There is alot of pro's and con's using intune as your mdm. This can be discussed for ages, these are my takes on it. Its all about how much you use the m365 licenses, if you do not have any tool that manages clients and you have a M365 business premium, E3-E5. Then i would suggest you start leveraging the things Microsoft Intune can do for you. It depends what kind of infrastructure you allready got today, hybrid, on premises or cloud only.
Setting up intune correctly however can be a challenge for new and old, its because some of the logic you see setting up policies, changing settings etc. Its quite close to how you do it on a on premises domain controller, but it works a bit differently.
Settings in intune gets tattoed, that makes it so to remove a setting you need to create 2x policies, one that sets it to true / one that sets it to false. However Microsoft is working on making this better, still if you are just setting it up you should activate setting for setting you wanna change in a small test group before you roll the changes out to everyone.
https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot
This is where i would start if you are just starting out.
Implement Config Refresh
To implement Config Refresh, we have to create a Settings Catalog policy; therefore, go to the Intune portal, Devices | Windows | Configuration profiles, click on + Create Policy
Refresh Cadense is how long in minutes before it refreshes, this is usefull when you are first starting out, its also usefull to make sure all endpoints get the configuration. Think of it like a automatic "gpupdate /force"
Comentarios