Windows 10: How to Getting Started with Intune: SOE Deployment, CIS Compliance, and Device Upgrades

We are planning to use Intune as our endpoint management tool and need guidance to get started. Our environment consists of:Windows 10/Windows 11 Professional devicesSome Windows 10 Home Edition devicesmacOS devicesQuestions:Where should we begin? My initial plan is to upgrade the Windows 10 Home devices to Windows 11 Professional.How can we deploy a Standard Operating Environment SOE using Intune?We need to comply with CIS benchmarks. Considering the numerous configurations required, configuring everything manually via device profiles seems time-consuming. Is it possible to use a pre-config

:)

 

Intune Compliance Policy Preview?

Presuming I've onboarded a device to Intune, but haven't bound it to a compliance policy yet, is there a way to preview the device's compliance applicable settings through the Intune portal?

Here's the scenario: We're going onboarding devices, some are BYOD, some are not and some are used by high-ranking personnel, within our org.

I onboarded a test device with a handful of compliance settings set. I see that Intune remediated many of the non-compliant settings on the test machine - this is both a boon and a curse. It's good that the settings were remediated, but I'd hate for that to happen on a user's machine (especially an executive's machine!) without them expecting it.

I was hoping to find a way to onboard a device to intune, and review the devices' compliance related settings (ie: simple passwords or whether the firewall was enabled) before adding the device to a compliance policy, so that I can get a feel for which users we'll have to schedule and guide through the changes they may notice.

In my initial test, i didn't enable any of the compliance settings, and nothing gets reported under the device > device compliance. I added a few more settings and can now see which were originally compliant, which were remediated, and which need user intervention to make compliant.

It would be helpful to see (using my above example), whether a device is allowing simple passwords or doesn't have it's firewall enabled, before adding it to compliance policy that would change those settings.

Thanks in advance!

 

Intune compliance and portal issues with Windows 11

Hello,

we have about 100 laptops in our organization, Intune seems to be working well with Windows 10 devices. All out laptops are Lenovos.

We have started buying laptops with windows 11 now and in all laptops we have issues downloading software from Company portal. Most of the software that gets automatically deployed to all machines either required or available gets installed but not all. ( On win 10 devices everything gets installed )

Available for enrolled devices company portal software gets stuck on pending.

Most of the required software gets installed but not all.

Errors:

The Intune error is The system cannot find the file specified. (0x80070002)

Those devices show in Intune admin as Compliance not evaluated.

Any ideas?

 

New demo: Windows Analytics Update Compliance

Source: New demo: Windows Analytics Update Compliance Windows for IT Pros