microsoft windows intune 2.0 quickstart administration

www.it-ebooks.info

Microsoft Windows Intune 2.0:

Quickstart Administration

Manage your PCs in the Enterprise through the Cloud

with Microsoft Windows Intune

David Overton

BIRMINGHAM - MUMBAI

www.it-ebooks.info

Microsoft Windows Intune 2.0: Quickstart Administration

Copyright © 2012 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval

system, or transmitted in any form or by any means, without the prior written

permission of the publisher, except in the case of brief quotations embedded in

critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy

of the information presented. However, the information contained in this book is

sold without warranty, either express or implied. Neither the author, nor Packt

Publishing, and its dealers and distributors will be held liable for any damages

caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the

companies and products mentioned in this book by the appropriate use of capitals.

However, Packt Publishing cannot guarantee the accuracy of this information.

First published: January 2012

Production Reference: 2230112

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-84968-296-1

www.packtpub.com

Cover Image by Meir Jacob ([email protected])

www.it-ebooks.info

Credits

Author

David Overton

Reviewers

Richard Diver

Robert Pearman

Jason Wallace

Andy Trish

Acquisition Editor

Kerry George

Lead Technical Editor

Susmita Panda

Technical Editors

Kedar Bhat

Priyanka Shah

Naheed Shaikh

Project Coordinator

Jovita Pinto

Proofreader

Stephen Swaney

Indexer

Monica Ajmera Mehta

Graphics

Valentina Joseph D'Silva

Manu Joseph

Production Coordinator

Shantanu Zagade

Cover Work

Shantanu Zagade

www.it-ebooks.info

About the Author

David Overton has been in the IT industry for over 25 years and has worked at

Microsoft, in the UK, for more than eleven years. David fell in love with Small and

Medium Business when he was given responsibility for engaging with journalists, at

the time of the launch of Small Business Server 2003, in the UK. He has also written

Small Business Server 2008 Installation, Migration and Confi guration. For the next four

years, David was responsible for improving SBS deliveries by Microsoft partners.

David has since moved on to other roles within Microsoft but still continues work

with a number of small and medium businesses and Microsoft partners.

David's role at Microsoft includes working with organizations that are moving

towards cloud-based computing models. He personally became involved with the

Windows Intune product, as a result. Working with both the UK and US teams, in

his role there, has lead to the writing of this book.

Besides his day job, David is also a writer; he has written for consumer

publications and Windows XP and Windows Vista magazines, and he blogs at

http://davidoverton.com, where he helps readers fi nd solutions to questions

and problems. In 2009, David published his fi rst book on SBS 2008, which was

well received.

When not working or writing, David likes to spend time with his family and also

tries to fi t in sailing, at any time of the year, in any weather.

www.it-ebooks.info

Acknowledgement

I would like to thank all those around me who have inspired me to undertake

another book to help others. My wife and daughters are incredibly generous with

what would be our time together, allowing me to borrow it to write. My father,

who is always asking me why things do and don't work and what can be done to

fi x them. Friends and colleagues have provided feedback, honestly, that has helped

shape the book with their insight and differing opinions, enabling it to answer more

questions and provide more useful insight.

Finally, I want to thank and remember my mum. She taught me to chase my dreams,

no matter how diffi cult they may be. My mum got to see my fi rst book published

and to see this one start, but was not there, in the end, to see this book arrive in its

fi nished form. I hope she looks down at me from wherever she is and is as proud of

me as I am of her. I will miss you, mum, and your support for my projects, such as

this book. For this reason, I dedicate this book to you, for all the love, knowledge,

and strength you have given me.

www.it-ebooks.info

About the Reviewers

Richard Diver is a passionate technologist with over 10 years' experience in

Enterprise level IT systems. Having worked his way up from helpdesk to server

team, and from consultant to architect, Richard has worked on many large-scale

projects and gained a wide breadth of knowledge in technology, people, and process.

During his time at Microsoft, Richard developed technical content and training

courses in Windows Server Performance, Sysinternals Tools, and Personal

Productivity, delivering this to internal audiences and customers. He is currently

working as an Enterprise Architect for Methods Consulting, a London-based

consultancy specializing in the Public Sector.

Richard has recently completed the review of the latest book Windows Sysinternals

Administrator's Reference by Mark Russinovich, and has completed the creation of an

accompanying training course that is now being delivered by Microsoft Engineers

to their Premier customers.

Andy Trish is an ex-military man with two war medals. He came into the IT

world in 1999 and has since gained over 60 Microsoft Certifi ed Professional

qualifi cations in a whole variety of subjects. He has recently written the questions

and answers for some of the new Microsoft exams. He has held the title of Microsoft

Most Valuable Professional (MVP) since 2008 and contributed to developing the

Microsoft Partner Network.

Andy has presented at fi ve Microsoft Worldwide Partner Conferences and a variety

of other events, globally.

He was the Founding Director of NCI Technologies, based in Cornwall, that won

the Microsoft OEM Hardware Reseller of the Year, 2011 award and was fi nalist for

Microsoft Midmarket Provider of the Year, 2011. He has grown the company to a

staff of twenty-eight, in just seven years.

Andy also co-authored Thinking of Maximising Your Investment as a Microsoft Partner?

Ask the Smart Questions, with Julie Simpson.

www.it-ebooks.info

www.PacktPub.com

Support fi les, eBooks, discount offers, and more

You might want to visit www.PacktPub.com for support fi les and downloads related to your book.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub fi les

available? You can upgrade to the eBook version at www.PacktPub.com and as a print book

customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@

packtpub.com for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range

of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

http://PacktLib.PacktPub.com

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library.

Here, you can access, read and search across Packt's entire library of books.

Why Subscribe?  Fully searchable across every book published by Packt

 Copy and paste, print, and bookmark content

 On demand and accessible via web browser

Free Access for Packt account holders

If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib

today and view nine entirely free books. Simply use your login credentials for immediate access.

Instant Updates on New Packt Books

Get notifi ed! Find out when new books are published by following @PacktEnterprise on

Twitter, or the Packt Enterprise Facebook page.

www.it-ebooks.info

www.it-ebooks.info

Table of Contents

Preface 1

Chapter 1: Overview of Cloud Computing 7

Centralized solution, management, and upgrades 9

Elastic in scale and power 10

Pricing based on utilization 11

Delivered using Internet protocols 11

Secure and private 12

Service Level Agreement 12

Availability 12

Service hours 13

Recompense 13

Window Intune SLA 14

Multiple client device types 14

Client Software 15

Programmable interfaces 16

Different levels of cloud computing 16

Infrastructure as a Service 17

Platform as a Service 17

Software as a Service 18

Challenges of cloud computing 18

Network requirements 19

Data accesses and synchronization 19

Network bandwidth and latency 19

Security 20

Customization 20

Bringing all this together for Windows Intune 21

Summary 21

www.it-ebooks.info

Table of Contents

[ ii ]

Chapter 2: Introduction to PC Management Concepts 23

Continuous cycle of PC Management 24

Definition of IT management goals 24

Using policies for configuration and deployment 25

Policies that deliver against the business goals 26

Ensuring the security settings on the PC provide an adequate level of protection 26

Tracking the hardware and software assets 28

Policies that help the IT team do their job 29

Deploying Windows 7 for everyone 29

Keeping the PC up-to-date with updates 29

Reactive response to problems 30

Ongoing maintenance tasks 30

Dealing with alerts 31

Working with users' support requests 31

Dealing with major problems 32

Hardware 32

Software 33

Reporting on IT management 33

Summary 34

Chapter 3: Overview of Windows Intune Features 35

Why use Windows Intune 35

Situations when Intune makes sense 36

First management solution for small and medium enterprises 36

Moving to a subscription management solution 37

Managing part of an estate, such as computers that users bring in from home 37

Windows Intune solution architecture 37

Windows Intune feature set 38

Windows 7 39

Existing Windows 7 Software Assurance customers 40

Microsoft Desktop Optimization Pack 40

Installation 42

Management console 43

Security management 44

Windows system updates 44

Anti-malware 45

Firewall control 46

Auditing 47

Reporting 47

Alerts and Support 49

Alerts 50

Remote Assistance 52

www.it-ebooks.info

Table of Contents

[ iii ]

Software distribution 53

Managing multiple organizations 54

Summary 55

Chapter 4: Signing Up for Windows Intune and

Installing the Client Software 57

Preparing for Windows Intune 57

Licensing of Windows Intune 58

Software and hardware requirements for Windows Intune 58

Hardware requirements 59

Software requirements 60

Skills required to manage with Windows Intune 60

Signing up to Windows Intune 62

Create a Windows Live ID 62

Sign into MOCP and configure contacts 66

Add Windows Intune to your basket and confirm the purchase 67

Activate your purchase 70

Adding MDOP to your purchase 71

Installing Windows Intune onto a client PC 72

Downloading the client software to the device 72

Unzipping and installing 74

Installing via alternative methods 74

Image based deployment 75

Waiting for the update process to complete 76

Confirming installation 76

Enabling others to manage your PC estate with Windows Intune 78

Adding a partner to your subscription 79

Changes a partner sees when managing more than one client 80

Summary 82

Chapter 5: Configuring Windows Intune 83

Adding additional administrators to Windows Intune 83

Adding an additional administrator 84

Changing the Tenant Administrator 85

Configuring computer groups 87

Choosing a group structure 88

Creating the group structure 90

Assigning PCs to groups 92

Configuring Windows Intune alerts 96

Configuring alert activation 96

Changing alert notification 98

www.it-ebooks.info

Table of Contents

[ iv ]

License management 104

Managing your Microsoft Volume License details 104

Managing your other license details 107

Summary 109

Chapter 6: Configuring Management Policy 111

Policy management 111

Windows Firewall Settings 114

Windows Intune Center Settings 119

Windows Intune Agent Settings 121

General section 122

Endpoint Protection section 122

Updates section 128

Network bandwidth 129

Deploy Policy 130

Editing an existing policy 131

Update management 131

Selecting products and classification of updates to manage 132

Update Classification 134

Configuring automatic approval of updates 135

Manually approving updates 138

Summary 142

Chapter 7: Software Deployment 143

Preparing an application for uploading 144

Understand how the application is installed in silent or quiet mode 144

Create a folder for each installation package 144

Place all files needed for installation into one folder 145

Examples 145

Office 2010 145

Adobe Reader and Flash 146

Intel chipset software 147

Using App-V packaging for deploying a package 147

Uploading an application 148

Adobe Flash – 64-bit MSI 149

Adobe Flash – 32-bit EXE 152

Adobe Reader – Windows 7 EXE 155

Adobe Reader – XP SP3 EXE 156

Intel drivers 157

Office 2010 157

Deploying a package 158

Managing Non-Microsoft Updates 161

www.it-ebooks.info

Table of Contents

[ v ]

Removing a package 167

Uninstalling software from a client PC 167

Removing a software package 168

Summary 169

Chapter 8: Tracking and Reporting 171

Reporting basics 172

Reporting basics in Reports workspace 173

Selection customization 173

Saving and loading customizations 174

Sorting data in the columns 175

Printing a report 175

Exporting data 177

Reporting basics in Alerts workspace 178

Update reports 179

Tracking software usage 180

Software installed on an individual computer 181

Estate-wide software view 182

Tracking hardware 185

Computers workspace view 186

Hardware Inventory Reports 188

License management 189

Purchase report 189

Installation report 189

Alerts reporting 190

Custom reports 192

Reporting on overall PC management achievements 193

Summary 193

Chapter 9: Monitoring and Responding to

Windows Intune Alerts 195

General Windows Intune alerts 196

Monitoring alerts 196

Responding and closing alerts 199

Malware alerts 201

Testing malware checks are working 202

Actions following malware instance 203

Remote Assistance alerts 204

Preparing to deliver support 206

Preparing the client computer for support 206

Preparing the support agent's computer to offer support 207

www.it-ebooks.info

Table of Contents

[ vi ]

Providing Assistance 207

Receiving alert and responding 208

Providing remote support 211

Summary 218

Chapter 10: Resolve Problems Using Microsoft DaRT 219

Downloading MDOP 219

Installing DaRT 222

Building a DaRT CD 226

Using DaRT to resolve issues 231

Locksmith 234

Crash Analyzer 235

Hotfix Uninstaller 239

Standalone System Sweeper 240

Summary 242

Chapter 11: Deploying Windows 7 Enterprise Edition 243

Downloading Windows 7 Enterprise Edition 244

Checking pre-requisites for Windows 7 247

Backing up settings for migration 249

Installing Windows 7 Enterprise Edition 253

Restoring user settings and installing applications 260

Updating Windows Intune 265

Removing the computer from Windows Intune 265

Installing the Windows Intune tools 267

Considering tools for scale deployment of Windows 7 268

Microsoft Assessment and Planning (MAP) toolkit 268

Microsoft Deployment toolkit 269

Summary 269

Chapter 12: Integration with Existing Microsoft Products 271

Typical computing scenarios 272

Desktop environment 272

Management tools 273

Services to enable productivity and collaboration 273

Office 365 and on-premise SharePoint and Exchange 274

System Center 274

On-premise Windows Server 275

Identity management with Active Directory 276

Group Policy 276

Update management with Windows Software Update Services 277

www.it-ebooks.info