You are browsing the archive for Microsoft Intune.

Avatar of timdk

by timdk

Microsoft Intune: February update introduces more new features

5:23 pm in Microsoft Intune by timdk

MicrosoftIntune_LogoThe February update for Microsoft Intune just got announced on the Microsoft Intune blog. It will be released between February 6th (today!) and February 11th. You can check the status page for more specific timeframes here.

This update will include the following new features for Intune standalone:

  • Management of Office mobile apps (Word, Excel, and PowerPoint) for Android devices, including ability to restrict actions such as copy, cut, and paste outside of the managed app ecosystem.
  • Management of the OneNote app for iOS devices.
  • Ability to browse and install apps on Windows Phone 8.1 devices using Intune Company Portal website.
  • Deployment of WiFi profiles for Windows devices using XML import and Windows Phone devices using OMA-URI.
  • Support for Cisco AnyConnect per-app VPN configurations for iOS devices.
  • Ability to require encryption on Windows 8.1 (x86) devices.
  • Ability to set minimum classification of platform updates to be installed automatically on Windows 8.1 (x86) devices.

As part of the announcement Microsoft is also mentioning a more frequent release cadence: in the future they will be releasing new features to Intune on a monthly basis.

Have a nice weekend!

Tim

Avatar of timdk

by timdk

CMCE R2 Community Event Speaker

6:21 pm in Configuration Manager, Events, Microsoft Intune by timdk

CMCE-logo_klein2End of last year I received an invitation to talk at a community event in Zurich. This will be my first speaking engagement in 2015 and hopefully one of many.

On February 9th Kenny Buntinx and myself will be delivering two sessions entitled “Armoring your mobile workforce for the 21st century”. Focus for both sessions will be on Unified Device Management with Configuration Manager and Microsoft Intune. The first session will be a general overview and during the second session we will deep-dive further into the technical details and demonstrate some more advanced scenarios.

During this one day event we are joined by other top quality speakers who will be delivering multiple sessions on a wide range of topics.

More information and registration details can be found here.

Something to look forward to. Make sure to join us if you are around!

Tim

Avatar of timdk

by timdk

Microsoft Intune: more new capabilities released

11:00 pm in Enterprise Mobility Management, Microsoft Intune by timdk

MicrosoftIntune_LogoOn Monday Brad Anderson has announced that a new set of updates was coming to Microsoft Intune this week. Brad described this release as the most significant set of updates in the history of the product.

This is the summary of the new capabilities that Brad provided in his blog post:

  • Mobile Application Management: introducing containers to separate corporate data and application from personal data and applications.
  • Conditional Access to Exchange Online: allowing to restrict access to Exchange online only to devices that are enrolled for management and are meeting the compliance policies defined by the IT administrators.
  • Deep Management of the Office Mobile Apps on iOS and Android and restricting copy/paste possibilities and save locations.
  • Managed Browser and Managed PDF View, AV Player and Image Viewer apps. Full details on this capability and some scenarios are outlined in this earlier blog post by Brad.
  • Bulk enrollment of iOS devices using Apple Configurator: through integration with Apple Configurator bulk enrollment of devices is now supported. This also enables the use of configuration files that can be imported into Intune to set custom iOS policies

    image

This service update is being rolled out at this very moment; between December 9th and December 12th. To see when tenants will be updated customers can have a look at the Intune Service Dashboard.

As this is currently only applicable to Intune Standalone the next logical question would be if / when we will see these features for UDM implementations (integrating Configuration Manager with Intune). That question remains unanswered for now but based on this post on the Microsoft Intune blog we can assume these will be made available shortly.

Avatar of timdk

by timdk

Microsoft Intune new capabilities released

7:40 pm in Microsoft Intune by timdk

MicrosoftIntune_LogoBased on an announcement on the Microsoft Intune team blog yesterday, a set of new features will be coming to Microsoft Intune this week. The update will be rolled out between November 17 and November 19 and applies to Intune standalone (or cloud) only.

With this update Microsoft also throws the “Windows Intune” term into the dustbin. “Microsoft Intune” will be the terminology used for the future, as the capabilities nowadays extend a lot further than just the Windows platform (iOS and Android).

A quick overview of the new features:

  • Enhanced user interface for Intune administration console
  • Ability to restrict access to Exchange on-premises email based upon device enrollment
  • Bulk enrollment of devices using a single service account
  • Lockdown of Supervised iOS devices and devices using Samsung KNOX with Kiosk mode
  • Targeting of policies and apps by device groups
  • Ability to report on and allow or block a specific set of applications
  • Enforcement of application install or uninstall
  • Deployment of certificates, email, VPN and WiFi profiles
  • Ability to push free store apps to iOS devices
  • More convenient access to internal corporate resources using per-app VPN configurations for iOS devices
  • Remote pin reset for Windows Phone 8.1 devices
  • Multi-factor authentication at enrollment for Windows 8.1 and Windows Phone 8.1 devices
  • Ability to restrict administrator access to a specific set of user and device groups
  • Updated Company Portal apps to support customizable terms and conditions

For those experienced with Microsoft’s UDM solution –where ConfigMgr and Intune are integrated- you will recognize quite some familiar features.

More info can be found on the Intune Team blog.

Until next time!

Tim

Avatar of timdk

by timdk

MMS 2014 Debrief

6:46 pm in Community, Configuration Manager, Events, Microsoft Intune by timdk

2014-11-09 18.15.06-1Last week I was at the Midwest Management Summit (MMS) in Minneapolis, a three day conference organized by the Minnesota System Center User Group.

At this event I had the pleasure to deliver two sessions for which I again teamed up with my friend and ECM MVP Kenny Buntinx. Based on the feedback received on our sessions so far, we did well again at evangelizing Unified Device Management (UDM) with Configuration Manager and Intune.

Having a lot of time for Q&A made these sessions very interactive and allowed attendees to (hopefully) ask all their questions. If you did attend and have further feedback, questions, or comments please make sure to send them to Kenny and/or myself.

Next to speaking I also had the opportunity to attend some really nice sessions. As my focus is on Enterprise Client Management I was really pleased to see so many sessions on ECM topics on the schedule. Building a schedule for the conference was quite challenging.

Having these sessions delivered by community experts is a big plus as you have the chance pick up a lot of experience (and potential pitfalls) from the field. One really nice example of this would be the session on Pull DP’s with Todd Hemsell. Also the sponsor sessions were a great fit: I attended those from 1E and Secunia and really enjoyed the technical level of these sessions. No marketing fluff.

2014-11-10 18.06.17-1Another highlight for me was the talk on getting MMS right at home where the user group leads could share experiences. Next to that the event also brought back some of the best ingredients from the ‘old MMS’, for example the Configmgr State of the Union and the Jeopardy Quiz.

Overall this has been a really great event – except for the outside temperatures there are really no negatives I could think off. Winking smile

Although still to be confirmed I sincerely hope there will be a 2015 edition of this event! I for sure would love to attend!

Tip: looking for session content and want to grab it all in one shot? Check out this script to download the files.

Until next time!

Tim

Avatar of timdk

by timdk

MMS 2014 Speaker

12:51 am in Community, Configuration Manager, Events, Microsoft Intune by timdk

MMS180x1501End of this week I will be on a plane to the US again. Destination this time will be Minneapolis where I will be attending the Midwest Management Summit, or MMS.

At MMS I will be delivering two sessions together with my friend and fellow MVP Kenny Buntinx. Our sessions are scheduled on Tuesday the 11th and both will be about Unified Device Management with Configuration Manager and Intune.

During the first session we will dive into the setup and configuration aspects while in the second session we will look more into practical scenarios related to mobile device management.

More details and a complete sessions overview can be found on the event website.

Interested? Registrations are currently still open so you can still attend!

Hope to see you there!

Tim

Avatar of timdk

by timdk

UDM: Enrolling an iOS device step by step

12:57 am in Configuration Manager, Enterprise Mobility Management, Microsoft Intune by timdk

To be able to demonstrate Unified Device Management scenarios we recently added some new mobile devices to our demo environment. Amongst these devices are also iPads and iPhones which we had to enroll. The integration between Windows Intune and System Center 2012 R2 Configuration Manager was done earlier on.

Over-the-air enrollment of iOS devices is a rather straightforward process. In this blog post we will outline the step by step procedure to enroll an iPhone.

 

Enrollment

Time to fire up our iPhone 3GS and get started:

IMG_0003

First you need the get the Windows Intune Company Portal app from the App Store. Be aware that this app can only be installed on devices that are running iOS 6 or a later version.

 

IMG_0006

As soon as the Company Portal app is opened you will have to provide your user credentials and tap Sign In. We have ADFS implemented in our demo environment so we provide our AD credentials.

 

IMG_0007

So far so good – but at this point our device is not enrolled yet. The notification icon in the top right corner, and the blue ‘i’ icon on the device name indicate there are still further actions to be taken. Tap the icon at the top or the device name at the bottom.

 

IMG_0009

Tap Add this device.

 

IMG_0010

Tap Add in the top right corner.

 

IMG_0011

The device is being enrolled. This may take a minute.

 

IMG_0012

Tap the install button to install the management profile.

 

IMG_0013

A notification is displayed. Confirm by tapping Install Now.

 

IMG_0014

Tap Install in the top right corner.

 

IMG_0015

Profile installed successfully. Tap Done in the top right corner.

 

IMG_0016

And that is all there is to it!

 

image

The device then also becomes visible in the ConfigMgr console. Our ConfigMgr administrators are now able to manage this device.

 

Troubleshooting

 

If you encounter any problems during the enrollment process you can shake the iOS device to get a diagnostics screen. Make sure the Company Portal app is running when you start shaking.

IMG_0025

A diagnostics dialog box is shown where you can open up the log file for further analysis or email it.

 

Removing the profile

 

The management profile can be removed afterwards as well.  This is the out-of-the-box behavior. We can block the user from doing this but that is a subject for a future blog post.

 

IMG_0020

To remove the management profile go to Settings > General > Profile – Management Profile.

 

I hope you found this information helpful.

Until next time!

Tim

Avatar of timdk

by timdk

IT/Dev Connections 2014 Speaker

7:58 am in Community, Configuration Manager, Events, Microsoft Intune, System Center by timdk

In a few weeks I will be heading to Las Vegas for IT/Dev Connections. This conference is taking place at the Aria Resort from September 15th to the 19th.

With MMS being discontinued, this is an event I have been really looking forward to for the past few months. Next to being a first time attendee I am also honored to be able to deliver 2 sessions in the Windows track.

The Windows track has a great line-up of speakers and sessions, and the keynote for this track will be presented by Brad Anderson, Corporate VP at Microsoft (blog).

These are the session titles and abstracts of the sessions that I will be delivering:

Session 1 : System Center 2012 R2 Configuration Manager and Intune: Setup and deployment Notes from the field, with a focus on Single Sign on.

This session dives into what you’ll do at the server level to drive System Center 2012 R2 Configuration Manager and Windows Intune integration for mobile device management.

The session includes real-life experience from the field to set up a subscription, connectors, certificates, Active Directory Federation Services (AD FS 2.0/2.1/3.0), DirSync, and workplace join scenarios among all possible server configurations that enable mobile device management.

Learn best practices for setting up AD FS from the field for user authentication and Single Sign-On; prepare for the challenges if you invested in previous AD FS 2.0/2.1 and want to take advantage of AD …

Session 2 : Managing your hybrid Mobile cloud workforce demystified with System Center Configuration Manager 2012 R2.

Do you need to manage Windows 8.1/RT, including non-Microsoft mobile devices, with Microsoft’s UDM solution (Configuration Manager 2012 R2 plus Intune)? Do you need to provide functionality for deploying the new Intune extensions (such as email profiles), managing your MDM settings, configuring VPN and wireless profiles, and deploying certificates?

Compliance settings, company resource access, and Intune extensions delivered in Configuration Manager are mostly unexplored territory for the Configuration Manager administrator. In this session we’ll use numerous demos to demystify these features. …

I will be co-hosting these sessions together with my friend and ECM expert Kenny Buntinx. Both are currently scheduled on Wednesday September 17h. You can browse the full session catalog here.

Note that Kenny and myself will not be the only Belgians presenting at the conference. Also in the Windows track there will be 2 sessions from our fellow SCUG member Dieter Wijckmans and a session from Michael Van Horenbeeck. Together we will show some serious Belgian Community Power!

Interested? Registrations for the event are still open. Click here for details.

Hope to see you there!

Tim

Avatar of timdk

by timdk

Week in Review – CW31

9:05 am in Configuration Manager, Microsoft Intune by timdk

Time for my weekly wrap-up of stuff to catch up with:

See you next week!

Tim

Avatar of timdk

by timdk

Week in Review – CW21

9:05 am in Configuration Manager, Microsoft Intune by timdk

Quick wrap up on things that caught my attention in the past week. I have a rather short list this time due to the fact I was at Briforum in London for 3 days.

Enjoy the weekend!

Tim