1. Windows Intune Getting Started Guide
Cloud Based Device Management
By Stuart King
Windows Intune is a cloud based Device Managementmonthlysubscription solution from Microsoft which can
be used to manage, secure, update and deploy applications to PCs, laptops,mobile devices including iPhones
/ iPads / Andriod devices etc.
It's perfect for organisations who wish to manage internetenabled devices buthave no dedicated IT staff or
dedicated managementhardware.Or for oganisations who wish to lower their device managementcosts.
IT administrators simplylogin to the Windows Intune Admin Console via a web browser and manage all the
devices in an organisation.
End users simplylogin to their "CompanyPortal" and from there they can enroll and manage their devices and
access applcations.
Windows Intune also includes the superb Windows Intune Endpoint Protection anti-virus / malware for those
that require a business grade anti-virus solution.
Step 1: Send Windows Intune Trial to Client
Login to account.managemicrosoft.com
Navigate to the Partner Link and create a trial link
Sign up for Windows Intune on behalfof the client using their O365 defaultAdmin details ifpresent
2. Step 2: Login to your Windows Intune Admin account
Once you have setup your Windows Intune Admin accountyou will need to login.To do this go to:
Windows Intune Account Admin or type account.manage.microsft.com in to any web browser
From here you can add Users,assign and purchase more licenses etc as shown below:
Step 3: Navigate / Login to the Windows Intune Admin Console
From the Windows Intune Account Admin selectthe Admin Console link as shown above.This is where the
actual configuration of Windows Intune takes place.From here you can:
Download the clientsoftware
View an easy to understand Overview of your IT estate health
Create Groups of Users or Computers or both
Configure and or Approve Updates for various Microsoft products
Configure and get overviews of EndpointProtection
Configure Alerts and Monitoring
Deploy and Manage software
Manage Microsoft Volume Licensing and Software Licensing Agreements
Configure,app and deploy Policies
View Reports
Administer your Windows Intune Admin Console
3. Step 4: Download the Windows Intune Client software
First you will need to download the Windows Intune Clientsoftware.You do this by:
Navigating down to Administration then select Client Software Download as shown below:
This will download the Windows_Intune_Setup.zip file
Once downloaded,rightclick on this file and select Extract
This will then produce a Windows_Intune_Setup folder which contains 2 files -
Windows_Intune_Setup.exe and WindowsIntune.accountcert
You must keep these 2 files together
You can then copy the Windows_Intune_Setup folder to a network share or USB drive
4. Step: 5 Install the Windows Intune Client software / Enroll Devices
Once you have the Windows Intune Clientsoftware downloaded,extracted and stored on a network or portable
medium,you can now begin to install the client software on your devices.You can install Windows Intune via
various methods including:
Install Windows Intune via Group Policy - Useful when rolling outWindows Intune to multiple machines
over various sites
Install Windows Intune via Imaging - New computers are automaticallyenrolled in Windows Intune
Install Windows Intune on a PC by PC basis - Going round each PC and running
Windows_Intune_Setup.exe via a USB drive / Share
End users can also enroll their devices via the Company Portal. Use this method to enroll iOS devices such as
iPhones.To do this,simply:
Direct end users to your CompayPortal or the Windows Intune website via the URL or email and advise
them to select My Account at righthand side
End users then login with their Windows Intune User credentials
Accept the promptto install the your company's managementprofile
Step 6: Organise your Computers / Devices in to Groups
Installing the Windows Intune Client doesn't do very much. You now mustreturn to the Windows Intune
Admin Console to get the mostout of Windows Intune PC / Device Management.A good place to start is to
organise your Users,Computers and or devices in to Groups.This is done via the Groups icon in the Windows
Intune Admin Console as shown
5. As with any organisational management,planning your groups and setting a universal scheme and sticking
to it will make future deployments and managementmuch easier.So please plan your groups outusing
schemes such as sites,departments, location,device types etc. Similar to OU planning in Active Directory.
Having numerous Users or Computers as "Ungrouped"will work butwill end up being a managementand
deploymentnightmare!
Step 7: Set Policies
OK now you have deployed the Window Intune Clientand organised your organisation in to Groups of users and
computers.However this still doesn'tachieve very much.The enforcementofcertain policies will setrules in your
organisation.Windows Intune allows the simple creation and deploymentpolicies.To set Policies,navigate down
to the Policies icon then selectNew Policy as shown:
6. From here you can choose from 4 Policies with Recommended Settings or Create and Deploy Custom
Policies,details ofthese Policies below:
Mobile Device Policy
9. Step 8: Automatically Approve Windows Updates
One of the primary aims ofcloud based device managementis to make device administration simple, quick and
even automatic.So as an IT admin or someone responsible for IT devices,you don't wantto spend all day
approving Windows productupdates.Be clever and have this done automatically.To do this simply:
Navigate to the Administration icon and selectUpdates as shown:
Now scroll down to Automatic Approval Rules as shown:
10. Click New then customise the General, Product Categories, Update Classifications,
Deployment and Summary screens then click finish
Future updates will now deployautomatically
Step 9: Configure Alerts
There is NO pointin having a device managementsystem ifno one ever is alerted to any issues.So configure
alerts by:
Navigating to Administration then selecting Alerts and Notifications as shown:
11. From here you can configure alert type and recipients
Following the above guide should be enough to get you started with Windows Intune