Mastering Microsoft Intune Deploy Windows 11, Windows 365 Via Microsoft Intune, Copilot and Advance Management Via Intune Suite
The slow adoption of modern Work solutions, which are designed to streamline the management of your environment, can often be attributed to a lack of understanding and familiarity with those solutions. This book will provide you with all the information you need to successfully transition to Microso...
| Otros Autores: | |
|---|---|
| Formato: | Libro electrónico |
| Idioma: | Inglés |
| Publicado: |
Birmingham, England :
Packt Publishing
[2024]
|
| Edición: | Second edition |
| Colección: | Expert insight.
|
| Materias: | |
| Ver en Biblioteca Universitat Ramon Llull: | https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009805220906719 |
Tabla de Contenidos:
- Cover
- Copyright
- Contributors
- Table of Contents
- Preface
- Section I: Understanding the Basics
- Chapter 1: Introduction to Microsoft 365
- Microsoft 365 cloud services
- What do these services achieve?
- Microsoft Intune
- Intune Suite
- AVD
- Windows 365
- AVD and Windows 365 - what are the differences?
- Components that Microsoft manages and the customer manages
- Windows 11
- Windows Copilot
- Security Copilot
- Intune Copilot
- Productivity Score
- Endpoint analytics
- Microsoft 365 Apps (for Enterprise)
- OneDrive for Business (part of Microsoft 365 Apps)
- Microsoft Teams
- Microsoft Edge
- Universal Print
- Microsoft Defender for Endpoint
- Exchange Online
- SharePoint Online
- Summary
- Questions
- Answers
- Further reading
- Chapter 2: Cloud-Native Endpoints
- Paths to cloud native
- Microsoft Intune
- Intune admin center portal
- Microsoft 365 admin center portal
- Intune Partner portals
- Surface Management Portal
- HP Connect
- Windows 365
- Microsoft Entra ID
- Cloud Management Gateway
- Compliance policies
- Windows Update policies
- Resource access policies
- Endpoint protection
- Device configuration
- Office Click-to-Run apps
- Client apps
- Microsoft Intune - from on-premises to the cloud
- Exploring Windows 11 Enterprise in detail
- Windows subscription activation
- Windows Autopatch
- Windows as a Service - update release cycle
- WUfB
- Who should use WUfB (now Autopatch)?
- Why do you want to leverage WUfB?
- What does WUfB allow me to configure?
- What is the WUfB deployment service?
- BYOD
- What is zero trust?
- Verifying identity
- Verifying devices
- Windows 365 for non-managed endpoints
- Summary
- Questions
- Answers
- Further reading
- Chapter 3: Requirements for Microsoft Intune
- Endpoint scenarios.
- Identity roles and privileges for Microsoft Intune
- Using Intune filters when assigning
- Compliance Administrator
- Compliance Data Administrator
- Intune Administrator
- Message Center Reader
- Security Administrator
- Security Operator
- Security Reader
- Identity roles and privileges for a Windows 365 Cloud PC
- Azure Subscription Owner
- Domain Administrator
- Identity roles and privileges for Universal Print
- Licensing requirements
- Supported OSes
- Required web browser versions
- Windows 11 hardware requirements
- How do you get Windows 11?
- Intune Administrator Licensing
- Entra group-based licensing
- Setting the mobile device management authority
- Enabling Windows automatic enrollment
- Using Azure Virtual Desktop with Microsoft Intune
- Microsoft Intune device restrictions for Windows
- Blocking personal Windows devices
- Microsoft Intune device limit restrictions for Windows
- Customizing Intune Company Portal apps, the Company Portal website, and the Intune app
- Microsoft Intune - network URL firewall requirements
- Access for managed devices
- Network requirements for PowerShell scripts and Win32 apps
- Microsoft Store endpoint URLs
- Windows 365 endpoint URLs
- Windows Push Notification Services - required URLs
- Windows 365 and Azure Virtual Desktop - required URLs
- Universal Print - required URLs
- Delivery Optimization
- Summary
- Questions
- Answers
- Further reading
- Section II: Windows 365
- Chapter 4: What Is Windows 365?
- What is Windows 365?
- Removing the complexity of traditional VDI deployments
- What to think about as a VDI administrator
- Removing complexity while increasing security
- Low costs as a fixed-price model
- The transition to modern management with Microsoft Intune
- Windows 10 ESUs
- Comparing Windows 365 Enterprise and Business.
- What is Windows 365 Frontline?
- What is Windows 365 Government?
- Microsoft Intune
- High-level architecture components and responsibilities
- Configuration Manager support
- Co-management and Windows 365
- Disaster recovery
- Sizes and performance of fixed-price licenses
- GPU-Enhanced Cloud PCs
- Connect to your on-premises network
- Provisioning policies
- Windows 365 - gallery images
- Custom images
- Windows Updates via Autopatch
- Roles and delegation
- The Watchdog service
- Optimized Teams on Windows 365
- Screen capture protection and watermarking
- Migrate GPOs to a Settings Catalog policy
- Summary
- Questions
- Answers
- Further reading
- Chapter 5: Deploying Windows 365
- Technical requirements for deploying Windows 365
- Required URLs
- RDP requirements and optimizations
- Connect to on-premises networks (optional)
- Purchasing and assigning Cloud PC licenses
- Provision a Cloud PC
- Image management - creating a custom image (optional)
- Reprovisioning a Cloud PC
- Local administrator permissions
- Security baselines for a Cloud PC
- Zero Trust: Conditional Access management for Cloud PCs
- Connecting to your Cloud PC
- Windows App
- Deploy Windows App via Intune
- Windows App - User Actions
- Bulk User Actions via Intune
- Supported redirections per endpoint platform
- Windows 365 Boot shared mode
- Windows 365 Boot dedicated mode
- What if you have multiple Cloud PCs?
- Battery status redirection
- Windows 365 Switch
- Resize Cloud PCs
- Bulk device actions
- Monitoring and analytics
- Intune Suite - Endpoint Privilege Management
- Intune Suite - Enterprise App Management
- Intune Suite - Remote Help
- Want to dive deeper into Windows 365?
- Summary
- Questions
- Answers
- Further reading
- Section III: Mastering Microsoft Intune
- Chapter 6: Windows Deployment and Management.
- Deploying existing Windows devices into Microsoft Intune
- Enrolling devices - Windows enrollment
- Automatic enrollment
- Testing company domain CNAME registration for Windows enrollment
- Enrollment Status Page
- Enrollment notifications
- Windows Autopilot
- What about existing infrastructure?
- Co-management and tenant attach
- Co-management settings
- Windows Update for Business
- Types of updates managed by Windows Update for Business
- Enforcing compliance deadlines for updates
- How to handle conflicting or legacy policies
- How to set up and configure Windows Update for Business
- Safeguard holds
- Feature updates for Windows 10 and later
- Opting out of safeguard holds
- Expediting a Windows patch
- The Windows Insider Program for Business
- Updating Microsoft 365 apps
- Windows Autopatch
- Windows Autopatch requirements
- How to enable Windows Autopatch
- Optimizing Windows Update rings
- Enabling Windows Autopatch for Cloud PCs
- Summary
- Questions
- Answers
- Further reading
- Chapter 7: Windows Autopilot
- Technical requirements
- Windows Autopilot overview
- Uploading the hardware ID to Windows Autopilot
- Where is Windows Autopilot device information stored?
- Windows Autopilot for existing devices
- Windows updates during the OOBE
- Auto-assigning Windows Autopilot profiles in Intune
- Signing in to Graph Explorer
- Enrollment Status Page (ESP)
- ESP implementation - Windows CSP
- Autopilot reporting and diagnostics
- Company Portal
- Configuring automatic BitLocker encryption for Autopilot devices
- Troubleshooting automatic BitLocker encryption on a VM
- Windows Hello for Business
- Cloud configuration scenario
- Introduction
- What you will need to continue
- Basics
- Resources to be created
- Apps
- Assignments
- Deploying.
- Deploying essentials that users might need to access work or school resources
- Monitoring your cloud configuration devices
- SharedPC self-deployment scenario
- Creating a specific ESP for the SharedPC device
- Creating a Windows Autopilot profile
- Self-Deploying (preview)
- Creating a custom Windows profile to disable user ESP
- Creating a custom Windows 10 profile to disable FirstLogonAnimation
- Creating a Windows template SharedPC profile
- SharedPC technical reference
- Troubleshooting SharedPC
- Windows Autopilot Reset
- Wiping and resetting your devices
- Fresh Start
- Windows Recovery Environment
- Summary
- Questions
- Answers
- Further reading
- Chapter 8: Application Management and Delivery
- Application delivery via Microsoft Intune
- Different application types you can deploy
- LOB applications
- MSI - via the LOB app
- MSIX - via the LOB app
- AppX - via the LOB app
- IntuneWin - via the Windows app (Win32)
- Supersedence mode
- Deploying Microsoft 365 apps
- Update channels
- Office Customization Tool
- Microsoft 365 Apps admin center
- Getting started
- Device selection criteria
- Update exclusion dates
- Update deadline
- Microsoft 365 app customization
- Deploying Microsoft Teams
- Deploying OneDrive
- Deploying Microsoft Edge
- What is WinGet?
- What is MSIX?
- AppxManifest.xml
- AppxBlockMap.xml
- AppxSignature.p7x
- How to create MSIX packages
- Pushing the MSIX package application to your endpoints
- Summary
- Questions
- Answers
- Further reading
- Chapter 9: Understanding Policy Management
- Policy management
- What is a CSP policy?
- Windows Push Notification Service (WNS)
- Getting started with policy design
- Migrating existing policies from AD - Group Policy management
- Summary
- Questions
- Answers
- Further reading
- Chapter 10: Advanced Policy Management.
- Policy management.
