Enrolling Windows 8.1 to Intune

Hi!
Let me start by saying that I'm really new to Intune and created a trail account few days ago. I've been browsing through Technet but haven't really found a solution to the problem i'm facing so here it goes..
I have a "cloud-only" setup and I have configured MDM authority to Intune. I do not have DirSync yet inplace and I have one test account manually created from the Intune web console.
I want to enroll Windows 8.1 device. I'm trying to do the enrollment by following the general guideline:
https://technet.microsoft.com/library/dn858086.aspx
I installed Company Portal from the Microsoft Store but when I go to Settings -> PC Settings -> Network -> Workplace and enter my Intune Account and credentials again when prompted, I do not get the "Allow apps and services from IT
admin" that I could turn on. It just says that "This Device has joined your workplace network".
My Windows 8.1 machine does not show up in the Intune console and I cannot access the Company Portal.
If I access https://portal.manage.microsoft.com from a web browser, I can log in to the portal but it doesn't show (or give me a possibility to add) devices.
If I install the Intune Client, everything works without even doing the workplace join that is instructed in the general guide.
Is it even possible to enroll Windows 8.1 laptop to Intune without installing the Intune Client because according the general guide I get the impression that it is? The fact that I don't get the to choose that "Allow apps and services from IT admin"
during workplace join might be the reason this isn't working for me but I can't seem to find out the configuration error that I have on why it isn't displayed.
-klaus

Asked from Microsoft support that the process of downloading Company Portal from Microsoft Store and doing the enrollment by following the instructions (and doing Workplace Join) only applies to tablet scenario. For every PC scenario, Intune Client is
required.

Similar Messages

Issue during self enrolling the windows 7 laptop using Intune.

Hi,
When i tried to enroll windows 7 laptop using portal.manage.Microsoft.com I am getting an error as "This device is either not enrolled or the company portal can't identify it".
Kindly help on this issue
Regards,
Arjun

You can't enroll a Windows 7 laptop as a mobile device. If you want you're users to self-enroll their computers have a look at the steps provided here:
https://technet.microsoft.com/en-us/library/dn646969.aspx?f=255&MSPPError=-2147217396#BKMK_Allow
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Enrolling Multiple Windows Phones in SCCM/Intune.

Hi
Is there a restriction of how many devices (Windows Phone 8.1) can you enrol to SCCM/Intune at the time ?
We were enrolling up to 15 WP at the time and some devices are missing policies set on SCCM.
Any ideas ?
Thanks.

Hi Hernando,
The max number of mobile devices which can be enrolled in a ConfigMgr/Intune hybrid scenario is 50,000 (this article will help you (https://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigClientNumbers)
As far as not getting policy, like Steven mentioned below, one user can be associated with up to 5 devices. Other than that, are you seeing any data in the dmpuploader/dmpdownloader logs? These will give you info on whether or not the devices are actually
getting policy from the Intune Connector. Also, ensure that you have enabled the necessary extensions in the Intune console to get the policies for WP 8.1 that you are looking for.

Windows 7 clients and InTune

Hi,
We are looking at integrating InTune with our existing SCCM 2012 server, I had a question about this. We are going to primarily use InTune to manage Windows 7 and Windows 8 laptops/tablets located outside of the network, then use SCCM to manage devices
inside the network. When I looked at the instructions to create the link between InTune and SCCM I didn't see any mention of Windows 7 devices, it appeared to be more geared towards iOS, Android, Windows Phone, etc.
Once we create the link between the two systems, will we be able to manage Windows 7 and Windows 8 devices located outside the network from the internal SCCM system? Ideally we would like to be able to gather inventory information about these devices,
manage antivirus and windows updates.
thanks.

Just a little further explanation, when you integrate ConfigMgr and Intune you must select ConfigMgr as the Mobile Device Management Authority. This means that all management of your devices will now be done through ConfigMgr. You will not need to open the
Intune console.
Finally, in case you are wondering, you cannot install both Intune and ConfigMgr clients on a device.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Uninstall Windows Security Update via Intune

Hi all
Some of our users are using Propalms-software which has reported a problem with Microsoft Windows update KB2830477.
This update was installed by Intune. Is it possible to uninstall this update via Intune?
Thx!
Dany

I know this is very old but I’m trying to clean up old posts. Did you ever solve this? If so it would be good if you could post the solution to assist others. If not, at this
stage, as nobody has answered, I would recommend that you call Intune support if the issue still exists.
You will find your local Intune support number here
http://technet.microsoft.com/en-US/jj839713.aspx
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

How to activate Windows To Go from Intune Software Assurance

We recently decided on using Windows Intune with Software Assurance to create Windows To Go drives for some of our employees as they would like to work from home on computers running Windows XP and Windows Vista.
We are using the PowerShell option and the Install.WIM file from the Enterprise ISO available on the Windows Intune Software Assurance download page.
We are running into a problem when activating Windows To Go. We receive an error "DNS name does not exist" when trying to activate. We are building this off of an installation of Windows 8 Enterprise that was received thru Windows Intune Software
Assurance. Additionally, we are using the Dism.exe for imaging the drives.
What are we doing wrong?
It's important that I note, the machine we are building the Windows To Go images from does not have an internet connection and therefore has not been activated. I was thinking this may be related to our problem but I figured I would as to see if there
may be some other condition we are missing.
Furthermore, I should mention, we are not taking a snapshot of the machine to create a custom WIM file. We are using the raw WIM from the Enterprise ISO. Could this be the cause as well?
I also thought that perhaps we needed to activate the machine we are building from first, then create a custom WIM image of that activated machine and use an activated WIM image file for the Dism process, but then I also considered that if I do that, I have
to run Sysprep which would reset activation, correct?
The Windows To Go image already has Windows Intune installed prior to attempts for activation so I know it's not that.
Any help would be greatly appreciated.
Owner, Quilnet Solutions

I know this is very old but I’m trying to clean up old posts. Did you ever solve this? If so it would be good if you could post the solution to assist others. If not, at this
stage, as nobody has answered, I would recommend that you call Intune support.
You will find your local Intune support number here
http://technet.microsoft.com/en-US/jj839713.aspx
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Enroll Windows 8.1 Pro Company Portal fails

Hi,
I'm experienceing a problem when rolling out the company portal through "With device managment turned on, your IT admin can setup apps and services for you" from the Workplace configuration wizard.
My environment consist with an SCCM 2012 R2 installation and a Intune subscription. I do not use Dirsync or ADFS, it is for an POC. Everthing works fine, until it show the screen "Allow apps and services from IT admin", when I mark the checkbox
at "I agree" and click on "Turn on", the wizard is closing, and a few seconds later, I able to start the process allover again.
I didn't get any Information shown, why this will not work. Does there exists some logfiles which could help me through the troubleshooting process?
Thanks for any suggestions

No sorry, this is not true.
It didn't worked as we added the *.onmicrosoft.com UPN to our Domain, and changed the UPN-Suffix on the User account. A Login with this UPN-Suffix was not possible. Then we added a public UPN-Suffix to our Intune subscription, and also to the Domain and
User Account, and it worked afterwards.
So: A Login with [email protected] does not work. A Login with
[email protected] does work. this is only true for Intune integrated with SCCM, and reflects my experiences of the last days...

Windows Phone 8 and Windows InTune

I just signed up for a 30-day Windows InTune trial account and I'm in the process of setting up mobile device management for Windows Phone 8 devices. After looking through the documentation, I just want to verify that
before I can even enroll any Windows Phone 8 devices for management in Windows InTune I need to...
1. Purchase a $99/yr subscription to establish a Company (not an Individual) account on the Windows Phone Dev Center (to get a Symantec Publishing ID)
2. Purchase a $299/yr subscription for a Symantec Enterprise Mobile Code Signing Certificate to obtain an enterprise mobile code-signing certificate using the Symantec Publishing ID from step #1
3. Download, sign the Company Portal App with the XapSignTool tool using the Symantec enterprise mobile code-signing certificate, and upload the app back into Windows InTune
Is this correct?
Regards,
JJ

An important update to this thread - as of November 2014, you can now enroll Windows Phone 8.1 devices for management in Windows Intune without having to purchase a Symantec certificate. For details, see
http://blogs.technet.com/b/microsoftintune/archive/2014/11/18/improvements-to-the-windows-phone-8-1-enrollment-process-for-intune.aspx
As of 4/2/2015, hybrid configurations still require a Symantec cert to enroll a phone, but you can get the Company Portal app for WinPhone in the Store and you can send deep links and web links to hybrid phones via that portal. The ability to enroll WinPhone
8.1 in hybrid without a cert is in the works. Stay tuned to the Intune blog for the announcement when that comes. Or you can ping me by replying to this thread, and ask me if certless hybrid is available yet.
Cathy Moya PM, Windows Intune/System Center Configuration Manager This posting is provided AS IS with no warranties and confers no rights.

Windows Intune, Windows 8.1, SCCM 2012 R2

Hello,
I am planning to setup a new infrastructure to manage devices using Intune and SCCM 2012 R2 for one of my customer.
We plan to have one single site, where in the devices will be imaged with Windows 8.1 and then will be provided to users who roam around the world.
We like to manage these devices and do:
1. Inventory
2. Software Distribution
3. Software Updates
4. EndPoint Protection
5. Reporting
I have come to learn that:
1. Add and verify company domain at account.manage.microsoft.com
2. Add UPN in AD
3. Run DIR Sync for Users
4. Configure Intune Subscription
5. Install Connector
6. Whats the next step for configuring Windows 8.1?
My questions:
1. Is Cloud based Distribution Point required for hosting content. If not, how will the devices download the content and install the app?
2. Do we need PKI for Windows 8.1 devices(enrollment and management)?
3. Where should I install Company App Portal?
4. What are the different ways of enrolling Windows 8.1 device (Workplace & Store)?
5. Any other info if you can share, really appreciate
Please advice
Rajiv

Hello Nico,
Thanks for the guidance.
1. Distribution Point: manage.microsoft.com - whats the disk size/storage available by default. Is it unlimited. As the Intune license is user based. I can have 5 devices enrolled per user. I may have loads of packages/apps.
5. Your apps need to be signed with certificate that's is trusted by your device : I guess when we import
an Application in SCCM, it never checks if it has a signed certificate. One would need to ensure that the cert is present.
Can I install software updates to devices managed using SCCM Intune?
We are planning to have a single site with a remote DP for building devices with Windows 8.1. Once the device is ready, it will be given to the user. The user will enroll the device and is good to go. I am sure we will be able to embed Company Portal App
into the build image?
Thanks
Raijv

SCCM 2012, Intune and Windows OS Support

I am just trying to confirm what I believe I am reading about Microsoft OS Support for Windows Intune when integrated with SCCM 2012 R2...
What I believe to be the case:
Windows RT, Windows RT 8.1, Windows 8.1 all have the ability to enroll via OMA-DM, thus can be managed by SCCM.
Down-level OS's such as XP SP3, Vista, and Windows 7 require the Intune Client to be installed, thus can only be managed by a standalone Intune subscription?
Can anyone confirm this?
Thanks!

More or less correct.
Generally, even for Win 8.1 and WinRT, IBCM or DirectAccess are a better choice than OMA-DM as it can only enable management of a limited subset of features. Two important ones cannot be: software updates and endpoint protection.
As you've seen (based on your other thread), you can still use the Intune subscription that is connected to your ConfigMgr site to manage devices with the Intune client installed. Effectively, there are two halves of the Intune subscription, the full client
management half and MDM half which can be controlled by Intune or ConfigMgr. Just because the MDM half is controlled by ConfigMgr does not technically preclude you from still utilizing the full client management half. That's not at all saying you should do
this though, but you certainly could.
Jason | http://blog.configmgrftw.com

Will Microsoft Intune work with Windows 10

Will Microsoft Intune work with Windows 10? I tried to install says agent is not installed

Hi,
The client cannot be installed, however you can enroll Windows 10 devices using the builitn OMA-DM agent, and enroll them as Mobile Devices, that works, supported, most likely not as Jason pointed out as well..
/J
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Introducing the Microsoft Intune End User Enrollment Guide

Help Your Users Get Their Devices Enrolled in Microsoft Intune with the End User Enrolment Guide
Choosing how you manage mobile devices within your organization is just one of many steps involved in protecting your corporate data while enabling a great end user experience on the devices they choose.
Now, you need to encourage your users to enroll their devices into Microsoft Intune to be managed. We’ve created the Microsoft Intune End User Enrollment Guide to help get you started. This two-page document helps explain to your users the importance of protecting corporate data, as well as their own, by letting your IT department manage their devices. It explains what may happen on their devices (installation of apps, security policies applied, etc.) and what will NOT happen on their devices (collecting personal information like phone and...
This topic first appeared in the Spiceworks Community

Depends which Guide you're looking at in 1.9.
You can choose the Full Guide (in Standard or Classic) views, Channel Guide, Half Guide or Mini Guide.
7xxx HD
Full Guide Standard = 7 channels (hit Guide once)
Full Guide Classic = 5 channels (available option in Television settings menu)
Channel Guide = 7 channels horizontally (hit Guide twice)
Mini Guide = really just one channel at a time (hit the down arrow on live TV)
Half Guide = 6 channels (hit the up arrow on live TV)
2500 / 6xxx / 7xxx SD
Full Guide Standard = 6 channels (hit Guide once)
Full Guide Classic = 4 channels (available option in Television settings menu)
Channel Guide = 6 channels horizontally (hit Guide twice)
Mini Guide = really just one channel at a time (hit the down arrow on live TV)
Half Guide = 5 channels (hit the up arrow on live TV)

Intune Company Portal application wants to install certificate during Android Enrollment

I just tried to enroll an Android device into Intune. When I login into the Intune Company Portal application for the first time it prompts me to install a certificate and choose VPN or Wifi as Credential Use.
Why is the Intune Portal application trying to install a certificate for VPN or Wifi use when I haven't setup or deployed any policies regarding VPN or Wifi certificates?

This is our workplace join certificate that shows up on Non-Knox platforms. The name and cert use info is not controlled by us. You can ignore the VPN or WIFI information, it's just how Android catagorizes their certs.
Thanks,
Jon L. - MSFT - This posting is provided "AS IS" with no warranties and confers no rights.

XAP Applications are not getting published in Windows Phone 8.1 Emulator

I've SCCM + Intune integrated environment (trail version of Intune). Enrolled Windows phone 8.1 (emulator) device into the infrastructure.
I'm able to login to company portal and can see the devices associated with my user name in the company portal however I'm not able to publish any of the apps. It says your query didn't return any results :(
I tried all the following types of apps (Windows apps in the windows store, Windows Phone app package and Windows phone app package in the windows phone store) but nothing getting published :( any clue ?
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM

Yes, at last issue got resolved :)
http://anoopcnair.com/2014/11/11/xap-applications-published-windows-phone-8-1-intune-integrated-sccm-2012-r2/
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM

Intune, SCCM, and the Intune client installer

Hello,
Was wondering if there is a way to prevent users from Installing the Windows Intune Client agent?
Scenario:
SCCM 2012 R2 with integrated Windows Intune subscription. I have successfully enrolled an iPad and a Windows 8.1 computer. I was then able to download and install the Windows Intune Client agent on my Windows 8.1 device which redirected my device
to being managed by Intune exclusively, and no longer via SCCM. It also changed my System Center Endpoint Protection to Intune Endpoint protection. The only way to get it back was to go to the Intune Management Console and retire the device, which
triggers an uninstall of the Intune client. The good news is that it restored the previous information for the SCCM/Intune enrollment. However...
A significant and unfortunate side effect of this is that Endpoint protection was also removed as part of the Intune client uninstall leaving the computer without Anti-malware protection.
I would like to prevent this from happening for obvious reasons. In a BYOD scenario the user will have the permissions locally to do this and given its the same subscription for Intune there doesn't appear to be a way to ensure they cannot.
Am I missing something simple here?
Thanks!

I guess a couple of data points:
- Enrolling a Win 8.1 system using OMA-DM for management by ConfigMgr via Intune does not provide additional anti-virus above or beyond the built-in Windows Defender
- Removing the Intune agent reverts the system back to using Windows Defender the same as it was before Intune was installed
So, I would say that first, this statement is inaccurate: "leaving the computer without Anti-malware protection". And, also, there's no difference between the two states of pre-Intune agent installation and post-Intune agent uninstallation from an AV perspective.
As for explicitly preventing the Intune agent installation, obscurity is probably the the only way to go at this point to my knowledge -- simply don't tell folks about it or how to find it.
Jason | http://blog.configmgrftw.com

Enrolling Windows 8.1 to Intune

Similar Messages

Maybe you are looking for