{"id":2993,"date":"2024-01-02T12:19:06","date_gmt":"2024-01-02T11:19:06","guid":{"rendered":"http:\/\/rolig.dk\/?p=2993"},"modified":"2024-04-28T09:01:56","modified_gmt":"2024-04-28T08:01:56","slug":"modern-management-part-2-intune-preparation","status":"publish","type":"post","link":"https:\/\/rolig.dk\/?p=2993","title":{"rendered":"Modern Management \u2013 Part 2: Intune Preparation"},"content":{"rendered":"\n

This is part 2 of the modern management series. In this article we will prepare Intune for Autopilot.<\/p>\n\n\n\n

\n\n\n\n

Groups<\/strong><\/p>\n\n\n\n

We are going to use groups to assign the auto pilot devices to profiles. This will make us able to control per role setting and deployments. I will suggest that you find a naming standard that make sense for you.<\/p>\n\n\n\n

Sign-in to Microsoft Intune admin center<\/a> -> Click Groups<\/strong><\/td>\"\"<\/td><\/tr>
Click New group<\/strong><\/td>\"\"<\/td><\/tr>
Add Group name<\/strong>

Add Group description<\/strong> (Optional)

Choose Dynamic Device<\/strong>

Click Add dynamic query<\/strong><\/td>		\"\"<\/td><\/tr>
Click Edit<\/strong><\/td>\"\"<\/td><\/tr>
Paste the following query:
(device.devicePhysicalIds -any _ -contains “[ZTDId]”) and (device.devicePhysicalIds -any _ -eq “[OrderId]:OFFICE”)<\/strong>

In this example I tag the pc’s in the group as “Office”

Click Ok<\/strong><\/td>		\"\"<\/td><\/tr>
Click Save<\/strong><\/td>\"\"<\/td><\/tr>
Click Create<\/strong><\/td>\"\"<\/td><\/tr>
You should now see the group that you have created. I have created more than one group as I want to be able to assign pcs to different profiles.<\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Applications for deployment profile<\/strong><\/p>\n\n\n\n

Add the application that you want to be installed during enrollment. In this example I will add two applications. Microsoft Edge and Company portal.<\/p>\n\n\n\n

Click Apps<\/strong> -> Click Windows<\/strong><\/td>\"\"<\/td><\/tr>
Click Add<\/strong><\/td>\"\"<\/td><\/tr>
Select Microsoft Store app (new)<\/strong> -> Click Select<\/strong><\/td>\"\"<\/td><\/tr>
Click -> Select<\/strong><\/td>\"\"<\/td><\/tr>
Click Search the Microsoft Store app (new)<\/strong><\/td>\"\"<\/td><\/tr>
Search for company portal<\/strong> -> Mark it -> Click Select<\/strong><\/td>\"\"<\/td><\/tr>
Modify the setting to your needs -> Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Add Assignments to your needs -> Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Review the setting -> Click Create<\/strong><\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Autopilot Deployment Profile<\/strong><\/p>\n\n\n\n

In the deployment profiles we choose what behavior we want when a pc being enrolled.<\/p>\n\n\n\n

Click Devices<\/strong> -> Windows<\/strong><\/td>\"\"<\/td><\/tr>
Click Windows enrollment<\/strong> -> Automatic Enrollment<\/strong><\/td>\"\"<\/td><\/tr>
Verify the Automatic Enrollment setting<\/strong> -> Click Windows | Windows enrollment<\/strong><\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Windows Hello for Business<\/strong><\/p>\n\n\n\n

You can enable and define requirements in “Windows Hello for Business”<\/p>\n\n\n\n

Click Windows Hello for Business<\/strong><\/td>\"\"<\/td><\/tr>
Enable<\/strong> Windows Hello for Business and modify the settings as you would like them to be -> Click Save<\/strong> -> Close Windows Hello for Business<\/strong> window.<\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Enrollment Status Page<\/strong><\/p>\n\n\n\n

Click Enrollment Status Page<\/strong><\/td>\"\"<\/td><\/tr>
Click Create<\/strong><\/td>\"\"<\/td><\/tr>
Add a Name<\/strong> -> Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Select the setting that you desire. Just be aware about “Blocking apps”. You have to make sure that they get installed otherwise the enrollment will break.

Click Next<\/strong><\/td>		\"\"<\/td><\/tr>
Assign it to the group that we crated earlier.

Click Next<\/strong><\/td>		\"\"<\/td><\/tr>
Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Review the settings

Click Create<\/strong><\/td>		\"\"<\/td><\/tr>
You can now see the profile on the enrollment page<\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

Deployment Profiles<\/strong><\/p>\n\n\n\n

Click Enrollment Status Page<\/strong><\/td>\"\"<\/td><\/tr>
Click Create profile<\/strong> -> Windows PC<\/strong><\/td>\"\"<\/td><\/tr>
Enter a Name<\/strong> -> Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Choose the setting that you want -> Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Assign the Office group<\/strong> that we created earlier -> Click Next<\/strong><\/td>\"\"<\/td><\/tr>
Review the setting -> Click Create<\/strong><\/td>\"\"<\/td><\/tr>
Create the number of profiles that you need in your environment.<\/td>\"\"<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Intune is now setup with some basic setting to get started. Continue to part 3 to prepare a pc for enrollment.<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\"twitter\"<\/a>\"linkedin\"<\/a>","protected":false},"excerpt":{"rendered":"

This is part 2 of the modern management series. In this article we will prepare Intune for Autopilot. Groups We are going to use groups to assign the auto pilot devices to profiles. This will make us able to control per role setting and deployments. I will suggest that you find a naming standard that […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[72],"tags":[82,83,84,91,89,73,74,77,78,54,81],"class_list":["post-2993","post","type-post","status-publish","format-standard","hentry","category-intune","tag-autopilot","tag-azure","tag-deployment","tag-endpoint-manager","tag-entra","tag-intune","tag-mdm","tag-modern-management","tag-windows","tag-windows-10","tag-windows-11"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts\/2993","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2993"}],"version-history":[{"count":31,"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts\/2993\/revisions"}],"predecessor-version":[{"id":3217,"href":"https:\/\/rolig.dk\/index.php?rest_route=\/wp\/v2\/posts\/2993\/revisions\/3217"}],"wp:attachment":[{"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rolig.dk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}