Click to edit Master subtitle style

Microsoft Virtual Academy

Windows Intune for IT Pros Jump Start

M04: Administrator Roles, Users and Groups

David TesarRichard Harrison

First Half Second Half

(01) Big Picture with Windows Intune

(07) MDM Prerequisites and Cloud-only MDM Setup

(02) Architecture Design Considerations

(08) Cloud-only Software Publishing and Deployment

(03) Extending Identity to Windows Azure Active Directory

(09) Setting Up & Configuring Unified Infrastructure (+ MDM Setup)

(04) Administrator Roles, Users and Groups

(10) Unified MDM Settings and Compliance

(05) Windows Intune Policies(11) Unified MDM Software Deployment

(06) Cloud-only PC Setup (12) End User Enrollment

Windows Intune for IT Pros Jump Start

• Windows Azure Users & Groups– Account Portal–Windows Intune User Group– Administrator Roles & Role Permissions

• Windows Intune Users & Groups– User Properties–Windows Intune Groups– Group Functions– Dynamic Criteria Groups

Module Overview

Click to edit Master subtitle style

Microsoft Virtual AcademyWindows Azure Users &

Groups

Windows Azure Users & Groups

AzureAD Windows

Intune

• Windows Intune Account Portalhttps://accounts.manage.microsoft.com

• User Account Management– User account details

• User name

– Settings• Assign role• Sign-in status• Location

– Password resets

• Security Group Monitoring

Account Portal

• Membership required for:– Users to appear in administrator

console– Users to access company portal

Windows Intune User Group

Administrator Roles

Permission Billing Global Password Service User managementView Org & User information ü ü ü ü ü

Manage support tickets ü ü ü ü ü

Reset user passwords O ü ü O ü1

Perform billing & purchasing ü ü O O O

Create & manage user views O ü O O üCreate, edit, delete users & groups, & manage user licenses O ü O O ü2

Manage domains O ü O O O

Manage Org. info. O ü O O O

Delegate Admin roles O ü O O O

Use DirSync O ü O O O

Admin Role Permissions

1 - Role cannot reset passwords for billing, global, and service administrators.2 - Role cannot delete a global administrator or create other administrators.

DEMO

Account Portal In Action

Click to edit Master subtitle style

Microsoft Virtual AcademyWindows Intune Users &

Groups

Windows Intune Users and Groups

Desktops

All Devices

Laptops

Device Groups

All Users

User1

User2

User Groups

• Per User tracking of:– Software Deployment Issues– Policy Deployment Issues– Device Management Tasks

User Properties

• Default Groups

Windows Intune Groups

• Custom Group Strategies– Geo-based– Role-based– Function-based– Hardware-

based

• PC Updates

• PC Software deployment (Push)

• Agent Settings, Firewall, and Windows Intune Center Policy

• Notification Rules

• Reports

• Software Publishing (Pull)

• Mobile Device Security Policy

Group Functions

Desktops

Head Office

Laptops

Device Groups

Finance Users

User1

User2

User Groups

Dynamic Criteria Groups

Desktops

Head Office

Laptops

Device Groups

Finance Users

User1

User2

User Groups

AzureAD

AD

WindowsIntune

• Organizational Units• Domains

• Security Groups• Managers

Criteria Membership

DEMO

Working with Windows Intune Groups

• Windows Azure Users & Groups– Account Portal–Windows Intune User Group– Administrator Roles & Role Permissions

• Windows Intune Users & Groups– User Properties–Windows Intune Groups– Group Functions– Dynamic Criteria Groups

Module Review

©2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Office, Azure, System Center, Dynamics and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.