3/9/2021 7:19 PM

How to Operate Microsoft Intune in the real

world

Agenda • The Intune Service

• Understanding Intune Service Updates
• Maintaining your environment

2
 3/9/2021 7:19 PM

The Intune Service

Evolution of Microsoft Intune

2015 2018 Today

4
 3/9/2021 7:19 PM

Intune ASU Architecture: Global View

NA Tenants EU Tenants AP Tenants

NA ASUs EU ASUs AP ASUs

Service Fabric Cluster Service Fabric Cluster Service Fabric Cluster

Partition 0, replicas Partition 0, replicas Partition 0, replicas

Partition 1, replicas Partition 1, replicas Partition 1, replicas

Per ASU DR Store: Per ASU DR Store: Per ASU DR Store:

Azure Blob & Table Azure Blob & Table Azure Blob & Table

Intune Service Architecture

1
2

6
 3/9/2021 7:19 PM

Intune Enrolment Dependencies

Apple / APNS

Microsoft Azure

Azure AD Microsoft Intune

Microsoft Endpoint Manager (MEM) Portal Google / GMS

AM API

Mobile devices

Understanding Intune Service Updates

8
 3/9/2021 7:19 PM

Intune Service Updates

Intune
What’s
Planning Sprint Deploy to New
Week Work Production Updated

Sprint Kick-off Self Host Update UI

Meeting per region

Intune – What’s New

10
 3/9/2021 7:19 PM

Tenant Status – Tenant Details

11

Intune – What’s New in the App UI

12
 3/9/2021 7:19 PM

Intune – In Development

13

Microsoft - 365 Service Health

14
 3/9/2021 7:19 PM

Microsoft 365 - Message Center Dashboard

15

Intune Tenant Status – Service Health Dashboard

16
 3/9/2021 7:19 PM

Maintaining your environment

17

Settings Configuration

User

Comprehensive security Extensive configuration Policies can be applied to Reporting available on

policies are enforced on settings are available for user and device groups each setting whether it is
each platform each platform applicable, conformant or
has an error

18
 3/9/2021 7:19 PM

Enrolment Failures

End Users IT Admin / Helpdesk

19

Company Portal User Experience - iOS

User doesn’t have Intune Apple APNS hasn’t been Admin has blocked personal Admin requires a specific OS
License Assigned setup device enrollment version to enroll

20
 3/9/2021 7:19 PM

Company Portal User Experience - Android

User doesn’t have Intune Managed Google Play not Android Enterprise Work Work Profile Personal
License Assigned setup Profile Enrollment restricted Enrollment Blocked

21

Enrolment Failures – Monitor Report

22
 3/9/2021 7:19 PM

Enrollment Restrictions

23

Enrolment Failures – Monitor Overview

24
 3/9/2021 7:19 PM

Enrolment Failures - Export

25

Enrolment Failures – Troubleshooting Blade

26
 3/9/2021 7:19 PM

Android Enterprise - Device Modes

BYOD Corporate Owned
Corp-owned w/ work
Work profile Fully managed Dedicated Device
profile

Information Worker Task / Frontline Worker

27

Android Enterprise - Dedicated Device Tokens

28
 3/9/2021 7:19 PM

Dedicated Device token not visible in the console

29

Connector Status

30
 3/9/2021 7:19 PM

Connectors

Connector Details

Apple Push Notification Service Requires renewal every 365 days

DEP / ABM (Apple Business Manager) Syncs every 12 hours

VPP (Volume Purchase Program) Syncs every 12 hours

Managed Google Play (MGP) App Sync Synchronizes after MGP sync in Intune UI

31

Intune RBAC and Scope Tags

Seattle Help Desk Seattle

Sally Seattle End Users

32
 3/9/2021 7:19 PM

OEM Config unauthorized access

33

OEM Config unauthorized access - Profiles

34
 3/9/2021 7:19 PM

User vs Device based deployment

Sellers Field Engineers

35

Working with Multiple Application Assignments

 Can’t add multiple assignments to the same Group
 But users can be in many groups

Group Group
 Conflict Resolution:
 Required wins all
A B
 Available works alongside Required
 Available with or without enrolment is the weakest
 Not Applicable can be used to exclude users from Available

 All combinations documented:

 Assign apps to groups in Microsoft Intune | Microsoft Docs

36
 3/9/2021 7:19 PM

Assignment conflict resolution

Required Available Available w/w Not Available Uninstall

enrolment
Required Required* Required and Required Required Required
Available
Available Available Available Not Available Uninstall

Available w/w Available w/w Not Available Uninstall*

enrolment enrolment
Not Available Not Available Uninstall

Uninstall Uninstall

• iOS Store apps deployed as Required will automatically be Required and Available
• An app cannot be uninstalled from a device that is not enrolled
• This table includes User Targeting only

37

Takeaways • The Intune Service

• Understanding Intune Service Updates
• Maintaining your environment

38
 3/9/2021 7:19 PM

Q&A

40

© Copyright Microsoft Corporation. All rights reserved.

41