M06 Cloudonly PC Setup David Tesar Richard Harrison First Half Second Half 01 Big Picture with Windows Intune 07 MDM Prerequisites and Cloudonly MDM Setup 02 Architecture Design Considerations ID: 593446
Download Presentation The PPT/PDF document "Windows Intune for IT Pros Jump Start" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
Windows Intune for IT Pros Jump StartM06: Cloud-only PC Setup
David Tesar
Richard
HarrisonSlide2
First Half
Second Half
(01) Big Picture with Windows Intune(07) MDM Prerequisites and Cloud-only MDM Setup(02) Architecture Design Considerations(08) Cloud-only Software Publishing and Deployment(03) Extending Identity to Windows Azure Active Directory(09) Setting Up & Configuring Unified Infrastructure (+ MDM Setup)(04) Administrator Roles, Users and Groups(10) Unified MDM Settings and Compliance(05) Windows Intune Policies(11) Unified MDM Software Deployment(06) Cloud-only PC Setup(12) End User Enrollment
Windows Intune for IT Pros Jump StartSlide3
Devices and Enrollment OptionsStandard Client Deployment MethodsAlternative Client Deployment Methods
Post Enrollment Tasks
Module OverviewSlide4
Devices and Enrollment OptionsSlide5
Client Type
Enrolment
MechanismManagement MechanismWindows 8, 7, Windows Vista and Windows XPAdministrator can install agents or user can enroll using the Windows Intune Company PortalManagement using client agentsWindows RT and Windows Phone 8Define device owner as managed user. User enrolls device through Company Apps setting.Direct Management(EAS also supported) iOS 4.0 or laterUpload an Apple Push Notification certificate to Windows Intune. User enrolls device.
Direct Management
(
EAS also supported
)
Android 2.1 or later, or legacy smartphone
devicesDefine device owner as managed user. User enrolls device.EAS Only
Comparing Windows Intune Clients and Mobile DevicesSlide6
Standard Deployment Methods
Direct download
Network shareFlash driveSelf-service company portalUser requires Local Admin rightsAlternative Deployment MethodsScripts, group policyImage-based or offline installationNo Local Admin rights requiredWindows Intune PC Deployment Options
Cloud serviceSlide7
Standard Client Deployment MethodsSlide8
Download the client package and certificate. Enroll the client computer
Manually
Using automationLink the computer to a userCan link multiple computers to a single userA computer can be linked to only one userAdministrator Computer Enrollment ProcessSlide9
Windows Intune PC Installation Package
The installation package includes:
The Setup executable fileA certificate specific to the Windows Intune accountCommand-line options:/Quiet/Extract %temp%
/PrepareEnrollSlide10
Standard Windows Intune PC Installation Process
Enrollment
The Windows Intune agent startsAuthenticates
against the cloud
service
E
nrolls
the client
computer and generates the computers certificate
Agent installation
Microsoft Update verifies the agent versions and downloads them to the computer
Each agent starts up as it is downloaded and installed
Each agent reports information to the Windows Intune service
Agents with failed installations raise alerts on the administrator console
Computer restart
A restart
maybe required
Installation completes and all agents report to Windows Intune within 30 minutes
Check the Ungrouped Devices group for newly enrolled computersSlide11
The Self-service Computer Enrollment Process
https://portal.manage.microsoft.comSlide12
Alternative Client Deployment MethodsSlide13
Working with Windows Installer (.msi) Files
Deployment
scripts must determine which version to run for the operating systemSupports standard Windows Installer (msiexec.exe) command-line parametersCan be deployed via Group PoliciesWindows_Intune_Setup.ZIPWindows_Intune_Setup.exe /extractSlide14
Reference ComputerCopy files to %systemdrive
%\temp\
Windows_Intune_Setup Windows_Intune_Setup.exeWindowsIntune.accountcertPrepare system imageCreate SetupComplete.cmdPlace in the %Windir%\Setup\Scripts folder Capture system imageUse Windows Setup to capture imageOffline Windows Intune Client Installation ProcessWindows_Intune_Setup.exeWindowsIntune.accountcertSlide15
Target ComputerRestart
Windows Setup completed
SetupComplete.cmd runsWindowsIntuneEnrollPending key createdCheck for EnrollmentIf enrolled, no actionIf not, create Windows Intune Automatic Enrollment taskWindows Intune Automatic Enrollment task Runs at next scheduled timeChecks for WindowsIntuneEnrollPending registry keyAttempts to enroll target computerIf enrollment fails, will retry for up to one monthMore details online at: http://aka.ms/j55dq0Offline Windows Intune Client Installation ProcessSlide16
Post Enrollment TasksSlide17
Admin Retiring
Note: There can be up to a 30 day delay before devices are removed from the console.
End User RetiringRetiring a Windows Intune ClientSlide18
Troubleshooting a Windows Intune Client Installation
Step 2
If no alerts appear, check the client computer’s Internet connectivity and proxy configurationMake sure that the computer can connect to the Windows Intune service at http://manage.microsoft.comStep 3If installation problems persist, go to http://go.microsoft.com/fwlink/?LinkID=186758Save the Enrollment and Windows Update logs for the client computer:%programfiles%\Microsoft\OnlineManagement\Logs\Enrollment.log
%windir%\windowsupdate.log
Step 1
Check the Alerts workspace on the administrator console
Installation failures reported to the service appear in the System category and include possible error codes
Error reporting
:
Automated mode: report to the logs and fail silently
Interactive mode: errors displayed, check online helpSlide19
Do not rename installation filesUse a folder structure to keep different sets of installation files separateKeep the installation files secure
Remove the installation files from the client computer when the installation is complete
Best Practices Working with Client InstallationTailspin Toys Client SoftwareSlide20
Devices and Enrollment OptionsStandard Client Deployment MethodsAlternative Client Deployment Methods
Post Enrollment Tasks
Module SummarySlide21