Microsoft 365 Business Technical Fundamentals Series Welcome to the Microsoft 365 Business Technical Fundamentals Series

Advanced Windows 10 Management In this video we will be covering Advanced Windows 10 Management capabilities provide by Microsoft 365 Business.

Profile Creation Created with Intune in portal.azure.com Can be used to deploy a wide variety of profile types, including device restrictions, certificate installation, and VPN amongst others In order at access the additional management capabilities that can be provided by Microsoft Intune, you can use the Azure poral, portal.azure.com It can be used to deploy an extensive range of profile types and corresponding settings. When in the Azure portal, you can see the policies that were created in the Microsoft 365 Admin center, and use the details they provide to help extend capabilities with your own profiles. If you are new to Microsoft 365 and Intune, it is recommended to use the Microsoft 365 Admin center before venturing into working natively with Intune.

Profile Creation There are multiple options within each profile type , and here you can see the different categories within device restrictions. You can use the various Intune policies to replicate many of the capabilities that may have previously required Group Policy, as well as some that are more focused on delivering cloud based capabilities.

MDM Migration Analysis Tool (MMAT) Determines which Group Policies have been set for a target user/computer Cross-references against its built-in list of supported MDM policies github.com/WindowsDevice Management/MMAT Microsoft created the MDM Migration Analysis Tool – aka MMAT - to help determine how your existing group policy settings map against Windows 10 MDM capabilities. MMAT will determine which Group Policies have been set for a target user/computer and cross-reference against its built-in list of supported MDM policies. MMAT will then generate both XML and HTML reports indicating the level of support for each Group Policy in terms of MDM equivalents. This tool can be downloaded from Github, and for many companies it will also allow a thorough review of existing group policies to see which are still required and need to be carried forward. MMAT version 2.0 contains the following changes: three new columns were added - MDM CSP Name, MDM CSP setting URI, and Windows OS Version. There are additional supported settings including Security and Windows Firewall settings. To run this tool follow the instructions below: Install Remote Server Administration Tools. Windows 7 - https://www.microsoft.com/en-us/download/details.aspx?id=7887 Important Note: After the RSA tool is installed, corresponding features have to be enabled manually on Win7, which is different from newer Windows versions where the features are turned on by default after installation. For enable corresponding features: Complete all installation steps in the wizard, and then click Finish to exit the wizard when installation is finished. Click Start, click Control Panel, and then click Programs. In the Programs and Features area, click Turn Windows features on or off. If you are prompted by User Account Control to enable the Windows Features dialog box to open, click Continue. In the Windows Features dialog box, expand Remote Server Administration Tools. Select the remote management tools that you want to install. Click OK. Configure the Start menu to display the Administration Tools shortcut, if it is not already there. Right-click Start, and then click Properties. On the Start Menu tab, click Customize. In the Customize Start Menu dialog box, scroll down to System Administrative Tools, and then select Display on the All Programs menu and the Start menu. Click OK. Shortcuts for snap-ins installed by Remote Server Administration Tools for Windows 7 with SP1 are added to the Administrative Tools list on the Start menu. Here is more detailed about installation instruction--> https://www.microsoft.com/en-us/download/details.aspx?id=7887&fa43d42b-25b5-4a42-fe9b-1634f450f5ee=True Windows 8 - https://www.microsoft.com/en-us/download/details.aspx?id=28972 Window 8.1 - https://www.microsoft.com/en-us/download/details.aspx?id=39296 Note: The installation may be stuck on “Searching for updates on this computer”. You can follow the solution on Appendix-A on "MDM Migration Analysis Tool Instructions.pdf". The basic idea is to extract the CAB file from the exe and install manually from command line. Windows 10 - https://www.microsoft.com/en-us/download/details.aspx?id=45520 Install this MMAT tool zipped Folder to your PC and unzip the folder. Open a PowerShell Window running as an Admin. Change directory to MMAT-master folder which contains all the scripts and exe inside. Run the following scripts: Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process $VerbosePreference="Continue" ./Invoke-MdmMigrationAnalysisTool.ps1 -collectGPOReports -runAnalysisTool When Invoke-MdmMigrationAnalysisTool.ps1 is completed,it will generate: MDMMigrationAnalysis.xml: XML report containing information about policies for the target user and computer and how they map, if at all, to MDM. MDMMigrationAnalysis.html: HTML representation of the XML report. MdmMigrationAnalysisTool.log: A log file with more details about the MMAT run. See "MDM Migration Analysis Tool Instructions.pdf" in this folder for more details.

Demonstration Windows 10 profiles in Intune For this demonstration we will be using the Azure portal, rather than the Microsoft 365 Business admin center.

Thank you. As you can see, there are many additional capabilities exposed through Intune, but for those of you who are new to Microsoft 365 Business and don’t have Intune experience, you can start with the capabilities in the Admin Center before progressing to Intune in the Azure portal.