|
|
|
|
@ -79,7 +79,7 @@ If you're new at setting up Office 365, and you'd like to see how it's done, you
|
|
|
|
|
|
|
|
|
|
**Figure 2** - Microsoft 365 admin center
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Opens the Microsoft 365 admin center." source="images/office365_portal.png" lightbox="images/office365_portal.png":::
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
6. Select the **Admin** tile to go to the admin center.
|
|
|
|
|
@ -89,7 +89,7 @@ If you're new at setting up Office 365, and you'd like to see how it's done, you
|
|
|
|
|
|
|
|
|
|
**Figure 3** - Admin center
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Complete the Office 365 setup in the Microsoft 365 admin center." source="images/office365_admin_portal.png" lightbox="images/office365_admin_portal.png":::
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
8. Go back to the [admin center](https://portal.office.com/adminportal/home#/homepage) to add or buy a domain.
|
|
|
|
|
@ -97,14 +97,14 @@ If you're new at setting up Office 365, and you'd like to see how it's done, you
|
|
|
|
|
|
|
|
|
|
**Figure 4** - Option to add or buy a domain
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Add or buy a domain in admin center." source="images/office365_buy_domain.png" lightbox="images/office365_buy_domain.png":::
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2. In the **Home > Domains** page, you will see the Microsoft-provided domain, such as `fabrikamdesign.onmicrosoft.com`.
|
|
|
|
|
|
|
|
|
|
**Figure 5** - Microsoft-provided domain
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Microsoft-provided domain." source="images/office365_ms_provided_domain.png" lightbox="images/office365_ms_provided_domain.png":::
|
|
|
|
|
|
|
|
|
|
- If you already have a domain, select **+ Add domain** to add your existing domain. If you select this option, you'll be required to verify that you own the domain. Follow the steps in the wizard to verify your domain.
|
|
|
|
|
- If you don't already own a domain, select **+ Buy domain**. If you're using a trial plan, you'll be required to upgrade your trial plan in order to buy a domain. Choose the subscription plan to use for your business and provide the details to complete your order.
|
|
|
|
|
@ -113,7 +113,7 @@ If you're new at setting up Office 365, and you'd like to see how it's done, you
|
|
|
|
|
|
|
|
|
|
**Figure 6** - Domains
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Verify your domains in the admin center." source="images/office365_additional_domain.png" lightbox="images/office365_additional_domain.png":::
|
|
|
|
|
|
|
|
|
|
### 1.2 Add users and assign product licenses
|
|
|
|
|
Once you've set up Office and added your domain, it's time to add users so they have access to Office 365. People in your organization need an account before they can sign in and access Office 365. The easiest way to add users is to add them one at a time in the Microsoft 365 admin center.
|
|
|
|
|
@ -126,7 +126,7 @@ When adding users, you can also assign admin privileges to certain users in your
|
|
|
|
|
|
|
|
|
|
**Figure 7** - Add users
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Add Office 365 users." source="images/office365_users.png" lightbox="images/office365_users.png":::
|
|
|
|
|
|
|
|
|
|
2. In the **Home > Active users** page, add users individually or in bulk.
|
|
|
|
|
- To add users one at a time, select **+ Add a user**.
|
|
|
|
|
@ -135,7 +135,7 @@ When adding users, you can also assign admin privileges to certain users in your
|
|
|
|
|
|
|
|
|
|
**Figure 8** - Add an individual user
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Add an individual user." source="images/office365_add_individual_user.png" lightbox="images/office365_add_individual_user.png":::
|
|
|
|
|
|
|
|
|
|
- To add multiple users at once, select **More** and then choose **+ Import multiple users**. If you select this option, you'll need to create and upload a CSV file containing the list of users.
|
|
|
|
|
|
|
|
|
|
@ -143,13 +143,13 @@ When adding users, you can also assign admin privileges to certain users in your
|
|
|
|
|
|
|
|
|
|
**Figure 9** - Import multiple users
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Import multiple users." source="images/office365_import_multiple_users.png" lightbox="images/office365_import_multiple_users.png":::
|
|
|
|
|
|
|
|
|
|
3. Verify that all the users you added appear in the list of **Active users**. The **Status** should indicate the product licenses that were assigned to them.
|
|
|
|
|
|
|
|
|
|
**Figure 10** - List of active users
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Verify users and assigned product licenses." source="images/o365_active_users.png" lightbox="images/o365_active_users.png":::
|
|
|
|
|
|
|
|
|
|
### 1.3 Add Microsoft Intune
|
|
|
|
|
Microsoft Intune provides mobile device management, app management, and PC management capabilities from the cloud. Using Intune, organizations can provide their employees with access to apps, data, and corporate resources from anywhere on almost any device while helping to keep corporate information secure. To learn more, see [Microsoft Intune is an MDM and MAM provider](/mem/intune/fundamentals/what-is-intune).
|
|
|
|
|
@ -163,14 +163,14 @@ Microsoft Intune provides mobile device management, app management, and PC manag
|
|
|
|
|
|
|
|
|
|
**Figure 11** - Assign Intune licenses
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Assign Microsoft Intune licenses to users." source="images/o365_assign_intune_license.png" lightbox="images/o365_assign_intune_license.png":::
|
|
|
|
|
|
|
|
|
|
5. In the admin center, confirm that **Intune** shows up in the list under **Admin centers**. If it doesn't, sign out and then sign back in and then check again.
|
|
|
|
|
6. Select **Intune**. This step opens the Endpoint Manager admin center.
|
|
|
|
|
|
|
|
|
|
**Figure 12** - Microsoft Intune management portal
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Microsoft Intune management portal." source="images/intune_portal_home.png" lightbox="images/intune_portal_home.png":::
|
|
|
|
|
|
|
|
|
|
Intune should now be added to your tenant. We'll come back to Intune later when we [Configure Microsoft Store for Business for app distribution](#17-configure-microsoft-store-for-business-for-app-distribution).
|
|
|
|
|
|
|
|
|
|
@ -188,21 +188,21 @@ Microsoft Azure is an open and flexible cloud platform that enables you to quick
|
|
|
|
|
|
|
|
|
|
**Figure 13** - Access to Azure AD is not available
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Access to Azure AD not available." source="images/azure_ad_access_not_available.png" lightbox="images/azure_ad_access_not_available.png":::
|
|
|
|
|
|
|
|
|
|
3. From the error message, select the country/region for your business. The region should match with the location you specified when you signed up for Office 365.
|
|
|
|
|
4. Select **Azure subscription**. This step will take you to a free trial sign up screen.
|
|
|
|
|
|
|
|
|
|
**Figure 14** - Sign up for Microsoft Azure
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Sign up for Microsoft Azure." source="images/azure_ad_sign_up_screen.png" lightbox="images/azure_ad_sign_up_screen.png":::
|
|
|
|
|
|
|
|
|
|
5. In the **Free trial sign up** screen, fill in the required information and then click **Sign up**.
|
|
|
|
|
6. After you sign up, you should see the message that your subscription is ready. Click **Start managing my service**.
|
|
|
|
|
|
|
|
|
|
**Figure 15** - Start managing your Azure subscription
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Start managing your Azure subscription." source="images/azure_ad_successful_signup.png" lightbox="images/azure_ad_successful_signup.png":::
|
|
|
|
|
|
|
|
|
|
This step will take you to the [Microsoft Azure portal](https://portal.azure.com).
|
|
|
|
|
|
|
|
|
|
@ -219,26 +219,26 @@ To add Azure AD group(s), use the [Microsoft Azure portal](https://portal.azure.
|
|
|
|
|
|
|
|
|
|
**Figure 16** - Azure first sign-in screen
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Select Azure AD." source="images/azure_portal_classic_configure_directory.png" lightbox="images/azure_portal_classic_configure_directory.png":::
|
|
|
|
|
|
|
|
|
|
2. Select the directory (such as Fabrikam Design) to go to the directory's home page.
|
|
|
|
|
|
|
|
|
|
**Figure 17** - Directory home page
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Directory home page." source="images/azure_portal_classic_directory_ready.png" lightbox="images/azure_portal_classic_directory_ready.png":::
|
|
|
|
|
|
|
|
|
|
3. From the menu options on top, select **Groups**.
|
|
|
|
|
|
|
|
|
|
**Figure 18** - Azure AD groups
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Add groups in Azure AD." source="images/azure_portal_classic_groups.png" lightbox="images/azure_portal_classic_groups.png":::
|
|
|
|
|
|
|
|
|
|
4. Select **Add a group** (from the top) or **Add group** at the bottom.
|
|
|
|
|
5. In the **Add Group** window, add a name, group type, and description for the group and click the checkmark to save your changes. The new group will appear on the groups list.
|
|
|
|
|
|
|
|
|
|
**Figure 19** - Newly added group in Azure AD
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Verify the new group appears on the list." source="images/azure_portal_classic_all_users_group.png" lightbox="images/azure_portal_classic_all_users_group.png":::
|
|
|
|
|
|
|
|
|
|
6. In the **Groups** tab, select the arrow next to the group (such as **All users**), add members to the group, and then save your changes.
|
|
|
|
|
|
|
|
|
|
@ -246,7 +246,7 @@ To add Azure AD group(s), use the [Microsoft Azure portal](https://portal.azure.
|
|
|
|
|
|
|
|
|
|
**Figure 20** - Members in the new group
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Members added to the new group." source="images/azure_portal_classic_members_added.png" lightbox="images/azure_portal_classic_members_added.png":::
|
|
|
|
|
|
|
|
|
|
7. Repeat steps 2-6 to add other groups. You can add groups based on their roles in your company, based on the apps that each group can use, and so on.
|
|
|
|
|
|
|
|
|
|
@ -266,14 +266,14 @@ You can read the [Windows 10, Azure AD and Microsoft Intune blog post](https://b
|
|
|
|
|
|
|
|
|
|
**Figure 21** - List of applications for your company
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="List of applications for your company." source="images/azure_portal_classic_applications.png" lightbox="images/azure_portal_classic_applications.png":::
|
|
|
|
|
|
|
|
|
|
2. Select **Microsoft Intune** to configure the application.
|
|
|
|
|
3. In the Microsoft Intune configuration page, click **Configure** to start automatic MDM enrollment configuration with Intune.
|
|
|
|
|
|
|
|
|
|
**Figure 22** - Configure Microsoft Intune in Azure
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Configure Microsoft Intune in Azure." source="images/azure_portal_classic_configure_intune_app.png" lightbox="images/azure_portal_classic_configure_intune_app.png":::
|
|
|
|
|
|
|
|
|
|
4. In the Microsoft Intune configuration page:
|
|
|
|
|
- In the **Properties** section, you should see a list of URLs for MDM discovery, MDM terms of use, and MDM compliance.
|
|
|
|
|
@ -292,7 +292,7 @@ You can read the [Windows 10, Azure AD and Microsoft Intune blog post](https://b
|
|
|
|
|
|
|
|
|
|
**Figure 23** - Configure Microsoft Intune
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Configure automatic MDM enrollment with Intune." source="images/azure_portal_classic_configure_intune_mdm_enrollment.png" lightbox="images/azure_portal_classic_configure_intune_mdm_enrollment.png":::
|
|
|
|
|
|
|
|
|
|
### 1.7 Configure Microsoft Store for Business for app distribution
|
|
|
|
|
Next, you'll need to configure Microsoft Store for Business to distribute apps with a management tool such as Intune.
|
|
|
|
|
@ -306,7 +306,7 @@ In this part of the walkthrough, use the [Microsoft Endpoint Manager admin cente
|
|
|
|
|
|
|
|
|
|
**Figure 24** - Mobile device management
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Set up mobile device management in Intune." source="images/intune_admin_mdm_configure.png" lightbox="images/intune_admin_mdm_configure.png":::
|
|
|
|
|
|
|
|
|
|
3. Sign into [Microsoft Store for Business](https://businessstore.microsoft.com/Store/Apps) using the same tenant account that you used to sign into Intune.
|
|
|
|
|
4. Accept the EULA.
|
|
|
|
|
@ -315,20 +315,20 @@ In this part of the walkthrough, use the [Microsoft Endpoint Manager admin cente
|
|
|
|
|
|
|
|
|
|
**Figure 25** - Activate Intune as the Store management tool
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Activate Intune from the Store portal." source="images/wsfb_management_tools_activate.png" lightbox="images/wsfb_management_tools_activate.png":::
|
|
|
|
|
|
|
|
|
|
7. Go back to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), select **Admin > Mobile Device Management**, expand **Windows**, and then choose **Store for Business**.
|
|
|
|
|
8. In the **Microsoft Store for Business** page, select **Configure Sync** to sync your Store for Business volume-purchased apps with Intune.
|
|
|
|
|
|
|
|
|
|
**Figure 26** - Configure Store for Business sync in Intune
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Configure Store for Business sync in Intune." source="images/intune_admin_mdm_store_sync.png" lightbox="images/intune_admin_mdm_store_sync.png":::
|
|
|
|
|
|
|
|
|
|
9. In the **Configure Microsoft Store for Business app sync** dialog box, check **Enable Microsoft Store for Business sync**. In the **Language** dropdown list, choose the language in which you want apps from the Store to be displayed in the Intune console and then click **OK**.
|
|
|
|
|
|
|
|
|
|
**Figure 27** - Enable Microsoft Store for Business sync in Intune
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Enable Store for Business sync in Intune." source="images/intune_configure_store_app_sync_dialog.png" lightbox="images/intune_configure_store_app_sync_dialog.png":::
|
|
|
|
|
|
|
|
|
|
The **Microsoft Store for Business** page will refresh and it will show the details from the sync.
|
|
|
|
|
|
|
|
|
|
@ -351,7 +351,7 @@ In the following example, we'll show you how to buy apps through the Microsoft S
|
|
|
|
|
|
|
|
|
|
**Figure 28** - Shop for Store apps
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Shop for Store apps." source="images/wsfb_shop_microsoft_apps.png" lightbox="images/wsfb_shop_microsoft_apps.png":::
|
|
|
|
|
|
|
|
|
|
2. Click to select an app, such as **Reader**. This opens the app page.
|
|
|
|
|
3. In the app's Store page, click **Get the app**. You should see a dialog that confirms your order. Click **Close**. This will refresh the app's Store page.
|
|
|
|
|
@ -361,7 +361,7 @@ In the following example, we'll show you how to buy apps through the Microsoft S
|
|
|
|
|
|
|
|
|
|
**Figure 29** - App inventory shows the purchased apps
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Confirm that your inventory shows purchased apps." source="images/wsfb_manage_inventory_newapps.png" lightbox="images/wsfb_manage_inventory_newapps.png":::
|
|
|
|
|
|
|
|
|
|
> [!NOTE]
|
|
|
|
|
> Sync happens automatically, but it may take up to 24 hours for your organization's private store and 12 hours for Intune to sync all your purchased apps. You can force a sync to make this process happen faster. For more info, see [To sync recently purchased apps](#forceappsync).
|
|
|
|
|
@ -375,7 +375,7 @@ If you need to sync your most recently purchased apps and have it appear in your
|
|
|
|
|
|
|
|
|
|
**Figure 30** - Force a sync in Intune
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Force a sync in Intune." source="images/intune_admin_mdm_forcesync.png" lightbox="images/intune_admin_mdm_forcesync.png":::
|
|
|
|
|
|
|
|
|
|
**To view purchased apps**
|
|
|
|
|
- In the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), select **Apps > Apps** and then choose **Volume-Purchased Apps** to see the list of available apps. Verify that the apps you purchased were imported correctly.
|
|
|
|
|
@ -396,7 +396,7 @@ To set up new Windows devices, go through the Windows initial device setup or fi
|
|
|
|
|
|
|
|
|
|
**Figure 31** - First screen in Windows device setup
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="First screen in Windows device setup." source="images/win10_hithere.png" lightbox="images/win10_hithere.png":::
|
|
|
|
|
|
|
|
|
|
> [!NOTE]
|
|
|
|
|
> During setup, if you don't have a Wi-Fi network configured, make sure you connect the device to the Internet through a wired/Ethernet connection.
|
|
|
|
|
@ -406,13 +406,13 @@ To set up new Windows devices, go through the Windows initial device setup or fi
|
|
|
|
|
|
|
|
|
|
**Figure 32** - Choose how you'll connect your Windows device
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Choose how you'll connect the Windows device." source="images/win10_choosehowtoconnect.png" lightbox="images/win10_choosehowtoconnect.png":::
|
|
|
|
|
|
|
|
|
|
4. In the **Let's get you signed in** screen, sign in using a user account you added in section [1.2 Add users and assign product licenses](#12-add-users-and-assign-product-licenses). We suggest signing in as one of the global administrators. Later, sign in on another device using one of the non-admin accounts.
|
|
|
|
|
|
|
|
|
|
**Figure 33** - Sign in using one of the accounts you added
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Sign in using one of the accounts you added." source="images/win10_signin_admin_account.png" lightbox="images/win10_signin_admin_account.png":::
|
|
|
|
|
|
|
|
|
|
5. If this is the first time you're signing in, you will be asked to update your password. Update the password and continue with sign-in and setup.
|
|
|
|
|
|
|
|
|
|
@ -433,7 +433,7 @@ In the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink
|
|
|
|
|
|
|
|
|
|
**Figure 34** - Check the PC name on your device
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Check the PC name on your device." source="images/win10_settings_pcname.png" lightbox="images/win10_settings_pcname.png":::
|
|
|
|
|
|
|
|
|
|
2. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
|
|
|
|
|
3. Select **Groups** and then go to **Devices**.
|
|
|
|
|
@ -444,7 +444,7 @@ In the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink
|
|
|
|
|
|
|
|
|
|
**Figure 35** - Check that the device appears in Intune
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Check that the device appears in Intune." source="images/intune_groups_devices_list.png" lightbox="images/intune_groups_devices_list.png":::
|
|
|
|
|
|
|
|
|
|
## 3. Manage device settings and features
|
|
|
|
|
You can use Microsoft Intune admin settings and policies to manage features on your organization's mobile devices and computers. For more info, see [Manage settings and features on your devices with Microsoft Intune policies](/intune/deploy-use/manage-settings-and-features-on-your-devices-with-microsoft-intune-policies).
|
|
|
|
|
@ -463,7 +463,7 @@ In some cases, if an app is missing from the device, you need to reconfigure the
|
|
|
|
|
|
|
|
|
|
**Figure 36** - Reconfigure an app's deployment setting in Intune
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Reconfigure app deployment settings in Intune." source="images/intune_apps_deploymentaction.png" lightbox="images/intune_apps_deploymentaction.png":::
|
|
|
|
|
|
|
|
|
|
6. Click **Finish**.
|
|
|
|
|
7. Repeat steps 2-6 for other apps that you want to deploy to the device(s) as soon as possible.
|
|
|
|
|
@ -473,7 +473,7 @@ In some cases, if an app is missing from the device, you need to reconfigure the
|
|
|
|
|
|
|
|
|
|
**Figure 37** - Confirm that additional apps were deployed to the device
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Confirm that additional apps were deployed to the device." source="images/win10_deploy_apps_immediately.png" lightbox="images/win10_deploy_apps_immediately.png":::
|
|
|
|
|
|
|
|
|
|
### 3.2 Configure other settings in Intune
|
|
|
|
|
|
|
|
|
|
@ -489,7 +489,7 @@ In some cases, if an app is missing from the device, you need to reconfigure the
|
|
|
|
|
|
|
|
|
|
**Figure 38** - Add a configuration policy
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Add a configuration policy." source="images/intune_policy_disablecamera.png" lightbox="images/intune_policy_disablecamera.png":::
|
|
|
|
|
|
|
|
|
|
7. Click **Save Policy**. A confirmation window will pop up.
|
|
|
|
|
8. On the **Deploy Policy** confirmation window, select **Yes** to deploy the policy now.
|
|
|
|
|
@ -498,7 +498,7 @@ In some cases, if an app is missing from the device, you need to reconfigure the
|
|
|
|
|
|
|
|
|
|
**Figure 39** - The new policy should appear in the **Policies** list.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="New policy appears on the list." source="images/intune_policies_newpolicy_deployed.png" lightbox="images/intune_policies_newpolicy_deployed.png":::
|
|
|
|
|
|
|
|
|
|
**To turn off Windows Hello and PINs during device setup**
|
|
|
|
|
1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
|
|
|
|
|
@ -507,7 +507,7 @@ In some cases, if an app is missing from the device, you need to reconfigure the
|
|
|
|
|
|
|
|
|
|
**Figure 40** - Policy to disable Windows Hello for Business
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Disable Windows Hello for Business." source="images/intune_policy_disable_windowshello.png" lightbox="images/intune_policy_disable_windowshello.png":::
|
|
|
|
|
|
|
|
|
|
4. Click **Save**.
|
|
|
|
|
|
|
|
|
|
@ -534,32 +534,32 @@ For other devices, such as those personally-owned by employees who need to conne
|
|
|
|
|
|
|
|
|
|
**Figure 41** - Add an Azure AD account to the device
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Add an Azure AD account to the device." source="images/win10_add_new_user_join_aad.png" lightbox="images/win10_add_new_user_join_aad.png":::
|
|
|
|
|
|
|
|
|
|
4. In the **Let's get you signed in** window, enter the work credentials for the account and then click **Sign in** to authenticate the user.
|
|
|
|
|
|
|
|
|
|
**Figure 42** - Enter the account details
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Enter the account details." source="images/win10_add_new_user_account_aadwork.png" lightbox="images/win10_add_new_user_account_aadwork.png":::
|
|
|
|
|
|
|
|
|
|
5. You will be asked to update the password so enter a new password.
|
|
|
|
|
6. Verify the details to make sure you're connecting to the right organization and then click **Join**.
|
|
|
|
|
|
|
|
|
|
**Figure 43** - Make sure this is your organization
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Make sure this is your organization." source="images/win10_confirm_organization_details.png" lightbox="images/win10_confirm_organization_details.png":::
|
|
|
|
|
|
|
|
|
|
7. You will see a confirmation window that says the device is now connected to your organization. Click **Done**.
|
|
|
|
|
|
|
|
|
|
**Figure 44** - Confirmation that the device is now connected
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Confirmation that the device is now connected." source="images/win10_confirm_device_connected_to_org.png" lightbox="images/win10_confirm_device_connected_to_org.png":::
|
|
|
|
|
|
|
|
|
|
8. The **Connect to work or school** window will refresh and will now include an entry that shows you're connected to your organization's Azure AD. This means the device is now registered in Azure AD and enrolled in MDM and the account should have access to the organization's resources.
|
|
|
|
|
|
|
|
|
|
**Figure 45** - Device is now enrolled in Azure AD
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
:::image type="content" alt-text="Device is enrolled in Azure AD." source="images/win10_device_enrolled_in_aad.png" lightbox="images/win10_device_enrolled_in_aad.png":::
|
|
|
|
|
|
|
|
|
|
9. You can confirm that the new device and user are showing up as Intune-managed by going to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and following the steps in [2.3 Verify the device is Azure AD joined](#23-verify-the-device-is-azure-ad-joined). It may take several minutes before the new device shows up so check again later.
|
|
|
|
|
|
|
|
|
|
|
Gary Moore