From the course: Microsoft Cloud Fundamentals: Administering Office 365 and Intune

Initial Intune configuration

From the course: Microsoft Cloud Fundamentals: Administering Office 365 and Intune

Start my 1-month free trial

Initial Intune configuration

- [Instructor] Once you've purchased your Intune standalone subscription or trial subscription you'll need to perform some initial setup steps before devices can be managed. If you've already deployed Microsoft 365 or Office 365 within your organization and you also included a Microsoft intune subscription with this then some of these initial steps will have already been completed. You can perform the initial configuration tasks in either the Intune area of the Azure admin portal or the Microsoft 365 device management admin portal as shown onscreen. The setup steps that you need to perform for Microsoft Intune include signing up for an Intune subscription or subscribing to Microsoft 365, which includes Enterprise Mobility and Security, which includes Microsoft Intune. You can add a custom domain name to your tenant so that you can use your own company branding. And you'll need to configure your DNS records which can simplify device enrollment as these will redirect enrollment requests from devices to the Intune servers in the cloud. Next, you'll need to set your tenant location so that your data is stored in the correct country to meet any legal and compliance requirements. You'll configure your MDM or mobile device management authority so that devices will use Intune for mobile device management. You'll also configure the MDM scope so that users can enroll devices into Intune. And you'll use the global administrator account to create other subordinate administrator accounts to help you with the administration of your tenant. You'll then create users and assign Intune licenses, configure device and app policies and profiles to control how devices and apps will be used and accessed. You'll then enroll your devices so they can be managed by Intune and create device groups to simply your management. And finally, deploy and assign applications and set up the company portal, including any company branding. Let's drop onto our demo tenant and take a look at how to configure the MDM authority to Intune. In this way, our devices will trust instructions from Microsoft Intune. If you haven't already set the MDM authority you should follow these steps. On the left-hand side, I'll select device enrollment. And notice, all the options under manage and monitor are grayed out. On the right-hand side, we have the option to choose the MDM authority. You should carefully read the instructions and you can choose either Intune or configuration manager. We'll select the Intune MDM authority and then select choose. The MDM authority has been set and now we have the option to manage and monitor our devices. And the next stage is to configure the MDM scope so that users can enroll their devices into Intune. On the left-hand side, I'll select device enrollment. And then, under manage, I'll select Windows enrollment. And under general, select automatic enrollment. In order to configure automatic device enrollment you'll need an Azure Active Directory premium subscription. We can specify which users' devices should be managed by Microsoft Intune. These Windows 10 devices can then automatically be enrolled for management with Microsoft Intune. The options are none or some where you can select specific groups of users and devices or all where all users can enroll their devices into Intune. We'll select all. You should also ensure that the MDM terms of use, MDM discovery, and MDM compliance URLs are populated. You can use the default values or create your own. To configure the automatic MDM enrollment, we'll click save.

Contents