How To Set Up Intune Mdm

Information technology's the first of Intune and today we are going over the prerequisites that you must cheque during initial setup of Intune according to your surroundings, Yous may be in a windows environment, iOS, android, macOS or maybe all together. We are going over each and every stride that you must do if yous are starting your journey with Intune.

one. Intune license

Starting off with License. To apply Intune,nosotros need Intune license first and I assume you already practice have only just for the sake of this blog, I'll explain. In order to proceed, we need to take an Intune license in the surround ,for both BYOD and corporate enrollments as well. In your office 365 admin heart you do need to purchase any one of these follows;

Microsoft 365 E5
Microsoft 365 E3
Enterprise Mobility + Security E5
Enterprise Mobility + Security E3
Microsoft 365 Business Premium
Microsoft 365 F1
Microsoft 365 F3
Microsoft 365 Government G5
Microsoft 365 Authorities G3
Intune for Didactics

2. Assign a license to users

Once you accept the Intune license purchased and so you lot have to assign the Intune licenses to your user whom you want to enroll in Intune. Assign an Intune license to the admin business relationship besides as who is going to manage the account. You as well tin set upwardly a non-Intune license admin to admission and manage Intune.

3. Permit or Cake the enrollment of Specific Os – Enrollment Restrictions

Depending on your need, you can block some Operating systems to end those systems from getting enrolled in Intune. Or you can allow the Operating system but block BYOD enrollments of some or all Bone. For instance, if you don't want android enrollments in your surround, simply you tin block from here.

To complelty cake any specific Os, Go to Devices > Enroll Devices > Enrollment device platform restrictions
Click on All users under Device type restrictions
Click On properties and click Edit beside platform setting

Block the enrollment of Specific OS - Enrollment Restrictions

Hither you can let or block the Operating organisation. If you lot want to allow specific groups to enroll their personally owned devices, you lot can create a new profile and make the changes you need. The new profile then will take precedence over the default.

4. Configure Intune for Windows devices

In order to enroll windows devices in intune, nosotros have to set MDM to Intune. If you are coming from O365 MDM change the MDM authority to Intune. To bank check MDM authorisation, Go to Tenant assistants and check the MDM authorisation. Mine is set to Inunte already.

C:\Users\User\OneDrive - mstest-shr-makum\Mania\New folder\check MDM authority.png

One time it'south changed, nosotros accept to verify if Intune is ready to enroll windows devices or not.

To check that setting, Become to Devices > Enroll devices > Windows enrollment > Automatic Enrollment

Here you lot have to fix the toggle button to either Some and target the groups or gear up it to all.

If you ready to Some and select only some groups only those users will be able to enroll in intune. On the contrary, if you set to all, every single Intune licensed user can enroll in intune if they accept a Valid Intune license assigned. Once it's gear up up you tin now start the Windows enrollment.

v. Configure Intune for iOS/iPad and macOS devices

When information technology comes to Apple devices, being a 3rd party it has to collaborate with Intune needs some kind of trust certificate. That'due south exactly what the MDM push certificate does. MDM push certificate let Intune to manage Apple devices. In order to set up upward Become to Devices > iOS/iPadOS > iOS/iPadOS enrollment

Click on the Apple MDM button certificate and hither you have to create the MDM push certificate.

In one case it'southward created your surroundings is gear up to roll the enrollment! Another important thing to take care of in the Apple Push MDM document is:

Apple push notification service certificate expiration in intune

Yes, an Apple certificate expires after a twelvemonth from the moment its created. So companies accept to renew this every unmarried year.

But what if we don't?

If you don't then all of your Apple devices volition be disconnected from the Intune and you accept to re-enroll all of your devices from scratch. Also, create the MDM document with a generic company's account considering in case an employee uses his/her login ID and then he/she leaves then you volition be dealing with a large mess of enrolling all of your apple tree devices from scratch.

half dozen. Configure Intune for Android devices.

Like to Apple, as Android is another tertiary-party company that also has to collaborate with Intune, it needs a trusted document and then Intune can manage Android devices. To prepare-up this certificate, become to Devices > Android > Android enrollment > Managed Google Play

C:\Users\User\OneDrive - mstest-shr-makum\Mania\New folder\Managed Google Play.png

Here you have to link a google play account which will be used to let android enrollments and push android applications from Intune via the google play store.

Dissimilar the apple MDM push certificate, this doesn't need to be renewed and you can enroll devices Forgetting the renewed appointment or time.

vii. Enrollments

Last simply not to the lowest degree, once everything is configured you may start the enrollment depending on the platform and type of enrollment you need.

Enroll your windows device to Intune
Enroll your Ios/iPad device to Intune
Enroll your Android device to Intune
Enroll your MAC devices to Intune

There are definitely more than that, such every bit assigning compliance policy or assigning configuration profiles but just to boot commencement the setup the discussed things are must to configure and these are all basics that need to be checked prior to doing anything in Intune and I hope this weblog may help y'all a little to figure out when we start Intune and if it does help, make sure to subscribe to our newsletter then you will get our brand new articles directly to your electronic mail.