book

Microsoft Intune Cookbook

Name: Microsoft Intune Cookbook
Author: Andrew Taylor
ISBN: 9781805126546

by Andrew Taylor

January 2024

Beginner to intermediate

574 pages

12h 22m

English

Packt Publishing

Read now

Unlock full access

Microsoft Intune Cookbook
ContributorsAbout the authorAbout the reviewers
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesConventions usedSectionsGetting readyHow to do it…Automating itThere’s more…See alsoGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Chapter 1: Getting Started with Microsoft Intune
Technical requirementsChapter materialsCreating a tenantGetting readyHow to do it…Creating a userGetting readyHow to do it…Automating itAssigning Entra ID rolesHow to do it…Automating itConfiguring Entra ID Device settingsHow to do it…Automating itConfiguring Entra ID ESRHow to do it…Automating itCreating Entra ID static groupsGetting readyHow to do it…Automating itCreating Entra ID dynamic groupsGetting readyHow to do it…Creating a dynamic Office user groupCreating a dynamic Autopilot device groupAutomating itConfiguring Entra ID MDM/MAM scopesHow to do it…Automating it
Chapter 2: Configuring Your New Tenant for Windows Devices
Technical requirementsChapter materialsConfiguring a Settings catalog policyHow to do it…Automating itThere’s more…Configuring a custom policyGetting readyHow to do it…Automating itImporting and ingesting an ADMX policyGetting readyHow to do it…Automating itGroup policy analyticsGetting readyHow to do it…Automating it
Chapter 3: Securing Your Windows Devices with Security Policies
Technical requirementsChapter materialsSetting up a security baselineHow to do it…Automating itThere’s more…Configuring an antivirus policyHow to do it…Automating itConfiguring Windows Security ExperienceHow to do it…Automating itConfiguring your BitLocker policyHow to do it…Automating itConfiguring Windows FirewallHow to do it…Automating itDeploying ASR rulesGetting readyHow to do it…Automating itThere’s more…Enrolling in Defender for EndpointGetting startedHow to do it…Deploying Windows LAPSGetting startedHow to do it…Automating itConfiguring Application ControlHow to do it…Automating it
Chapter 4: Setting Up Enrollment and Updates for Windows
Technical requirementsBuilding your update rings – including feature and quality updatesGetting readyHow to do it…Automating itThere’s more…Configuring driver updatesHow to do it…Automating itThere’s more…Enrolling and using AutopatchGetting readyHow to do it…Automating itThere’s more…Configuring Windows Hello for BusinessHow to do it…Automating itSetting up Windows Autopilot Enrollment ProfilesHow to do it…Automating itConfiguring an ESPHow to do it…Automating itThere’s more…Enrolling a Windows deviceGetting readyHow to do it…There’s more…
Chapter 5: Android Device Management
Chapter materialsTechnical requirementsSetting up a managed Google Play accountHow to do it…Configuring enrollment profilesHow to do it…Automating itAdding a Google Play applicationHow to do it…Automating itConfiguring a device restrictions policyHow to do it…Automating itConfiguring an OEM policyGetting readyHow to do it…Automating itConfiguring a Wi-Fi policyGetting readyHow to do it…Automating itAdding an app protection policyHow to do it…Automating itThere’s more…Enrolling an Android device – managed deviceGetting readyHow to do it…Enrolling an Android device – BYODGetting ready…How to do it…
Chapter 6: iOS Device Management
Chapter materialsImportant notesTechnical requirementsConfiguring a connector between Apple and IntuneGetting startedHow to do it…Configuring an Apple VPP tokenGetting startedHow to do it…Automating itAdding enrollment profile tokensHow to do it…Automating itConfiguring iOS policies using the settings catalogHow to do it…Automating itConfiguring iOS policies using device restrictionsHow to do it…Automating itDeploying applications via Apple VPPGetting startedHow to do it…Automating itConfiguring iOS update settingsHow to do it…Automating itConfiguring an app protection policyGetting startedHow to do it…Automating itThere’s more…Enrolling your device – corporateGetting startedHow to do it…There’s moreEnrolling your device – BYODGetting startedHow to do it…
Chapter 7: macOS Device Management
Chapter materialsImportant notesTechnical requirementsConfiguring a macOS Settings catalog policyHow to do it…Automating itDeploying shell scripts to macOSGetting startedHow to do it…Automating itConfiguring update policies for macOSHow to do it…Automating itDeploying apps to macOSGetting startedHow to do it…Automating itConfiguring a macOS enrollment profileGetting startedHow to do it…Automating itEnrolling your corporate deviceGetting startedHow to do it…
Chapter 8: Setting Up Your Compliance Policies
Technical requirementsChapter materialsActions for noncomplianceConfiguring notification templatesHow to do it…Automating itDeploying a Windows compliance policyGetting startedHow to do it…Automating itDeploying an Android compliance policyGetting startedHow to do it…Automating itDeploying an iOS compliance policyGetting startedHow to do it…Automating itDeploying a macOS compliance policyGetting startedHow to do it…Automating itDeploying a Linux compliance policyGetting startedHow to do it…Automating itConfiguring and deploying a Windows custom compliance policyGetting startedHow to do it…Using conditional access to restrict access based on complianceGetting startedHow to do it...Automating it

Chapter 9: Monitoring Your New Environment
Technical requirementsMonitoring applicationsGetting readyHow to do it...Automating itMonitoring device configurationGetting readyHow to do it...Automating itMonitoring device complianceGetting readyHow to do it...Automating itMonitoring device enrollmentGetting readyHow to do it...Automating itMonitoring updates across platformsGetting readyHow to do it...Automating itMonitoring device actionsGetting readyHow to do it...Automating itReviewing audit logsGetting readyHow to do it...Automating it
Chapter 10: Looking at Reporting
Technical requirementsChecking device management reportsGetting readyHow to do it…Automating reportsReviewing endpoint security reportsHow to do it…Automating the reportsReviewing endpoint analytics reportsGetting readyHow to do it…Automating the reportsUsing Intune Data Warehouse with Power BIHow to do it…Checking Windows updates via reportingGetting readyHow to do it…Expanding Windows Update reportingGetting readyHow to do it…Exporting diagnostics to AzureGetting readyHow to do it…
Chapter 11: Packaging Your Windows Applications
Chapter materialsAssigning applicationsTechnical requirementsUsing the Microsoft Store integrationHow to do it…Automating itPackaging into MSIXGetting startedHow to do it…Packaging Win32 applicationsGetting startedHow to do it…Automating itManaging app supersedence and dependenciesApplication supersedenceDependenciesGetting startedHow to do it…Deploying Office applicationsGetting startedHow to do it…Updating Office applicationsGetting startedHow to do it...Automating itWindows app protectionGetting startedHow to do it…Automating it
Chapter 12: PowerShell Scripting across Intune
Technical requirementsDeploying Platform scriptsGetting startedHow to do it…Automating itConfiguring RemediationsGetting startedHow to do it…Automating itThere’s more…Using custom detection scripts in appsHow to do it…Automating itUsing custom requirements scripts in appsHow to do it…Automating it
Chapter 13: Tenant Administration
Technical requirementsReviewing your connectorsGetting readyHow to do it…Automating itAdding filtersHow to do it…Automating itConfiguring Intune rolesHow to do it…Automating itUsing scope tagsHow to do it…Automating itCustomizing the end user experienceHow to do it…Automating itThere’s more…Deploying organizational messagesHow to do it…Automating itThere’s more…Setting up terms and conditionsHow to do it…Automating itConfiguring multi-admin approvalsHow to do it…Automating itChecking your tenant versionHow to do it…Using Intune’s troubleshooting toolsHow to do it…Enrollment notificationsHow to do it…Automating itConfiguring device restrictionsHow to do it…Configuring Quiet time policiesHow to do it…Automating it
Chapter 14: Looking at Intune Suite
Technical requirementsChapter materialsDeploying and using Remote helpGetting startedHow to do it…Automating itLearning about Microsoft Tunnel for Mobile Application ManagementGetting startedHow to do it…Reviewing device anomaliesHow to do it…Automating itConfiguring Endpoint Privilege ManagementHow to do it…Automating itFuture developmentsAdvanced Application ManagementMicrosoft Cloud PKI
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from Microsoft Intune Cookbook

8 Setting Up Your Compliance Policies

Now that we have successfully enrolled a device from all of the major platforms (Windows, macOS, iOS, and Android), we need a method of ensuring they are always managed, updated, and compliant with our own requirements. For that, we can use compliance policies. These allow us to configure a set of requirements that devices must meet to be classed as compliant within the environment. Then, we can add a conditional access policy on top to restrict access to corporate data from any devices that do not meet the criteria. This increases your security posture and also gives you the ability to quickly monitor your estate for any major issues.

In addition to showing you how to deploy these policies, we will also ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Microsoft 365 and SharePoint Online Cookbook - Second Edition

Publisher Resources

ISBN: 9781805126546

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Microsoft Intune Cookbook

by Andrew Taylor

8

Setting Up Your Compliance Policies

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.