Episode 371 – Microsoft Intune (Part Une) – Devices

February 29, 2024

Episode Transcript

Welcome to Episode 371 of the Microsoft Cloud IT Pro Podcast, where we’ll be discussing Microsoft Intune, one of the most powerful tools for managing your organization’s devices, apps, and endpoint security. In this episode, we’ll start exploring the three pillars of Intune: Devices, Apps, and Endpoint Security. We’ll cover what devices you can enroll, how to onboard them, and what configurations are available.

Like what you hear and want to support the show? Check out our membership options.

Show Notes

About the sponsors

Intelligink utilizes their skill and passion for the Microsoft cloud to empower their customers with the freedom to focus on their core business. They partner with them to implement and administer their cloud technology deployments and solutions. Visit Intelligink.com for more info.

See full episode transcriptTranscript is autogenerated by AI

1 00:00:03,405 --> 00:00:06,095 - Welcome to episode 371 2 00:00:06,095 --> 00:00:08,455 of the Microsoft Cloud IT Pro Podcast. 3 00:00:09,055 --> 00:00:11,975 Recorded live on February 23rd, 2024. 4 00:00:12,405 --> 00:00:14,895 This is a show about Microsoft 365 5 00:00:14,895 --> 00:00:17,015 and Azure from the perspective of it pros 6 00:00:17,015 --> 00:00:20,135 and end users where we discuss the topic or recent news 7 00:00:20,195 --> 00:00:21,415 and how it relates to you. 8 00:00:21,745 --> 00:00:23,495 Today, in part one of two, 9 00:00:23,745 --> 00:00:26,535 we'll be discussing Microsoft Intune one 10 00:00:26,535 --> 00:00:27,695 of the most powerful tools 11 00:00:27,795 --> 00:00:30,615 for managing your organization's devices, apps, 12 00:00:30,715 --> 00:00:31,815 and endpoint security. 13 00:00:32,075 --> 00:00:35,295 In this episode, we'll start by exploring the three pillars 14 00:00:35,295 --> 00:00:38,535 of Intune devices, apps and endpoint security. 15 00:00:38,925 --> 00:00:41,455 Then we'll move into the devices section 16 00:00:41,515 --> 00:00:44,575 and what devices you can enroll, how to onboard devices, 17 00:00:44,955 --> 00:00:46,575 and start looking at what types 18 00:00:46,595 --> 00:00:48,335 of configurations are available. 19 00:00:51,255 --> 00:00:54,295 Saturday Night Live. Welcome to Saturday Night. No. 20 00:00:54,295 --> 00:00:56,695 Have you seen the one? My kids think this one's hilarious. 21 00:00:56,695 --> 00:00:58,495 They can't remember if I shared it with you or not. 22 00:00:58,745 --> 00:01:01,055 Where it's uh, Washington's dream. Yes. 23 00:01:01,375 --> 00:01:02,695 , it's like five minutes. Yeah. 24 00:01:02,695 --> 00:01:04,295 With the units of measure. Mm-Hmm. . 25 00:01:04,685 --> 00:01:07,255 - Yeah. Oh, that, that is a good one 26 00:01:07,355 --> 00:01:08,355 - For anybody interested. 27 00:01:08,865 --> 00:01:10,215 We'll put a link in the show notes. 28 00:01:10,275 --> 00:01:12,495 We don't need to spend a bunch of time rehashing it, 29 00:01:12,555 --> 00:01:16,335 but it's funny if you're anywhere but the us It's funny 30 00:01:16,335 --> 00:01:18,255 because it totally makes fun of the US 31 00:01:18,355 --> 00:01:20,775 and if you're in the US it's a great way to make fun 32 00:01:20,775 --> 00:01:22,375 of us in our units of measure. 33 00:01:23,955 --> 00:01:26,495 - Oh yeah. Very, very much so. 34 00:01:26,505 --> 00:01:28,495 We're, we're, we're like our own little 35 00:01:28,525 --> 00:01:30,175 special snowflake over here. 36 00:01:30,315 --> 00:01:33,175 Yes. With our whole imperial versus metric thing 37 00:01:33,205 --> 00:01:34,255 that we have going on 38 00:01:34,435 --> 00:01:36,455 - All in the name of Liberty, my son. 39 00:01:36,805 --> 00:01:39,935 Okay. I have not had much sleep. I'm gonna devolve quickly. 40 00:01:40,185 --> 00:01:43,215 - We're not as bad as some other places like the UK 41 00:01:43,345 --> 00:01:46,695 where you have both imperial and metric going all the time. 42 00:01:47,135 --> 00:01:48,535 . So we'll see. 43 00:01:48,555 --> 00:01:52,535 Before we get into today's topic, I have a, like, I have one 44 00:01:52,535 --> 00:01:55,295 of the most first world of first world problems going on, 45 00:01:55,835 --> 00:01:58,455 and I just need to get this out and off my chest 46 00:01:58,475 --> 00:02:00,615 and have you laugh at me, if that's okay. 47 00:02:00,795 --> 00:02:02,135 - Oh, I am always up 48 00:02:02,135 --> 00:02:04,455 for first world problems that I can laugh at. Okay. 49 00:02:04,995 --> 00:02:07,935 - So I have a Bluetooth mouse. Yeah. 50 00:02:08,095 --> 00:02:11,615 I I have an MX Master three s here and 51 00:02:12,325 --> 00:02:13,975 - Quality Mouse I might add. 52 00:02:14,075 --> 00:02:17,015 Yep. I love my Bluetooth, my Logitech. Yeah. Yep. 53 00:02:17,195 --> 00:02:18,855 MX three s. Okay. Anyways, 54 00:02:19,155 --> 00:02:20,855 - So I'm right-handed. 55 00:02:21,155 --> 00:02:23,935 So my mouse is on the right hand side 56 00:02:23,935 --> 00:02:25,415 of my keyboard over here, 57 00:02:26,195 --> 00:02:30,255 and I also drink an inordinate amount 58 00:02:30,255 --> 00:02:31,415 of coffee during the day. 59 00:02:31,415 --> 00:02:32,895 Right. , like I always have a cup 60 00:02:32,895 --> 00:02:33,895 of coffee on my desk. 61 00:02:34,555 --> 00:02:38,215 So I have, I I have an Ember mug, which is okay. 62 00:02:38,405 --> 00:02:39,935 It's a coffee mug. 63 00:02:39,935 --> 00:02:42,295 Well, I mean, it's, it's, it's a mug for drinking liquid 64 00:02:42,525 --> 00:02:44,535 that has a built-in heater in it so 65 00:02:44,535 --> 00:02:46,015 that my coffee is always warm. 66 00:02:46,205 --> 00:02:49,575 Yeah. So the way the Ember mug works is it's a traditional 67 00:02:49,595 --> 00:02:51,895 mug and it has a battery in it, and you go into an app 68 00:02:51,915 --> 00:02:53,975 and you set the temperature for it, all that stuff. 69 00:02:54,155 --> 00:02:57,215 All right. Your phone, the way your phone communicates 70 00:02:57,215 --> 00:02:58,855 with the Ember mug is over Bluetooth 71 00:02:59,065 --> 00:03:00,245 to set that temperature. 72 00:03:00,305 --> 00:03:02,445 So, so the Ember mug is inherently a 73 00:03:02,445 --> 00:03:04,005 Bluetooth device as well. 74 00:03:04,325 --> 00:03:06,245 - I can see several ways this could be going. 75 00:03:06,685 --> 00:03:11,085 - Ember mug sits, uh, out and in front of my mouse. 76 00:03:11,145 --> 00:03:12,525 So my mouse is directly behind it. 77 00:03:12,525 --> 00:03:13,645 So I have to reach over my mouse 78 00:03:13,705 --> 00:03:14,925 to, to get to my coffee mug. 79 00:03:15,245 --> 00:03:17,005 'cause I don't want my coffee mug closer to me. Right. 80 00:03:17,085 --> 00:03:18,725 I might spill it on the way to my mouse 81 00:03:18,785 --> 00:03:20,325 or, or something like that. So I feel like, 82 00:03:20,325 --> 00:03:21,965 - Oh, a hundred percent I have the same setup. 83 00:03:22,195 --> 00:03:24,965 - Like this is a constraint that, that cannot change. 84 00:03:25,765 --> 00:03:29,085 I have been like, it dawned on me earlier this week, 85 00:03:29,665 --> 00:03:31,125 all my trouble with my mouse. 86 00:03:31,275 --> 00:03:33,525 Like, Hey, why is my mouse like janky 87 00:03:33,625 --> 00:03:35,245 and not connecting to the computer? 88 00:03:35,395 --> 00:03:38,045 Like, what's going on? Like, is it disconnecting? 89 00:03:38,305 --> 00:03:41,165 Is it out of battery? I'm like, no, I just charged it. 90 00:03:41,165 --> 00:03:42,285 Like, this is kind of crazy. 91 00:03:43,285 --> 00:03:45,925 I think it's because I have a Bluetooth mouse 92 00:03:46,105 --> 00:03:47,605 and a Bluetooth coffee cup 93 00:03:47,785 --> 00:03:49,645 and they are totally conflicting with each other. 94 00:03:50,085 --> 00:03:52,005 'cause my Bluetooth mouse is not strong enough 95 00:03:52,005 --> 00:03:53,725 of a Bluetooth signal to pass through 96 00:03:54,265 --> 00:03:55,925 my Bluetooth coffee cup 97 00:03:55,985 --> 00:03:57,885 - Coffee mug to - Make things work. 98 00:03:58,465 --> 00:04:01,405 And Ben, I can't give up either device. 99 00:04:01,985 --> 00:04:03,365 I'm not gonna stop drinking coffee. 100 00:04:04,345 --> 00:04:06,525 I'm not gonna go back to a regular coffee mug. 101 00:04:06,755 --> 00:04:08,285 Like I, I can't do that 102 00:04:08,985 --> 00:04:13,285 and I can't give up my mouse and become left-handed. 103 00:04:14,065 --> 00:04:17,365 So I am living in this constant state of chaos now 104 00:04:17,735 --> 00:04:20,925 where I'm always putting the coffee mug down in front 105 00:04:20,925 --> 00:04:23,205 of my mouse and then I'll jiggle the mouse around 106 00:04:23,205 --> 00:04:24,485 and go, oh, it doesn't work. 107 00:04:24,545 --> 00:04:26,525 And then I slide the coffee cup over to the middle 108 00:04:26,705 --> 00:04:29,205 or further off to the right and that it works. 109 00:04:29,305 --> 00:04:31,445 But then I ultimately have to bring the coffee mug back 110 00:04:31,605 --> 00:04:33,325 to my face to drink some coffee 111 00:04:33,705 --> 00:04:35,885 and then it immediately goes right back 112 00:04:35,885 --> 00:04:38,365 to the same place it was right in front of the mouse. 113 00:04:38,365 --> 00:04:40,205 Right. Like ev, every single time, 114 00:04:40,485 --> 00:04:42,725 I cannot just train my way out of this. 115 00:04:43,525 --> 00:04:45,885 Somebody's gonna write in and they're gonna go like, Hey, 116 00:04:46,265 --> 00:04:49,565 why don't you use the dongle that comes? See that's 117 00:04:49,565 --> 00:04:50,565 - What I was gonna ask. 118 00:04:50,565 --> 00:04:52,245 Yeah. What about the bolt connector? Yeah. Yeah. 119 00:04:52,335 --> 00:04:53,525 Who's the USB bolt? 120 00:04:53,665 --> 00:04:56,045 - So I bought one of those. I have that as well. 121 00:04:56,155 --> 00:04:57,605 It's sitting right here in front of me. 122 00:04:57,605 --> 00:04:59,045 It's plugged into my KVM. 123 00:04:59,715 --> 00:05:02,085 It's maybe 16 inches away from the mouse. 124 00:05:02,515 --> 00:05:04,045 Does not help with what I believe 125 00:05:04,045 --> 00:05:06,085 to be a firm interference problem. 126 00:05:06,275 --> 00:05:07,925 Okay. It is the most first world, 127 00:05:08,255 --> 00:05:10,365 first world problems that I could have. 128 00:05:11,085 --> 00:05:12,965 I don't know how I ended up in this situation. 129 00:05:13,205 --> 00:05:14,445 I don't know how to get out of it, 130 00:05:14,665 --> 00:05:15,885 but I think I'm just gonna have 131 00:05:15,885 --> 00:05:17,405 to continue living my life this way. 132 00:05:17,655 --> 00:05:19,205 Chaos. Pure chaos. 133 00:05:19,465 --> 00:05:20,845 - So I have something for you to try 134 00:05:20,845 --> 00:05:23,085 because I have done this, not 135 00:05:23,085 --> 00:05:25,125 because I have a Bluetooth coffee mug, but 136 00:05:25,125 --> 00:05:29,125 because my mouse is over here to my right as well. 137 00:05:29,705 --> 00:05:31,885 But my Mac studio is like 138 00:05:32,435 --> 00:05:35,965 four feet away over the opposite kitty corner. 139 00:05:36,245 --> 00:05:37,645 'cause I'm from the north. So we say kitty 140 00:05:37,645 --> 00:05:38,725 corner and not catty corner. 141 00:05:39,145 --> 00:05:41,445 Um, and I don't use Bluetooth. 142 00:05:41,525 --> 00:05:43,125 I use the bolt connector and I have 143 00:05:43,125 --> 00:05:44,525 monitors and stuff between it. 144 00:05:44,525 --> 00:05:46,365 And I've had interference problems as well. 145 00:05:46,435 --> 00:05:47,645 This is one thing I would say I have 146 00:05:47,645 --> 00:05:50,045 with the Logitech MX is it does seem 147 00:05:50,045 --> 00:05:53,085 to have interference problems very easily. 148 00:05:53,265 --> 00:05:57,605 For whatever reason, I got a USB extension cable 149 00:05:57,905 --> 00:05:59,325 for the bolt connector . 150 00:05:59,545 --> 00:06:02,885 And I literally have it run under my desk 151 00:06:03,105 --> 00:06:05,365 and like taped to the bottom side 152 00:06:05,365 --> 00:06:07,965 of my desk right underneath my mouse. This 153 00:06:07,965 --> 00:06:09,205 - Is what it's come to. Huh. 154 00:06:09,345 --> 00:06:11,925 - Or command stripped, I guess it's not taped like command 155 00:06:11,925 --> 00:06:14,525 stripped it or zipped tie it right to the underside 156 00:06:14,525 --> 00:06:16,485 of your desk underneath your mouse. So 157 00:06:16,485 --> 00:06:18,685 - That thought did cross my mind. 158 00:06:19,005 --> 00:06:23,005 I was wondering how crazy it was going to be 159 00:06:23,345 --> 00:06:26,525 and going to get but may maybe that's 160 00:06:26,525 --> 00:06:27,925 what I need to try and do. 161 00:06:27,925 --> 00:06:29,685 What's what, you know, what's one more cable in my life? 162 00:06:29,965 --> 00:06:33,165 I , IIII don't have enough. 163 00:06:33,315 --> 00:06:37,205 What one more easy enough total. Totally solvable. So 164 00:06:37,405 --> 00:06:40,965 - I will say when I crawl underneath my desk, I'm like, man, 165 00:06:41,165 --> 00:06:42,605 I need to do some cable management. 166 00:06:42,925 --> 00:06:46,725 I have, I, I start out, it ends up so nice and neat 167 00:06:46,725 --> 00:06:48,805 and I'm like, oh, I finally managed all my cables. 168 00:06:49,105 --> 00:06:50,885 And then inevitably I get a device 169 00:06:50,905 --> 00:06:53,085 or I run into something like you did where I have 170 00:06:53,085 --> 00:06:55,485 to move a cable or shift a device or something 171 00:06:56,145 --> 00:07:01,045 and then my cables slowly dissolve into a massive spaghetti. 172 00:07:01,445 --> 00:07:02,445 , 173 00:07:02,795 --> 00:07:04,285 - Same, I'm on a standing desk 174 00:07:04,465 --> 00:07:07,205 and every time I add a new device, I do not go to the back 175 00:07:07,205 --> 00:07:08,605 of the desk and pull it all the way out. 176 00:07:08,605 --> 00:07:09,725 Like it's on casters. 177 00:07:09,885 --> 00:07:12,165 I could absolutely do this, but I don't 178 00:07:12,745 --> 00:07:14,045 and like run the cable nicely. 179 00:07:14,465 --> 00:07:18,485 So a o over time, like there's, there's this part of my desk 180 00:07:18,485 --> 00:07:20,285 where everything is nicely managed. 181 00:07:20,435 --> 00:07:22,565 It's all cable clipped up and it's ready to go. 182 00:07:22,905 --> 00:07:26,445 And then the rest is just a sea of cables that 183 00:07:27,225 --> 00:07:32,125 no person would ever want to to, to swim through. 184 00:07:32,225 --> 00:07:35,285 But I will, I will try, I'll try your suggestion 185 00:07:35,285 --> 00:07:36,925 and see you, you know, 186 00:07:36,925 --> 00:07:40,485 my problem now is the only USB extension cable I have is a 187 00:07:40,485 --> 00:07:43,725 six footer and I only need to go about mm. 188 00:07:43,895 --> 00:07:46,165 Three feet. So, and, 189 00:07:46,165 --> 00:07:48,325 and I'm just gonna have even more cables hanging out 190 00:07:48,325 --> 00:07:50,445 underneath the desk that aren't gonna be properly managed 191 00:07:51,045 --> 00:07:52,045 - Probably. 192 00:07:52,045 --> 00:07:53,765 And then you at least have to make sure you zip tie it up 193 00:07:53,765 --> 00:07:55,325 or Velcro tied up enough. 194 00:07:55,345 --> 00:07:57,245 So, well, so I have the problem. 195 00:07:57,485 --> 00:07:59,045 I have a standing desk so I stand, 196 00:07:59,065 --> 00:08:00,445 but I have a bar height chair. 197 00:08:00,745 --> 00:08:02,925 And my problem is if I make sure all my cables aren't up 198 00:08:02,925 --> 00:08:05,165 quite high enough, every once in a while I'll get my foot 199 00:08:05,265 --> 00:08:07,845 looped in a cable and I like stand up out of the chair 200 00:08:08,225 --> 00:08:09,565 and I'm caught in a cable 201 00:08:10,165 --> 00:08:11,165 - . 202 00:08:12,625 --> 00:08:14,445 You know, it's, it's good to know I'm not the only one 203 00:08:14,445 --> 00:08:15,725 with issues and that 204 00:08:15,725 --> 00:08:19,045 and that we both have our, uh, our, our, 205 00:08:19,065 --> 00:08:21,805 our eccentric life eccentric lifestyles going over here. 206 00:08:21,905 --> 00:08:24,005 Yes. I will take your suggestion to heart. 207 00:08:24,665 --> 00:08:26,085 Uh, I, I will try it 208 00:08:26,345 --> 00:08:29,365 and see how things go if I don't report back. 209 00:08:30,115 --> 00:08:31,765 It's either because I got sidetracked 210 00:08:31,765 --> 00:08:32,925 and actually didn't try it 211 00:08:33,425 --> 00:08:34,445 or I've just decided 212 00:08:34,475 --> 00:08:38,525 that pure chaos is the best way to live my life. 213 00:08:39,145 --> 00:08:41,245 But anywho, you have an article up on the screen. 214 00:08:41,565 --> 00:08:43,725 I think you had this same article up last time when we 215 00:08:43,725 --> 00:08:45,005 talked about copilot 216 00:08:45,345 --> 00:08:47,125 and we got totally, I think I totally sidetracked think 217 00:08:47,125 --> 00:08:49,205 - I did and then we never actually dove into it. 218 00:08:49,665 --> 00:08:52,805 And we can, we can tie in our segue, Scott, 219 00:08:52,965 --> 00:08:54,685 'cause we were talking about management and chaos 220 00:08:54,825 --> 00:08:56,965 and all of that when it comes to cables. 221 00:08:56,965 --> 00:08:59,445 Maybe today we should talk about management and chaos 222 00:08:59,585 --> 00:09:01,765 and all of that when it comes to devices 223 00:09:02,025 --> 00:09:04,365 and endpoints for Microsoft 365. 224 00:09:04,555 --> 00:09:07,205 - This one's your show. You, you, you are the expert. But 225 00:09:07,365 --> 00:09:09,285 - I get to talk, - I'm gonna capitulate we're yeah, 226 00:09:09,285 --> 00:09:11,165 we're gonna do the one about Intune. All right. 227 00:09:11,215 --> 00:09:14,485 - We'll do Intune, which was then Endpoint Management, 228 00:09:14,495 --> 00:09:16,365 which is now Intune again, . 229 00:09:17,065 --> 00:09:18,485 - You want names to say the same? 230 00:09:18,585 --> 00:09:20,165 You, you, you ask for so much. 231 00:09:20,385 --> 00:09:21,925 - Oh, names never stay the same. 232 00:09:22,365 --> 00:09:24,245 I have heard rumors of new names changing, 233 00:09:24,415 --> 00:09:27,325 other names changing, which we shall not talk about today 234 00:09:28,005 --> 00:09:30,085 'cause we will stick with Intune 235 00:09:30,185 --> 00:09:33,245 and we're gonna stay on focus yet this has been a big one. 236 00:09:33,265 --> 00:09:36,205 And I will say I have been doing a lot with this Sean, 237 00:09:36,225 --> 00:09:39,605 who also does a bunch of contract work for me, 238 00:09:39,625 --> 00:09:41,125 has also been doing a bunch of Intune. 239 00:09:41,435 --> 00:09:44,845 It's been a hot, hot topic, hot product. 240 00:09:45,305 --> 00:09:47,445 All of the above is late, at least from 241 00:09:47,445 --> 00:09:49,845 what we've been doing in the Microsoft 365 world. 242 00:09:50,305 --> 00:09:52,685 And there have been a few things 243 00:09:52,685 --> 00:09:54,725 that have come up that we can talk about. 244 00:09:55,065 --> 00:09:59,565 But I think this is one that in particular has 245 00:10:00,135 --> 00:10:01,565 grown and expanded 246 00:10:01,825 --> 00:10:05,085 and evolved quite a bit over the last several 247 00:10:05,085 --> 00:10:06,525 years in my opinion. 248 00:10:06,775 --> 00:10:10,005 While it has its quirks, it is really good. 249 00:10:10,005 --> 00:10:13,245 There's a lot of stuff you can do when it comes 250 00:10:13,505 --> 00:10:15,205 to Microsoft Intune. 251 00:10:15,825 --> 00:10:18,645 So kind of where to start with this one. 252 00:10:18,785 --> 00:10:21,525 And as we were putting our notes together, planning it is 253 00:10:22,185 --> 00:10:24,125 you have Intune is this overarching product 254 00:10:24,585 --> 00:10:26,565 and I don't know how much we wanna get into licensing. 255 00:10:26,565 --> 00:10:28,605 There are several different licenses, Scott. 256 00:10:28,945 --> 00:10:32,805 You have like your Intune, I think it's Plan one, plan two 257 00:10:33,265 --> 00:10:37,565 and then you have this Intune suite that is an add-on 258 00:10:38,145 --> 00:10:41,165 to, I don't think you can add it on to Plan one. 259 00:10:41,205 --> 00:10:43,845 I think it's an add-on to plan two. It's kind of bizarre. 260 00:10:43,845 --> 00:10:46,565 It's kinda like the new enterra ID governance license. 261 00:10:47,305 --> 00:10:49,605 - So, so I mean it was interesting to me like just kind 262 00:10:49,605 --> 00:10:53,525 of thinking about, uh, you know, I 263 00:10:54,165 --> 00:10:57,565 I I lost sight over time of how 264 00:10:58,145 --> 00:11:00,885 big a product Intune has become. 265 00:11:01,545 --> 00:11:03,285 And, and I guess in the back of my head I I, 266 00:11:03,365 --> 00:11:05,685 I might even be thinking about Intune the wrong way 267 00:11:05,685 --> 00:11:08,725 because it's not really a product, 268 00:11:09,155 --> 00:11:11,005 it's a suite of products today. 269 00:11:11,155 --> 00:11:12,965 Like it is all of these things. 270 00:11:12,965 --> 00:11:17,285 Yes, it's device management, it's application management, 271 00:11:17,705 --> 00:11:20,525 it is endpoint security 272 00:11:20,745 --> 00:11:22,685 and all the things that go into there. 273 00:11:23,475 --> 00:11:26,365 There's remote help components that come with it. 274 00:11:26,915 --> 00:11:29,285 There's tunneling stuff that, that, 275 00:11:29,315 --> 00:11:30,925 that pops up from time to time. 276 00:11:30,955 --> 00:11:35,325 Like it is an all over the place kind of suite 277 00:11:36,105 --> 00:11:39,685 of application and device management 278 00:11:40,025 --> 00:11:43,365 and actually like observability tooling, right? 279 00:11:43,365 --> 00:11:44,405 With some of the reporting 280 00:11:44,425 --> 00:11:47,725 and things that you, you can do about it, do 281 00:11:47,725 --> 00:11:48,845 with it depending on, on 282 00:11:48,845 --> 00:11:50,525 what your needs are in your environment. 283 00:11:51,265 --> 00:11:53,965 So I, I guess like one of the, one of the things to me and, 284 00:11:53,965 --> 00:11:56,485 and I don't know if other folks encounter this is I was 285 00:11:56,485 --> 00:11:58,965 always hearing Intune and then like somebody would come 286 00:11:58,965 --> 00:12:00,485 to me and I would, and they would say like, 287 00:12:00,485 --> 00:12:01,645 oh endpoint security. 288 00:12:02,025 --> 00:12:04,445 I'd be like, yeah you mean Intune , right? 289 00:12:04,515 --> 00:12:06,325 Like is isn't that what we're just talking about? 290 00:12:06,475 --> 00:12:09,285 It's like, oh no, you're actually talking about something 291 00:12:09,285 --> 00:12:14,245 maybe like Microsoft Defender, you know, 292 00:12:14,245 --> 00:12:16,845 for endpoints which just happens to be part of 293 00:12:16,845 --> 00:12:21,245 that overarching Intune suite and, and 294 00:12:21,245 --> 00:12:22,365 and the suite of products 295 00:12:22,395 --> 00:12:24,485 that exists out there underneath it. 296 00:12:24,515 --> 00:12:26,085 - Yeah. And here I pulled up the licensing. 297 00:12:26,085 --> 00:12:28,125 So wrap your head around this licensing Scott. 298 00:12:28,465 --> 00:12:30,565 You have Intune plan one 299 00:12:30,985 --> 00:12:33,085 and Intune Plan one is included 300 00:12:33,195 --> 00:12:35,645 with all the Microsoft 365 things. 301 00:12:36,045 --> 00:12:39,685 Microsoft 365, E three, E five, F1, F three E, ems, 302 00:12:39,725 --> 00:12:41,805 E three EMSE five and business premium. 303 00:12:41,985 --> 00:12:45,725 You get Plan one if you want to, you can get an add-on 304 00:12:45,825 --> 00:12:47,725 to plan one, that's plan two 305 00:12:48,105 --> 00:12:49,685 and that offered some of 306 00:12:49,685 --> 00:12:51,485 that endpoint management capabilities 307 00:12:52,105 --> 00:12:53,525 and some additional functionality. 308 00:12:53,905 --> 00:12:56,485 Or you can cancel your plan two, add-on 309 00:12:56,745 --> 00:13:00,645 and get the Intune suite add-on, which is not an add-on 310 00:13:00,645 --> 00:13:02,845 to Plan two, like I said before, it's an add-on to plan one 311 00:13:03,065 --> 00:13:04,885 and it includes all of the plan two stuff. 312 00:13:05,385 --> 00:13:07,045 So you get plan one 313 00:13:07,105 --> 00:13:10,365 and then you get like a choose your own path for your add-on 314 00:13:10,425 --> 00:13:12,045 to plan one whether you want Plan two 315 00:13:12,065 --> 00:13:13,405 or whether you want the Intune suite. 316 00:13:13,545 --> 00:13:16,005 - How much per user per month would you like to spend here? 317 00:13:16,485 --> 00:13:18,685 - ? Yeah. 'cause Plan one is $8 per month 318 00:13:19,545 --> 00:13:21,845 and this again if you're throwing it into Office 365. 319 00:13:21,985 --> 00:13:25,405 So most people I will say I do not see a lot 320 00:13:25,565 --> 00:13:27,165 of people going out and just buying Plan one. 321 00:13:27,435 --> 00:13:30,765 Most people have Plan one if they're going down this route 322 00:13:31,015 --> 00:13:35,005 route because they've done the Microsoft 365 E 3 35 323 00:13:35,605 --> 00:13:37,005 F1 small business whatever. 324 00:13:37,345 --> 00:13:39,125 And then that plan two add-on is $4. 325 00:13:39,185 --> 00:13:42,165 But if you wanna add on Intune suite instead of plan two, 326 00:13:42,555 --> 00:13:43,885 it's an additional uh, 327 00:13:44,385 --> 00:13:47,725 and you get that Intune suite is some of 328 00:13:47,725 --> 00:13:49,805 that stuff you mentioned where you start getting like the 329 00:13:49,805 --> 00:13:52,285 remote help stuff, you get some 330 00:13:52,285 --> 00:13:55,885 of the endpoint privilege management, advanced analytics, 331 00:13:56,215 --> 00:13:58,125 enterprise application management, 332 00:13:58,535 --> 00:14:00,125 which is not at management. 333 00:14:00,125 --> 00:14:01,125 We'll get into this in a little bit. 334 00:14:01,255 --> 00:14:03,405 Cloud, PKI, some other stuff 335 00:14:03,635 --> 00:14:05,205 that you can also buy as add-on. 336 00:14:05,265 --> 00:14:08,125 So licensing, it's confusing. 337 00:14:08,135 --> 00:14:09,725 We'll throw a link into the pricing page 338 00:14:09,725 --> 00:14:11,565 so you can go look at all the different options 339 00:14:11,585 --> 00:14:14,685 and how you want to piece this one together. 340 00:14:15,625 --> 00:14:19,405 But it is, there's a lot of stuff that has been included 341 00:14:19,405 --> 00:14:21,045 and Intune and keeps getting added 342 00:14:21,265 --> 00:14:23,085 to Intune over the last several years. 343 00:14:23,945 --> 00:14:25,685 So that's pricing. 344 00:14:26,345 --> 00:14:27,805 Get a lot of people that have Plan one, 345 00:14:27,805 --> 00:14:29,365 you can do a lot with Plan One. 346 00:14:29,755 --> 00:14:33,485 Even that upgrade to plan two, it gets you some VPN stuff 347 00:14:33,945 --> 00:14:37,005 and it gets you some management of specialty devices. 348 00:14:37,535 --> 00:14:41,005 Think like virtual reality headsets, smart screen devices, 349 00:14:41,575 --> 00:14:43,045 conference room meeting rooms 350 00:14:43,905 --> 00:14:46,765 and it does firmware over the air updates. 351 00:14:47,145 --> 00:14:51,485 So really I think Plan one is suitable for 90, 352 00:14:52,365 --> 00:14:53,885 I don't know, I would say 90% 353 00:14:53,885 --> 00:14:56,405 of people Plan one is usually adequate. 354 00:14:56,955 --> 00:15:00,645 It's really those unique cases that maybe you get into 355 00:15:00,645 --> 00:15:02,725 where you wanna start looking at Plan two or the Suite. 356 00:15:02,875 --> 00:15:05,405 - It's an interesting one. So one of the things 357 00:15:05,405 --> 00:15:08,525 that I saw when I was looking at licensing 358 00:15:08,525 --> 00:15:11,765 and trying to wrap my head around it is there's also cases 359 00:15:11,895 --> 00:15:13,685 where you can end up with requirements 360 00:15:13,745 --> 00:15:15,365 for not only Intune licensing 361 00:15:15,385 --> 00:15:18,885 but also intra ID like P one licenses 362 00:15:18,905 --> 00:15:20,005 or P two licenses. 363 00:15:20,625 --> 00:15:23,285 So like if you're a customer who's maybe coming over from 364 00:15:23,965 --> 00:15:26,005 a configuration management envi 365 00:15:26,025 --> 00:15:27,805 or configuration manager environment, right? 366 00:15:27,965 --> 00:15:29,725 Like, like you're going down that path 367 00:15:30,225 --> 00:15:34,365 and you've been doing, you know, SCCM 368 00:15:34,625 --> 00:15:37,405 and then you want to say you, 369 00:15:37,405 --> 00:15:38,805 you look at something like Intune 370 00:15:38,825 --> 00:15:40,805 and you're like, oh I want to do uh, 371 00:15:40,985 --> 00:15:42,485 device enrollment that way. 372 00:15:43,465 --> 00:15:46,325 You know, I I I like those ideas and, 373 00:15:46,325 --> 00:15:47,845 and maybe you wanna do like auto 374 00:15:47,845 --> 00:15:49,405 enrollment or things like that. 375 00:15:49,625 --> 00:15:52,325 You, you can have considerations for 376 00:15:53,225 --> 00:15:54,605 not only Intune licensing 377 00:15:54,745 --> 00:15:58,645 but also Azure AD licensing enter ID licensing. 378 00:15:58,905 --> 00:16:00,885 So I think it's just important to maybe keep 379 00:16:00,885 --> 00:16:03,085 that in the back of your head. 380 00:16:03,745 --> 00:16:06,965 And then there's also the device license thing, 381 00:16:06,965 --> 00:16:08,805 which I don't, I don't even really want to get into. 382 00:16:09,585 --> 00:16:12,485 But suffice to say there's also this concept 383 00:16:12,785 --> 00:16:15,005 of device only licenses 384 00:16:15,425 --> 00:16:19,165 and it just gets like, you know, weirder and weirder. 385 00:16:19,165 --> 00:16:21,405 The the the, the more you walk w walk down the stack 386 00:16:21,925 --> 00:16:22,925 - . 387 00:16:22,925 --> 00:16:24,205 Yeah, and I've gotten into it a little bit 388 00:16:24,365 --> 00:16:26,845 'cause like I have a device right here if you're looking at 389 00:16:26,845 --> 00:16:28,085 my video, I don't know which way to point 390 00:16:28,385 --> 00:16:29,525 anyway with my fingers. 391 00:16:29,885 --> 00:16:32,925 the, like the conference room devices if you want 392 00:16:32,925 --> 00:16:34,445 Intune managed conference room devices, 393 00:16:34,545 --> 00:16:37,005 you get into a whole nother can of worms. 394 00:16:37,185 --> 00:16:39,365 Uh, when it comes to licensing that, like you said, 395 00:16:39,415 --> 00:16:40,925 we're not gonna go down that route for now 396 00:16:41,225 --> 00:16:45,045 or go down that uh, path I would say. 397 00:16:45,545 --> 00:16:48,125 Um, so diving into Intune, like we've talked about, 398 00:16:48,125 --> 00:16:51,285 there's this, there's that, there's all of this random 399 00:16:52,775 --> 00:16:54,285 stuff I guess in Intune 400 00:16:54,665 --> 00:16:57,645 and as we were going through this, I kind of broke it down 401 00:16:57,705 --> 00:17:01,325 and I would say this intro page, 402 00:17:01,425 --> 00:17:04,005 so there's an introduction to Intune, what is Intune? 403 00:17:04,865 --> 00:17:09,245 And Microsoft would tell you that Intune is 404 00:17:10,405 --> 00:17:11,685 designed to support hybrid 405 00:17:11,785 --> 00:17:14,845 and remote workforces, challenged with devices 406 00:17:14,915 --> 00:17:17,125 that access organizational resources 407 00:17:18,185 --> 00:17:19,925 as people need to work from anywhere. 408 00:17:20,025 --> 00:17:23,645 And I think this is why you start to see Intune gaining more 409 00:17:23,645 --> 00:17:25,245 and more traction is 410 00:17:25,345 --> 00:17:29,125 as people work from anywhere they access different resources 411 00:17:29,395 --> 00:17:32,565 from anywhere, it becomes a protection thing. 412 00:17:32,565 --> 00:17:35,085 Like how do you protect my data? 413 00:17:35,585 --> 00:17:38,645 And also how do you protect these devices 414 00:17:39,395 --> 00:17:42,805 when they're not necessarily coming into the office? 415 00:17:43,625 --> 00:17:45,245 And there's a few different things to it, right? 416 00:17:45,245 --> 00:17:47,365 Because one is just protecting these devices. 417 00:17:47,645 --> 00:17:50,125 I leave my device in a a hotel room 418 00:17:50,125 --> 00:17:52,565 or I leave it in the seat back of an airplane 419 00:17:52,865 --> 00:17:56,565 or maybe I'm just working from a coffee shop 420 00:17:56,585 --> 00:17:59,885 and I don't lock my device when I step away. 421 00:17:59,985 --> 00:18:01,165 Or there's all different 422 00:18:01,325 --> 00:18:02,405 scenarios you can get into with devices. 423 00:18:02,585 --> 00:18:05,445 So there's one aspect of Intune that is very much 424 00:18:06,565 --> 00:18:09,805 managing these devices and keeping my devices secure. 425 00:18:10,465 --> 00:18:13,445 But also in Intune there's these additional, 426 00:18:13,445 --> 00:18:15,845 and we kind of call them pillars is like the application 427 00:18:15,845 --> 00:18:17,965 pillars is not only do I have devices, 428 00:18:18,225 --> 00:18:21,405 but I also wanna manage applications on these devices. 429 00:18:21,985 --> 00:18:25,805 Uh, and I've run into a lot with, 430 00:18:26,635 --> 00:18:27,765 this is one of the projects 431 00:18:27,765 --> 00:18:30,445 that's come up a lot I would say even in just the last four 432 00:18:30,445 --> 00:18:35,165 or five months is as employees are remote, the whole concept 433 00:18:35,305 --> 00:18:37,445 of imaging devices has come up. 434 00:18:37,675 --> 00:18:40,565 Like companies used to go, let's create laptop images, 435 00:18:40,575 --> 00:18:41,685 let's create our gold images 436 00:18:41,715 --> 00:18:43,205 with all our software installed, 437 00:18:43,205 --> 00:18:45,845 with our applications configured the way we want to. 438 00:18:46,305 --> 00:18:48,885 We have our group policies pushing out configurations 439 00:18:49,385 --> 00:18:51,325 and these devices are connected to our network. 440 00:18:51,425 --> 00:18:53,565 We set up the image, we send 'em off to employees. 441 00:18:53,855 --> 00:18:56,405 We've gotten a long ways away from that over the last four 442 00:18:56,405 --> 00:18:58,965 or five years in terms of like you Scott, 443 00:18:59,165 --> 00:19:02,605 I mean you have your laptop from your company, from 444 00:19:03,125 --> 00:19:06,165 Microsoft and have you ever been to the Microsoft office 445 00:19:06,635 --> 00:19:08,325 - Once in, in three years? 446 00:19:09,025 --> 00:19:11,965 But like that was three years in , 447 00:19:12,495 --> 00:19:13,495 - Right? 448 00:19:13,495 --> 00:19:15,645 Like you work for three years remotely on a device. 449 00:19:16,265 --> 00:19:18,765 And let's face it, Microsoft probably has some stuff they 450 00:19:18,765 --> 00:19:19,965 want to keep nice and safe. 451 00:19:20,035 --> 00:19:23,285 They don't want just anybody accessing their information 452 00:19:23,355 --> 00:19:24,925 from anywhere as an employee. 453 00:19:25,345 --> 00:19:26,925 And you get a lot of companies like that. 454 00:19:27,145 --> 00:19:29,205 So there's the whole application protection. 455 00:19:29,465 --> 00:19:31,325 And then the last one I would say 456 00:19:31,325 --> 00:19:33,925 that differs a little bit from maybe this 457 00:19:34,135 --> 00:19:35,885 slide 'cause I don't see it. 458 00:19:36,045 --> 00:19:38,405 I mean they have some of it on here is the whole security 459 00:19:38,585 --> 00:19:40,045 aspect of it too, right? 460 00:19:40,045 --> 00:19:41,125 You're managing your devices, 461 00:19:41,185 --> 00:19:42,725 you're managing your applications 462 00:19:43,585 --> 00:19:45,285 and I would say devices is like 463 00:19:45,605 --> 00:19:46,645 configuration of the devices. 464 00:19:47,145 --> 00:19:48,925 How do you want these devices configured? 465 00:19:49,065 --> 00:19:52,205 But then what you mentioned is you also start getting into 466 00:19:52,725 --> 00:19:55,885 endpoint security and how am I managing antivirus 467 00:19:56,185 --> 00:20:01,045 or dis encryption, how my monitoring these devices 468 00:20:01,465 --> 00:20:03,965 for potential suspicious activity 469 00:20:04,585 --> 00:20:09,565 and all of this management security application 470 00:20:10,525 --> 00:20:14,765 functionality rolls up under this Intune suite of, 471 00:20:15,405 --> 00:20:17,125 I don't know if it's an Intune suite of products 472 00:20:17,305 --> 00:20:19,125 or an intune suite of capabilities. 473 00:20:19,505 --> 00:20:21,485 - Yes. And yes, I I think it's both. 474 00:20:22,165 --> 00:20:26,805 I I, you know, so , I like the way you broke it down. 475 00:20:27,045 --> 00:20:28,965 I was very confused when I went in 476 00:20:29,325 --> 00:20:31,565 'cause it's, it's been a hot minute since I've looked at 477 00:20:31,745 --> 00:20:35,205 Intune and I was like, this is too much. 478 00:20:35,645 --> 00:20:37,405 'cause I, I think if you're a regular consumer 479 00:20:37,905 --> 00:20:41,685 and you go to that overview page today, holy cow, good luck. 480 00:20:41,685 --> 00:20:43,845 Like trying to figure out what's in there. , right? 481 00:20:43,845 --> 00:20:45,125 Like you, you, you really like, 482 00:20:45,305 --> 00:20:47,565 and even that like, like the graphic 483 00:20:47,595 --> 00:20:50,565 that you have up right now, such an eye chart 484 00:20:50,905 --> 00:20:52,525 for just the things that are going on. 485 00:20:52,525 --> 00:20:55,885 Like, like really I did, it was a good approach and, 486 00:20:55,985 --> 00:20:58,725 and good for me to like be grounded in it from talking 487 00:20:58,745 --> 00:21:00,165 to you to sit down 488 00:21:00,185 --> 00:21:02,565 and say like, oh hey, here's another pivot 489 00:21:02,705 --> 00:21:04,045 and another way to think about this 490 00:21:04,415 --> 00:21:09,285 where you can really break it into these logical buckets. 491 00:21:09,785 --> 00:21:12,085 So I kind of want you to take the pillar concept forward 492 00:21:12,265 --> 00:21:14,245 and maybe like do it at a conference 493 00:21:14,245 --> 00:21:15,925 or something just so you can have like the, 494 00:21:16,465 --> 00:21:19,285 the pretty slides so you can go put out a PR for this one 495 00:21:19,285 --> 00:21:20,965 and say like, hey, like do you know 496 00:21:20,965 --> 00:21:22,565 what this actually is here? 497 00:21:22,955 --> 00:21:27,285 It's devices which need to be enrolled and onboarded 498 00:21:27,285 --> 00:21:30,485 and potentially configured it's applications. 499 00:21:30,905 --> 00:21:32,845 So what are the applications we have? 500 00:21:33,425 --> 00:21:34,765 How, how do we need to protect them? 501 00:21:34,785 --> 00:21:36,925 What's the configuration of those applications? 502 00:21:37,705 --> 00:21:40,645 Office plus all the other stuff that exists out there today. 503 00:21:41,265 --> 00:21:43,645 And then it's endpoint security, right? 504 00:21:43,645 --> 00:21:46,685 Like, like we can do things like encrypt disks, we can have 505 00:21:47,235 --> 00:21:49,725 antivirus, maybe we need to configure 506 00:21:50,415 --> 00:21:53,805 local firewalls right on, on, on device. 507 00:21:53,805 --> 00:21:57,085 Things like that. And that's a great way to step into it 508 00:21:57,345 --> 00:22:01,125 and I think approach it even like if you get into some 509 00:22:01,285 --> 00:22:02,925 of the other docs for Intune, like you sit down 510 00:22:02,925 --> 00:22:05,725 and you look at like the, like there's an article out there 511 00:22:05,745 --> 00:22:07,525 for the planning guide for Intune 512 00:22:07,745 --> 00:22:11,045 and it talks about like here's the big steps that you need 513 00:22:11,045 --> 00:22:14,165 to do along the way to plan for an intune deployment. 514 00:22:14,425 --> 00:22:17,165 And like step one is determine your objectives, 515 00:22:17,545 --> 00:22:18,965 but I don't know how you can know 516 00:22:18,965 --> 00:22:21,445 what your objectives are without understanding like 517 00:22:21,445 --> 00:22:23,245 what the downstream components are 518 00:22:23,245 --> 00:22:25,325 and how that's coming no matter what. 519 00:22:25,325 --> 00:22:26,725 You have to inventory your devices 520 00:22:27,385 --> 00:22:30,365 and then it just kind of like skips a bunch of stuff. 521 00:22:30,385 --> 00:22:33,445 It literally goes from inventory your devices 522 00:22:33,665 --> 00:22:37,605 to determine your costs to get into your rollout plan 523 00:22:37,945 --> 00:22:40,125 and then just like roll it out 524 00:22:40,225 --> 00:22:41,605 and you're like, huh, . 525 00:22:41,795 --> 00:22:43,165 Like that's my plan. 526 00:22:43,645 --> 00:22:45,125 - yeah, - What happened? 527 00:22:45,125 --> 00:22:46,725 What were all the steps in the middle and, 528 00:22:46,725 --> 00:22:48,045 and all the things that needed to be done. 529 00:22:48,665 --> 00:22:52,165 So I I really do like, like the way that you rationalized it 530 00:22:52,165 --> 00:22:53,325 with kind of the three pillars 531 00:22:53,325 --> 00:22:54,885 and if that's not your original idea, 532 00:22:54,945 --> 00:22:56,525 you should just claim it is and run with 533 00:22:56,565 --> 00:22:57,565 - It as I should. 534 00:22:57,565 --> 00:22:59,285 I I think it might be, we'll go with that. 535 00:22:59,285 --> 00:23:03,765 It is, Do you feel 536 00:23:03,765 --> 00:23:07,125 overwhelmed by trying to manage your Office 365 environment? 537 00:23:07,265 --> 00:23:09,045 Are you facing unexpected issues 538 00:23:09,045 --> 00:23:10,805 that disrupt your company's productivity? 539 00:23:10,805 --> 00:23:13,565 Intelligent is here to help much like you take your car 540 00:23:13,625 --> 00:23:16,405 to the mechanic that has specialized knowledge on how 541 00:23:16,405 --> 00:23:19,165 to best keep your car running Intelligent helps you 542 00:23:19,165 --> 00:23:20,885 with your Microsoft Cloud environment 543 00:23:20,885 --> 00:23:22,485 because that's their expertise. 544 00:23:22,635 --> 00:23:23,925 Intelligent keeps up 545 00:23:23,925 --> 00:23:26,005 with the latest updates on the Microsoft cloud 546 00:23:26,025 --> 00:23:27,485 to help keep your business running 547 00:23:27,805 --> 00:23:28,925 smoothly and ahead of the curve. 548 00:23:28,925 --> 00:23:30,685 Whether you are a small organization 549 00:23:30,685 --> 00:23:33,325 with just a few users up to an organization 550 00:23:33,325 --> 00:23:36,685 of several thousand employees they want to partner with you 551 00:23:36,705 --> 00:23:40,125 to implement and administer your Microsoft Cloud technology, 552 00:23:40,695 --> 00:23:44,085 visit them at intelligent.com/podcast. 553 00:23:44,505 --> 00:23:49,005 That's I-N-T-E-L-L-I-G-I-N 554 00:23:49,125 --> 00:23:52,725 k.com/podcast for more information 555 00:23:52,745 --> 00:23:54,365 or to schedule a 30 minute call 556 00:23:54,365 --> 00:23:55,685 to get started with them today. 557 00:23:56,565 --> 00:23:59,045 Remember intelligent focuses on the Microsoft cloud 558 00:23:59,145 --> 00:24:00,885 so you can focus on your business. 559 00:24:03,515 --> 00:24:05,205 It's interesting that you brought that up 560 00:24:05,205 --> 00:24:08,165 because the deployment of this is something 561 00:24:08,165 --> 00:24:10,325 that I've had a lot of discussions with 562 00:24:10,835 --> 00:24:12,405 with these clients over time 563 00:24:12,905 --> 00:24:15,805 and usually the way these discussions go is, 564 00:24:16,585 --> 00:24:18,525 Hey I need Intune and I need to deploy apps 565 00:24:18,585 --> 00:24:20,805 and I've heard about this thing called autopilot 566 00:24:20,805 --> 00:24:23,125 and I need to make sure my devices are secure 567 00:24:23,265 --> 00:24:25,325 and they're configured in a certain way. 568 00:24:25,585 --> 00:24:29,005 And it's like, it's almost like that slide 569 00:24:29,005 --> 00:24:31,565 where it's a whole jumble of spaghetti stuff of 570 00:24:32,115 --> 00:24:33,405 I've heard about all this stuff 571 00:24:33,405 --> 00:24:35,845 and I know it's all in Intune and I want it all right now. 572 00:24:36,025 --> 00:24:37,485 And I'm like, okay, let's back up. 573 00:24:37,485 --> 00:24:39,365 So I know they have a deployment plan. 574 00:24:39,805 --> 00:24:42,285 I will say from my perspective, 575 00:24:42,665 --> 00:24:47,125 and it does vary based on requirements like some people have 576 00:24:47,195 --> 00:24:50,445 very specific requirements and objectives for Intune 577 00:24:50,445 --> 00:24:51,845 or on what they need to do right away. 578 00:24:52,585 --> 00:24:54,885 My very first step when somebody comes to me 579 00:24:55,225 --> 00:24:57,365 and says I need Intune 580 00:24:57,365 --> 00:25:01,765 and I need all of this stuff, is I ask this very question. 581 00:25:01,765 --> 00:25:03,685 It starts with the devices and you mentioned it, 582 00:25:04,025 --> 00:25:06,565 do you have your devices enrolled in Intune? 583 00:25:07,165 --> 00:25:08,845 I don't care about anything else. 584 00:25:09,445 --> 00:25:11,045 I don't care about applications, 585 00:25:11,205 --> 00:25:12,285 I don't care about security. 586 00:25:12,585 --> 00:25:14,805 Are your devices enrolled in Intune? 587 00:25:14,995 --> 00:25:18,005 Because maybe I need to come up with pillars 588 00:25:18,005 --> 00:25:21,285 and a foundation because enrollment is the foundation. 589 00:25:21,345 --> 00:25:23,365 If your devices aren't enrolled in Intune, 590 00:25:23,665 --> 00:25:25,605 in my opinion Intune is worthless to you. 591 00:25:26,165 --> 00:25:29,765 . Because that enrollment is what allows you 592 00:25:29,865 --> 00:25:33,285 to deploy applications to push out configurations to 593 00:25:34,775 --> 00:25:36,805 start setting up autopilot. 594 00:25:36,905 --> 00:25:39,485 And there's, I also run into a lot of confusion 595 00:25:39,485 --> 00:25:40,885 between autopilot and Intune 596 00:25:40,985 --> 00:25:43,525 and what does what some people use them interchangeably. 597 00:25:43,635 --> 00:25:47,885 Some people think like autopilot is an imaging 598 00:25:48,025 --> 00:25:49,485 and we can talk some about that. 599 00:25:49,625 --> 00:25:50,845 But it is literally, 600 00:25:51,115 --> 00:25:52,925 okay we're coming in our various first step, 601 00:25:53,265 --> 00:25:55,325 how are we gonna enroll your devices in Intune 602 00:25:55,395 --> 00:25:57,645 because we need these devices managed 603 00:25:58,025 --> 00:26:00,605 and frankly enrolling them in Intune 604 00:26:00,915 --> 00:26:02,165 doesn't affect your end users. 605 00:26:02,645 --> 00:26:04,485 I can go work with you 606 00:26:05,065 --> 00:26:06,805 and we may have to work with your users 607 00:26:07,145 --> 00:26:08,725 to get your devices enrolled in Intune. 608 00:26:08,975 --> 00:26:10,725 There might be some manual steps 609 00:26:10,725 --> 00:26:13,645 because this is the one, this is also the one 610 00:26:13,845 --> 00:26:16,005 that I would say is the hardest if devices 611 00:26:16,025 --> 00:26:17,165 aren't already enrolled. 612 00:26:17,425 --> 00:26:20,085 And it varies some if you have a domain controller, 613 00:26:20,225 --> 00:26:22,205 if everything is disconnected 614 00:26:22,825 --> 00:26:25,205 or even if you're already Azure AD joined 615 00:26:25,585 --> 00:26:27,805 and didn't have Intune set up when you first joined the 616 00:26:27,805 --> 00:26:30,365 devices, enrollment can be tricky, 617 00:26:30,745 --> 00:26:33,765 but once it's enrolled the first thing you do is you start 618 00:26:33,765 --> 00:26:35,325 getting all the information about 'em. 619 00:26:35,395 --> 00:26:37,085 Like Intune will start spinning back, 620 00:26:37,085 --> 00:26:39,325 what applications do these people have installed? 621 00:26:40,115 --> 00:26:42,925 What devices do you have? What hardware are they using? 622 00:26:43,155 --> 00:26:47,045 What version of Windows are these devices on it? 623 00:26:47,355 --> 00:26:49,285 From that perspective enrollment 624 00:26:49,285 --> 00:26:52,405 and Intune is a great way to do that second step you said 625 00:26:52,405 --> 00:26:53,805 where it's like inventory or devices 626 00:26:54,035 --> 00:26:56,525 because as soon as they're enrolled all this information 627 00:26:56,525 --> 00:26:59,445 starts getting spit back and collect it and Intune. 628 00:27:00,105 --> 00:27:04,445 So you can just get a level set of what are my devices, 629 00:27:05,225 --> 00:27:07,605 what's installed on 'em, how are they configured? 630 00:27:07,825 --> 00:27:11,845 And get a lot of information that can help you actually plan 631 00:27:12,425 --> 00:27:16,605 for going down the rest of the path of installing software, 632 00:27:16,835 --> 00:27:19,045 setting up security policies, all of that. You 633 00:27:19,045 --> 00:27:20,445 - Do have to be a little intentional 634 00:27:20,465 --> 00:27:23,405 and maybe go like do the research to understand like 635 00:27:23,965 --> 00:27:27,245 I I I agree like en enrollment is the first step, right? 636 00:27:27,245 --> 00:27:29,245 Like understand it and that that's a great way 637 00:27:29,245 --> 00:27:30,365 to like base your inventory 638 00:27:30,745 --> 00:27:34,325 but you still have to know the types of devices that exist. 639 00:27:34,625 --> 00:27:39,205 So like am, am I talking mobile devices like phones, 640 00:27:39,715 --> 00:27:43,445 tablets, what's the operating system that was run on? 641 00:27:43,445 --> 00:27:46,685 Because Intune like as a suite, 642 00:27:47,105 --> 00:27:50,365 it it's expansive for the types of operating systems 643 00:27:50,435 --> 00:27:54,725 that it supports when it comes down to device enrollment 644 00:27:54,865 --> 00:27:57,765 and like what it can control on device. 645 00:27:57,865 --> 00:28:01,405 So you've got coverage for Android, iOS, 646 00:28:01,955 --> 00:28:05,685 iPad os on the Apple side you can also do Linux, 647 00:28:05,785 --> 00:28:09,765 you can do Mac os, you can do Windows 10 and 11 648 00:28:09,905 --> 00:28:11,085 - And Windows Mobile. Yeah, 649 00:28:11,365 --> 00:28:13,965 - , well let's yeah pour one 650 00:28:13,965 --> 00:28:15,085 out for Windows Mobile, sorry. 651 00:28:15,425 --> 00:28:17,525 Uh, Chrome OS is even in there, right? 652 00:28:17,525 --> 00:28:19,685 Like so like depending on your organization, 653 00:28:19,955 --> 00:28:21,205 like you might look 654 00:28:21,225 --> 00:28:26,005 and say oh you know, I wanna know about my Windows devices. 655 00:28:26,265 --> 00:28:28,325 But then it turns out like you give all your 656 00:28:28,325 --> 00:28:29,925 salespeople cell phones, right? 657 00:28:29,985 --> 00:28:31,645 And you've got Android and iPhone 658 00:28:31,665 --> 00:28:33,445 and all sorts of other things out there. 659 00:28:33,445 --> 00:28:36,085 So like, okay now I've got those and you 660 00:28:36,105 --> 00:28:38,645 and you really do need to kind of be intentional with 661 00:28:39,035 --> 00:28:40,085 what you're gonna put out there, 662 00:28:40,085 --> 00:28:44,325 what you're gonna put the time into, into configuring and, 663 00:28:44,345 --> 00:28:46,005 and potentially understand the constraints. 664 00:28:46,075 --> 00:28:48,485 Like you know it's, it's one thing for me to say like, 665 00:28:48,485 --> 00:28:49,485 oh are you a Linux customer? 666 00:28:49,485 --> 00:28:51,005 But then you come in and read the documentation 667 00:28:51,025 --> 00:28:53,485 and you're like, oh yeah it's not all of Linux though. 668 00:28:53,515 --> 00:28:55,965 It's actually just um, boom two , you know? 669 00:28:56,035 --> 00:28:59,725 Yeah 20 point x and and 22 x. So good luck . 670 00:28:59,955 --> 00:29:02,765 - Yeah and Apple, I mean you get the same thing with OS 671 00:29:02,785 --> 00:29:04,885 as like Apple iOS is 15.0 672 00:29:04,885 --> 00:29:07,365 and lighter Mac OS is 12.0 and lighter. 673 00:29:07,945 --> 00:29:10,805 And even though I would say some 674 00:29:10,805 --> 00:29:14,045 of these like Intune supports Mac OS 12.01 later, 675 00:29:14,955 --> 00:29:19,165 what you can do from 12 to 13, where are we on now? 676 00:29:19,365 --> 00:29:20,365 14, I forget 677 00:29:20,765 --> 00:29:22,645 - Where're at we're - 15 Should it's 15. 678 00:29:22,675 --> 00:29:26,525 15, yeah. It varies from 12 to 13 to 14 to 15 in 679 00:29:26,525 --> 00:29:30,445 what you can do, like you said Windows, you can do 8.1, 680 00:29:30,865 --> 00:29:32,245 you can do 10 681 00:29:32,245 --> 00:29:35,165 and later I have not seen much that differs between 10 682 00:29:35,165 --> 00:29:37,245 and 11 but there is a big difference 683 00:29:37,245 --> 00:29:39,645 between stuff when if you're still doing 8.1 684 00:29:39,645 --> 00:29:42,805 and enrolling those versus 10 and 11. 685 00:29:43,465 --> 00:29:48,165 So it is an, the enrollment is enrollment is a challenge 686 00:29:48,425 --> 00:29:53,045 and I would say the biggest thing to, that you always have 687 00:29:53,045 --> 00:29:55,485 to figure out is what do you have if you have an on-prem, 688 00:29:55,595 --> 00:29:58,045 this is funny to me Scott, I'm curious your thoughts. 689 00:29:58,725 --> 00:30:00,965 Microsoft has been really trying to get people 690 00:30:00,985 --> 00:30:04,125 to get away from some of the hybrid enrollment. 691 00:30:04,265 --> 00:30:07,165 Um, the hybrid ad join and hybrid environments. 692 00:30:07,165 --> 00:30:08,845 They would love everybody to be intra only. 693 00:30:09,345 --> 00:30:10,485 The easiest way 694 00:30:10,785 --> 00:30:13,045 to get a device enrolled in Intune is if you're in a hybrid 695 00:30:13,045 --> 00:30:17,365 environment because you can do it with GPO policies 696 00:30:17,825 --> 00:30:22,285 and your D connector synchronization where those devices 697 00:30:22,395 --> 00:30:24,885 that are joined your on-prem domain 698 00:30:26,045 --> 00:30:28,085 synchronized up have group policies deployed. 699 00:30:28,545 --> 00:30:31,845 You can automatically enroll those devices in Intune at any 700 00:30:31,845 --> 00:30:34,565 point in time with just a few configuration changes. 701 00:30:35,225 --> 00:30:38,845 If you're not in that scenario, you're limited to, 702 00:30:38,945 --> 00:30:41,565 you can auto-enroll when a device is joined 703 00:30:41,825 --> 00:30:44,285 to Azure ad if a device is already joined 704 00:30:44,285 --> 00:30:45,765 to Azure ad there's no way 705 00:30:45,785 --> 00:30:48,685 to like automatically enroll them remotely. 706 00:30:49,205 --> 00:30:52,285 I can't go say I have all these devices joined in Azure AD 707 00:30:52,515 --> 00:30:54,445 automatically enroll them into Intune 708 00:30:54,715 --> 00:30:57,765 because of the way user permissions work 709 00:30:58,265 --> 00:31:01,125 and especially if a user's like a standard 710 00:31:01,155 --> 00:31:02,245 user on their device. 711 00:31:02,625 --> 00:31:05,925 The difference between that initial Azure ad join 712 00:31:05,925 --> 00:31:07,045 and once it's already joined 713 00:31:07,225 --> 00:31:09,645 and weird under THEC stuff with Windows. 714 00:31:10,105 --> 00:31:12,565 So at that point in time you either have 715 00:31:12,565 --> 00:31:16,605 to let your users be local admins on their devices so 716 00:31:16,605 --> 00:31:18,885 that they can enroll themselves 717 00:31:19,505 --> 00:31:23,285 or you can like go create provisioning packages 718 00:31:23,285 --> 00:31:24,325 that are executables 719 00:31:24,555 --> 00:31:27,245 that you can deploy remotely using software. 720 00:31:27,305 --> 00:31:28,645 But if they're not enrolled in Intune, 721 00:31:29,105 --> 00:31:31,485 you can't deploy software remotely. 722 00:31:31,825 --> 00:31:34,405 So you have to have something else which then maybe 723 00:31:34,405 --> 00:31:35,765 you question why you're using Intune. 724 00:31:36,015 --> 00:31:38,325 Maybe you're trying to migrate to Intune. 725 00:31:38,475 --> 00:31:40,285 Yeah, you get into a little bit of chicken 726 00:31:40,285 --> 00:31:42,685 and egg with provisioning packages, uh, 727 00:31:42,705 --> 00:31:44,645 or you can have users like double click 728 00:31:44,645 --> 00:31:46,365 and run it in provision Intune. 729 00:31:46,585 --> 00:31:49,045 But pretty much if they're already joined 730 00:31:49,225 --> 00:31:52,245 to Azure Active directory or if they're standard users 731 00:31:52,825 --> 00:31:55,045 and you don't have an on-prem domain controller, 732 00:31:55,465 --> 00:31:59,045 it can be a very manual process to get people 733 00:31:59,545 --> 00:32:03,365 or get devices enrolled in Intune. 734 00:32:03,745 --> 00:32:06,285 And that I would say is it's the first step, 735 00:32:06,505 --> 00:32:09,405 but it is also the biggest challenge, particularly, 736 00:32:09,805 --> 00:32:14,285 particularly with desktops like you mentioned, iOS, Android, 737 00:32:14,655 --> 00:32:15,845 those, it's a lot simpler 738 00:32:15,845 --> 00:32:17,525 because you don't run into same, some 739 00:32:17,525 --> 00:32:20,325 of the same local permission rights when it comes 740 00:32:20,425 --> 00:32:21,965 to those types of devices. 741 00:32:22,235 --> 00:32:25,925 - It's rough too because you know, uh, like it's, 742 00:32:25,925 --> 00:32:28,805 it's a little bit weird 'cause like we're talking about 743 00:32:28,985 --> 00:32:32,125 Intune as a product when it really is a suite of products 744 00:32:32,185 --> 00:32:33,325 and I think it's confusing 745 00:32:33,325 --> 00:32:35,005 because Microsoft talks about it as a product. 746 00:32:35,155 --> 00:32:37,765 Andy suite of products. Like, like one of the things 747 00:32:37,765 --> 00:32:39,725 that got me is like I think about like some 748 00:32:39,725 --> 00:32:40,805 of these sub components 749 00:32:40,915 --> 00:32:43,445 that fall under the Intune umbrella, right? 750 00:32:43,445 --> 00:32:45,885 Like Defender for Endpoint is a good example. 751 00:32:46,605 --> 00:32:51,005 Defender for Endpoint supports way more operating systems 752 00:32:51,225 --> 00:32:53,325 and endpoints than Intune does, right? 753 00:32:53,325 --> 00:32:54,805 So you think about like enrollment 754 00:32:54,805 --> 00:32:58,325 and Intune as being maybe like Linux and just Ubuntu. 755 00:32:58,745 --> 00:33:02,445 Oh it turns out that defender of Endpoint will totally do R 756 00:33:02,585 --> 00:33:06,205 and Scent and Debian and like all those things, right? 757 00:33:06,205 --> 00:33:08,765 It'll even do older versions of 758 00:33:09,465 --> 00:33:12,205 of Mac OS along the way it will do other 759 00:33:12,395 --> 00:33:13,645 operating systems, right? 760 00:33:13,675 --> 00:33:18,645 Like you can have uh, windows server set up with Defender 761 00:33:18,985 --> 00:33:20,965 but then you're like looking at this list in Intune 762 00:33:20,965 --> 00:33:24,005 that potentially is really different , 763 00:33:24,005 --> 00:33:25,405 like it's not even a superset 764 00:33:26,025 --> 00:33:27,525 or a subset, it's a, they're, 765 00:33:27,525 --> 00:33:30,205 they're like two disconnected things even though they fall 766 00:33:30,205 --> 00:33:32,085 under the same product family. 767 00:33:32,865 --> 00:33:34,205 But you gotta start somewhere, right? 768 00:33:34,205 --> 00:33:35,805 Like so why not start with the big bucket 769 00:33:35,825 --> 00:33:38,965 of like rationalizing devices and bringing those in. 770 00:33:39,265 --> 00:33:41,085 And then I would imagine once you have the devices, 771 00:33:41,475 --> 00:33:43,725 like like you said, you can do the inventory 772 00:33:43,825 --> 00:33:45,165 and then you can start deciding 773 00:33:46,075 --> 00:33:48,325 what aspects you do want to manage, right? 774 00:33:48,325 --> 00:33:50,485 Is it do you move onto that next pillar of applications 775 00:33:51,185 --> 00:33:54,165 or do you do security or both at once, right? 776 00:33:54,165 --> 00:33:55,645 Depending on on what your needs are 777 00:33:55,645 --> 00:33:56,925 and what you're trying to execute on. 778 00:33:57,225 --> 00:34:00,245 - That's where I tend to see again once they're enrolled, 779 00:34:00,345 --> 00:34:03,685 people tend to diverge a little bit based on those goals. 780 00:34:04,445 --> 00:34:07,005 I think if you kinda stay on some of the device 781 00:34:07,885 --> 00:34:10,885 configuration is where people tend to go 782 00:34:10,915 --> 00:34:14,885 because a lot of, I would say a lot 783 00:34:14,885 --> 00:34:17,605 of companies are used to using GPOs. 784 00:34:17,675 --> 00:34:20,165 They're used to pushing out certain configurations 785 00:34:20,225 --> 00:34:23,445 to their devices via group policy objects 786 00:34:23,705 --> 00:34:27,765 and whether it's configuring things like Google Chrome, 787 00:34:27,765 --> 00:34:30,325 because let's face it, a lot of companies still have that 788 00:34:30,325 --> 00:34:33,325 for their default browser pushing out like auto 789 00:34:33,645 --> 00:34:37,205 configuration of OneDrive pushing down 790 00:34:37,995 --> 00:34:40,365 corporate wifi connection information, 791 00:34:40,365 --> 00:34:42,685 whether it's certificates or SSIDs. 792 00:34:43,865 --> 00:34:45,285 Any number of those settings. 793 00:34:45,785 --> 00:34:47,365 And this is one area 794 00:34:47,365 --> 00:34:52,245 that I've seen Intune get a lot better at lately is it used 795 00:34:52,245 --> 00:34:54,805 to be, and I remember having this conversation a lot 796 00:34:54,815 --> 00:34:57,165 where it would be back when it was Azure ad 797 00:34:57,225 --> 00:34:58,565 and I'm gonna say Azure AD 798 00:34:58,565 --> 00:35:01,205 because that's what it was, is Azure AD 799 00:35:01,305 --> 00:35:03,845 is not active directory. you don't have 800 00:35:03,945 --> 00:35:05,405 - It - Is not , right? 801 00:35:05,425 --> 00:35:08,405 And a big part of it was you don't have group policies like 802 00:35:08,465 --> 00:35:10,645 you can use it as an identity provider 803 00:35:10,905 --> 00:35:15,005 but outside of that it used to be like an identity provider 804 00:35:15,945 --> 00:35:20,205 and now it has a whole suite of settings 805 00:35:20,545 --> 00:35:23,565 and it's not GPOs like I am not gonna call these, 806 00:35:23,945 --> 00:35:28,765 you go set up GPOs setting up configuration policies 807 00:35:29,185 --> 00:35:32,645 in Microsoft enterra ID or an enterra now. 808 00:35:33,505 --> 00:35:38,405 And those can include importing custom A DMX templates. 809 00:35:38,545 --> 00:35:42,765 So you can go download the A DMX templates from Google 810 00:35:42,865 --> 00:35:46,645 for Chrome, import them into your configuration policies 811 00:35:47,145 --> 00:35:48,925 and I should pop this up 812 00:35:49,065 --> 00:35:52,285 and then go start configuring those settings for Chrome 813 00:35:52,315 --> 00:35:53,365 that you're gonna push down. 814 00:35:53,915 --> 00:35:56,445 This one in particular is still in public preview 815 00:35:56,625 --> 00:35:58,765 and it's been that way for a long time. 816 00:35:59,605 --> 00:36:02,005 I don't know how long it's been in public preview, it's 817 00:36:02,005 --> 00:36:03,165 - Been like a year plus. 818 00:36:03,465 --> 00:36:06,045 - But they also have a whole suite of settings 819 00:36:06,515 --> 00:36:08,285 that you can start pushing out wifi. 820 00:36:09,325 --> 00:36:10,645 Recently I did one with OneDrive 821 00:36:10,645 --> 00:36:12,765 to like auto log people into OneDrive 822 00:36:13,185 --> 00:36:15,405 and set up the backup for their devices 823 00:36:15,505 --> 00:36:19,525 and documents you can set up. 824 00:36:19,715 --> 00:36:20,845 This is an interesting way, 825 00:36:20,985 --> 00:36:23,965 one I've done recently too is a VD Azure Virtual 826 00:36:24,075 --> 00:36:25,205 desktop environments. 827 00:36:25,275 --> 00:36:26,725 This is not just for endpoints 828 00:36:26,725 --> 00:36:29,365 but I did a VD where I enrolled it in Intune 829 00:36:29,585 --> 00:36:34,485 and actually set up all the FS logics settings via Intune 830 00:36:34,545 --> 00:36:37,245 to push out to these edger virtual desktop machines. 831 00:36:37,545 --> 00:36:39,365 So all of those types of settings are there. 832 00:36:40,145 --> 00:36:42,765 So if you're, you've been a little bit on this fence 833 00:36:42,765 --> 00:36:45,805 and looking at it, I would really encourage you go look at a 834 00:36:45,805 --> 00:36:47,965 lot of those configuration settings and see what's there. 835 00:36:48,115 --> 00:36:53,005 There's also a tool out there that does a comparison of 836 00:36:53,005 --> 00:36:56,165 what you have in GPO is that import GPOs here 837 00:36:56,165 --> 00:36:57,165 to create policies 838 00:36:57,575 --> 00:37:00,165 where you can go export your GPOs from your domain 839 00:37:00,165 --> 00:37:03,285 controller, import them into Intune, 840 00:37:03,395 --> 00:37:07,765 into this GPO analyzer and it'll go through all of your GPOs 841 00:37:07,825 --> 00:37:12,485 and match up how that relates to your configuration policies 842 00:37:12,825 --> 00:37:15,125 and what you can or cannot do 843 00:37:15,125 --> 00:37:18,165 because there is still a disparity there in some cases 844 00:37:18,595 --> 00:37:23,365 between configuration settings in, uh, Intune 845 00:37:23,545 --> 00:37:26,045 and what's available in GPOs on prem. Yeah, 846 00:37:26,125 --> 00:37:27,965 - I think we've been on this path for a while though. 847 00:37:28,195 --> 00:37:31,845 Like, uh, at, at some point you have to imagine that it kind 848 00:37:31,845 --> 00:37:36,725 of makes the flip to the, uh, the just that subset 849 00:37:36,865 --> 00:37:40,085 of stuff that can only be done from something like Intune 850 00:37:40,105 --> 00:37:41,365 and a cloud configuration. 851 00:37:41,665 --> 00:37:43,165 Uh, I think we've seen this with like the office 852 00:37:43,565 --> 00:37:44,605 configuration tools, right? 853 00:37:44,745 --> 00:37:46,525 And, and some of the things that come out there 854 00:37:47,075 --> 00:37:49,805 that are natively available within like Office 365 855 00:37:49,805 --> 00:37:52,485 and M 360 fives as as a service as well. 856 00:37:52,555 --> 00:37:56,125 Like, you know, I used to work a whole bunch with customers 857 00:37:56,305 --> 00:37:58,485 who would do GPOs for office 858 00:37:58,945 --> 00:38:00,845 and it was like, hey, we're making the transition 859 00:38:00,845 --> 00:38:03,085 to the cloud, why don't we use the cloud management service? 860 00:38:03,745 --> 00:38:05,405 And it, and it does get a little disparate 861 00:38:05,605 --> 00:38:07,325 'cause you end up potentially managing 862 00:38:07,865 --> 00:38:09,965 office over here in this tool. 863 00:38:10,545 --> 00:38:12,085 And then maybe there's some functionality 864 00:38:12,085 --> 00:38:13,605 that isn't in the cloud management service 865 00:38:13,605 --> 00:38:16,205 where then you gotta go to Intune and and do it on that side 866 00:38:16,205 --> 00:38:17,925 and you're like, uhoh, now I got two of these things. 867 00:38:18,345 --> 00:38:20,645 Do they actually conflict? Do they, do they work together? 868 00:38:20,705 --> 00:38:24,565 How does that go? But a lot of it is like, you know, 869 00:38:24,605 --> 00:38:25,605 I think you have to step back 870 00:38:25,605 --> 00:38:28,525 and maybe like do a little assessment like is the writing on 871 00:38:28,525 --> 00:38:30,485 the wall that like, you know, some of these things 872 00:38:30,485 --> 00:38:31,485 that I'm potentially trying 873 00:38:31,485 --> 00:38:33,845 to force from legacy environments or on-prem 874 00:38:33,845 --> 00:38:36,485 or whatever it happens to be like, uh, is is 875 00:38:36,485 --> 00:38:39,245 that the right way to do it in the modern age? 876 00:38:39,245 --> 00:38:40,965 Right? And like, and I spent a bunch 877 00:38:40,965 --> 00:38:43,285 of time thinking about this 'cause I'm like, you, you know, 878 00:38:43,405 --> 00:38:47,165 IIII do, I I work for Microsoft, you know, I have to 879 00:38:47,825 --> 00:38:50,845 enroll my personal devices in MDM, right? 880 00:38:50,845 --> 00:38:53,365 Like, uh, you know, Microsoft doesn't gimme a phone 881 00:38:54,065 --> 00:38:56,685 so I en I enroll my personal device just 882 00:38:56,685 --> 00:38:58,285 so I can have like teams and email 883 00:38:58,385 --> 00:39:00,445 and things like that on my phone. 884 00:39:00,675 --> 00:39:03,085 They let me do that. Like , it's like they, 885 00:39:03,085 --> 00:39:04,805 they've got an environment that's like that, right? 886 00:39:04,805 --> 00:39:07,445 Like that can happen. Like if Microsoft can make it happen 887 00:39:07,635 --> 00:39:10,005 with you know, a hundred thousand plus employees, 888 00:39:10,115 --> 00:39:12,725 like why can't you make it happen over here? 889 00:39:12,815 --> 00:39:14,685 Right? like, like yeah, you know, some 890 00:39:14,685 --> 00:39:17,525 of these places that I think like overindex on the security 891 00:39:17,555 --> 00:39:20,285 aspects of things, you know, there's so much of that too. 892 00:39:20,285 --> 00:39:23,085 Like it impacts not just Intune and that stack 893 00:39:23,145 --> 00:39:26,565 but things like Azure AD and password policies, right? 894 00:39:26,565 --> 00:39:28,405 Like should you make your users change 895 00:39:28,405 --> 00:39:29,805 their password every 30 days? 896 00:39:29,875 --> 00:39:32,045 Like is that a valid thing for you to be doing anymore? 897 00:39:32,705 --> 00:39:35,125 No, it feels a little like old school than legacy. 898 00:39:35,865 --> 00:39:37,085 So I think it's always good to kind 899 00:39:37,085 --> 00:39:39,565 of like take the step back and reevaluate like, 900 00:39:39,625 --> 00:39:41,925 or if you are making these migration kinds of things 901 00:39:42,745 --> 00:39:45,005 of not just a street like lift 902 00:39:45,145 --> 00:39:46,885 and shift, like let's put it over here 903 00:39:47,505 --> 00:39:50,005 but let's really like shift in a direction. 904 00:39:50,185 --> 00:39:51,845 So rather than like picking the thing up 905 00:39:51,845 --> 00:39:54,405 and moving it over, let's actually like slide through 906 00:39:54,425 --> 00:39:55,725 and as we slide through, like 907 00:39:55,725 --> 00:39:58,285 what are the transit transition items that we need 908 00:39:58,285 --> 00:39:59,925 to figure out along the way 909 00:39:59,925 --> 00:40:02,005 that potentially land us in the right 910 00:40:02,005 --> 00:40:03,325 place for the future. Yes. 911 00:40:03,455 --> 00:40:05,245 - Scott, you made one comment 912 00:40:05,665 --> 00:40:08,525 and it triggered a soapbox of mine. 913 00:40:08,925 --> 00:40:10,845 . Do you think Alex, do you think Alex Simmons 914 00:40:10,875 --> 00:40:11,885 listens to our podcast? 915 00:40:12,145 --> 00:40:14,645 Is it Simmons or Simons? He's the enterra id 916 00:40:14,845 --> 00:40:16,445 - I would probably butcher the last name, 917 00:40:16,545 --> 00:40:17,885 but yes, you're on the right path. 918 00:40:18,545 --> 00:40:20,485 No, we're, we're we're lowly cogs in the machine. 919 00:40:20,505 --> 00:40:21,765 Nobody listens to this. Okay. 920 00:40:21,945 --> 00:40:25,005 - If anybody from Microsoft is listening enter id you 921 00:40:25,005 --> 00:40:26,845 mentioned password resets. 922 00:40:27,165 --> 00:40:31,965 I 100% agree I'm on the BA boat of don't do password resets 923 00:40:32,545 --> 00:40:36,165 and do MFA, I mean even do passwordless, all of that. 924 00:40:36,725 --> 00:40:38,645 I had this conversation with a client the other day 925 00:40:38,865 --> 00:40:40,605 and I don't know why this is still the case. 926 00:40:41,025 --> 00:40:45,445 You still cannot force a password length longer 927 00:40:45,755 --> 00:40:48,725 than 12 characters in Microsoft enterra id 928 00:40:49,025 --> 00:40:50,645 and I don't even know that you can do 12, 929 00:40:50,785 --> 00:40:52,445 you may only be able to force eight. 930 00:40:52,625 --> 00:40:55,165 You used to have like basic 931 00:40:55,385 --> 00:40:59,125 and strong passwords which was eight or 12 characters 932 00:40:59,665 --> 00:41:02,525 and it had different requirements around special characters 933 00:41:02,625 --> 00:41:03,725 and all of that. 934 00:41:04,585 --> 00:41:07,405 But if you wanna force anything more than 12, 935 00:41:07,965 --> 00:41:10,885 assuming you can still do 12, you have to use on-prem. 936 00:41:11,075 --> 00:41:12,885 Like this can't be that hard. 937 00:41:12,915 --> 00:41:14,645 This has to be like a dialogue box 938 00:41:14,665 --> 00:41:17,085 and a character counter in password reset. 939 00:41:17,285 --> 00:41:20,445 'cause they support up to, I don't know, 940 00:41:20,445 --> 00:41:23,085 64 256, 2 56 941 00:41:23,345 --> 00:41:24,405 - In hybrid 2 56. 942 00:41:24,425 --> 00:41:26,485 - That's what I thought. Yeah, they support really long 943 00:41:26,805 --> 00:41:29,365 passwords but I can't force users to do that. 944 00:41:29,425 --> 00:41:32,685 And I've had clients come to me that say we don't want 945 00:41:32,745 --> 00:41:34,165 to do password resets 946 00:41:34,585 --> 00:41:39,245 but a 12 character password password crack time. 947 00:41:39,265 --> 00:41:43,805 That's what I was looking for I believe is like weeks, no 948 00:41:43,905 --> 00:41:45,045 or 12 characters. 949 00:41:45,865 --> 00:41:47,965 Oh no, 12 characters is still on that bubble 950 00:41:48,225 --> 00:41:50,165 of 34,000 years. 951 00:41:50,245 --> 00:41:53,485 I think it's when you jump, jump down underneath 12, 952 00:41:54,105 --> 00:41:57,245 but some of them want eight characters is 22 minutes. 953 00:41:57,705 --> 00:41:59,565 Um, if you have an eight character password, 954 00:41:59,625 --> 00:42:01,005 go make it longer please. 955 00:42:01,825 --> 00:42:04,565 But I do have clients that want to be able to go like 14 956 00:42:04,585 --> 00:42:05,645 or 16 characters. 957 00:42:06,045 --> 00:42:08,365 I don't know. I mean maybe the theory is this is 958 00:42:08,365 --> 00:42:09,645 outside looking in is that 959 00:42:10,325 --> 00:42:12,765 Microsoft is going more towards the Fido and Passwordless 960 00:42:12,785 --> 00:42:14,805 and they figure let's not force 12 961 00:42:14,805 --> 00:42:17,285 because maybe that'll encourage people to go passwordless, 962 00:42:17,825 --> 00:42:20,845 but you can't get a hundred percent passwordless yet 963 00:42:20,945 --> 00:42:24,325 and you can't do with antra ID account like you can 964 00:42:24,325 --> 00:42:26,045 with an MSA account and actually go in 965 00:42:26,045 --> 00:42:27,405 and just say delete my password. 966 00:42:27,405 --> 00:42:29,805 So I don't actually have a password. 967 00:42:30,125 --> 00:42:33,485 - I have some thoughts just based on the way I know we've 968 00:42:33,485 --> 00:42:35,725 built other stuff at Microsoft about 969 00:42:35,945 --> 00:42:38,165 how you potentially end up in situations like that. 970 00:42:38,305 --> 00:42:41,205 But uh, I'm gonna keep them to myself. 971 00:42:41,545 --> 00:42:43,765 Not, not, not that's breaking NDAs for that one. Yes. 972 00:42:43,945 --> 00:42:46,885 But yeah, I I but I think those like restrictions do exist. 973 00:42:47,225 --> 00:42:50,045 So like in a world of, hey, 974 00:42:50,305 --> 00:42:52,645 I'm not gonna have my users change my passwords 975 00:42:52,905 --> 00:42:55,125 and there are restrictions on 976 00:42:55,125 --> 00:42:56,405 character length, things like that. 977 00:42:56,915 --> 00:42:58,765 Like at some point you're gonna lean in 978 00:42:58,765 --> 00:43:00,605 and trust the operational controls, right? 979 00:43:00,605 --> 00:43:03,085 Like you mentioned like, hey, how long is it gonna take 980 00:43:03,085 --> 00:43:04,205 to crack this password? 981 00:43:04,945 --> 00:43:09,845 You would very much hope that the statements 982 00:43:10,265 --> 00:43:13,445 and you know, effectively the way the service is provisioned 983 00:43:13,445 --> 00:43:16,165 for Microsoft that like you're not gonna be able 984 00:43:16,165 --> 00:43:19,045 to execute a password spray where you can just bang 985 00:43:19,045 --> 00:43:21,765 that thing, you know, against the wall for 30 days 986 00:43:21,945 --> 00:43:24,045 or 22 hours or whatever it is. 987 00:43:24,825 --> 00:43:28,605 So, so there, there's other mitigations there. 988 00:43:28,795 --> 00:43:31,325 Like I know it's not an equivalent right? 989 00:43:31,345 --> 00:43:34,205 But at some point like, you know, you gotta do 990 00:43:34,205 --> 00:43:36,085 that trade off and and the mental mass. 991 00:43:36,085 --> 00:43:38,805 Yeah. And kind of figure some of that stuff out. Let's see. 992 00:43:39,065 --> 00:43:41,965 You know, so observation, we're we, we tend to run longer 993 00:43:42,745 --> 00:43:44,325 now that we're doing this every other thing. 994 00:43:44,355 --> 00:43:46,565 Weak thing and, and trying to plan these out ahead of time. 995 00:43:47,345 --> 00:43:49,765 But let's, let's see like 996 00:43:50,705 --> 00:43:52,645 how can we wrap this one up? How 997 00:43:52,645 --> 00:43:53,645 - Can we wrap this one up? 998 00:43:53,645 --> 00:43:55,485 So should we wrap this up with device configuration? 999 00:43:55,485 --> 00:43:57,725 Should we do Intune part one and part two? I 1000 00:43:57,725 --> 00:44:00,125 - Know there's more there 'cause I put the notes together 1001 00:44:00,275 --> 00:44:01,485 - With you is more . Yes. 1002 00:44:01,615 --> 00:44:03,045 - Let's figure a good stopping point 1003 00:44:03,185 --> 00:44:05,045 and we can do just part two 1004 00:44:05,065 --> 00:44:06,805 as a natural follow on to this one. What 1005 00:44:06,805 --> 00:44:07,805 - Other notes do I have? 1006 00:44:07,805 --> 00:44:09,965 Anything else about devices? Because I would say we kind 1007 00:44:09,965 --> 00:44:12,325 of talked about the whole device pillar, right? 1008 00:44:12,325 --> 00:44:13,605 We talked about enrolling devices, 1009 00:44:13,745 --> 00:44:15,965 we talked about the A DMX templates, the 1010 00:44:17,485 --> 00:44:18,765 configuration settings. 1011 00:44:19,395 --> 00:44:21,325 They do have some co-management options. 1012 00:44:22,405 --> 00:44:23,725 I have not seen anybody do this. 1013 00:44:23,755 --> 00:44:26,765 This is essentially, if you're doing like SCCM on-prem 1014 00:44:26,765 --> 00:44:28,605 management and you wanna do Intune 1015 00:44:28,605 --> 00:44:29,965 management, it's available. 1016 00:44:30,395 --> 00:44:32,725 What else do we have? Client configuration MAC best devices. 1017 00:44:33,485 --> 00:44:36,205 I think this is, we may be at a good stopping point here, 1018 00:44:36,455 --> 00:44:39,685 Scott, where I think we talked like intro to Intune, 1019 00:44:39,705 --> 00:44:41,485 we talked about the devices, enrolling them, 1020 00:44:41,765 --> 00:44:44,485 configuring them, and I think from here we'd start moving 1021 00:44:44,555 --> 00:44:45,845 into applications like 1022 00:44:45,845 --> 00:44:47,085 what can you do from an app 1023 00:44:47,085 --> 00:44:48,565 management perspective with Intune? 1024 00:44:49,295 --> 00:44:51,445 Which that one we could absolutely go long. 1025 00:44:51,545 --> 00:44:54,285 And then some of the endpoint security. Yeah. Great. 1026 00:44:54,445 --> 00:44:55,605 I think we just wrap it here. 1027 00:44:55,865 --> 00:44:58,565 - All right, let's do it. So this will be part, part one 1028 00:44:58,565 --> 00:44:59,565 of two or or 1029 00:44:59,565 --> 00:45:01,165 - Part one of - Two? Part two, one of 1030 00:45:01,165 --> 00:45:02,165 - Two. 1031 00:45:02,165 --> 00:45:04,005 Unless we go long again and we come up with a part three. 1032 00:45:04,305 --> 00:45:06,725 But we'll plan on part one and two. We'll figure it 1033 00:45:06,725 --> 00:45:07,725 - Out. 1034 00:45:07,725 --> 00:45:09,405 Yeah, part one of do. Got it. Yes. 1035 00:45:09,685 --> 00:45:12,165 I just wanna do Microsoft Intune part two in the, 1036 00:45:12,165 --> 00:45:13,925 in the title for the next one. In 1037 00:45:13,925 --> 00:45:14,925 - The title. 1038 00:45:14,925 --> 00:45:16,325 I see, I see the motivation here. Yeah, 1039 00:45:16,365 --> 00:45:18,205 - I know well. Yeah, 1040 00:45:18,665 --> 00:45:21,325 - In a couple weeks - We will pick this up with apps 1041 00:45:21,745 --> 00:45:25,125 and endpoint security then as our next ones. Perfect. 1042 00:45:25,425 --> 00:45:27,245 - Sounds good. Well thanks Scott. 1043 00:45:27,455 --> 00:45:28,485 Enjoy your weekend 1044 00:45:29,025 --> 00:45:32,565 and we will be back in a couple weeks with part due. 1045 00:45:32,595 --> 00:45:33,885 - Awesome. Thanks Ben. 1046 00:45:36,105 --> 00:45:37,245 - If you enjoyed the podcast, 1047 00:45:37,745 --> 00:45:39,805 go leave us a five star rating in iTunes. 1048 00:45:39,985 --> 00:45:41,205 It helps to get the word out 1049 00:45:41,225 --> 00:45:44,725 so more IT pros can learn about Office 365 and Azure. 1050 00:45:45,705 --> 00:45:48,205 If you have any questions you want us to address on the show 1051 00:45:48,345 --> 00:45:50,805 or feedback about the show, feel free 1052 00:45:50,825 --> 00:45:53,885 to reach out via our website, Twitter, or Facebook. 1053 00:45:54,145 --> 00:45:56,245 Thanks again for listening and have a great day.

Digital Dispatch Podcast Podcast Artwork Image

Microsoft Cloud IT Pro Podcast

Ben Stegink, Scott Hoag

On the MS Cloud IT Pro Podcast, Scott and Ben discuss the Microsoft Cloud with a focus on IT Pros. They'll discuss the latest in Microsoft 365 and Office 365 News, Azure news and talk about their experiences with managing the Microsoft Cloud as well as interview industry experts on various cloud technology. They'll cover things such as SharePoint, Exchange, Microsoft Teams, PowerShell, Azure, Azure AD, Security, Networking, Storage, and the many other technologies and products that have made their way into the Microsoft 365 suite and Azure. To stay up-to-date on the latest in Microsoft Cloud news and gain some valuable knowledge as you deploy it within your own organization, make sure to tune in every week! Find out more at msclouditpropodcast.com.

Contact Show