In part 4, of the Workspace ONE Admin’s Guide to Microsoft Intune. It covers security capabilities including Windows patching, security baselines, leveraging profiles for security hardening, account protection, conditional access, and remediations. Final thoughts include an upcoming webinar and future articles on API comparisons.
Microsoft Intune presents a new approach to Windows patching, replacing on-prem servers with Windows Update for Business (WUfB). It offers features like Update Rings, Automatic Update Behavior, and a Deployment Service. Windows Autopatch on Intune automates patch deployment, but requires specific software/licensing. Best-in-class reporting is also available, addressing traditional reporting issues.
The article discusses securing local administrators with Microsoft Intune, covering creating the admin account, deploying the LAPS policy, protecting local administration groups, and working with Entra users and groups. It emphasizes the ease of using Intune for these purposes and shares insights on Entra user and group challenges. Overall, it advocates leveraging Microsoft’s EPM alongside Intune for robust security.
In Part 3 of transitioning from Workspace ONE to Microsoft Intune we turn our attention to application delivery. We look at the different ways we can deliver apps on Windows devices.
The emergence of Digital Employee Experience Management (DEX) has been influential, with ControlUp Secure DX now enhancing the approach. Built on the ControlUp Edge DX platform, it focuses on security issues, leveraging policies and templates. Configuration is streamlined, and the admin experience offers comprehensive insights.
Part 2 delved into profiles, baselines, scripts, and product provisioning. It demonstrated how to configure Windows 10 PCs in Workspace ONE and Microsoft Intune, covering CSPs and translating profiles. Baselines and scripts in both platforms were compared, highlighting differences and capabilities. Product provisioning was briefly outlined.
