profile
viewpoint
Laura Newsad lenewsad Microsoft Redmond

MicrosoftDocs/IntuneEDU 5

Public repo containing Intune for Education docs

lenewsad/EMDocs 0

Public repo for EM content in OPS.

lenewsad/intune-app-wrapping-tool-mac 0

Use the Intune App Wrapping Tool for Mac to enable Mac apps to be managed by Microsoft Intune

lenewsad/IntuneDocs 0

Public repo for Intune content in OPS

lenewsad/IntuneEDU 0

Public repo containing Intune for Education docs

lenewsad/SCCMdocs 0

Configuration Manager documentation public repo

lenewsad/windows-itpro-docs 0

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

PR closed MicrosoftDocs/memdocs

Fixing redirection for windows-enrollment-company-portal do-not-merge review-team-triage

The Windows Company Portal used to use the https://docs.microsoft.com/en-us/mem/intune/user-help/windows-enrollment-company-portal link and we noticed it now leads to a 404 page. When reviewing this file, it looks like the source_path here is missing the -portal, unless there was previously another link that was just windows-enrollment-company. If so, this is the wrong change and I'll just need to add a separate redirection item. Let me know if that is the case.

+1 -1

3 comments

1 changed file

kagillig

pr closed time in 13 days

pull request commentMicrosoftDocs/memdocs

Fixing redirection for windows-enrollment-company-portal

@kagillig, I opened a PR in the MSFT employee repo to resolve the above error message. Closing this one.

kagillig

comment created time in 13 days

pull request commentMicrosoftDocs/memdocs

Fixing redirection for windows-enrollment-company-portal

#sign-off

kagillig

comment created time in 13 days

issue closedMicrosoftDocs/IntuneDocs

Permissions Required?

Which permissions are required to update group memberships in Intune EDU? From this article, it seems to me that only the School Administrator-role in Intune (and an Intune license) is required, but when I test this I get permission denied. Is an AAD role required as well, such as "Groups Admin" or "User Admin" or "Helpdesk Admin"?

Unlike IT staff, admin groups only manage the groups you assign to them. When you give admin permissions to a group of qualified individuals, you help reduce the risk of unauthorized or accidental changes.

From this statement, it seems to me that nothing other than an Intune Role Assignment is required (which is automatically created for the School Administrator role when following the steps in "Assign an admin group").


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 19 days

p0shkar

issue commentMicrosoftDocs/IntuneDocs

Permissions Required?

Hi @p0shkar, here is a summary of the EDU permissions--hope this helps!

  • If you're a global administrator or you have the Azure AD role of Intune administrator, you can create groups anywhere in Intune for Education. You can create a top level group using the Create group button, or a subgroup using the Create subgroup option on an existing group. Global administrator and Intune administrator (the latter is an Azure AD role) are the only two roles that can create a top-level group (Create group button) in Intune for Education.

  • There is a tenant-wide setting that allows EDU users to create groups. If the tenant has this turned on, anyone can create subgroups in Intune for Education. If it is turned off, the only people that can create groups are those who meet the criteria in the first bullet above.

  • If you have the Azure AD role (not the Intune role) of either Group administrator or User administrator, Intune for Education will allow you to create and manage subgroups. You cannot create a top-level group using the Create group button.

p0shkar

comment created time in 19 days

issue commentMicrosoftDocs/memdocs

Could use a bit... more details on ways to remove devices.

Hi @bramnet, thank your for the suggestion and I'll run your question by the product team to see if that scenario should be documented here. I have a couple questions about your screenshot suggestion; do you want the screenshots that are currently shown to be updated, or are you asking for screenshots for another procedure on the page? Or something else?

Thanks so much for clarifying! :)

bramnet

comment created time in 22 days

issue closedMicrosoftDocs/memdocs

Intune education settings for shared iPad devices documentation is out of date

It seems to me that a lot of this information is out of date and a complete overhaul is needed.

Some examples:

  1. Sign in to Intune.

The URL points to the old Intune portal/URL.

  1. On the Intune pane, choose Device configuration.

Device configuration is renamed.

  1. On the Create profile pane, enter a Name and Description for the iOS/iPadOS education profile.

I'm in an EDU tenant, but I can't see no "education profile" to create.

Therefor, it seems to me that this whole doc needs to be updated.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 22 days

p0shkar

issue commentMicrosoftDocs/memdocs

Intune education settings for shared iPad devices documentation is out of date

Hi @p0shkar, thanks for your feedback throughout our docs--it's much appreciated. The same situation from #796 applies here, where we've left this article as-is to support people who had this feature before we deprecated it.

I'm closing this issue as there aren't any updates to be made to this article at this time.

p0shkar

comment created time in 22 days

issue closedMicrosoftDocs/memdocs

Intune settings for the iOS/iPadOS Classroom app documentation is out of date

It seems to me that a lot of this information is out of date and a complete overhaul is needed.

Some examples:

  1. Sign in to Intune.

The URL points to the old Intune portal/URL.

  1. On the Intune pane, choose Device configuration.

Device configuration is renamed.

  1. On the Create profile pane, enter a Name and Description for the iOS/iPadOS education profile.

I'm in an EDU tenant, but I can't see no "education profile" to create.

Therefor, it seems to me that this whole doc needs to be updated.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 22 days

p0shkar

issue commentMicrosoftDocs/memdocs

Intune settings for the iOS/iPadOS Classroom app documentation is out of date

Hi @p0shkar, thank you for your feedback. This article details an obsolete feature in Intune. However, we still provide support to those tenants who had education profiles set up prior to the deprecation. So that's why this article still exists. We included a banner at the top of the page that explains who the article is for to try to clear up confusion.

I'm closing this issue as there isn't any updates to be made to this article at this time. Thank you!

p0shkar

comment created time in 22 days

issue closedMicrosoftDocs/IntuneDocs

Pre-Reqs

I'm trying to create custom RBAC Roles for Intune for Education with different levels of permissions because I think the out of the box permissions grant too high levels (especially for EDU purposes). However, when I create these roles I noticed that the "Read" permission for "Organization" was required to be able to see the dashboard at all, but my main issue is that I can't figure out which permission(s) is required to allow "Express configuration". The descriptions of each permission isn't that easy to find at all when design custom RBAC roles, but I finally found the "Intune RBAC Table"-document. However, this doesn't seem to encompass EDU specific items, such as "Express configuration". I don't know if this is the best place to describe roles, but maybe you can add a Pre Req on this page or maybe you can update the "Intune RBAC Table" to include EDU.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in a month

p0shkar

issue commentMicrosoftDocs/IntuneDocs

Pre-Reqs

Thanks again for the great suggestions @p0shkar! The product team agreed that there's some useful info missing. All the permissions needed to use Intune for Education are included in the built-in School Admin role. If you want to build a custom role that allows access to Intune for Education, you can duplicate the built-in School Admin role and add/remove permissions to build the role you want.

I'll be adding this info to Delegate admin permissions to groups in the upcoming month.

I'll also work on documenting the more granular permissions/details in the Microsoft Intune docs.

p0shkar

comment created time in a month

delete branch lenewsad/windows-itpro-docs

delete branch : patch-2

delete time in a month

issue closedMicrosoftDocs/memdocs

the problem might be not with main device storage, but with a SD card

You could add this as a hint.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in a month

rafalfitt

issue commentMicrosoftDocs/memdocs

the problem might be not with main device storage, but with a SD card

Hi @rafalfitt, thank you for the suggestion! I shared this suggestion with the product team.

Closing as there are no current changes to be made to this article.

rafalfitt

comment created time in a month

issue commentMicrosoftDocs/IntuneDocs

Permissions Required?

Hi @p0shkar, thanks for your question. I'll reach out to the product team to get more information and update this article. In the meantime, for a faster answer, I recommend asking this question on the Microsoft Intune forums--here's the info for that (and some additional resources you can use when you need product support):

    • Post on Microsoft Intune forums. These are moderated by our community MVPs who are very experienced, knowledgeable, and helpful.

As soon as I find the answer to your question, I'll update the article and let you know. Thank you!

p0shkar

comment created time in 2 months

issue commentMicrosoftDocs/IntuneDocs

Pre-Reqs

Closed accidentally...leaving open for now while I investigate if we can update this article.

p0shkar

comment created time in 2 months

IssuesEvent

issue closedMicrosoftDocs/IntuneDocs

Pre-Reqs

I'm trying to create custom RBAC Roles for Intune for Education with different levels of permissions because I think the out of the box permissions grant too high levels (especially for EDU purposes). However, when I create these roles I noticed that the "Read" permission for "Organization" was required to be able to see the dashboard at all, but my main issue is that I can't figure out which permission(s) is required to allow "Express configuration". The descriptions of each permission isn't that easy to find at all when design custom RBAC roles, but I finally found the "Intune RBAC Table"-document. However, this doesn't seem to encompass EDU specific items, such as "Express configuration". I don't know if this is the best place to describe roles, but maybe you can add a Pre Req on this page or maybe you can update the "Intune RBAC Table" to include EDU.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

p0shkar

issue commentMicrosoftDocs/IntuneDocs

Pre-Reqs

@p0shkar, Thanks so much for describing your doc experience. This idea is great and I'll share it with the PM team and see how we can make this info more visible/available from this page.

p0shkar

comment created time in 2 months

issue closedMicrosoftDocs/IntuneDocs

Is this article still valid for Android Nougat and above?

Does company portal trust user-imported CA certificates on Android Nougat and above?

According to https://android-developers.googleblog.com/2016/07/changes-to-trusted-certificate.html, Apps that target API Level 24 and above no longer trust user or admin-added CAs for secure connections, by default.

It looks Company Portal target API level 27. So does company portal trust user or admin-added CA now? If not, this chapter "Identify and download the missing certificate through web search" won't work.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

XinkunY

issue commentMicrosoftDocs/IntuneDocs

Is this article still valid for Android Nougat and above?

Hi @XinkunY, Thanks again for your patience. While I couldn't get anyone to confirm if Company Portal trusts user-imported CA certs on Android Nougat and later, the product team did request to remove that 2nd procedure from this article. So the article has been updated to remove that. Thank you again for bringing this content to our attention.

XinkunY

comment created time in 2 months

issue commentMicrosoftDocs/memdocs

Incompatibility with SSPR From Logon screen

Hi @Luca-Campenni, I'm sharing your feedback with our product team and will update you (and the article) as soon as I find out more info. Thanks for your contribution!

Luca-Campenni

comment created time in 2 months

issue closedMicrosoftDocs/memdocs

This needs to be bolded please

For devices that are not enrolled in Intune, the Company Portal app must be installed on the device. However, the user does not have to launch or sign into the Company Portal app before they can use apps that are managed by app protection policies.

The Company Portal app is a way for Intune to share data in a secure location. Therefore, the Company Portal app is a requirement for all apps that are associated with app protection policies, even if the device is not enrolled in Intune.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

wowwser69

issue commentMicrosoftDocs/memdocs

This needs to be bolded please

@wowwser69 Thank you for your feedback and I'll share with the docs team that you'd like this info to pop/stand out more. Closing this issue as there are no content changes to make now.

wowwser69

comment created time in 2 months

issue commentMicrosoftDocs/memdocs

Report problems to Microsoft

Hi @icelava, I'm looking into your feedback and will update you (and the docs, if needed) when I find out more info on my end. Thanks!

icelava

comment created time in 2 months

issue commentMicrosoftDocs/memdocs

how do i uninstall company portal on mac?

Hi @mkliu, thank you for the idea. I'm looking into these steps for you.

mkliu

comment created time in 2 months

issue closedMicrosoftDocs/memdocs

Incorrect registry path

[Enter feedback here] 3. Navigate through the nested menus to SOFTWARE > Policies > Microsoft Windows Defender > Policy Manager should be 3. Navigate through the nested menus to SOFTWARE > Policies > Microsoft > Windows Defender > Policy Manager


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

DaravuthL

issue commentMicrosoftDocs/memdocs

Incorrect registry path

Hi @DaravuthL, thank you for your contribution. It looks like you're referring to the instructions in this article: https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-network-protection#check-if-network-protection-is-enabled

I confirmed that there is an arrow missing between Microsoft and Windows Defender and submitted a request to change this. Here is the PR: https://github.com/MicrosoftDocs/windows-itpro-docs/pull/8131

I am closing this issue as there are no changes that need to be made to the Intune article.

DaravuthL

comment created time in 2 months

PR opened MicrosoftDocs/windows-itpro-docs

Update enable-network-protection.md

Added an arrow that was missing. Feedback from https://github.com/MicrosoftDocs/memdocs/issues/433.

+1 -1

0 comment

1 changed file

pr created time in 2 months

push eventlenewsad/windows-itpro-docs

Laura Newsad

commit sha 9b57ccc26385d502613bfef5d8b73ef8d6290d17

Update enable-network-protection.md Added an arrow that was missing. Feedback from https://github.com/MicrosoftDocs/memdocs/issues/433

view details

push time in 2 months

issue commentMicrosoftDocs/memdocs

Clarification needed on supported platforms?

Hi @r3dsubmarine, thank you for your question. I'm doublechecking with the product team and will let you know what I find out.

r3dsubmarine

comment created time in 2 months

issue closedMicrosoftDocs/memdocs

Education profile is not listed?

I'm not sure if I am in the correct place but the instructions do not seem to match the Admin Center for Endpoint Manager or Intune for Edu. Specifically, when creating an iOS configuration profile, there is not an education profile type listed in the dropdown. I could create a "custom" PKCS certificate profile but that does not match the steps and I am wondering if I have something misconfigured.


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

kcurtis-dnusd

issue closedMicrosoftDocs/memdocs

Text in step 2 is slightly incorrect

In step 2, this page says "Turn on BitLocker" but the product instruction is "Turn BitLocker on".


Document details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

John-Welch

issue commentMicrosoftDocs/memdocs

Text in step 2 is slightly incorrect

HI @John-Welch, thank you for your contribution. The 2nd step in this article still appears to be accurate; I don't see the option to "Turn BitLocker on" in Manage BitLocker so I'm going to leave the article as-is. Closing as no further action is needed.

John-Welch

comment created time in 2 months

issue closedMicrosoftDocs/memdocs

The page on changing group policy didn't work for me

Hello. I followed your instructions but there were some problems:

Under Administrative tools, there was no "Edit Group policy" I used this to find it instead: https://www.isunshare.com/windows-10/5-ways-to-access-local-group-policy-editor-on-windows-10.html (In my case the "Turn off Windows Defender Antivirus" is already set to "Not Configured", so nothing to do here.)

I get no results when I search for "Windows Defender Security Center". Clicked "Windows Security" instead. Clicked "Virus & threat protection" There are no options for "Real-time protection" and "Cloud protection" there. The links are "open app" (doesn't work! Does nothing) and Windows Defender Options. There I can turn Periodic Scanning on, it asks for administrator permissions, and then the switch goes right back to off.

Under Local Group Policy editor Computer Configuration > Administrative Templates > Windows Components there is no "Windows Defender Security Center"


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

closed time in 2 months

ManuelaJL

issue commentMicrosoftDocs/memdocs

The page on changing group policy didn't work for me

Hi @ManuelaJL, thank you for sharing what you experienced. This article is now up-to-date thanks to contributions from the community. Closing as there is not further action. Have a good one!

ManuelaJL

comment created time in 2 months

issue commentMicrosoftDocs/memdocs

Education profile is not listed?

Hi @kcurtis-dnusd, thanks for writing in. If you're trying to configure the Classroom app, Intune doesn't currently support doing that. It used to be supported (which is why you're finding this article). Now this article is only applicable for users with existing iOS/iPadOS education profiles in Intune.

kcurtis-dnusd

comment created time in 2 months

more