1. Windows Intune Getting Started Guide
Cloud Based Device Management
By Stuart King
Windows Intune is a cloud based Device Managementmonthlysubscription solution from Microsoft which can
be used to manage, secure, update and deploy applications to PCs, laptops,mobile devices including iPhones
/ iPads / Andriod devices etc.
It's perfect for organisations who wish to manage internetenabled devices buthave no dedicated IT staff or
dedicated managementhardware.Or for oganisations who wish to lower their device managementcosts.
IT administrators simplylogin to the Windows Intune Admin Console via a web browser and manage all the
devices in an organisation.
End users simplylogin to their "CompanyPortal" and from there they can enroll and manage their devices and
access applcations.
Windows Intune also includes the superb Windows Intune Endpoint Protection anti-virus / malware for those
that require a business grade anti-virus solution.
 Step 1: Send Windows Intune Trial to Client
Login to account.managemicrosoft.com
Navigate to the Partner Link and create a trial link
Sign up for Windows Intune on behalfof the client using their O365 defaultAdmin details ifpresent

2.  Step 2: Login to your Windows Intune Admin account
Once you have setup your Windows Intune Admin accountyou will need to login.To do this go to:
 Windows Intune Account Admin or type account.manage.microsft.com in to any web browser
 From here you can add Users,assign and purchase more licenses etc as shown below:
 Step 3: Navigate / Login to the Windows Intune Admin Console
From the Windows Intune Account Admin selectthe Admin Console link as shown above.This is where the
actual configuration of Windows Intune takes place.From here you can:
 Download the clientsoftware
 View an easy to understand Overview of your IT estate health
 Create Groups of Users or Computers or both
 Configure and or Approve Updates for various Microsoft products
 Configure and get overviews of EndpointProtection
 Configure Alerts and Monitoring
 Deploy and Manage software
 Manage Microsoft Volume Licensing and Software Licensing Agreements
 Configure,app and deploy Policies
 View Reports
 Administer your Windows Intune Admin Console

3.  Step 4: Download the Windows Intune Client software
First you will need to download the Windows Intune Clientsoftware.You do this by:
 Navigating down to Administration then select Client Software Download as shown below:
 This will download the Windows_Intune_Setup.zip file
 Once downloaded,rightclick on this file and select Extract
 This will then produce a Windows_Intune_Setup folder which contains 2 files -
Windows_Intune_Setup.exe and WindowsIntune.accountcert
 You must keep these 2 files together
 You can then copy the Windows_Intune_Setup folder to a network share or USB drive

4.  Step: 5 Install the Windows Intune Client software / Enroll Devices
Once you have the Windows Intune Clientsoftware downloaded,extracted and stored on a network or portable
medium,you can now begin to install the client software on your devices.You can install Windows Intune via
various methods including:
 Install Windows Intune via Group Policy - Useful when rolling outWindows Intune to multiple machines
over various sites
 Install Windows Intune via Imaging - New computers are automaticallyenrolled in Windows Intune
 Install Windows Intune on a PC by PC basis - Going round each PC and running
Windows_Intune_Setup.exe via a USB drive / Share
End users can also enroll their devices via the Company Portal. Use this method to enroll iOS devices such as
iPhones.To do this,simply:
 Direct end users to your CompayPortal or the Windows Intune website via the URL or email and advise
them to select My Account at righthand side
 End users then login with their Windows Intune User credentials
 Accept the promptto install the your company's managementprofile
 Step 6: Organise your Computers / Devices in to Groups
Installing the Windows Intune Client doesn't do very much. You now mustreturn to the Windows Intune
Admin Console to get the mostout of Windows Intune PC / Device Management.A good place to start is to
organise your Users,Computers and or devices in to Groups.This is done via the Groups icon in the Windows
Intune Admin Console as shown

5.  As with any organisational management,planning your groups and setting a universal scheme and sticking
to it will make future deployments and managementmuch easier.So please plan your groups outusing
schemes such as sites,departments, location,device types etc. Similar to OU planning in Active Directory.
 Having numerous Users or Computers as "Ungrouped"will work butwill end up being a managementand
deploymentnightmare!
 Step 7: Set Policies
OK now you have deployed the Window Intune Clientand organised your organisation in to Groups of users and
computers.However this still doesn'tachieve very much.The enforcementofcertain policies will setrules in your
organisation.Windows Intune allows the simple creation and deploymentpolicies.To set Policies,navigate down
to the Policies icon then selectNew Policy as shown:

6.  From here you can choose from 4 Policies with Recommended Settings or Create and Deploy Custom
Policies,details ofthese Policies below:
 Mobile Device Policy

7.  Windows Firewall Settings
 Windows Intune Agent Settings Policy

8.  Windows Intune Center Settings Policy

9.  Step 8: Automatically Approve Windows Updates
One of the primary aims ofcloud based device managementis to make device administration simple, quick and
even automatic.So as an IT admin or someone responsible for IT devices,you don't wantto spend all day
approving Windows productupdates.Be clever and have this done automatically.To do this simply:
 Navigate to the Administration icon and selectUpdates as shown:
 Now scroll down to Automatic Approval Rules as shown:

10.  Click New then customise the General, Product Categories, Update Classifications,
Deployment and Summary screens then click finish
 Future updates will now deployautomatically
 Step 9: Configure Alerts
There is NO pointin having a device managementsystem ifno one ever is alerted to any issues.So configure
alerts by:
 Navigating to Administration then selecting Alerts and Notifications as shown:

11.  From here you can configure alert type and recipients
Following the above guide should be enough to get you started with Windows Intune