david tesar richard harrison
DESCRIPTION
Windows Intune for IT Pros Jump Start M04 : Administrator Roles, Users and Groups. David Tesar Richard Harrison. Windows Intune for IT Pros Jump Start. Module Overview. Windows Azure Users & Groups Account Portal Windows Intune User Group Administrator Roles & Role Permissions - PowerPoint PPT PresentationTRANSCRIPT
Click to edit Master subtitle style
Microsoft Virtual Academy
Windows Intune for IT Pros Jump Start
M04: Administrator Roles, Users and Groups
David TesarRichard Harrison
First Half Second Half
(01) Big Picture with Windows Intune
(07) MDM Prerequisites and Cloud-only MDM Setup
(02) Architecture Design Considerations
(08) Cloud-only Software Publishing and Deployment
(03) Extending Identity to Windows Azure Active Directory
(09) Setting Up & Configuring Unified Infrastructure (+ MDM Setup)
(04) Administrator Roles, Users and Groups
(10) Unified MDM Settings and Compliance
(05) Windows Intune Policies(11) Unified MDM Software Deployment
(06) Cloud-only PC Setup (12) End User Enrollment
Windows Intune for IT Pros Jump Start
• Windows Azure Users & Groups– Account Portal–Windows Intune User Group– Administrator Roles & Role Permissions
• Windows Intune Users & Groups– User Properties–Windows Intune Groups– Group Functions– Dynamic Criteria Groups
Module Overview
Click to edit Master subtitle style
Microsoft Virtual AcademyWindows Azure Users &
Groups
Windows Azure Users & Groups
AzureAD Windows
Intune
• Windows Intune Account Portalhttps://accounts.manage.microsoft.com
• User Account Management– User account details
• User name
– Settings• Assign role• Sign-in status• Location
– Password resets
• Security Group Monitoring
Account Portal
• Membership required for:– Users to appear in administrator
console– Users to access company portal
Windows Intune User Group
Administrator Roles
Permission Billing Global Password Service User managementView Org & User information ü ü ü ü ü
Manage support tickets ü ü ü ü ü
Reset user passwords O ü ü O ü1
Perform billing & purchasing ü ü O O O
Create & manage user views O ü O O üCreate, edit, delete users & groups, & manage user licenses O ü O O ü2
Manage domains O ü O O O
Manage Org. info. O ü O O O
Delegate Admin roles O ü O O O
Use DirSync O ü O O O
Admin Role Permissions
1 - Role cannot reset passwords for billing, global, and service administrators.2 - Role cannot delete a global administrator or create other administrators.
DEMO
Account Portal In Action
Click to edit Master subtitle style
Microsoft Virtual AcademyWindows Intune Users &
Groups
Windows Intune Users and Groups
Desktops
All Devices
Laptops
Device Groups
All Users
User1
User2
User Groups
• Per User tracking of:– Software Deployment Issues– Policy Deployment Issues– Device Management Tasks
User Properties
• Default Groups
Windows Intune Groups
• Custom Group Strategies– Geo-based– Role-based– Function-based– Hardware-
based
• PC Updates
• PC Software deployment (Push)
• Agent Settings, Firewall, and Windows Intune Center Policy
• Notification Rules
• Reports
• Software Publishing (Pull)
• Mobile Device Security Policy
Group Functions
Desktops
Head Office
Laptops
Device Groups
Finance Users
User1
User2
User Groups
Dynamic Criteria Groups
Desktops
Head Office
Laptops
Device Groups
Finance Users
User1
User2
User Groups
AzureAD
AD
WindowsIntune
• Organizational Units• Domains
• Security Groups• Managers
Criteria Membership
DEMO
Working with Windows Intune Groups
• Windows Azure Users & Groups– Account Portal–Windows Intune User Group– Administrator Roles & Role Permissions
• Windows Intune Users & Groups– User Properties–Windows Intune Groups– Group Functions– Dynamic Criteria Groups
Module Review
©2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Office, Azure, System Center, Dynamics and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.