Windows Autopilot has been around for years, and many admins have built entire deployment processes around what we now call “Autopilot V1.” But recently, there’s been a ton of buzz around Autopilot Device Preparation—also known as Autopilot V2. On the surface, V1 and V2 look nearly identical: A new device is purchased, Windows boots into […]
Onboarding new devices has traditionally been one of the most painful, time-consuming tasks for IT teams. Hours are wasted configuring operating systems, installing applications, and applying security settings before a new hire can even log in. But with Windows Autopilot, all of that changes. Autopilot streamlines device provisioning so that you no longer have to […]
Below you will find a list of security controls for Microsoft Intune that will help secure your environment. Keep in mind these are recommendations and will not be able to be used in all environments due to unique constraints. Each control should be evaluated and tested appropriately. I have also written security baselines across the […]
Many MSPs have been using a third-party tool like JAMF or Addigy to manage macOS devices in customer environments because of the limitations of Intune. Over the years, Microsoft has been adding a good amount of management functionality specifically for macOS devices. One of the latest releases is giving you the ability to manage the […]
Protecting corporate data on unmanaged devices like personal cell phones is extremely important in today’s remote workforce. App protection policies that are part of Microsoft Intune provide an easy way to start containerizing corporate data without inhibiting user productivity. It also provides flexibility so that the device does not need to be unenrolled in a […]
Enrolling Devices into Intune can sometimes seem daunting. We are so used to pushing out an agent like we do with our RMM tools. There has traditionally always been problems with how users would enroll their device via the work or school settings because they were not a local admin. In this video, I am […]
Microsoft Intune supports both corporate owned and BYOD (personal) devices. This support extends to both the MDM and MAM solutions that are offered today. When devices are enrolled into the solution, they are automatically classified as either corporate or personal. As an MSP, it is important to understand how these devices get classified so that […]
Microsoft Intune can be extremely powerful because of its MDM and MAM capabilities. Mobile Application Management (MAM) enables MSPs to securely protect corporate data on personal or BYOD devices without having to enroll in the full MDM solution. This is significant so that all administration is scoped only to devices that the company owns. For […]
In the video below, I show how to configure Apple Business Manager and Microsoft Intune for automated device enrollment. It includes enrollment for both macOS and iOS devices. This powerful technology allows an MSP to ship devices directly to end-users. Devices can be preconfigured with policies, settings, and applications. The user can boot the device […]
