Microsoft Intune Suite - Deploying Apps, Updates & Managing Security!

In Part 2 of my 2 part series on Intune Suite, I take a look at deploying apps, updates and managing Intune’s Endpoint Security features. It’s so important to keep your skills up to date. Intune has certainly gone through a lot of changes recently and it’s super important to keep up to date. In addition to managing devices, profiles and licensing, all of which was covered in part 1. It’s super important to k ow how apps work and how and where to deploy them. In addition, security should always be at the forefront of one’;s mind and is a core component of Microsoft’s Zero Trust strategy. Finally ensuring that your operating system is updated is critical, so here I’ll discuss the benefits of Windows Update for Business and how to deploy updates.

Timecodes
00:00 Introductions
01:11 Managing Software in Intune
04:21 Intune App Protection Policies
06:55 Intune App Configuration Policies
11:09 Intune Policy Sets
13:52 Endpoint Security - Baseline Security Policies
18:27 Endpoint Security Settings
24:45 Managing OS Updates & More
32:25 Session Conclusions and next steps

[bluhazy]

Thank you for the awesome tutorial once again Andy! I have been binge watching your playlists! Learning so much

[stuartwilliams]

Another good tutorial Andy thanks very much

[brairomar]

Another great video Andy. You really rock.

[kashustephen]

First! Great Video Andy, thank you for putting this together very helpful

[PrinceJohn]

Another excellent tutorial Andy. Really enjoy your videos. As orhers have said, a brief overview of how Windows Autopatch fits into the update rings equation would be really handy 👍

[mortenwiingreen]

Hi Andy, I enjoy watching your guides, they are very easy to understand, and you have a great way to teach Intune. To the end you talk about windows update rings and how to make them yourself. But as we now have Autopatch, I think Microsoft have taken update management to a new level in Intune. Are you comming with an episode on Autopatch and all the new functions in the May 2023 release?

[chriswibberley]

Hey Andy, the Intune series has been really useful. What’s the best way of licencing if for example in a 200 person org, 150 users only use a mobile for day to day work, using the Outlook & Teams mobile apps with a business basic licence, and the other 150 users use workstations and have a business premium licence & managed by Intune. The 150 mobile users therefore can’t be managed by intune but upgrading to premium is cost prohibitive

[patrick__]

What kind of groups is best practise to assign to update rings, devices or users? When applying to users, like your Sales group it is applying to all device where the users are logging in.

[inspireeshwar]

Great tutorial!! Just a small doubt though. Are update ring policies a combination of feature and quality update policies? Do we need to configure feature and quality update policies if we are using update ring policies?

[jbreezecoleman]

Hey Andy! Thanks for another great video! Question: I noticed that App protection policies and Windows restrictions seem to have the same applicable configurations, but is there a difference between the two? If so, is it the app protection policies applies to the app and the device restrictions polices applies to the device?

[abhishekhavanur]

Great Video, However would like to have a inputs on How to notify users about unused apps on windows set to specific days in Microsoft defender, As an example notifying user for an app unused for 45 day?

[MrSiaa]

Thanks for your amazing video, What is the difference between Scope tags and assignments?

[sarwanamajid]

Hi, Great video. I have configure update ring to download windows and office updates on monthly base but i'm only getting windows update. Office 365 is not updating. Do I need configure any configuration profile

[deitybnb]

Thanks for the vid. What is the best and easiest method for third party app updates?

[OriginalPhila]

What would be the best way to update pre-existing Windows App packages with a newer version of the software?
For instance, with an app type of Line-of-business, can I simply replace the MSI with the newer version of the application or would it be better to create another identical app with the new version and deploy that then come back to the old app and uninstall from all users by changing the assignment.

Thanks

[kashustephen]

Do you know when win32 apps will be available for instalaltion through th enew intunes? all o fthem seem to say currently unsupported in preview for example zoom, teams etc

[BB-tubq]

Hello Andy, thanks for the video. When i click on zoom in microsoft apps(new), i get an error message that says...""The selected app does not have a valid latest package version", what could be the reason?? thanks

[bloodstallion]

Hi Andy, I noticed when I retire a device in intune, users who are logged on to edge browser ( edge for business), the profile is not removed and they can access one drive, sharepoint. I did a restart and still they were able to access. After that I unjoin the device from
Domain and restarted. This time I could see the work profile still on edge browser but I was asked to switch to edge profile and forced me to register on intune. Now I have set policies in place to block personal device but my worry is that browser will remain active even when I retire the device in intune. And if sync is enabled there could be other devices with access if somehow they managed to log on. If there is a breach attacker could potentially get access to confidential sites. Is there a solution to this

[shoortey]

Is it possible to deploying apps that have alot of installation steps? Like importing a lisence file, choosing server address, choosing a database etc?

[jdmrgqk]

What about auto update app in intune ?? I don't want to update app version manually so what we have to follow??