Mastering Microsoft Endpoint Manager

By Charles Smith and Scott H. Woods

This book is everything that every other book on Microsoft Device management is not. The book has been assiduously written to provide insights into how organizations and small businesses that needs extra security for their devices. The book is also very useful for individuals working in IT firms that use Microsoft Endpoint Manager for device security. If you are going for an interview in firms that use Microsoft Endpoint Manager for devices, you can lay your hands on this guide to furnish yourself with the basis of Microsoft Endpoint Manager and how big organizations are taking advantage of the Endpoint Manager package. The book also provides guides on how to configure mobile application managers for Windows, Android and iOS devices.

 

 

 

• Language: English
• Publisher: Scott H. Woods
• Release date: Mar 17, 2021
• ISBN: 9781393017943

Book preview

Mastering

Microsoft

Endpoint Manager

A Quick Reference on Microsoft Unified Endpoint Management (Configuration Manager and Microsoft Intune)

––––––––

Scott H. Woods

Copyright

––––––––

Copyright©2021 Scott H. Woods

All rights reserved. No part of this book may be reproduced or used in any manner without the prior written permission of the copyright owner, except for the use of brief quotations in a book review.

While the advice and information in this book are believed to be true and accurate at the date of publication, neither the authors nor the editors nor the publisher can accept any legal responsibility for any errors or omissions that may be made. The publisher makes no warranty, express or implied, with respect to the material contained herein.

––––––––

Printed in the United States of America

© 2021 by Scott H. Woods

Table of Contents

Copyright

CHAPTER ONE

GETTING READY FOR THE MICROSOFT ENDPOINT MANAGEMENT

What is in it for you?

Choose what's right for you

What you need to get started

Planning and deployment guides for Microsoft Intune

How to set up or move to Microsoft Intune

Prerequisite

How to try Microsoft Intune free version

Signing in to Intune in the Microsoft Endpoint Manager admin center

How to confirm the Mobile Device Management (MDM) in the Endpoint Manager

How to manually set the MDM authority for Intune

Coexistence

Preparation

Add Intune MDM authority

Migrate users and devices (optional)

Creating users in Microsoft Intune and assigning license to users

How to assign a license to the user you have created

How to delete users

Add users and grant administrative permission to Intune

Add users to Intune

Add Intune users in the Microsoft 365 admin center

Add Intune users in the Azure portal

Grant admin permissions

Give admin permissions in Microsoft 365

Give admin permissions in the Azure portal

Types of administrators

Assign a role to an Intune user

How to create a custom role

To create a custom role

Copy a role

CHAPTER TWO

ENROLL DEVICES IN MICROSOFT INTUNE

Enrolling iOS/iPadOS devices in Intune

Prerequisites for iOS/iPadOS Enrollment

User-owned iOS/iPadOS and iPadOS devices (BYOD)

Company-owned iOS/iPadOS devices

Automated Device Enrollment

User Enrollment

Apple School Manager

Apple Configurator

Use the Company Portal on ADE-Enrolled or Apple Configurator-Enrolled devices

How users Enroll corporate-owned iOS/iPadOS devices with user affinity

About corporate-owned managed devices with no user affinity

How to set up automatic Enrollment for Windows devices

Sign in to Intune in the Microsoft Endpoint Manager

Set up Windows 10 automatic Enrollment

Enroll your Windows 10 devices

Removing your Windows devices from management

What happens if you remove device from Intune

Remove Windows 10 devices

Remove in Company Portal, Home page

Remove in Company Portal, device context menu

Remove in device Settings app

Remove Windows 8.1 PC

Removing your personal information after removing the Company Portal

CHAPTER THREE

UPDATE DEVICE SETTINGS

Protecting your Windows devices using encryption

Setting Device Password on Windows 10 device

Turn on Windows firewall

Change user Access Control settings

Adjust protection level

Check device settings

Turn On Windows defender to have access to your organization’s resources

Turn on Windows Defender

Turn on real-time and cloud-delivered protection

ANDROID DEVICE MANAGEMENT

Why Enroll your Android device?

Secure your device

Access internal apps, VPN, and Wi-Fi

Remotely reset a lost or stolen device (if device supports it)

Get latest policy updates and requirements

Get remote help from IT support person

Enroll Android devices with the Company Portal app

Enroll device

Enroll devices using the Android Work profile

Create work profile and Enroll device

Next steps

Enrolling your work device with the Microsoft Intune application

QR code Enrollment

Token Enrollment

How to unEnroll Android devices

Disable Company Portal device management

Uninstall the Company Portal app

Remove the Company Portal app as a device administrator

Effects of removing required apps

Move to a new device management setup

Allow Company Portal to control Wi-Fi

Edit Wi-Fi control

Google Pixel devices

For Samsung devices

Encrypting your Android devices

Enable secure startup

Set startup passcode

Set your password or PIN

CHAPTER FOUR

iOS/iPadOS Device management

How to Enroll iOS/iPadOS devices

Enroll your iOS device

Secure entire device

Secure work-related apps and data

Set a device passcode on your iOS devices

Unlocking iPhone with Face ID

How to temporarily disable Face ID

How to Turn off Face ID

Unlocking iPhone with Touch ID

Turning on Fingerprint feature

Add a fingerprint

Name or delete a fingerprint

Unlock iPhone by touch instead of pressing the Home button

Turn off Touch ID

Add a fingerprint

Name or delete a fingerprint

Unlock iPhone by touch instead of pressing the Home button

Turn off Touch ID

How to update to the latest iOS

How to update iPhone automatically

Restore your files to iPhone from a backup

Restore iPhone from an iCloud backup

Restore iPhone from a computer backup

CHAPTER FIVE

Microsoft Endpoint Configuration Manager

Opening the console of the Endpoint Configuration Manager

Connect to a site server

THE AZURE ACTIVE DIRECTORY (AZURE AD)

Azure AD? Who uses it

Creating a tenant in the Microsoft Azure

Add a new user

Add a new guest user

Delete a user

ABOUT AUTHOR

CHAPTER ONE

GETTING READY FOR THE MICROSOFT ENDPOINT MANAGEMENT

Microsoft Endpoint Manager is a cloud-based Microsoft solution that caters for operating systems and mobile devices. The Microsoft Endpoint manager helps users to sort the modern management and the modern workplace to keep their data safe, in the cloud and on the premises of the person or company running the Microsoft Endpoint Manager software. The Microsoft Endpoint Manager features the essential tools and services that you can use to monitor and manage virtual machines, servers, embedded devices, desktop computers and mobile gadgets. 

The Microsoft Endpoint Manager combines many services that you may be familiar with (probably you have been using one of these services in time past), featuring the Configuration Manager, Microsoft Intune, Desktop Analytics, Windows Autopilot, and co-management. These services form a major part of the Office 365 package to help users safeguard access, protect their data and also respond to risk and manage risk. 

What is in it for you?

The Endpoint Manager features the services below; 

-  Microsoft Intune: The Microsoft Intune is