Intune

Creating your tenant

Trials

Sign up for trials:

• Intune (30 Days) - https://docs.microsoft.com/en-us/intune/free-trial-sign-up
• EMS (90 Days) - https://www.microsoft.com/en-us/cloud-platform/enterprise-mobility-security-trial
• O365 E3 - https://products.office.com/en-us/business/office-365-enterprise-e3-business-software

Network Requirements

https://docs.microsoft.com/en-us/intune/network-bandwidth-use

Configuring your tenant

Obtaining and installing Apple APN

https://docs.microsoft.com/en-us/intune/apple-mdm-push-certificate-get

1. Azure Portal
2. Intune Blade
   1. Manage -> Device Enrollment
      1. Apple enrollment

Mobile Application Management (MAM)

1. Intune
2. Mobile Apps
3. App Protection Policies

MFA

• https://docs.microsoft.com/en-us/intune/multi-factor-authentication

iOS

• https://docs.microsoft.com/en-us/intune/apple-configurator-enroll-ios

Windows

Deeplink

ms-device-enrollment:?mode={mode_name}
Example = ms-device-enrollment:?mode=mdm

Troubleshooting

https://support.microsoft.com/en-us/help/4469913/troubleshooting-windows-device-enrollment-problems-in-microsoft-intune https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Meeting-Apple-s-New-Requirements-for-Application-Transport/ba-p/279944 https://github.com/jchri/ProbeTLSforATS

Device Compliance

• https://azureinfohub.azurewebsites.net/contentitems/Details/593295

Remote Tasks

• Intune – Passcode Reset and Microsoft PIN Reset Service
• Reset the passcode on Windows devices using Intune

Android Enterprise

Work Profile

https://social.technet.microsoft.com/Forums/en-US/13de10f8-210a-41b3-b49b-d82fbe768faf/android-for-work-contacts-profiles?forum=microsoftintuneprod

Logs

1. Event Viewer
2. View Menu
3. View Analytic and Debug Logs
4. Applications and Services Logs
   1. Microsoft
   2. Windows
   3. DeviceManagement-Enterprise-Diagnostics=Provider
   4. Debug
5. Enable Log and preform actions

Audit Logs

• https://docs.microsoft.com/en-us/intune/monitor-audit-logs

Conditional Access

• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#legacy-authentication
• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
• https://docs.microsoft.com/en-us/intune/conditional-access
• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition#location-condition-configuration
• https://social.technet.microsoft.com/Forums/en-US/c99f5efd-50c5-4a69-b500-261da97011f7/intune-conditional-access-named-locations-trusted-ips-not-working
• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

Email settings

• https://docs.microsoft.com/en-us/intune/email-settings-configure
• https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/create-exchange-activesync-profiles
• https://docs.microsoft.com/en-us/intune/exchange-connector-install

OMA-URI

• Blog - Intune: Deploying ADMX-Backed policies using Microsoft Intune

Development

• https://docs.microsoft.com/en-us/intune/app-sdk-get-started
• https://docs.microsoft.com/en-us/intune/app-wrapper-prepare-android