150 likes | 263 Vues
This module provides IT professionals with a comprehensive overview of managing Windows Intune policies, including policy templates for mobile device security, Windows Intune agent settings, and Windows Firewall configurations. Learn how to effectively force policy refreshes, manage policy precedence, and resolve conflicts efficiently. Best practices are discussed for establishing default policies and specific group settings, ensuring a strong security baseline across all devices. Gain practical knowledge to optimize Windows Intune deployment and enhance endpoint protection.
E N D
Windows Intune for IT Pros Jump Start M05: Windows Intune Policies David Tesar Richard Harrison
Module Overview • Policy Templates • Mobile Device Security Policy • The Windows Intune Agent Settings Policy • Windows Intune Center Settings Policy • Windows Firewall Policy • Forcing Policy Refreshes • Policy Precedence • Best Practices
Installing Windows Intune Endpoint Protection Install WIEP, Enable WIEP Start Client Installation Yes Is MSE, SCEP, FEP installed? Is EP Policy enabled? Is AV installed? 1 3 4 Do not install WIEP No No Yes Yes No Do not install WIEP Install WIEP Upgrade to WIEP Only on… Is EP Policy enabled? 2 No Yes Disable WIEP Enable WIEP
Policy Precedence • Policy conflicts are resolved through: • Group hierarchy • Timestamps • Conflicts reported as Policy alerts • Group Policy settings take precedence Head Office Laptops Desktops Policy 1 Policy 2 Policy 3
Windows Intune Policies Best Practices • Create default: • Windows Intune Agent Settings policy… • before installing the Windows Intune client on computers • Control the installation of Windows Intune Endpoint Protection • Mobile Device Security policy… • Set required password settings • Apply Default policies to All Computers to set your baselines • Assign more specific policies to lower groups • Clients check for policy at varying times (depending on the platform) so plan ahead.
Module Overview • Policy Templates • Mobile Device Security Policy • The Windows Intune Agent Settings Policy • Windows Intune Center Settings Policy • Windows Firewall Policy • Forcing Policy Refreshes • Policy Precedence • Best Practices