150 likes | 258 Views
Windows Intune for IT Pros Jump Start M05: Windows Intune Policies. David Tesar Richard Harrison. Windows Intune for IT Pros Jump Start. Module Overview. Policy Templates Mobile Device Security Policy The Windows Intune Agent Settings Policy Windows Intune Center Settings Policy
E N D
Windows Intune for IT Pros Jump Start M05: Windows Intune Policies David Tesar Richard Harrison
Module Overview • Policy Templates • Mobile Device Security Policy • The Windows Intune Agent Settings Policy • Windows Intune Center Settings Policy • Windows Firewall Policy • Forcing Policy Refreshes • Policy Precedence • Best Practices
Installing Windows Intune Endpoint Protection Install WIEP, Enable WIEP Start Client Installation Yes Is MSE, SCEP, FEP installed? Is EP Policy enabled? Is AV installed? 1 3 4 Do not install WIEP No No Yes Yes No Do not install WIEP Install WIEP Upgrade to WIEP Only on… Is EP Policy enabled? 2 No Yes Disable WIEP Enable WIEP
Policy Precedence • Policy conflicts are resolved through: • Group hierarchy • Timestamps • Conflicts reported as Policy alerts • Group Policy settings take precedence Head Office Laptops Desktops Policy 1 Policy 2 Policy 3
Windows Intune Policies Best Practices • Create default: • Windows Intune Agent Settings policy… • before installing the Windows Intune client on computers • Control the installation of Windows Intune Endpoint Protection • Mobile Device Security policy… • Set required password settings • Apply Default policies to All Computers to set your baselines • Assign more specific policies to lower groups • Clients check for policy at varying times (depending on the platform) so plan ahead.
Module Overview • Policy Templates • Mobile Device Security Policy • The Windows Intune Agent Settings Policy • Windows Intune Center Settings Policy • Windows Firewall Policy • Forcing Policy Refreshes • Policy Precedence • Best Practices