06 WinIntuneJS Cloud PCSetup
06 WinIntuneJS Cloud PCSetup
06 WinIntuneJS Cloud PCSetup
Virtual
Academy
Click to edit Master
Windows Intune for IT Pros Jump Start subtitle style
David Tesar
Richard Harrison
Windows Intune for IT Pros Jump Start
First Half Second Half
(04) Administrator Roles, Users and Groups (10) Unified MDM Settings and Compliance
Windows 8, 7, Windows Administrator can install agents or user can Management using client
Vista and Windows XP enroll using the Windows Intune Company agents
Portal
Windows RT and Define device owner as managed user. User Direct Management
Windows Phone 8 enrolls device through Company Apps setting. (EAS also supported)
iOS 4.0 or later Upload an Apple Push Notification certificate to Direct Management
Windows Intune. User enrolls device. (EAS also supported)
Android 2.1 or later, or Define device owner as managed user. User EAS Only
legacy smartphone enrolls device.
devices
Windows Intune PC Deployment Options
• Standard Deployment Methods • Alternative Deployment Methods
– Direct download – Scripts, group policy
– Network share
– Image-based or offline installation
– Flash drive
– Self-service company portal
Cloud service
Microsoft
Virtual
Academy
Click to edit Master
subtitle style
Command-line options:
/Quiet
/Extract %temp%
/PrepareEnroll
Standard Windows Intune PC Installation Process
• The Windows Intune agent starts
• Authenticates against the cloud service
Enrollment • Enrolls the client computer and generates the computers certificate
• Microsoft Update verifies the agent versions and downloads them to the computer
• Each agent starts up as it is downloaded and installed
Agent • Each agent reports information to the Windows Intune service
installation
• Agents with failed installations raise alerts on the administrator console
https://portal.manage.microsoft.com
Microsoft
Virtual
Academy
Click to edit Master
subtitle style
Reference Computer
• Copy files to %systemdrive%\temp\
Windows_Intune_Setup
– Windows_Intune_Setup.exe
– WindowsIntune.accountcert
• Prepare system image
– Create SetupComplete.cmd
– Place in the %Windir%\Setup\Scripts folder
• Capture system image Windows_Intune_Setup.exe
– Use Windows Setup to capture image WindowsIntune.accountcert
Offline Windows Intune Client Installation Process
Target Computer
• Restart
– Windows Setup completed
– SetupComplete.cmd runs
– WindowsIntuneEnrollPending key created
• Check for Enrollment
– If enrolled, no action
– If not, create Windows Intune Automatic Enrollment task
• Windows Intune Automatic Enrollment task
– Runs at next scheduled time
– Checks for WindowsIntuneEnrollPending registry key
– Attempts to enroll target computer
– If enrollment fails, will retry for up to one month
• More details online at: http://aka.ms/j55dq0
Microsoft
Virtual
Academy
Click to edit Master
subtitle style
Note: There can be up to a 30 day delay before devices are removed from the console.
Troubleshooting a Windows Intune Client Installation