"Maximizing Efficiency: How to Seamlessly Onboard Intune in Your M365 Tenant" - Part 02

Evolving mobile devices around us

Recap:

In part 01

1. Background: Contosowizard Inc. faced device management challenges across diverse work environments.

2. Challenges: Security, mixed work setups, BYOD complexity, and safeguarding data.

3. Solution: Mr. Kernel Kevin recommended Microsoft Intune for seamless device management.

Next Step:

Mr. Kernel Kevin started planning so that the deployment and the overall experience would be smooth for Contosowizard.

As per the Microsoft Endpoint Manager (MEM) Mr. Kevin first concluded some basic scope which MEM will manage and control to simplify the endpoint management hassle.

Some considerations:

1. Endpoint Scope

MEM only supports the below endpoints

• Physical desktops

• Cloud PC endpoints

• Mobile devices

2. Licensing requirements:

To use MEM, you must be entitled to an Intune license. MEM as a service doesn't require an Azure subscription; however, when you use the service with a cloud PC, you'll need to set up an Azure virtual network and, therefore, need an Azure subscription.

Here are the types of licenses that provide access to MEM:

• Intune-only license

• Microsoft 365 E3

• Microsoft E5

• Enterprise Mobility + Security (EMS) E5

3. Supported OS:

Microsoft:

• Windows 11 (Enterprise single- and multi-session versions)

• Windows 10 (Enterprise single- and multi-session versions)

• Windows 10 Pro, Education

• Windows 10 Enterprise 2019 LTSC

• Windows 10 IoT Enterprise (x86, x64)

• Windows 10 Teams – Surface Hub

• Windows Holographic for Business
  

Apple:

• Apple iOS 12.0 and later

• Apple iPad 13.0 and later

• Mac OS X 10.13 and later

Google:

• Android 6.0 and later (including Samsung Knox Standard 2.4 and higher)

Setting up M365 tenant:

Step1

Mr. Kevin after that decided to create the M365 tenant which will be the stepping stone for Contosowizard's cloud journey.

Mr. Kevin visited Microsoft's official section where he did the evaluation and started spinning up an M365 tenant. Initially, he chose a one-month free trial tenant, and after that, he turned it into a Microsoft 365 Business Premium.

For details, please visit the Microsoft 365 plan for your business.

Note: If the page is missing please try to find the current information as Microsoft keeps updating their information

Step2

Once the tenant was created successfully Mr. Kevin started configuring the below setup

1. Adding Custom Domain (Contosowizard.com)

2. Device onboarding to Azure AD

3. Check the Intune authority set Microsoft Intune.

Step3

After this, Mr. Kevin will set up the automatic enrollment option allowing all onboarded Windows devices to Azure AD to get onboarded in Microsoft Endpoint Manager (MEM) automatically.

For this, Mr. Kevin followed these steps to configure:

1. Login to MEM (https://endpoint.microsoft.com)
   

2. Then go to Devices > Device onboarding > Enrollment> Windows> Automatic Enrollment.

Windows Device Automatic Enrollment

3. In next MDM user, select All to onboard devices to Intune for Microsoft Entra joined devices.

4. Next, Mr. Kevin observes Windows devices which are Microsoft Entra joined are now visible in MEM under windows devices.

5. Thats a great achievement, and next Mr. Kevin will onboard all other mobile devices which will be discussed in the next part!