In this video, get an introduction to remote device actions using Microsoft Intune, including wiping devices, configuring device security, and configuration.
- [Instructor] Once your devices have been enrolled into management, they can be controlled and managed by Intune. Depending on the device platform, the current configuration of the device, and even the location where it's being used, you can force device usage configuration and application settings. You can also use Intune to perform remote actions on devices. For example, if a device is lost or stolen, you can protect corporate data by using functionality such as remote lock, or data wipe. Administrators must balance protecting data from loss, theft and leakage whilst at the same time providing users with access to corporate resources. Microsoft Intune provides security and configuration features which allows you to protect both the devices and the data stored on the device. Device security and configuration features include device compliance policies, which outline the rules that devices have to meet in order for resource access to be granted. For example, requiring a pin to be entered before opening Outlook. Password management and multifactor authentication allows you to strengthen your identity security. MFA requires that users provide a second method of authenticating. For example, by using an authentication app on their mobile device. Intune also includes functionality to carry out remote actions on devices. Let's take a look. Let's take a look at the device actions that we can perform on enrolled devices. In the Microsoft 365 Device Management Portal, on the left-hand side I'll select Devices. I'll now select Azure Active Directory Devices, and this lists both joined devices and registered devices. We can see in the table we have a number of joined devices, and also a registered device. Joined devices are managed by Microsoft Intune, or another MDM solution. If I select All Devices, this filters the report to list only MDM managed computers. I'll now select one of the computers. And here we can see the various device actions available to us. It include retire wipe, delete, force a sync, restart the device, perform a fresh start with a PC which wipes the data and reloads the latest version of Windows 10, perform an autopilot reset. And if I select the More Options, here we can see various Windows Defender actions including quick scan, full scan, and update the Windows Defender signatures. We can also rename the device. You'll notice that several options are grayed out, including remote lock and reset passcode. This is because remote actions are platform-specific. On an iPhone we'd be able to perform a remote lock and reset passcode. Let's retire this device. We need to confirm the action. I'll select Yes. We can see the retirement has been initiated. In the All Devices menu, I'll select Device Actions, and here we can see the retirement action is pending.
- Cloud principles and delivery mechanisms
- Managing privacy in the cloud
- Meeting compliance goals
- Cloud availability
- Monitoring service health and maintenance
- Cloud services and their characteristics
- Identifying requirements of Microsoft cloud services
- Signing up for cloud services
- Configuring cloud services
- Configuring Microsoft Intune