https:\/\/rolig.dk\/?p=2880","title":{"rendered":"Modern Management – Part 1: Azure Preparation"},"content":{"rendered":"\n

Intro:<\/strong><\/p>\n\n\n\n

This is the first article about getting started with Windows modern management. Kind of a “A to (Z)” guide. I will never get to Z, as things is changing all the time. But at least this will get you started.<\/p>\n\n\n\n

Pre-Req:<\/strong> You need to have a Microsoft Entra ID P2 with a global administrator account.<\/p>\n\n\n\n

This is part 1 of the “Modern Management” series. <\/p>\n\n\n\n

\n\n\n\n

Accounts<\/strong><\/p>\n\n\n\n

It is not recommended to use your global admin account on a daily basis. For that we need to create another account.<\/p>\n\n\n\n

Sign in to the Home – Microsoft Azure<\/a><\/td>\"\"<\/td><\/tr>
Search for “intr<\/strong>” and click “Microsoft Entra ID<\/strong>“<\/td>\"\"<\/td><\/tr>
Click Users<\/strong><\/td>\"\"<\/td><\/tr>
Click New user<\/strong> -> Create new user<\/strong><\/td>\"\"<\/td><\/tr>
Fill in User principal name<\/strong> + Display name<\/strong> + Password<\/strong> (If you don’t want to have a auto-generated)

Click Review + Create<\/strong><\/td>		\"\"<\/td><\/tr>
Review the user account details.

Click Create<\/strong><\/td>		\"\"<\/td><\/tr>
To assign “Usage location” to the new user click On the username<\/strong><\/td>\"\"<\/td><\/tr>
Click Properties<\/strong><\/td>\"\"<\/td><\/tr>
Click Settings<\/strong><\/td>\"\"<\/td><\/tr>
Select the Usage location<\/strong> -> Click Save<\/strong><\/td>\"\"<\/td><\/tr>
Click Licenses<\/strong><\/td>\"\"<\/td><\/tr>
Click Assignments<\/strong><\/td>\"\"<\/td><\/tr>
Select the licens<\/strong> -> Click Save<\/strong><\/td>\"\"<\/td><\/tr>
You can see that the license has been assigned in the overview<\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Privileged Identity<\/strong><\/p>\n\n\n\n

Sign in to the Home – Microsoft Azure<\/a><\/td>\"\"<\/td><\/tr>
Find and open “Privileged Identity Management<\/strong>” <\/td>\"\"<\/td><\/tr>
Click Microsoft Entra roles<\/strong><\/td>\"\"<\/td><\/tr>
Click Assign Eligibility<\/strong><\/td>\"\"<\/td><\/tr>
Click Add assignments<\/strong><\/td>\"\"<\/td><\/tr>
Under Membership<\/strong> -> select a role<\/strong> -> Select member<\/strong> of the role.

Click Next<\/strong><\/td>		\"\"<\/td><\/tr>
Under setting <\/strong>-> modify the setting as you desire.

Click Assign<\/strong><\/td>		\"\"<\/td><\/tr>
Click Roles<\/strong> -> Search for the Intune Administrator role -> click on it.<\/td>\"\"<\/td><\/tr>
Click Role settings<\/strong> -> Click Edit<\/strong><\/td>\"\"<\/td><\/tr>
Modify the setting as you desire.

Click Next: Assignment<\/strong><\/td>		\"\"<\/td><\/tr>
Modify the setting as you desire.

Click Next: Notification<\/strong><\/td>		\"\"<\/td><\/tr>
Modify the setting as you desire.

Click Update<\/strong><\/td>		\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

To enable PIM on your account:<\/p>\n\n\n\n

Login to Azure -> Search for pri<\/strong> -> Click Microsoft Entra Privilege Identity Management<\/strong><\/td>\"\"<\/td><\/tr>
Click My roles<\/strong><\/td>\"\"<\/td><\/tr>
Click Activate<\/strong> on the role that you want.<\/td>\"\"<\/td><\/tr>
Select the Duration (Hours)<\/strong> -> Type a reason<\/strong> -> Click Activate<\/strong><\/td>\"\"<\/td><\/tr>
To verify -> Click Active assignments<\/strong>

You can see that I have activated the Intune Administrator<\/strong><\/td>		\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Azure settings<\/strong><\/p>\n\n\n\n

Sign in to the Home – Microsoft Azure<\/a><\/td>\"\"<\/td><\/tr>
Search for “intr” and click “Microsoft Entra ID”<\/td>\"\"<\/td><\/tr>
Click Mobility (MDM and MAM)<\/strong> -> Microsoft Intune<\/strong><\/td>\"\"<\/td><\/tr>
Select All<\/strong> in the MDM user scope<\/strong>

Select All<\/strong> in the MAM user scope<\/strong><\/td>		\"\"<\/td><\/tr>
Click X<\/strong><\/td>\"\"<\/td><\/tr>
Click Company branding<\/strong><\/td>\"\"<\/td><\/tr>
Click Default sign-in<\/strong> -> Click Customize<\/strong><\/td>\"\"<\/td><\/tr>
Modify the setting that you desire.

Click Review + Create<\/strong><\/td>		\"\"<\/td><\/tr>
Click Create<\/strong><\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Azure is now setup. Continue to part 2 to configure Intune.<\/a><\/p>\n\"twitter\"<\/a>\"linkedin\"<\/a>","protected":false},"excerpt":{"rendered":"

Intro: This is the first article about getting started with Windows modern management. Kind of a “A to (Z)” guide. I will never get to Z, as things is changing all the time. But at least this will get you started. Pre-Req: You need to have a Microsoft Entra ID P2 with a global administrator […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[72],"tags":[82,83,84,91,89,73,74,77,78,54,81],"class_list":["post-2880","post","type-post","status-publish","format-standard","hentry","category-intune","tag-autopilot","tag-azure","tag-deployment","tag-endpoint-manager","tag-entra","tag-intune","tag-mdm","tag-modern-management","tag-windows","tag-windows-10","tag-windows-11"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts\/2880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2880"}],"version-history":[{"count":3,"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts\/2880\/revisions"}],"predecessor-version":[{"id":3646,"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts\/2880\/revisions\/3646"}],"wp:attachment":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2880"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2880"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}