intune presentation pptx

• My presentations

Auth with social network:

Download presentation

We think you have liked this presentation. If you wish to download it, please recommend it to your friends in any social system. Share buttons are a little bit lower. Thank you!

Presentation is loading. Please wait.

Microsoft Intune Product Overview Presentation.

Published by Robyn Mary McKenzie Modified over 6 years ago

Similar presentations

Presentation on theme: "Microsoft Intune Product Overview Presentation."— Presentation transcript:

Ellis Paul Technical Solution Specialist – System Center Microsoft UK Operations Manager Overview.

Why EMS? What benefit does EMS provide O365 customers Manage Mobile Productivity Increase IT ProductivitySimplify app delivery and deployment LOB Apps.

Tools and Tips for Administering Office 365

The time to address enterprise mobility is now

Deployment Planning Services

Office 365 is cloud-based productivity, hosted by Microsoft.

Make your app a native part of Office with Add-ins

People-Centric Management

Transforming business

Conduct a successful pilot deployment of Microsoft Intune

Identity & Access Management for a cloud-first, mobile-first world

Hybrid Management and Security

Microsoft Operations Management Suite Insight and Analytics

Azure Information Protection Strategy and Roadmap

Microsoft Azure: The only consistent Hybrid Cloud

6/10/2018 5:07 PM THR2218 Deploying Windows Defender AV and more with Intune and Configuration Manager Amitai Senior Program Manager,

SaaS Application Deep Dive

About project

© 2024 SlidePlayer.com Inc. All rights reserved.

PowerPoint Default Template with Intune

• 23. June 2022

Standard templates are not only available in Word and Outlook. This is also available for PowerPoint. However, it is not called "Normal" here, but simply "blank.potx". To distribute this standard PowerPoint template with Intune, I've put together a package. This is very simple and does nothing other than store the template file on the end device in the user context.

As always, I have put the package in my GitHub repository. The ZIP "PowerPoint template.zip" includes the whole folder to allow for an easy download.

Table of Contents

Prepare powerpoint template package, distribute powerpoint template with intune, update powerpoint template.

It didn't help much in preparation. The biggest effort will most likely be designing the actual template. If you hate this and my package template, you can save your template in the packages folder with the name "blank.potx". (You can delete or overwrite my example "blank.potx".)

Once your template has been saved with the correct name, you can create an "Intuenwin" file from the package. Download the current " Microsoft Win32 Content Prep Tool " and run it. In this you enter the folder path to the package, the installation file (install.ps1) and the desired output folder for the "Intuenwin" file. We don't need a "catalog folder".

To upload the created package with the PowerPoint standard template in Microsoft Endpoint Manager / Intune, navigate to " Apps > Windows apps " and select +Add, Windows App (Win32).

On the first page you upload the "install.intunewin" created in the previous step and enter a package name, a description and a publisher. In addition, I always like to store an icon and give the whole thing some color, especially in the company portal.

On the second page you have to enter the installation and uninstallation command. It is also important that you set the installation behavior to "User".

The requirements in the next step are not very relevant, but must be set.

In the detection rule, you can upload the "check.ps1" included in the package.

You can skip the dependencies and supersedence. Finally, you only have to assign the app to a desired target group.

If you would like to update your PowerPoint template, you can do this by adjusting the «blank.potx» and the version in the second line of «install.ps1» and «check.ps1». You can then repackage the Win32 app and upload it to the existing app in the Endpoint Manager. Don't forget to upload the "check.ps1" again!

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Save my name, email, and website in this browser for the next time I comment.

Stay in the Loop with My Monthly Newsletter!

Privacy Overview

WINDOWS INTUNE OVERVIEW

Apr 05, 2019

3.32k likes | 5.82k Views

WINDOWS INTUNE OVERVIEW. Charlie Russel Microsoft MVP. AGENDA. Windows Intune Overview PC Management with Windows Intune (Oct 2011 release) What is new in Spring Pre-Release (If TIME!) Q&A.

Share Presentation

• default client
• administrator privileges
• system center operations manager
• tighter security
• 3rd party update support

Presentation Transcript

WINDOWS INTUNE OVERVIEW Charlie Russel Microsoft MVP

AGENDA • Windows IntuneOverview • PC Management with Windows Intune (Oct 2011 release) • What is new in Spring Pre-Release (If TIME!) • Q&A

MANAGE & SECURE PCS AND DEVICES ANYWHERESimple Web-based Administration Console and a friendly IW experience • Help protect PCs from malware • Manage updates • Distribute software • Proactive monitoring and alerts • Provide remote assistance • Inventory hardware and software • Monitor & track licenses • Increase insight with reporting • Set security policies Enabling Flexible Workstyles • Computers can be managed from the office, branch office, or on the road • IT and partners can work from virtually anywhere

VISION Our vision for Windows Intune is to always deliver the best Windows experience with enterprise-class management and security • LATEST IN • WINDOWS • SMART • MANAGEMENT • ENABLE • FLEXIBLE WORKSTYLES • RAPID RELEASE CYCLES Give users a modern OS experience for greater productivity, security, and mobility benefits Deliver simplified, enterprise-class management for IT with less costs and higher productivity Empower users to work from anywhere, anytime with the tools they need Provide customers continuous improvements & new features without costly deployments

INTUNEIN MOTION Complement to SCCM Extends desktop management to last remainingunmanaged desktops such as remote users, non-domain joined PCs or home computers Cloud Service Quick deployment for satellite offices, new acquisitions, or for organizations with limited server infrastructure and IT resources For Windows Enterprise Subscription model for latest Windows Enterprise edition Cloud Enterprise

CHALLENGES IN MANAGINGBUSINESS PC’S Security • Workers in many locations • Non-domain joined desktops • Workers “offline” for extended periods • Compromised security on remote PCs • Multiple configurations, versions • Lack of insight into PCs & inventory • Infrastructure investments required Reliability

Client Management

CUSTOMER WHAT ARE CUSTOMERS SAYING?

“Windows Intune is proving itself every day. We see better productivity in the office and in the field.” ---Ken Supersano, Sr. Director of Technology, Save The Children "Our support calls are down by 70 percent, proof that Windows Intune is keeping our sales folks productive. They can rely on their laptops for dependable computing and foolproof SkyWire software demos.” ---Thomas Castleberry, COO, SkyWire Media "With Windows Intune, we can help our sales force work more productively by ensuring their PCs are healthy and well-protected. This reduces downtime that impacts their ability to win new Avis customers.“ ---Artur Brozek, IT Manager, Avis "We can use Windows Intune to monitor our PC environment, streamline PC management, and provide tighter security—all without increasing hardware or IT management costs.” ---Brett Silverthorn, Manager of Technology, Ontario Systems

PC Management with Windows Intune

Release Cadence

WINDOWS INTUNE ARCHITECTURE • Agents report to the Windows Intune service • Support engineers access the data via the Web-based console • Ports 80 and 443 are all that is required for agent communications • Windows Live ID is required for administrative access

ENDPOINT PROTECTION Built on the same protection engine used by FEP 2010 System-wide, per group and per computer status Follow up actions provided by remote tasks NEW!

SOFTWARE DISTRIBUTION • Publish and deploy from anywhere to PCs anywhere • All you need is an access to browser & application installer binary • Highly reliable, available, secure hosting & distribution of application • Customer content is opaque to everyone but the customer • Multi-tenant, persistent, fault-tolerant & geo distributed store • Easy deployment, monitoring & servicing • Apps can be easily deployed to managed PCs for scheduled or immediate installs • Easy monitoring of installs through admin console • Updates to applications can be easily rolled out • Failure investigation, uninstall

UPDATE MANAGEMENT 3rd party update support Builds on WSUS and Microsoft Update framework Design your update management workflows Easy ongoing management (Patch Tuesdays are easy) Configuration options to choose updates to manage and customize the updates agent

DESKTOP MONITORING AND ALERTS System Center Operations Manager 2007 R2 Agent for desktop monitoring Windows, Office and desktop application monitoring provided in-box. Configurable alert categories and alert thresholds to reduce noise Configurable email notifications

MANAGING & SECURING YOUR PCS WITH WINDOWS INTUNE Oct 2011 release

What’s new in Windows Intune spring pre-release?

EMERGING IT TRENDS • Consumerization of IT is reaching a tipping point • Trend reversal in consumer and business technology evolution • 31% of employees access corporate data using personal devices(primarily smartphones) • End user persona is changing (Rapidly) • End user’s FAR more tech savvy • “Digital Natives” coming into workforce have never known life without ubiquitous technology • Higher end user expectations for IT services • Shifting focus of IT • How can I manage this proliferation of heterogeneous devices? • How can I reduce security risks while enhancing user productivity? • New tools, strategies and processes needed to address these trends

WHAT’S NEW IN THE PRE-RELEASE? User Centric IT Pro experience ModernDevice Management Self Service Portal Manage Corporate and Personally owned mobile (phone & tablets) devices Empower end users to self service their management needs • Enable IT pros to think users first User Centric Management

USER CENTRICITY FOR IT PROSAllow the administrator to think users first • User identity • Leverage existing investments in Active Directory/Office 365 • Enterprise class identity and authentication services • User Device Affinity • Establish and maintain user/device relationship • Identify users with non compliant devices • Dynamic Grouping • Dynamic updates to user group membership based on Security groups/managers • Define exception rules • Deploy Software and Policies to user groups

USER CENTRIC MANAGEMENT -LOGICAL ARCHITECTURE Azure Active Directory Sync AD user data into the cloud Directory Synchronization Sync user data to Windows Intune Active Directory Manage User device affinity Publish software & policies to users

USER CENTRICITY FOR END USERSEnable IT self service for end users with Company Portal • Self Enroll Devices • View all my devices • Manage device affinity • Web based software catalog • Easily search and install software • Users decide what software/apps to install from catalog made available to them • Install software locally/remotely • Do not need administrator privileges • Contact IT for support

USER CENTRIC MODERN DEVICE MANAGEMENTEnable users to connect to corporate resources on any device • Mobile portal • Search and install apps from Enterprise mobile app catalog • Contact IT for support • Protect corporate data • Set security policies for mobile devices • Restrict device types that can access corporate email • Retire and optionally wipe inactive/ lost/stolen devices • Single pane of glass for all devices • Unified console and user experience for managing PCs and Mobile devices

MODERN DEVICE MANAGEMENT - LOGICAL ARCHITECTURE Azure Active Directory Sync AD user data into the cloud Directory Synchronization Active Directory Sync user data to Windows Intune Sync mobile devices for managed users Users Microsoft Exchange Server 2010 Windows Intune Exchange Connector Apply policies or trigger remote tasks Modern Devices

MODERN DEVICE MANAGEMENT • On premise Exchange 2010 and Connector required for • Device inventory • User device association • Mobile security policies • Remote Wipes • Not required for • Mobile portal features

BANDWIDTH OPTIMIZATION 1 0 1 1 0 0 0 1 0 0 1 1 1 0 0 1 1 0 1 0 1 0 1 1 0 1 Customer Feedback • Help us minimize internet bandwidth usage for updates and software in remote branch offices Feature Enhancement • Windows Intune clients now leverage Win7 Peer distribution platform – a technology that powers Branch Cache • No additional infrastructure required 1 0 1 1 0 0 1 0 0 1 0 1 1 0 1 0 1 0 1 1 1 0 1 0 0 1 0 0 0 1 0 1 1 0 1 1 0 1 11 0 0 0 0 1 0 0 1 1 1 0 1 1 0 0 1 0 0 1 0 1 1 0 1 1 1 0 0 1 0 1 1 1 0 0 1 0 0 1 1 0 1 0 1 1 1 0 0 0 1 0 0 1 1 0 1 0 1 0 1 1 0 0 1 0 0 1 0 1 1 0 1 0 1 0 1 1 0 0 1 0 0 1 0 1 0 01 1101 11 1 1 0 11 1011 10 1

POLICY MANAGEMENT Customer Feedback How can I push out security policies immediately without waiting for the default client sync window Feature Enhancement • New remote task to refresh policies on remote computers • Compliance status updated on task completion • Remote task for inventory update

ALERTS Customer Feedback How can Windows Intune help us improve Alert responses to critical issues? Feature Enhancement • New alert filters on System overview dashboard, helps IT focus on most pressing issues • Alert severity can now be customized to meet your needs and reduce noise

DYNAMIC DEVICE GROUP MEMBERSHIP Customer Feedback I would like to assign devices to specific groups similar to my AD hierarchy Feature Enhancement • New dynamic group membership for Computers that can be based on Domain or OU membership

UPDATE MANAGEMENT Customer Feedback I need to view compliance with my ‘Patch Tuesday’ KBs Feature Enhancement • New view provides compliance rollup of updates belonging to each security bulletin

SUMMARY/RECAP SLIDE • Enhance your management solution with the cloud • Rapid releases to add innovative features • Next Wave to offer • Cross platform modern device management • User centric management with AD integration • Call to action • Attend 2 other Intune deep dive sessions this afternoon – Modern device management, Deep dive on User centric management • Sign up for trial account or to test the Pre-Release version

CHARLIE RUSSEL Microsoft PowerShell MVP [email protected] Blogs.msmvps.com/russel

© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

• More by User

Windows XP Overview

Windows XP Overview. Win16 VM. OS/2. POSIX. User mode. security. Win32. Executive Services. Kernel mode. Kernel. HAL. Hardware. Architecture (from 2000). Architecture (XP adds). Blue screen of death protection often caused by incompatible device drivers

425 views • 6 slides

Windows Graphics Overview

Windows Graphics Overview. David Blythe Architect Windows Graphics & Gaming Technologies dblythe @ microsoft.com Microsoft Corporation. Session Outline. Windows Graphics Big Picture Windows codenamed "Longhorn" Display Driver Model Basic, Advanced driver models Graphics APIs

844 views • 34 slides

Windows 2000 Overview

What we're going to cover. Overview of Operating SystemsCommon FeaturesDifferences between Operating SystemsWindows 2000 ArchitectureWorkgroups and DomainsActive Directory. The Different Microsoft O/S. Windows 2000 ServerWindows 2000 ProfessionalWindows NT Server 4.0Windows NT Workstation 4.0Windows MEWindows 98Windows 95.

715 views • 46 slides

Online Services for PC Management: Introducing Windows Intune

Required Slide. SESSION CODE: WCL203. Online Services for PC Management: Introducing Windows Intune. Marc Shepard Principal Program Manager Lead Microsoft Corporation. Session Objectives and Takeaways. Session Objective(s): Overview of the Windows Intune offering

538 views • 28 slides

Windows 2008 Overview

Windows 2008 Overview. Lecture 1. Windows Networking Evolution. Windows for Workgroups – peer-to-peer networking built into the OS Windows NT – separate server and client versions, emphasis on client/server model, improved security, NTFS

400 views • 22 slides

Windows BitLocker Overview

1.78k views • 12 slides

Windows Intune : Cloud Services for PC Management

Windows Intune : Cloud Services for PC Management. Arun Subramanian Product Marketing Lead – Windows Client. Microsoft Commercial Cloud Services. 9,000 business customers. Over 50% of the Fortune 500. 40M paid Online seats. 70% switching from Notes. More than 500 government entities.

261 views • 13 slides

Windows Intune in Real Life

WCL320-R. Windows Intune in Real Life. Erdal OZKAYA MVP- MCT- Network Engineer CEO IT Training Australia www.ceotraining.com.au. Agenda. What is Windows Intune ? What should you know about Windows Intune. Deployment Getting Started with Windows Intune Windows INTUNE in REAL LIFE Demo.

551 views • 35 slides

Specialized device deployments for Windows 10 with Microsoft Intune

Specialized device deployments for Windows 10 with Microsoft Intune. Kellie Eickmeyer, Senior Program Manager. THR3003. 150 M Devices managed by ConfigMgr & Intune. 1.1 B Azure Active Directory Identities. 700 M Windows 10 PCs. 450 B Authentications per month. 135 M Office 365 MAU.

318 views • 12 slides

Windows Intune – Software Distribution Upload a package for deployment

Windows Intune – Software Distribution Upload a package for deployment. Windows Intune SL console. WPF client. Software Overview View installed software View deployments. Upload Package Create cabbed deployment package Upload to Windows Intune. Installed software. Deploy Package

829 views • 45 slides

Windows Intune

Windows Intune . Apps. Today’s challenges. Deploying and managing applications across platforms is difficult. Devices. Users. Data. Users expect to be able to work in any location and have access to all their work resources.

1.08k views • 23 slides

Windows Azure Overview

Windows Azure Overview. Name Title Organization. An approach to computing that’s about internet scale and connecting to a variety of devices and endpoints. What is the cloud?. Cloud Computing Patterns. Inactivity Period . On and Off. Compute . t.

795 views • 58 slides

Windows Azure Overview. An approach to computing that’s about internet scale and connecting to a variety of devices and endpoints. What is the cloud?. Cloud Computing Patterns. Inactivity Period. On and Off. Compute. t. On & off workloads (e.g. batch job)

741 views • 65 slides

Windows Intune: Cloud Services for PC Management

Windows Intune: Cloud Services for PC Management. Jeff Alexander IT Pro Evangelist Microsoft Australia http://blogs.technet.com/jeffa36. Microsoft Commercial Cloud Services. Used by Over 50% of the Fortune 500.

311 views • 6 slides

Windows Overview

Windows Overview. LEIT 429x Steve Builta. Where we are going…. Overview of operating Systems Overview of Windows 9x Take and Edit digital Photos. What is an operating system?. Allows you to interact with the computer hardware Provides Screen Control Keyboard and pointer input

367 views • 22 slides

Increase and Improve your PC management with Windows Intune

Increase and Improve your PC management with Windows Intune. Mike Resseler Senior Technical Consultant SCDPM MVP Infront Consulting. Agenda. Cloud Examples. Is The Cloud a Threat For IT Pro’s. Windows Intune. Wrap-Up. Q and A. Cloud Examples. SaaS. PaaS. IaaS.

383 views • 28 slides

Windows Intune : A Unique Offer

Windows Intune : A Unique Offer. Ease of use. Windows 7 Enterprise and Future versions. Integrated solution. Rapid release cycles. Strong & trusted brand recognition. Grow business with less risk. What are the trends and opportunities for Windows Intune?.

273 views • 8 slides

Windows 2003 Overview

Windows 2003 Overview. Lecture 1. Windows Networking Evolution. Windows for Workgroups – peer-to-peer networking built into the OS Windows NT – separate server and client versions, emphasis on client/server model, improved security, NTFS

310 views • 22 slides

Windows Intune : Cloud Services for PC Management. Georgia Psyllidou Microsoft Hellas Optimized Desktop Specialist Dimitris Theodosopoulos Microsoft Hellas Partner Technology Advisor. Microsoft – Cloud Services experience. (6 χρόνια ) 2B emails/ μέρα. (7 χρόνια ) 5B conf

519 views • 35 slides

Intune Blog

https://scloud.work/category/intune-starter-series/ Our Microsoft Intune Blog keeps you up-to-date on the latest developments, expert insights, and how-to's related to Microsoft Intune.

8 views • 2 slides

Register Now

Continue with LinkedIn Continue with Facebook Continue with Google Continue with Twitter

Confirm Password *

Lost Password

Lost your password? Please enter your email address. You will receive a link and will create a new password via email.

introduction to Intune Powerpoint Presentation Required

I want to provide a overview session to my team  with regards to intune, so i am seeking for the some recent PowerPoint presentation.

If available with someone, can you please share it with me.

Actually i checked on web, there are very old ones available.

Thanks in Advance

About ANSHUL VALECHA Beginner

Related questions, app protection policies for outlook on personal laptops with intune, auto login compatibility in windows 11 for single or multi-app kiosk mode, how to deploy tableau desktop through intune, laptop connected to entra id but not found in intune, web-based windows laps password retrieval solution, answers ( 2 ).

Check out Microsoft ignite intune presentations slides https://howtomanagedevices.com/sccm/789/download-microsoft-ignite-ppts-it-pros/

Thanks sir!

Leave an answer

 Previous question

Next question 

Centrally Deploy and Manage Office Templates using Microsoft Intune

“The world is moving to remote management for devices and this creates some challenges with deploying quality-of-life features for employees. We recently were able to deploy some office templates (Word, Excel, PowerPoint) to our employees through Microsoft Intune.”

For our employees, the experience is when they open any office application, they can choose a new file and are presented with a list of company-approved templates to choose from.  

This raises quality and saves time for our employees. They can focus on the content and the formatting, color schemes, and other brand aspects come automatically for the ride. 

Here are the benefits we’ve observed…

Templates are deployed to a user’s device when they enroll

From this point forward, all employees start with the full set of company templates at their fingertips from the moment they join. This makes training a cinch and standardizes the training process. Everyone in our company can find the templates using the exact same steps – cross training is a breeze.

Templates are synced via SharePoint sync and are available offline

Under the hood, we deploy the templates through OneDrive using SharePoint Sync, which makes the files available offline. So, if someone is on the go and doesn’t have an internet connection, they can still use the templates.  

To our employees this is all invisible of course – they just know that the templates are available in their office applications. With this solution, there’s no action to take for employees. The files show up as a template under New in their office applications and they can use them any time, offline or online. 

Templates are centrally managed and any changes/updates to the templates are immediate if the device is online

This was a perennial problem for us and many companies. Stale company templates get left in the wild and inevitably someone uses an outdated one for a critical client-facing artifact.  

With this solution we can centrally managed versioning so that everyone gets the most recent version. 

As a note, this isn’t a silver bullet. Once a file is created, that file retains the version of the template it was created in. So, there is some training involved to teach people to use the new templates, rather than constantly clone an existing document perpetually.

Deploying Office Templates using Microsoft Intune

At a high level, these are the steps involved 

Upload the templates to a SharePoint site and configure access 

Create and assign the script to sync the SharePoint site on the end user’s device 

Create and assign the configuration policy which points the office applications to the synced SharePoint site 

Prerequisites 

The OneDrive application has already been deployed to the user devices 

The user devices are enrolled in Microsoft Intune 

The remainder of this article comprises the steps we took to deploy this solution to our users. It is technical in nature and will require some engineering background to duplicate.  

Upload the templates to a SharePoint site and configure access

First, we need to identify a  SharePoint site  that is accessible by all users that need to access the templates. This could be a  company-wide  site or a  specific department  site if we wanted to manage templates by department.  

We’re going to use a  company-wide  site. The screenshot below shows the SharePoint site where the templates were uploaded (1), the path (2), and the templates (3). 

Set Permissions in SharePoint

Now that we have our template location, we want to  protect the files  from accidental modification. To do this we need to make the templates folder  read only for members . 

The screenshots below show how to accomplish this. 

Select the  folder  where the templates are (1), click  manage access  (2), find the  [Your Site Name] Members permission , and change the setting to  can view .  

In our example below, the site name is Mobile Mentor Community. Yours will be different based on which SharePoint site you choose. 

Create and assign the script to map the SharePoint site on the end user’s device

Now that we have our templates where we want them, we need to map the SharePoint site to the end user devices so the files can be seen by Office.  

As you can see in the screenshot below, Intune does provide the ability to sync SharePoint libraries using an administrative template configuration profile, but we’ve had issues with libraries not syncing due to character limits, so we are not using these settings.  

Your experience may vary. 

Instead we’re going to use a  PowerShell script  made available on GitHub by  Tabs-Not-Spaces . We’ve slightly modified the script we’re going to use, and the modified script can be downloaded by  clicking here .  

Now that we have our script, we need to put in our  SharePoint  and  Azure AD  information so it knows which site to sync. To do this we need to: 

Get the SharePoint site IDs 

Update the script with the SharePoint site IDs 

Get the sharepoint ids .

We’ll be using chrome to get the IDs we require from SharePoint to populate the script.  

In Chrome, we’ll open the SharePoint folder where we uploaded the template files. Once loaded, we’ll press  F12  to open the  developer pane , select the  Network  tab (1) and click the clear button to  clear previous requests  (2).  

Next, we’ll click on the  Sync  button on the  SharePoint  ribbon (3). 

Once the sync button is pressed, a box will pop up requesting to open OneDrive (1). We’ll click Cancel . In the developer pane we can now see the sync request in red (2).

When we click on the sync request and scroll down to the bottom of the headers tab , we can see all the IDs we require to populate the PowerShell script.

Now that we have the IDs necessary to populate the script, we’ll  open the script  and scroll down to the section where we need to populate the information (lines 52-58 in the screenshot below). The following IDs need to be copied from the developer pane into the PowerShell script: 

The  userEmail  value should be left as  $userUpn .

The last parameter we need to enter is the organization name shown under Azure Active Directory in the Azure Portal. To do this we’ll browse to https://portal.azure.com and select the Azure Active Directory blade.

We’ll then copy the organization name shown and paste that into our script.

Deploy the PowerShell Script 

Now that we have our script, we need to  deploy  it using  Intune . In the  MEM portal  we’re going to click on  Devices  (1),  Scripts  (2), click  Add  (3), and select  Windows 10 .

We’ll give the policy a name and description and click next

For script location we’ll click on the  blue folder icon  and select the  script we created . Since we want the  script to run as the logged on user,  we’ll set  Run this script using the logged on credentials  to  Yes .  

Ideally, we would want to enforce script signature check, but as we’ve not signed the script we’ll leave  Enforce script signature  check as  No  – if you sign the script you can set yours to Yes.  

As our devices are all using 64-bit Windows 10 we’ll set  Run script in 64-bit PowerShell Host  to  Yes , then click  Next.

We’ll assign a scope tag to this policy and click Next.

We’ll then select the group we want to assign the policy to and click Next.

Finally, we’ll review the configuration to make sure we’ve not made any mistakes, and then click Add .

Create and assign the configuration policy that points the office applications to the synced SharePoint site 

Now that the script to sync the SharePoint site has been deployed, we need to get our  Office applications   to look for templates in that location .  

We’ll do this using an administrative template configuration profile in Intune. 

We’ll click on  Devices ,  Configuration profiles , and select  Create profile . 

We want to set the platform to Windows 10 and later , and the profile as Administrative templates , and click Create .

We’ll give the profile a name and description and click Next.

Next, we want to configure the workgroup templates path setting, so we’ll click on All Settings on the left, and search for workgroup templates .

Under the  workgroup templates path  setting, we’ll click  Enable , and we’ll  paste  in the  path to the templates . We can find this path by  opening up file explorer on a computer that has the SharePoint site synced , browsing to  the template location , and  copying the path from the URL bar .  

As this path  will be unique  for each other, we need to  set the username portion  of the URL to a  wildcard  value as shown in the screenshot below. Once done, we’ll click  OK , and then  Next .  

We’ll then set our scope tags and click Next.

We’ll assign this profile to the same group we assigned the script to and click Next .

And finally, we’ll review the configuration is correct and click Create .

Validate the Solution 

That’s it!   

The setup is now complete. As devices start checking in the new profiles will be applied. We’ll be able to confirm the setup is working as expected by opening Word, clicking on New, selecting the Custom tab, and clicking on the Office Templates folder as shown in the screenshot below. 

Obviously, you’d want to have at least one Word template present to validate against.

Conclusion 

This is one of many quality-of-life solutions that is a once-and-done effort for IT. It makes your employee experience better, saves time, and improves branding.  

Plus, it’s kind of cool. 

If you are interested in learning about how you can use Microsoft Intune to manage your Windows 10 or other devices, check out  our services  or  contact us . 

Justin Joseph

Justin has been in the IT industry for over 12 years and has worked with a broad range of applications and systems, with a strong focus on Azure here at Mobile Mentor. He’s also passionate about fitness, travel, and cake.. he REALLY likes cake. 🍰

Download the Six Pillars of Modern Endpoint Management Deep Dive Concepts such as: Zero Trust Passwordless Authentication Zero Touch Provisioning  App Management Over-The-Air Updates Remote Support 

Related Posts

Understanding RTO vs. RPO: Key Concepts in Disaster Recovery Planning

What is the Intune Suite and How Does it Simplify Endpoint Management?

The Shifting of Employee Priorities in 2024

ADDITIONAL SERVICES

New Zealand | United States | Australia kia ora ❤ NZ | 330 Franklin Rd | Suite 135A – 179 | Brentwood, TN 37027

This browser is no longer supported.

Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.

Microsoft Intune securely manages identities, manages apps, and manages devices

• 15 contributors

As organizations support hybrid and remote workforces, they're challenged with managing the different devices that access organization resources. Employees and students need to collaborate, work from anywhere, and securely access and connect to these resources. Admins need to protect organization data, manage end user access, and support users from wherever they work.

To help with these challenges and tasks, use Microsoft Intune .

Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints.

You can protect access and data on organization-owned and users personal devices. And, Intune has compliance and reporting features that support the Zero Trust security model .

This article lists some features and benefits of Microsoft Intune.

• To get Intune, go to Licenses available for Microsoft Intune and Intune 30-day trial .
• For information on what it means to be cloud-native, go to Learn more about cloud-native endpoints .

Key features and benefits

Some key features and benefits of Intune include:

You can manage users and devices , including devices owned by your organization and personally owned devices. Microsoft Intune supports Android, Android Open Source Project (AOSP), iOS/iPadOS, Linux Ubuntu Desktop, macOS, and Windows client devices. With Intune, you can use these devices to securely access organization resources with policies you create.

For more information, go to:

• Manage identities using Microsoft Intune
• Manage devices using Microsoft Intune
• Supported operating systems in Microsoft Intune

If you manage on-premises Windows Server, you can use Configuration Manager.

Intune simplifies app management with a built-in app experience, including app deployment, updates, and removal. You can connect to and distribute apps from your private app stores, enable Microsoft 365 apps, deploy Win32 apps, create app protection policies, and manage access to apps & their data.

For more information, go to Manage apps using Microsoft Intune .

Intune automates policy deployment for apps, security, device configuration, compliance, conditional access, and more. When the policies are ready, you can deploy these policies to your user groups and device groups. To receive these policies, the devices only need internet access.

Employees and students can use the self-service features in the Company Portal app to reset a PIN/password, install apps, join groups, and more. You can customize the Company Portal app to help reduce support calls.

For more information, go to Configure the Intune Company Portal apps, Company Portal website, and Intune app .

Intune integrates with mobile threat defense services, including Microsoft Defender for Endpoint and third party partner services. With these services, the focus is on endpoint security and you can create policies that respond to threats, do real-time risk analysis, and automate remediation.

For more information, go to Mobile Threat Defense integration with Intune .

You use a web-based admin center that focuses on endpoint management, including data-driven reporting. Admins can sign into the Intune admin center from any device that has internet access.

For more information, go to Walkthrough the Intune admin center . To sign in to the admin center, go to Microsoft Intune admin center .

This admin center uses Microsoft Graph REST APIs to programmatically access the Intune service. Every action in the admin center is a Microsoft Graph call. If you're not familiar with Graph, and want to learn more, go to Graph integrates with Microsoft Intune .

The Microsoft Intune Suite offers advanced endpoint management and security . The suite has optional add-on features, including Remote Help, Endpoint Privilege Management, Microsoft Tunnel for MAM, and more.

For more information, go to Intune Suite add-on features

Learn how you can benefit from modern endpoint management with Microsoft Intune.

Integrates with other Microsoft services and apps

Microsoft Intune integrates with other Microsoft products and services that focus on endpoint management, including:

Configuration Manager for on-premises endpoint management and Windows Server, including deploying software updates and managing data centers

You can use Intune and Configuration Manager together in a co-management scenario, use tenant attach, or use both. With these options, you get the benefits of the web-based admin center and can use other cloud-based features available in Intune.

For more specific information, go to:

• What is co-management
• Frequently asked questions about co-management
• How to enable tenant attach

Windows Autopilot for modern OS deployment and provisioning

With Windows Autopilot, you can provision new devices and send these devices directly to users from an OEM or device provider. For existing devices, you can reimage these devices to use Windows Autopilot and deploy the latest Windows version.

• Windows Autopilot overview
• Windows Autopilot deployment for existing devices

Endpoint analytics for visibility and reporting on end user experiences, including device performance and reliability

You can use Endpoint analytics to help identify policies or hardware issues that slow down devices. It also provides guidance that can help you proactively improve end user experiences and reduce help desk tickets.

• What is Endpoint analytics
• Enroll Intune devices into Endpoint analytics

Microsoft 365 for end user productivity Office apps, including Outlook, Teams, Sharepoint, OneDrive, and more

Using Intune, you can deploy Microsoft 365 apps to users and devices in your organization. You can also deploy these apps when users sign in for the first time.

• Add Microsoft 365 Apps to Windows 10/11 devices with Microsoft Intune
• Microsoft 365 docs: Manage devices with Intune

Microsoft Defender for Endpoint to help enterprises prevent, detect, investigate, and respond to threats

In Intune, you can create a service-to-service connection between Intune and Microsoft Defender for Endpoint. When they're connected, you can create policies that scan files, detect threats, and report threat levels to Microsoft Defender for Endpoint. You can also create compliance policies that set an allowable level of risk. When combined with conditional access, you can block access to organization resources for devices that are noncompliant.

• Enforce compliance for Microsoft Defender for Endpoint with Conditional Access in Intune
• Configure Microsoft Defender for Endpoint in Intune

Windows Autopatch for automatic patching of Windows, Microsoft 365 apps for enterprise, Microsoft Edge, and Microsoft Teams

Windows Autopatch is a cloud based service. It keeps software current, gives users the latest productivity tools, minimizes on-premises infrastructure, and helps free up your IT admins to focus on other projects. Windows Autopatch uses Microsoft Intune to manage patching for Intune-enrolled devices or devices using co-management (Intune + Configuration Manager).

• What is Windows Autopatch?
• Frequently Asked Questions about Windows Autopatch

Integrates with third party partner devices and apps

The Intune admin center makes it easy to connect to different partner services, including:

Managed Google Play : When you connect to your Managed Google Play account, admins can access your organization's private store for Android apps, and deploy these apps to your devices.

For more information, go to Add Managed Google Play apps to Android Enterprise devices with Intune .

Apple tokens and certificates : When they're added, your iOS/iPadOS and macOS devices can enroll in Intune and receive policies from Intune. Admins can access your volume purchased iOS/iPad and macOS app licenses, and deploy these apps to your devices.

• Get an Apple MDM push certificate
• Automatically enroll iOS/iPadOS devices by using Apple's Automated Device Enrollment
• Manage iOS and macOS apps purchased through Apple Business Manager with Microsoft Intune

TeamViewer : When you connect to your TeamViewer account, you can use TeamViewer to remotely assist devices.

For more information, go to Use TeamViewer to remotely administer Intune devices .

With these services, Intune:

• Gives admins simplified access to third party partner app services.
• Can manage hundreds of third party partner apps.
• Supports public retail store apps, line of business (LOB) apps, private apps not available in the public store, custom apps, and more.

For more platform-specific requirements to enroll third party partner devices in Intune, go to:

• Deployment guide: Enroll Android devices in Microsoft Intune
• Deployment guide: Enroll iOS and iPadOS devices in Microsoft Intune
• Deployment guide: Enroll Linux devices in Microsoft Intune
• Deployment guide: Enroll macOS devices in Microsoft Intune

Enroll in device management, application management, or both

Organization-owned devices are enrolled in Intune for mobile device management (MDM) . MDM is device centric, so device features are configured based on who needs them. For example, you can configure a device to allow access to Wi-Fi, but only if the signed-in user is an organization account.

In Intune, you create policies that configure features & settings and provide security & protection. The devices are fully managed by your organization, including the user identities that sign in, the apps that are installed, and the data that's accessed.

When devices enroll, you can deploy your policies during the enrollment process. When enrollment completes, the device is ready to use.

For personal devices in bring-your-own-device (BYOD) scenarios, you can use Intune for mobile application management (MAM) . MAM is user centric, so the app data is protected regardless of the device used to access this data. There's a focus on apps, including securely accessing apps and protecting data within the apps.

With MAM, you can:

• Publish mobile apps to users.
• Configure apps and automatically update apps.
• View data reports that focus on app inventory and app usage.

You can also use MDM and MAM together. If your devices are enrolled and there are apps that need extra security, then you can also use MAM app protection policies.

• What is device enrollment in Intune?
• App protection policies overview
• Create and assign app protection policies

Protect data on any device

With Intune, you can protect data on managed devices (enrolled in Intune) and protect data on unmanaged devices (not enrolled in Intune). Intune can isolate organization data from personal data. The idea is to protect your company information by controlling the way users access and share information.

For organization-owned devices, you want full control over the devices, especially security. When devices enroll, they receive your security rules and settings.

On devices enrolled in Intune, you can:

• Create and deploy policies that configure security settings, set password requirements, deploy certificates, and more.
• Use mobile threat defense services to scan devices, detect threats, and remediate threats.
• View data and reports that measure compliance with your security settings and rules.
• Use conditional access to only allow managed and compliant devices access to organization resources, apps, and data.
• Remove organization data if a device is lost or stolen.

For personal devices, users might not want their IT admins to have full control. To support a hybrid work environment, give users options. For example, users enroll their devices if they want full access to your organization's resources. Or, if these users only want access to Outlook or Microsoft Teams, then use app protection policies that require multi-factor authentication (MFA).

On devices using application management, you can:

• Use mobile threat defense services to protect app data by scanning devices, detecting threats, and assessing risk.
• Prevent organization data from being copied and pasted into personal apps.
• Use app protection policies on apps and on unmanaged devices enrolled in a third party or partner MDM.
• Use conditional access to restrict the apps that can access organization email and files.
• Remove organization data within apps.
• Protect data and devices with Microsoft Intune
• Mobile Threat Defense integration with Intune

Simplify access

Intune helps organizations support employees who can work from anywhere. There are features you can configure that allow users to connect to an organization, wherever they might be.

This section includes some common features that you can configure in Intune.

Use Windows Hello for Business instead of passwords

Windows Hello for Business helps protect against phishing attacks and other security threats. It also helps users sign in to their devices and apps more quickly and easily.

Windows Hello for Business replaces passwords with a PIN or biometric, such as fingerprint or facial recognition. This biometric information is stored locally on the devices and is never sent to external devices or servers.

• Windows Hello for Business Overview
• Manage Windows Hello for Business on devices when they enroll in Intune

Create a VPN connection for remote users

VPN policies give users secure remote access to your organization network.

Using common VPN connection partners, including Check Point, Cisco, Microsoft Tunnel, NetMotion, Pulse Secure, and more, you can create a VPN policy with your network settings. When the policy is ready, you deploy this policy to your users and devices that need to connect to your network remotely.

In the VPN policy, you can use certificates to authenticate the VPN connection. When you use certificates, your end users don't need to enter usernames and passwords.

• Create VPN profiles to connect to VPN servers in Intune
• Use certificates for authentication in Microsoft Intune
• Microsoft Tunnel for Microsoft Intune
• Microsoft Tunnel for MAM

Create a Wi-Fi connection for on-premises users

For users who need to connect to your organization network on-premises, you can create a Wi-Fi policy with your network settings. You can connect to a specific SSID, select an authentication method, use a proxy, and more. You can also configure the policy to automatically connect to Wi-Fi when the device is in range.

In the Wi-Fi policy, you can use certificates to authenticate the Wi-Fi connection. When you use certificates, your end users don't need to enter usernames and passwords.

When the policy is ready, you deploy this policy to your on-premises users and devices that need to connect to your on-premises network.

• Create Wi-Fi policy to connect to Wi-Fi networks in Intune

Enable single sign-on (SSO) to your apps and services

When you enable SSO, users can automatically sign in to apps and services using their Microsoft Entra organization account, including some mobile threat defense partner apps.

Specifically:

On Windows devices, SSO is automatically built in and used to sign in to apps and websites that use Microsoft Entra ID for authentication, including Microsoft 365 apps. You can also enable SSO on VPN and Wi-Fi policies.

On iOS/iPadOS and macOS devices, you can use the Microsoft Enterprise SSO plug-in to automatically sign in to apps and websites that use Microsoft Entra ID for authentication, including Microsoft 365 apps.

On Android devices, you can use the Microsoft Authentication Library (MSAL) to enable SSO to Android apps.

• How SSO to on-premises resources works on Microsoft Entra joined devices
• Use the Microsoft Enterprise SSO plug-in on iOS/iPadOS and macOS devices in Microsoft Intune
• Enable cross-app SSO on Android using MSAL
• Manage apps using Microsoft Intune

Was this page helpful?

Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback .

Submit and view feedback for

Additional resources