Feature Connect sync Cloud sync Connect to single on-premises AD forest ● ● Connect to multiple on-premises AD forests ● ● Connect to multiple disconnected on-premises AD forests ● Lightweight agent installation model ● Multiple active agents for high availability ● Support for user objects ● ● Support for group objects ● ● Support for contact objects ● ● Support
Upgrade Plans PreReqs Wi-Fi profile changes Credential Guard overview | Microsoft Learn Default enablement Starting in Windows 11, 22H2 and Windows Server 2025, VBS and Credential Guard are enabled by default on devices that meet the requirements. The default enablement is without UEFI Lock, thus allowing administrators to disable Credential Guard remotely if needed. When Credential Guard is enabled, VBS is automatically enabled too. Security Baseline
Feature Windows Autopilotdevice preparation Windows Autopilot Features Support for Government Community Cloud High (GCCH) and Department of Defense (DoD) environments. Faster, more consistent provisioning experience. Near real-time monitoring and troubleshooting info. Support for multiple device types (HoloLens, Teams Meeting Room). Many customization options for the provisioning experience. Supported modes User-driven. User-driven. Pre-provisioned. Self-deploying. Existing devices. Join types supported Microsoft Entra join.
Intune Policy Configuration Platform – Set – Profile Type – Setting name [(optional info)] – Version Platform Set Profile Type Setting name optional info Version Indicator for platform type e.g. Win, macOS Indictor profile set e.g. Default, Kiosk, SharedDevices, PAW Indicator profile type e.g. Device restrictions, Custom Indicator setting e.g. Edge Favorites, for Custom AreaName/PolicyName Optional flag indicator e.g. test
High-level architecture Source: Microsoft Overview Intune Azure AD (Entra) – Identity and access management Defender – Security
Intune Suite add-on capabilities Capability Standalone add-on Intune Plan 2 Intune Suite Advanced endpoint analytics ✔️ Endpoint Privilege Management ✔️ ✔️ Microsoft Tunnel for Mobile Application Management ✔️ ✔️ Remote help ✔️ ✔️ Specialized devices management ✔️ ✔️ Use Intune Suite add-on capabilities – Microsoft Intune | Microsoft Learn .
Organizational messages generally available May 31st! Reach users more effectively: organizational messages in Windows – Microsoft Community Hub Windows driver and firmware managrment Coming soon to Intune: Windows driver and firmware updates – Microsoft Community Hub Preview Available: June 2023 Rollout Start: November 2023 advanced app management and patching Keep apps secure and updated with advanced app management and patching – Microsoft
2304: Local Administrator Password Solution: What’s new in Microsoft Intune – 2304 (April) edition – Microsoft Community Hub 2303: Devices Overview: Get an up-to-date, at-a-glance view of actionable information for your devices and a faster path to finding all the information you need on your device management journey. Update to Windows Autopilot pre-provisioning process for app installs – Microsoft Community
Use this to build your lab local with Hyper-V Windows 11 and Office 365 Deployment Lab Kit | Microsoft Evaluation Center or use that to build in azure-cloud with Azure-VMs: Install Configuration Manager Tech Preview Lab in Azure (microsoft.com) Install Configuration Manager Current Branch in Azure (microsoft.com) with that script you can decrease disk space to reduce costs Shrink an