Windows Intune - Deploy

To use Windows Intune to manage client computers, you must enroll the computers in the Windows Intune subscription. This is done by installing the Windows Intune client software either manually or automatically by using Group Policy or another automated deployment method. After the client software is installed on an enrolled computer, the Windows Intune service updates the client software automatically with any new versions. This provides the client computers with the latest improvements to the client software.

You can deploy Windows Intune client software to client computers as part of an unattended system image deployment. In this case, the client computer is enrolled automatically in Windows Intune when the deployment image is installed on the target computer. You can use the Windows Assessment and Deployment Kit (Windows ADK) or the Windows Automated Installation Kit (Windows AIK) to capture the unattended system image that will be deployed to the target computer.

The client software automatically enrolls the client computer in the Windows Intune subscription after the software is installed successfully on the computer. You can verify that the client software was installed successfully by locating the client computer in the Windows Intune administration console. Also, you can review the client computer enrollment log and verify that the client computer has additional agents, applications, and components installed.

When you configure the Windows Intune environment, you will use the Windows Intune administrator console to manage groups, create policies, deploy updates, and view alerts. In addition to the administrative console, you will use also the Windows Intune account portal, for instance, to delegate Windows Intune administration, bulk add users, and establish Active Directory synchronization.

Windows Intune policies provide settings that control software updates, Windows Intune Endpoint Protection, Windows Firewall settings, and the end-user experience in the Windows Intune Center, which is installed on all of the client computers that are managed by using Windows Intune. Windows Intune also provides settings to control the security of users’ mobile devices. In the Windows Intune administrator console, you can use the Policy workspace to create policies based on best practice templates, to configure policy settings, and to deploy the policies to device groups or user groups.

Windows Intune mobile device management provides benefits, such as unified discovery across client computers and mobile devices, protection of corporate data on mobile devices connected through Exchange ActiveSync, and making computer software and mobile device applications available on the Windows Intune company portal. To enable mobile device management, you must install and configure Active Directory synchronization and the Windows Intune Exchange Connector. The Exchange Connector will be configured to work with a specific computer that is in the same domain as your Microsoft Exchange Server with the Client Access server role installed.

Windows Intune enables you to upload, deploy, and install software on the client computers and mobile devices in your organization. You gather the setup files for the software you wish to deploy and add them as a software package by using the Software Upload Wizard. By using the wizard, you configure the installation parameters, specify the setup files, and upload the files to the Windows Intune Cloud Storage space. After the software is uploaded, you can deploy the software to the appropriate group, to make the deployment mandatory you deploy the software to device groups, to allow users to select the software they want to install you deploy to user groups.