Tuesday, 16 January 2018

Video training series "Manage ConfigMgr Internet clients with the Cloud Management Gateway"

I'm very pleased that TrueSec have just published my video training series 

Manage ConfigMgr Internet clients with the Cloud Management Gateway

There are five videos in the series:

Introduction to the CMG
This video is an Introduction to the Cloud Management Gateway. Previously when we wanted to manage ConfigMgr clients over the internet we would use Internet-based client management. This was a good technology with many advantages. However, there were also some disadvantages. Now we can use Cloud Management Gateway to manage these clients. It consists of a Microsoft Azure cloud service and a ConfigMgr site system role that communicates with the Azure service. Clients can then use the Azure service to communicate with ConfigMgr.
This is cool technology and gives us many advantages over traditional internet based client management.


Prerequisites for the Cloud Management Gateway
This video describes the general requirements for the successful implementation of a CMG solution. This includes specific ConfigMgr requirements and the certificates required for Cloud Distribution Point and Cloud Management Gateway.


Certificates for the Cloud Management Gateway
This video is all about certificates. These are the tasks that admins find the most difficult. We’ll be creating the certificates necessary for the configuration of the Cloud Distribution Point and the Cloud Management Gateway.


Configure the Cloud Management Gateway
In this video we will create the Cloud Distribution Point and Cloud Management Gateway. Then we’ll add the Cloud Management Gateway Connection Point.
Finally, we’ll configure the Management Point and Software Update Point to allow CMG traffic.


Managing clients with the Cloud Management Gateway
In this video we’ll have a look at a Windows 7 client and see how the behaviour changes when the client moves from the intranet to the internet. We’ll deploy software to the internet client. Finally, I’ll show you a couple of tricks that should be useful for your deployment.


I hope you enjoy the videos. Thanks to Johan Arwidmark and the guys at TrueSec.

Until next time......

New Intune features for Apple device management

I'm pretty busy at the moment with management of Apple devices using Microsoft Intune. Therefore I was particularly interested to see the new developments in this area in December.

Jamf Pro Integration

Jamf Pro is a very popular tool for the management of Apple devices (Mac, iPad, iPhone). 
  • Deployment
  • Device Management
  • App Management
  • Inventory
  • Self-service
  • Security
We can now integrate Intune and Jamf Pro. If your organization uses Jamf Pro to manage your end users' Macs, you can now use Microsoft Intune compliance policies with Azure Active Directory conditional access to ensure that devices in your organization are compliant.

Shut down iOS devices

This is a new iOS device action. We can now shut down iOS 10.3 supervised devices (immediately without warning to the end user).

Install Office apps on macOS devices


A new app type now allows us to install Office apps on macOS devices (Word, Excel, PowerPoint, Outlook, and OneNote).


Delete an iOS Volume Purchasing Program token

We can now delete the iOS Volume Purchasing Program (VPP) token using the console. This may be necessary when you have duplicate instances of a VPP token.


You can read about these and the other new features released in December in the What's new in Microsoft Intune doc site.

I'm looking forward to using these features over the coming weeks.

Until next time.....