Thank you Andy, this was really useful video. In my opinion, the organizations that are already using Autopilot or planning to use it in near future will definitly need to try the Policy sets feature.
Hi Andy! I recently discovered your channel and really enjoyed the video, thanks for putting this out there. Regarding the policy sets, is there any word or indication if/when Microsoft will ever add support for app32 and Line of Business apps with policy sets? I would like my configurations to be as consistent as possible across the board, so if I am going to utilize policy sets then I would like to use them for as much as possible. It seems weird to me that some types of apps are supported but not others.
No problem and thank you for the nice comment. Regarding your questions. Microsoft at the moment seem to be looking to containerise Win32 based apps as these are being eventually phased out virtualisation and containerisation i’m coming in big time for these technologies. And once we have a full chrome version of windows this will be even more so. But of course I will keep you updated on my channel. Thanks again and all the best.
@@AndyMaloneMVP Great video! Regarding mixing LOB and Win32 apps, are there any progression? Still to this day, people suggest packing (including a MVP) e.g. the Office suite as a Win32 app... and not using any LOB apps at all. And another thing; Using the "Deploy Windows for Cloud Config" guide removes all essential apps such as Notepad, Photos, etc... because of the script. Tried it, but Windows 11 Pro got way too stripped, so I'm in the process of building my own de-bloated image that I can use for all of my org's computers.
@@frankfix247 slow improvements on Win32 based apps. You have to remember that these are legacy applications and are being phased out. Time to switch my friend 😊
Hello Andy! As we are going to implement Active directory in our company (90 employees), Microsoft team is suggesting to implement Microsoft Intune. What is the difference between Azure AD and Intune? Why should we choose Azure AD than Intune? You valuable comments is vital in our issues. Thank You.
Thanks for the question. Microsoft in tune comes part of Microsoft Endpoint manager which requires devices to authenticate via Microsoft azure. Unfortunately if you have on premises devices, for example Windows 10 these can either authenticate to an on premises active directory or through Microsoft azure active directory. The benefit of the latter is that you can then manage those devices and users using Microsoft Intune. For only 90 users I would highly recommend this option as the latter is now considered somewhat legacy. Thanks for the great question and all the best, Andy.
Hey Andy, have a question - how can i enroll previously Azure AD domain joined devices in Intune? The machines are Azure AD joined, but have no mdm enrollment. Keep in mind, these devices were added prior to the current Intune enrollment policy that now enrolls when a device is added to Azure AD. Surely the only solution wouldnt need to resort to leaving the Azure domain and rejoining to get that Intune enrollment?
Hi Andy, Regarding the Cutdown version of intune at 5:39 mark, if all your users have e M365 Bus Prem and you buy a EMS e5 suite license for IT, does this give you a "full version" of Intune for the entire company? And does every device/user need an intune license if they have e M365 bus prem license to get the "full" version of intune? Thanks!
I am looking for intune configs without endpoint manager as inTune it can be purchased with business premium but everyone seems to show endpoint manager
I can see your confusion. As I said in the video, the devices & apps area is Intune. Endpoint manager is comprised of 2 products, Intune & security :-)
Dear please suggest me I m in one trouble how to block software installation on users Id through Intune if you have any idea please share with me. But i want don't block running software on users laptop I want block software installation only.
@@NeerajSharma-bx7qu there are settings in the security portion of Intune that will do this. If you’re asking me which particular one. I’ve no idea, I can’t remember every setting sorry. Try docs.Microsoft.cm
Thanks for the comment, unfortunately I have to be honest and say the power BRI is not my forte, I’m not sure of who has a channel based on this. If however, I discover someone I’ll of course make an addition to this comment.
![Docker Crash Course for Absolute Beginners [NEW]](/img/n.gif)
after seeing dozens of video's on youtube i found you the most detailed and easy....Thanks Andy.... !!!!!
You’re very welcome and great to have you on board 😊
Thank you Andy, this was really useful video. In my opinion, the organizations that are already using Autopilot or planning to use it in near future will definitly need to try the Policy sets feature.
Thanks Ivor appreciate the comment and delighted to have you onboard 😊👍
starting a new position soon and trying soak up alot, your videos really are helping to get important parts filled out!
I'm delighted to hear that thanks :-)
Man you are soooooo gooooood the best trainer .....
Great video Andy! save a lot of time trying to learn all different options and put it together for a final Policy set collection,
Awesome thanks :-)
Hi Andy! I recently discovered your channel and really enjoyed the video, thanks for putting this out there.
Regarding the policy sets, is there any word or indication if/when Microsoft will ever add support for app32 and Line of Business apps with policy sets? I would like my configurations to be as consistent as possible across the board, so if I am going to utilize policy sets then I would like to use them for as much as possible. It seems weird to me that some types of apps are supported but not others.
No problem and thank you for the nice comment. Regarding your questions. Microsoft at the moment seem to be looking to containerise Win32 based apps as these are being eventually phased out virtualisation and containerisation i’m coming in big time for these technologies. And once we have a full chrome version of windows this will be even more so. But of course I will keep you updated on my channel. Thanks again and all the best.
@@AndyMaloneMVP Great video! Regarding mixing LOB and Win32 apps, are there any progression? Still to this day, people suggest packing (including a MVP) e.g. the Office suite as a Win32 app... and not using any LOB apps at all. And another thing; Using the "Deploy Windows for Cloud Config" guide removes all essential apps such as Notepad, Photos, etc... because of the script. Tried it, but Windows 11 Pro got way too stripped, so I'm in the process of building my own de-bloated image that I can use for all of my org's computers.
@@frankfix247 slow improvements on Win32 based apps. You have to remember that these are legacy applications and are being phased out. Time to switch my friend 😊
I am new learner from your channel. Nice to explain .wish you all best . Praveen from india
Hi Praveen great to have you on board. You’re very welcome 😊👍
Great video Andy
Thanks Tony😊
Excellent demonstration of tips and tricks to streamline a customer journey to Intune, Andy. Thanks :)
You’re very welcome and thanks for the comment👍😊
Hello Andy! As we are going to implement Active directory in our company (90 employees), Microsoft team is suggesting to implement Microsoft Intune. What is the difference between Azure AD and Intune? Why should we choose Azure AD than Intune? You valuable comments is vital in our issues. Thank You.
Thanks for the question. Microsoft in tune comes part of Microsoft Endpoint manager which requires devices to authenticate via Microsoft azure. Unfortunately if you have on premises devices, for example Windows 10 these can either authenticate to an on premises active directory or through Microsoft azure active directory. The benefit of the latter is that you can then manage those devices and users using Microsoft Intune. For only 90 users I would highly recommend this option as the latter is now considered somewhat legacy. Thanks for the great question and all the best, Andy.
Thank you
Hey Andy, have a question - how can i enroll previously Azure AD domain joined devices in Intune? The machines are Azure AD joined, but have no mdm enrollment. Keep in mind, these devices were added prior to the current Intune enrollment policy that now enrolls when a device is added to Azure AD. Surely the only solution wouldnt need to resort to leaving the Azure domain and rejoining to get that Intune enrollment?
Hmm add the device to a group. Apply a policy and then refresh the users device profile in settings, school and workplace join. See if that helps.
Hi Andy, Regarding the Cutdown version of intune at 5:39 mark, if all your users have e M365 Bus Prem and you buy a EMS e5 suite license for IT, does this give you a "full version" of Intune for the entire company? And does every device/user need an intune license if they have e M365 bus prem license to get the "full" version of intune? Thanks!
Licensing is always a difficult subject. It sure in this one sorry my friend
M365 Apps are only assigned to users I believe. Can we add them to a policy set that is assigned to devices or will that just not do anything? Thanks.
Yes you can.
The intro is like BAC advert template xD
I don’t know that one 😊
Is there a way to change a device's enrolled user to another user without impacting the device user or reset ?
I don’t think so sorry.
I am looking for intune configs without endpoint manager as inTune it can be purchased with business premium but everyone seems to show endpoint manager
I can see your confusion. As I said in the video, the devices & apps area is Intune. Endpoint manager is comprised of 2 products, Intune & security :-)
have you done any migration of KMS from one OS to another, and possible issues?
No I've not sorry.
Hello Can you suggest me how to push host file in all devices through Intune.
Please push your question to the Microsoft tech community for the in tune channel. I think you’ll get a faster response.
Dear please suggest me I m in one trouble how to block software installation on users Id through Intune if you have any idea please share with me. But i want don't block running software on users laptop I want block software installation only.
Thanks for the question. Ensure that your users run in user mode not in admin mode. This will prevent them from installing any software.
@@AndyMaloneMVP Yes but want create policy for software installation block in intune.
@@AndyMaloneMVP devices working on users mode.
@@NeerajSharma-bx7qu there are settings in the security portion of Intune that will do this. If you’re asking me which particular one. I’ve no idea, I can’t remember every setting sorry. Try docs.Microsoft.cm
Well, hello there! 👋
Hello to you too 👍
Cool stuff but a lot of it is in preview which Microsoft recommends never to use in production :/
As an MVP I can tell you that from experience most preview features generally find there way into general availability 😊
Sir
Not open and I'd prepare
Jadziem. 😉
Pls suggest me someone similar like you for power BI and tools advance level
Thanks for the comment, unfortunately I have to be honest and say the power BRI is not my forte, I’m not sure of who has a channel based on this. If however, I discover someone I’ll of course make an addition to this comment.
Intune is crap. Can't stand it. It is like group policy. Workspace One and SCCM are the best.
Either way Intune is the future. Ignore it at your career peril👍