Microsoft Windows Intune 2.0: Quickstart Administration

Table of Contents

Microsoft Windows Intune 2.0: Quickstart Administration

Credits

About the Author

Acknowledgement

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why Subscribe?

Free Access for Packt account holders

Instant Updates on New Packt Books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Overview of Cloud Computing

Centralized solution, management, and upgrades

Elastic in scale and power

Pricing based on utilization

Delivered using Internet protocols

Secure and private

Service Level Agreement

Availability

Service hours

Recompense

Window Intune SLA

Multiple client device types

Client Software

Programmable interfaces

Different levels of cloud computing

Infrastructure as a Service

Platform as a Service

Software as a Service

Challenges of cloud computing

Network requirements

Data accesses and synchronization

Network bandwidth and latency

Security

Customization

Bringing all this together for Windows Intune

Summary

2. Introduction to PC Management Concepts

Continuous cycle of PC Management

Definition of IT management goals

Using policies for configuration and deployment

Policies that deliver against the business goals

Ensuring the security settings on the PC provide an adequate level of protection

Education

Stopping malicious theft of data

Blocking malware

Tracking the hardware and software assets

Policies that help the IT team do their job

Deploying Windows 7 for everyone

Keeping the PC up-to-date with updates

Reactive response to problems

Ongoing maintenance tasks

Dealing with alerts

Working with users' support requests

Dealing with major problems

Hardware

Software

Reporting on IT management

Summary

3. Overview of Windows Intune Features

Why use Windows Intune

Situations when Intune makes sense

First management solution for small and medium enterprises

Moving to a subscription management solution

Managing part of an estate, such as computers that users bring in from home

Windows Intune solution architecture

Windows Intune feature set

Windows 7

Existing Windows 7 Software Assurance customers

Microsoft Desktop Optimization Pack

Diagnostic and Recovery Toolset

Microsoft Enterprise Desktop Virtualization

Installation

Management console

Security management

Windows system updates

Anti-malware

Firewall control

Auditing

Reporting

Alerts and Support

Alerts

Remote Assistance

Software distribution

Managing multiple organizations

Summary

4. Signing Up for Windows Intune and Installing the Client Software

Preparing for Windows Intune

Licensing of Windows Intune

Software and hardware requirements for Windows Intune

Hardware requirements

Software requirements

Skills required to manage with Windows Intune

Simple management skills

Desired complex management and diagnostic skills

Signing up to Windows Intune

Create a Windows Live ID

Sign into MOCP and configure contacts

Add Windows Intune to your basket and confirm the purchase

Activate your purchase

Adding MDOP to your purchase

Installing Windows Intune onto a client PC

Downloading the client software to the device

Unzipping and installing

Installing via alternative methods

Quiet installation

Image based deployment

MSI file deployment

Waiting for the update process to complete

Confirming installation

Enabling others to manage your PC estate with Windows Intune

Adding a partner to your subscription

Changes a partner sees when managing more than one client

Summary

5. Configuring Windows Intune

Adding additional administrators to Windows Intune

Adding an additional administrator

Changing the Tenant Administrator

Configuring computer groups

Choosing a group structure

Creating the group structure

Assigning PCs to groups

Configuring Windows Intune alerts

Configuring alert activation

Changing alert notification

Creating a customer alert rule

License management

Managing your Microsoft Volume License details

Managing your other license details

Summary

6. Configuring Management Policy

Policy management

Windows Firewall Settings

Windows Intune Center Settings

Windows Intune Agent Settings

General section

Endpoint Protection section

Endpoint Protection Service

Real-time Protection

Scan Schedule

Scan Options

Default Actions

Excluding files and processes

Microsoft SpyNet

Updates section

Network bandwidth

Deploy Policy

Editing an existing policy

Update management

Selecting products and classification of updates to manage

Update Classification

Configuring automatic approval of updates

Manually approving updates

Summary

7. Software Deployment

Preparing an application for uploading

Understand how the application is installed in silent or quiet mode

Create a folder for each installation package

Place all files needed for installation into one folder

Examples

Office 2010

Adobe Reader and Flash

Intel chipset software

Using App-V packaging for deploying a package

Uploading an application

Adobe Flash – 64-bit MSI

Adobe Flash – 32-bit EXE

Adobe Reader – Windows 7 EXE

Adobe Reader – XP SP3 EXE

Intel drivers

Office 2010

Deploying a package

Managing Non-Microsoft Updates

Removing a package

Uninstalling software from a client PC

Removing a software package

Summary

8. Tracking and Reporting

Reporting basics

Reporting basics in Reports workspace

Selection customization

Saving and loading customizations

Sorting data in the columns

Printing a report

Exporting data

Reporting basics in Alerts workspace

Update reports

Tracking software usage

Software installed on an individual computer

Estate-wide software view

Tracking hardware

Computers workspace view

Hardware Inventory Reports

License management

Purchase report

Installation report

Alerts reporting

Custom reports

Reporting on overall PC management achievements

Summary

9. Monitoring and Responding to Windows Intune Alerts

General Windows Intune alerts

Monitoring alerts

Responding and closing alerts

Malware alerts

Testing malware checks are working

Actions following malware instance

Remote Assistance alerts

Preparing to deliver support

Preparing the client computer for support

Preparing the support agent's computer to offer support

Providing Assistance

Receiving alert and responding

Providing remote support

Chat

Shared Desktop

File transfer

Rebooting the remote computer

Closing the alert

Summary

10. Resolve Problems Using Microsoft DaRT

Downloading MDOP

Installing DaRT

Building a DaRT CD

Using DaRT to resolve issues

Locksmith

Crash Analyzer

Hotfix Uninstaller

Standalone System Sweeper

Summary

11. Deploying Windows 7 Enterprise Edition

Downloading Windows 7 Enterprise Edition

Checking pre-requisites for Windows 7

Backing up settings for migration

Installing Windows 7 Enterprise Edition

Restoring user settings and installing applications

Updating Windows Intune

Removing the computer from Windows Intune

Installing the Windows Intune tools

Considering tools for scale deployment of Windows 7

Microsoft Assessment and Planning (MAP) toolkit

Microsoft Deployment toolkit

Summary

12. Integration with Existing Microsoft Products

Typical computing scenarios

Desktop environment

Management tools

Services to enable productivity and collaboration

Office 365 and on-premise SharePoint and Exchange

System Center

On-premise Windows Server

Identity management with Active Directory

Group Policy

Update management with Windows Software Update Services

Windows Small Business Server

Windows Home Server

On-premise versus cloud solutions summary

Mixing on-premise and cloud solutions

Anti-malware products

Summary

Index

Microsoft Windows Intune 2.0: Quickstart Administration

Microsoft Windows Intune 2.0: Quickstart Administration

Copyright © 2012 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: January 2012

Production Reference: 1170112

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-84968-296-1

www.packtpub.com

Cover Image by Meir Jacob (<meirjac@netvision.net.il> )

Credits

Author

David Overton

Reviewers

Richard Diver

Robert Pearman

Jason Wallace

Andy Trish

Acquisition Editor

Kerry George

Lead Technical Editor

Susmita Panda

Technical Editors

Kedar Bhat

Priyanka Shah

Naheed Shaikh

Project Coordinator

Jovita Pinto

Proofreader

Stephen Swaney

Indexer

Monica Ajmera Mehta

Graphics

Valentina Joseph D'Silva

Manu Joseph

Production Coordinator

Shantanu Zagade

Cover Work

Shantanu Zagade

About the Author

David Overton has been in the IT industry for over 25 years and has worked at Microsoft, in the UK, for more than eleven years. David fell in love with Small and Medium Business when he was given responsibility for engaging with journalists, at the time of the launch of Small Business Server 2003, in the UK. He has also written Small Business Server 2008 Installation, Migration and Configuration. For the next four years, David was responsible for improving SBS deliveries by Microsoft partners.

David has since moved on to other roles within Microsoft but still continues work with a number of small and medium businesses and Microsoft partners. David's role at Microsoft includes working with organizations that are moving towards cloud-based computing models. He personally became involved with the Windows Intune product, as a result. Working with both the UK and US teams, in his role there, has lead to the writing of this book.

Besides his day job, David is also a writer; he has written for consumer publications and Windows XP and Windows Vista magazines, and he blogs at http://davidoverton.com, where he helps readers fi nd solutions to questions and problems. In 2009, David published his fi rst book on SBS 2008, which was well received.

When not working or writing, David likes to spend time with his family and also tries to fi t in sailing, at any time of the year, in any weather.

Acknowledgement

I would like to thank all those around me who have inspired me to undertake another book to help others. My wife and daughters are incredibly generous with what would be our time together, allowing me to borrow it to write. My father, who is always asking me why things do and don't work and what can be done to fix them. Friends and colleagues have provided feedback, honestly, that has helped shape the book with their insight and differing opinions, enabling it to answer more questions and provide more useful insight.

Finally, I want to thank and remember my mum. She taught me to chase my dreams, no matter how diffi cult they may be. My mum got to see my fi rst book published and to see this one start, but was not there, in the end, to see this book arrive in its fi nished form. I hope she looks down at me from wherever she is and is as proud of me as I am of her. I will miss you, mum, and your support for my projects, such as this book. For this reason, I dedicate this book to you, for all the love, knowledge, and strength you have given me.

About the Reviewers

Richard Diver is a passionate technologist with over 10 years' experience in Enterprise level IT systems. Having worked his way up from helpdesk to server team, and from consultant to architect, Richard has worked on many large-scale projects and gained a wide breadth of knowledge in technology, people, and process.

During his time at Microsoft, Richard developed technical content and training courses in Windows Server Performance, Sysinternals Tools, and Personal Productivity, delivering this to internal audiences and customers. He is currently working as an Enterprise Architect for Methods Consulting, a London-based consultancy specializing in the Public Sector.

Richard has recently completed the review of the latest book Windows Sysinternals Administrator's Reference by Mark Russinovich, and has completed the creation of an accompanying training course that is now being delivered by Microsoft Engineers to their Premier customers.

Andy Trish is an ex-military man with two war medals. He came into the IT world in 1999 and has since gained over 60 Microsoft Certifi ed Professional qualifi cations in a whole variety of subjects. He has recently written the questions and answers for some of the new Microsoft exams. He has held the title of Microsoft Most Valuable Professional (MVP) since 2008 and contributed to developing the Microsoft Partner Network.

Andy has presented at five Microsoft Worldwide Partner Conferences and a variety of other events, globally.

He was the Founding Director of NCI Technologies, based in Cornwall, that won the Microsoft OEM Hardware Reseller of the Year, 2011 award and was fi nalist for Microsoft Midmarket Provider of the Year, 2011. He has grown the company to a staff of twenty-eight, in just seven years.

Andy also co-authored Thinking of Maximising Your Investment as a Microsoft Partner? Ask the Smart Questions, with Julie Simpson.

www.PacktPub.com

Support files, eBooks, discount offers, and more

You might want to visit www.PacktPub.com for support files and downloads related to your book.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

http://PacktLib.PacktPub.com

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can access, read and search across Packt's entire library of books.

Why Subscribe?

Fully searchable across every book published by Packt

Copy and paste, print, and bookmark content

On demand and accessible via web browser

Free Access for Packt account holders

If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib today and view nine entirely free books. Simply use your login credentials for immediate access.

Instant Updates on New Packt Books

Get notified! Find out when new books are published by following @PacktEnterprise on Twitter, or the Packt Enterprise Facebook page.

Preface

Microsoft Windows Intune is a cloud service solution that simplifies how small and mid-sized businesses manage and secure PCs using Microsoft cloud services and Windows 7—so your computers and users can operate at peak performance all the time.

This step-by-step guide will show you how to plan, set up, and maintain Windows Intune, showing you how to manage a group of PCs (either one business or several) from the base operating system, through to the patches, anti-malware solution and deployed software and policies from a central console, using the Windows Intune service.

This book takes you through all the steps to plan, set up and maintain Windows Intune and how to manage a group of PCs. The book starts by providing an overview of cloud computing and PC management. The book then dives into topics such as Windows Intune features, signing up for Windows Intune and installing the client software, configuring Windows Intune, proactive management, and monitoring and dealing with alerts, including remote assistance among others. As Windows 7 is part of Windows Intune, the book will also cover the minimum steps required to move from Windows XP to Windows 7 while keeping user settings and preferences.

What this book covers

Chapter 1, Overview of Cloud Computing, explores the new cloud computing and cloud-based services world that we are moving rapidly towards and includes Windows Intune. Before we can embark on this journey it is important that we understand the benefits and pitfalls that cloud services bring with them and how they apply to us. One mechanism to help protect us against the uncertainties is the use of Service Level Agreements, which are explained for Windows Intune.

Chapter 2, Introduction to PC Management Concepts, introduces the important concepts behind PC management, with a focus on ensuring that the needs of the business are the fundamental driver of the IT policy we implement with Windows Intune. We then explore how the IT policy decisions are taken to reflect these needs and are then able to demonstrate that they are delivering on them.

Chapter 3, Overview of Windows Intune Features, describes the features within Windows Intune, ensuring that we can take advantage of all of the benefits it has to offer, including anti-malware software, update management for both the Windows Operating System, and Windows applications, software distribution, system alerts and reporting.

Chapter 4, Signing Up for Windows Intune and Installing the Client Software, walks through the Microsoft Online Services Portal, configuring the service administrators, and if desired, assigning a partner to assist us. We also download and install the Windows Intune client software and ensure it is up and running on each computer.

Chapter 5, Configuring Windows Intune, runs through the configuration steps for Windows Intune. This starts by adding additional administrators to the system to allow multiple system’s managers. We then configure the computer groups for the management process. We enable the alerts that Windows Intune will raise and configure who they are sent to. Finally, we configure the Microsoft and non-Microsoft software license purchases so Windows Intune can report on compliance to this.

Chapter 6, Configuring Management Policy, enables us to construct the policies that Windows Intune uses to configure each computer. This covers firewall, anti-malware, and operating system and software updates. The Windows updates section includes configuring which update categories are checked on each computer to see if they are required and the deployment policy options, either manual or automatic approval.

Chapter 7, Software Deployment, using Windows Intune can be a complex process as all software must be installed silently and with all the