EMS - The next level (Per Larsen)
Windows 10 and AzureAD join
Automatic MDM enrollment
Microsoft Passport for Work
Deploy MSI to Windows 10 MDM Joined devices
Use OMS to view System Update Assessment
Windows Store for Business integrated into Intune
How to deploy Application from Windows Store for Business with Intune
Disable private Store with OMA-URI
2. EWUG.dk
EMS – The next level
Mobility First | Cloud First
Per Larsen, Solution Architect
Blog: https://osddeployment.wordpress.com/
Twitter: @PerLarsen1975
LinkedIn: http://dk.linkedin.com/in/perlarsen1975
3. EWUG.dk
Agenda
Windows 10 and AzureAd join
Automatic MDM enrollment
Microsoft Passport for Work
Enterprise State Roaming
Deploy MSI to Windows 10 MDM Joined
devices
Use OMS to view System Update Assessment
Mobility First | Cloud First
4. EWUG.dk
Agenda
Windows Store for Business
Volume Purchases
Windows Store for Business integrated into
Intune
How to deploy Application from Windows
Store for Business with Intune
Disable private Store with OMA-URI
Mobility First | Cloud First
7. EWUG.dk
How to auto enroll Windows 10 into Microsoft Intune with
Azure AD join
Requirements
Azure AD Premium
Settings in Azure AD
AzureAD Maximum number of devices per user = 20
Intune Maximum number of devices per user = 5
Intune - Custom URI settings for Windows 10 devices
Experience/AllowManualMDMUnenrollment
8. EWUG.dk
How to auto enroll Windows 10 into Microsoft Intune with
Azure AD join
9. EWUG.dk
How to auto enroll Windows 10 into Microsoft Intune with
Azure AD join
How to setup automatic MDM enrollment
How to AzureAD Join a Windows 10 device
Automatic Bitlocker Encryption ??
Bitlocker SelfService
10. EWUG.dk
What is two-step verification/Microsoft Passport
What is Microsoft Passport
Microsoft Passport is set up on the user's
device
The user sets a gesture, which can be
Windows Hello or a PIN
11. EWUG.dk
What is two-step verification/Microsoft Passport
Requirements for Microsoft Passport
Initial two-step verification during Microsoft
Passport enrollment
How to disable or configure Microsoft
Passport (Intune)
13. EWUG.dk
Enterprise State Roaming
Separation of corporate and consumer data
Enhanced security (Azure RMS enscrypted)
Geographic location of data in the cloud
14. EWUG.dk
Deploy MSI to Windows 10 MDM Joined devices
http://officedev.github.io/Office-IT-Pro-Deployment-Scripts/XmlEditor.html
19. EWUG.dk
Disable private Store with OMA-URI
./User/Vendor/MSFT/Policy/Config/ApplicationManagement/RequirePrivateStore
Only
20. EWUG.dk
What are OMA-URI, policy CSP and how to
use OMA-URI for configuration.
Open Mobile Alliance Device Management (OMA DM) and OMA Client
Provisioning
Policy CSP
https://msdn.microsoft.com/en-
us/library/windows/hardware/dn904962(v=vs.85).aspx
Custom URI settings for Windows 10 devices
https://technet.microsoft.com/en-
us/library/mt126215.aspx
21. EWUG.dk
Usefull links
Office 365 Portal
https://portal.office.com
AzureAD Portal
https://manage.windowsazure.com
Intune Admin portal
https://manage.microsoft.com
Intune User portal
https://portal.manage.microsoft.com
Windows Store for Business
https://businessstore.microsoft.com/
22. EWUG.dk
Usefull links
Windows Store for Business
https://businessstore.microsoft.com/
Microsoft Operations Management Suite
http://oms.microsoft.com
Office 365 ProPlus Install Toolkit
http://officedev.github.io/Office-IT-Pro-Deployment-Scripts/XmlEditor.html