Muutke küpsiste eelistusi

MDM: Fundamentals, Security, and the Modern Desktop: Using Intune, Autopilot, and Azure to Manage, Deploy, and Secure Windows 10 [Pehme köide]

  • Formaat: Paperback / softback, 528 pages, kõrgus x laius x paksus: 234x185x31 mm, kaal: 930 g
  • Ilmumisaeg: 03-Sep-2019
  • Kirjastus: Sybex Inc.,U.S.
  • ISBN-10: 1119564328
  • ISBN-13: 9781119564324
  • Pehme köide
  • Hind: 45,97 €*
  • * hind on lõplik, st. muud allahindlused enam ei rakendu
  • Tavahind: 54,09 €
  • Säästad 15%
  • Raamatu kohalejõudmiseks kirjastusest kulub orienteeruvalt 2-4 nädalat
  • Kogus:
  • Lisa ostukorvi
  • Tasuta tarne
  • Tellimisaeg 2-4 nädalat
  • Lisa soovinimekirja
  • Raamatukogudele
  • Formaat: Paperback / softback, 528 pages, kõrgus x laius x paksus: 234x185x31 mm, kaal: 930 g
  • Ilmumisaeg: 03-Sep-2019
  • Kirjastus: Sybex Inc.,U.S.
  • ISBN-10: 1119564328
  • ISBN-13: 9781119564324

The first major book on MDM written by Group Policy and Enterprise Mobility MVP and renowned expert, Jeremy Moskowitz!

With Windows 10, organizations can create a consistent set of configurations across the modern enterprise desktop—for PCs, tablets, and phones—through the common Mobile Device Management (MDM) layer. MDM gives organizations a way to configure settings that achieve their administrative intent without exposing every possible setting. One benefit of MDM is that it enables organizations to apply broader privacy, security, and application management settings through lighter and more efficient tools. MDM also allows organizations to target Internet-connected devices to manage policies without using Group Policy (GP) that requires on-premises domain-joined devices. This makes MDM the best choice for devices that are constantly on the go.

With Microsoft making this shift to using Mobile Device Management (MDM), a cloud-based policy-management system, IT professionals need to know how to do similar tasks they do with Group Policy, but now using MDM, with its differences and pitfalls.

•    What is MDM (and how is it different than GP)

•    Setup Azure AD and MDM Auto-Enrollment

•    New PC Rollouts and Remote Refreshes: Autopilot and Configuration Designer

•    Enterprise State Roaming and OneDrive Documents Roaming

Renowned expert and Microsoft Group Policy and Enterprise Mobility MVP Jeremy Moskowitz teaches you MDM fundamentals, essential troubleshooting techniques, and how to manage your enterprise desktops.

Foreword xix
Introduction xxi
Chapter 1 Enterprise Mobility and MDM Essentials 1(14)
Getting Ready to Use This Book
2(1)
Why the Need for MDM
3(3)
Group Policy and MDM Compared
6(3)
MDM: Guts, Protocols, and Moving Parts
9(4)
OMA-DM: The Protocol
9(1)
CSPs: Configuration Service Providers
9(2)
MDM Service
11(1)
Extending Your MDM Services with Third-Party Tools
12(1)
Final Thoughts
13(2)
Chapter 2 Set Up Azure AD and MDM 15(60)
Comparative Analysis of Different MDM Services
15(10)
Azure AD Premium, Enterprise Mobility + Security, and Microsoft 365
16(2)
Office 365's Built-In MDM Management
18(2)
Microsoft Intune
20(4)
VMware Workspace ONE
24(1)
MobileIron
25(1)
Setting Up Auto-Enrollment and Enrolling Your First Machines
25(25)
Turning On MDM Enrollment
26(7)
Add Your First User to Azure AD
33(1)
Enroll Your First Windows 10 Machine into MDM
34(16)
Optional Steps: Custom Domain Names and AD to AAD Synchronization
50(23)
Custom Domain Names: Goodbye to "onmicrosoft.com" Names
50(8)
Syncing Your On-Prem AD to Azure AD Automatically
58(15)
Final Thoughts
73(2)
Chapter 3 MDM Profiles, Policies, and Groups 75(42)
MDM Policies and the Policy CSP
75(33)
MDM: Getting Started with Policies
76(1)
Profiles and Policies
77(5)
What Makes an MDM Policy?
82(5)
ADMX-Backed Policies
87(9)
Ingesting Third-Party ADMX Files
96(12)
Creating and Using Groups
108(6)
Creating Assigned Groups
109(1)
Creating Dynamic Groups
109(2)
Advanced Dynamic Rules
111(3)
Utilizing Groups in Intune
114(1)
Final Thoughts
114(3)
Chapter 4 Co-Management and Co-Policy Management 117(18)
Co-Management of SCCM and Intune
117(5)
Co-Policy Management: Group Policy and Your MDM Service
122(11)
Auto-Enroll in Your MDM Service Using Group Policy
122(5)
Co-Policy Management...Who Wins: MDM or Group Policy?
127(6)
Final Thoughts
133(2)
Chapter 5 MDM Migration and MDM Troubleshooting 135(18)
MMAT: Microsoft MDM Migration and Analysis Tool
135(4)
Troubleshooting MDM
139(13)
MDM Service Reports, Diagnostic Logs, and Event Logs
139(1)
Delivery Reports from Your MDM Service
140(1)
Advanced Diagnostic Reports and Resolving Conflicts
141(2)
Final Thoughts about the Advanced MDM Settings Report
143(1)
Resolving Conflicts
144(4)
Investigating Event Logs
148(1)
Remotely Collecting Logs from Windows 10
149(1)
Remember MdmWinsOverGP Setting and Gotchas
149(1)
Other Miscellaneous Notes, Traps, and Gotchas
149(3)
Final Thoughts
152(1)
Chapter 6 Deploying Software and Scripts 153(80)
Preparing for the Remainder of the
Chapter
155(6)
What to Download to Get Settled In for This
Chapter
155(2)
How to (Generally) Deploy Applications with Intune
157(4)
Deploying MSI Applications with MDM
161(9)
Deploying Your First MSI Application
161(9)
Deploying AppX Apps via the Microsoft Store for Business
170(8)
Getting Started with and Activating the Microsoft Store for Business
170(2)
Acquiring AppX Packages to Distribute Using Microsoft Store for Business
172(6)
Deploying MSIX with MDM
178(18)
Repackaging an App with the MSIX Packaging Tool
181(15)
Deploying Office 365 ProPlus with MDM
196(10)
Deploying Win32 Apps with MDM
206(13)
Microsoft Intune Win32 Content Prep Tool
207(1)
Gathering All the Needed Items in One Place
208(2)
Preparing the Win32 Application Contents
210(1)
Add the .intunewin File to Intune
211(5)
Assign the App and See Results
216(1)
Other Win32 Deployment Examples, Troubleshooting, and Final Thoughts
217(2)
Deploying Scripts with Your MDM Service
219(7)
Deploying Scripts (That Deploy Software) with Intune
220(6)
Delivering Other Software and Files with MDM (Using PolicyPak File Delivery Manager)
226(5)
Downloading Unusual File Types
227(1)
Downloading .EXEs, .MSIs, or Unusual Software, Then Running a Script (and Cleaning Up When You're Done)
228(1)
Downloading a ZIP and Automatically Unpacking Its Contents
229(2)
Final Thoughts
231(2)
Chapter 7 Enterprise State Roaming and OneDrive for Business 233(48)
Pregame Setup for This
Chapter
235(4)
Get Your Azure Tennant ID
235(4)
Enterprise State Roaming
239(5)
Setting Up Enterprise State Roaming
241(3)
OneDrive for Business
244(35)
Managing the OneDrive Tenant
246(2)
SharePoint and SharePoint Migration Tool
248(9)
OneDrive Sync Client
257(11)
OneDrive's Magic Trick: Known Folder Move
268(8)
Files Restore (from Malware or User Error)
276(3)
Final Thoughts
279(2)
Chapter 8 Rollouts and Refreshes with Configuration Designer and Autopilot 281(78)
Windows Configuration Designer
282(11)
Get WCD from the Windows Store
283(1)
What Can You Do with WCD? (And What Shouldn't You Do with WCD?)
284(1)
WCD Example
284(6)
Implementing the .PPKG File
290(2)
Results from Using a .PPKG File
292(1)
Final Thoughts about WCD
292(1)
Autopilot
293(66)
Getting Devices Registered into Autopilot
296(7)
Creating Groups for Your Autopilot Machines
303(3)
Setting Up Your Autopilot Deployment Profile
306(11)
Automatically Harvesting Hardware IDs into Autopilot
317(7)
Autopilot: Resets, Retire, Wipes, and Fresh Starts
324(5)
Linking a Specific User to a Specific Hardware ID
329(1)
Autopilot Self-Deploying Mode
330(9)
Autopilot Hybrid Azure AD Join
339(17)
Autopilot White Glove
356(2)
Final Autopilot Resources
358(1)
Chapter 9 Windows 10 Health and Happiness: Servicing, Readiness, Analytics, and Compliance 359(36)
Windows, Office, and OneDrive as a Service
359(16)
Servicing Windows
360(5)
Servicing Office
365(2)
Servicing OneDrive (Revisited)
367(1)
Making Your Own Rings for Windows, Office, and OneDrive
367(8)
Office and Application Readiness
375(6)
Office 365 Readiness Toolkit
376(4)
App Health Analyzer
380(1)
Desktop Analytics
381(3)
Introduction to Desktop Analytics
382(1)
Prepare, Pilot, and Deploy Phases
383(1)
Final Thoughts on Desktop Analytics
383(1)
Device Compliance and Health Attestation
384(9)
Getting Started with Compliance Policy
385(8)
Final Thoughts on Windows Health and Happiness
393(2)
Chapter 10 Security with Baselines, BitLocker, AppLocker, and Conditional Access 395(44)
Security Baselines
396(8)
Creating Your Security Baselines in Intune
397(2)
Assigning Your Security Baseline to a Group
399(1)
Syncing Your Client to Get the Baseline
400(1)
Testing Your Baseline
401(1)
Reporting and Monitoring Baselines
402(2)
BitLocker: Full Disk Encryption
404(13)
Enabling BitLocker Using Intune
404(8)
BitLocker Key Recovery and Management
412(4)
BitLocker Final Thoughts and Additional Resources
416(1)
Application Whitelisting with AppLocker or PolicyPak Least Privilege Manager
417(9)
Using AppLocker for Whitelisting
417(3)
Using Your AppLocker Rule with Intune
420(3)
PolicyPak Least Privilege Manager for Whitelisting
423(3)
Conditional Access
426(8)
Setting Up Azure Conditional Access
427(7)
Final Thoughts on Security
434(5)
Chapter 11 MDM Add-On Tools: Free and Pay 439(34)
Company Portal App
439(9)
Setting Up Company Portal Branding
440(1)
Users Interacting with the Company Portal App
441(7)
Microsoft Graph and the Graph Explorer
448(7)
PolicyPak On-Prem & MDM Edition
455(12)
Getting Started with PolicyPak
456(2)
Using PolicyPak to Export Existing Group Policy to MDM
458(3)
Using PolicyPak to Overcome UAC Prompts
461(2)
Using PolicyPak to Block and Allow UWP Applications
463(1)
Using PolicyPak to Manage Application, Browser, and Java Settings
463(3)
Using PolicyPak to Manage Windows Features (and Optional Features)
466(1)
PolicyPak Deployment with Intune (or Any MDM)
466(1)
Interesting Things I Found on the Internet
467(3)
Untested, but Seemingly Useful Scripts
467(1)
Yodamiitti Intune Management GUI
468(2)
Final Thoughts (on This
Chapter, and about the Book!)
470(3)
Index 473
JEREMY MOSKOWITZ, is a 15-year Microsoft MVP awardee and is founder of MDMandGPanswers.com and CTO of PolicyPak Software. Since becoming one of the world's first MCSEs, he has performed Active Directory, Group Policy and MDM planning and implementations for some of the nation's largest organizations. His best-selling book Group Policy Fundamentals, Security, and Troubleshooting, Third Edition is on desks of administrators everywhere.