Considering to move to an Anywhere, Anyplace, Anytime lightweight IT environment? Throwing out all local IT?
No more Domain Services, just AzureAD? Windows10, or any other mobile modern client? Here’s a short checklist I sometimes use for clients when assessing their intentions / plan:
- Intune tenant created and policies have been set, including Conditional Access
- All my non single MSI applications I want to deploy to my clients have been repackaged
- All my application servers/services have been moved to SaaS or to RemoteApp or the like
- My identities have been synchronized or copied to Azure AD
- All users have an Intune or EMS license
- I have enabled Azure AD automatic MDM enrollment
- I have enabled Enterprise State Roaming in Azure AD
- I have published my internal web sites using Azure Application Proxy and added these sites to Intune as Apps
- DLP policies have been setup for any sensitive data types/locations in my company
- Personal data has been migrated to Onedrive for Business
- Group data has been moved to Office 365 Groups or Sharepoint Online
Just to get you started! 🙂
So, a while back Intune got the ability to deploy native MSI’s to MDM enrolled Windows 8.1 and Windows 10 clients. No Intune client is required, which gives a really awesome out of the box experience.
However, we can only deploy single MSI’s, and we can’t patch them with MSP’s, or deploy installers that are only available as .exe.
To spare us having to repackage them, please vote on my uservoice idea to extend MDM enrollment in Intune.
You may have been reading up on the Enterprise Mobility Suite by Microsoft. Especially now that Windows 10 has been released, it seems like everything is becoming easier and simpler for end users, managers and admins alike while Microsoft is really pushing the Anywhere, Anyplace, Anytime concept.
Let me state first off that I believe these advancements are incredible, and I really feel Microsoft is heading in the right direction, but there are quite a few ‘gotcha’s’ that you probably don’t know about that could hurt your implementation, they may not always apply to you.
In my opinion, as EMS currently stands as a suite, when used to manage Windows 10 laptops / tablets and desktops, is only suitable for very ‘light’ management situations unless there is an additional device management authority such as SCCM fully configured and implemented as Internet Facing for true device and application management.
The Enterprise Mobility Suite as a standalone product for full Windows 10 is NOT suitable for almost all Application Deployment scenario’s.
Continue reading Is Enterprise Mobility (EMS) and Windows 10 by Microsoft going to make you happy?