Introduction

Understanding Intune Licensing

Understanding Device States

What does Intune do?

Entra ID / Azure AD Join

Single Sign on More

Intune Device Configuration

Managing Devices

Multiple Device Support

MDM / MAM Configuration

Hybrid Vs Azure AD Join

Important Ability Settings

Enterprise Roaming Profiles

Intune Device enrolment

Device Configuration Profiles

Intune App Deployment

Compliance Profiles

App protection Policies

Deploying Windows Updates

Intune Security Overview

Conclusions

Microsoft Intune Overview

Intune Mobile Device Management

Intune Mobile Application Management

Intune Reference Architecture

Introduction to Microsoft Endpoint Manager

Intune Licensing

Outro

Start

What is Microsoft Intune Suite?

Microsoft Intune Enterprise App Management

Microsoft Intune Advanced Analytics

Microsoft Cloud PKI

Pricing and licensing

Is Intune Suite worth the price?

Intro

Adam Gross introduction

Steve Hosking introduction

Rest of the team

Audience background

Intune documentation

Intune overview

Mobile Data Management

Changes and updates

Conditional Access and Intune

Configuration Manager integration

On-prem to Intune migration

Server discussion

Wrap up

Simplify endpoint management and security

Enterprise App Management

Updating apps

Endpoint Privilege Management

Securing access to on-prem resources with Cloud PKI

Securing mobile access to on-prem and private cloud resources

Advanced Analytics- Device query

Remote Help

Wrap Up

History of Microsoft Intune

What can Intune do?

Managing devices with Intune

Apple MDM Framework

Getting Started

Intro

Agenda

Intune Portals

Process of onboarding Intune

What is MDM Authority

Intune MDM Authority

Intune Co-Management

Scope Users

Assignment of policies

Conclusion

Introductions

How are folks managing remote workers with and their devices with Intune when a remote worker is not a local admin yet needs to add a device at home such as a local printer/scanner etc for their job?

What is the best way to solve conflicts in Intune regarding Configuration profiles and security baselines?

Is there an option for adding shortcuts via Intune where it publishes those shortcuts on all user desktops?

Is the recommended way to do this without have a Entra ID on the local device to use Assigned Access Device configurations / XML files? Do you have customers who have experience with Intune managed Thin Clients for MultiApp usage?

What can you do with BitLocker management in Intune?

Are there any plans to support Group Policy Preferences and item-level targeting functionality in Intune?

Do you recommend using Endpoint Security settings or Configuration profiles where the same settings are available in both areas...eg Bitlocker/Encryption?

We use Co-management authority to enroll our devices as co-managed. Our finding is that this is not really reliable. (time out). Where can we tweak the enrollment process to make it more stable?

What is the reasoning behind forcing in-session authentication to the built-in local Administrator account and not allowing the opportunity to provide another account with local administrator access to authenticate?

When BitLocker is enabled silently via Intune, does the recovery information automatically get saved in Azure?

In what situations would you require an Intune device-only license SKU instead of assigning licenses to users? What about co-managed devices?

What's the best way to force an immediate sync from the client side?

How do we mange local user account that already exists on device?

Join Devices into Microsoft Azure

Local Administrator Password Settings

Logging On in Azure

Configuration

Synchronize the Local Admin Administrator Password

User Profile

Device Restrictions

Mobile Device Restrictions

Compliance Policy

Overview of Intune and Mobile Device Management

Intro

Current state

Demo: Application Catalog

Demo: Updating capabilities

Problem and comments

Future state

Intro

What is generative AI?

Security Copilot

Demos: Intune + Security Copilot

Setup tasks

What's coming?

Introductions

Demo - Enterprise App Management

I would like to easily be able to find user friendly ways to deploy non-Store/legacy apps to devices via inTune.

Demo: Advanced Analytics - device query

Please tell me there are more reports coming to the baseline Intune license level of analytics.

How can we monitor Win32 application updates to know when there should be a new package version prepared?

Once we deploy an App via the Enterprise App catalogue method and we want to downgrade a version of a particular app, is there an option available in Intune now?

How about update management? Will the updates be adjustable?

Will it be possible to use device query to add/remove devices from dynamic security groups for remediation or other tasks?

Are you looking to create an interface where we can create a custom report for gathering a specific piece of data like a specific file or registry key?

Does supersedence in Intune make the app mandatory, as it does in ConfigMgr?

If we change the Uninstall command (Win32 app) after deployment, which Uninstall command is being used within the later Supersedence?

One of the most common reasons app deployments fail in my organization is due to applications running when an install runs. We have a workaround to create a script that runs as a requirement that checks to see if the process is running. It would be nice if this was available automatically - in Advanced Analytics?

Would be pretty useful to be able to report if a group has a policy/configuration assigned. Sometimes it's pretty hard to know if changing a groups membership will effect another config. Do you have any plans to add such feature?

Is there a more efficient way to expose anomalies such as Windows Feature Updates?

As Intune administrator, I have an Intune Enterprise Application Management licence. Will I need a licence for all my users with Intune enrolled devices?

ConfigMan vs Intune app deployment - Are there any plans to have deploy at Logon available in the future?

Is there any chance to have a similar report as GPResult so we can identify which Intune profile is applying X setting at device level?

Any plans to make remediation built into the Company Portal app deployment?

Will the Enterprise App Management update the apps on all devices, or will you need to create a requirement rule to look for old versions and apply to all devices?

Do you plan to add more reporting features on disk encryption? Which method of encryption is used, etc.?

Do you have intention to publish some 'most used' or most recommended or best practice KQL queries from Advanced Analytics to help people starting with it easily?

We're seeing now that Copilot in Intune preview has been announced -- When we will see a natural language interface for Intune reporting? Something like "show me all devices that are not compliant", or "show me all devices that do not have Secure Boot and BitLocker enabled"

Ideal Scenario

What is Hybrid AD Joined Device?

Intune Architecture Diagram

How to Control Devices?

What is Device Management

Benefits of using Microsoft Intune

Push Certificates with Intune

Application Management

Data Protection and Data Sharing

Summary