6.0 KiB
title, description, ms.date, ms.topic, appliesto
| title | description | ms.date | ms.topic | appliesto | |||
|---|---|---|---|---|---|---|---|
| Configure and secure devices with Microsoft Intune | Learn how to configure policies with Microsoft Intune in preparation for device deployment. | 08/31/2022 | tutorial |
|
Configure and secure devices with Microsoft Intune
With Intune for Education, you can configure settings for devices in the school, to ensure that they comply with specific policies. For example, you may need to secure your devices, ensuring that they are kept up to date. Or you may need to configure all the devices with the same look and feel.
Settings can be assigned to groups:
- If you target settings to a group of users, those settings will apply, regardless of what managed devices the targeted users sign in to
- If you target settings to a group of devices, those settings will apply regardless of who is using the devices
There are two ways to manage settings in Intune for Education:
- Express Configuration. This option is used to configure a selection of settings that are commonly used in school environments
- Group settings. This option is used to configure all settings that are offered by Intune for Education
Note
Express Configuration is ideal when you are getting started. Settings are pre-configured to Microsoft-recommended values, but can be changed to fit your school's needs. It is recommended to use Express Configuration to initially set up your Windows devices.
In this section you will:
[!div class="checklist"]
- Configure settings with Express Configuration
- Configure group settings
- Create Windows Update policies
- Configure security policies
Configure settings with Express Configuration
With Express Configuration, you can get Intune for Education up and running in just a few steps. You can select a group of devices or users, select applications to distribute, and choose settings from the most commonly used in schools.
Tip
To learn more, and practice step-by-step Express Configuration in Intune for Education, try this interactive demo.
Configure group settings
Groups are used to manage users and devices with similar management needs, allowing you to apply changes to many devices or users at once. To review the available group settings:
- Sign in to the Intune for Education portal
- Select Groups > Pick a group to manage
- Select Windows device settings
- Expand the different categories and review information about individual settings
Settings that are commonly configured for student devices include:
- Wallpaper and lock screen background. See: Lock screen and desktop
- Wi-Fi connections. See: Add Wi-Fi profiles
- Enablement of the integrated testing and assessment solution Take a Test. See: Add Take a Test profile
For more information, see Windows device settings in Intune for Education.
Create Windows Update policies
It is important to keep Windows devices up to date with the latest security updates. You can create Windows Update policies using Intune for Education.
To create a Windows Update policy:
- Select Groups > Pick a group to manage
- Select Windows device settings
- Expand the category Update and upgrade
- Configure the required settings as needed
For more information, see Updates and upgrade.
Note
If you require a more complex Windows Update policy, you can create it in Microsoft Endpoint Manager. For more information:
Configure security policies
It is critical to ensure that the devices you manage are secured using the different security technologies available in Windows. Intune for Education provides different settings to secure devices.
To create a security policy:
- Select Groups > Pick a group to manage
- Select Windows device settings
- Expand the category Security
- Configure the required settings as needed, including
- Windows Defender
- Windows Encryption
- Windows SmartScreen
For more information, see Security.
Note
If you require more sophisticated security policies, you can create them in Microsoft Endpoint Manager. For more information:
Next steps
With the Intune service configured, you can configure policies and applications to deploy to your students' and teachers' devices.
[!div class="nextstepaction"] Next: Configure applications >