Windows 365 – Scalability

Posted on December 3, 2024 by Thomas.Marcussen

One of the major features that has driven the success of cloud computing is scalability. This particular feature is vital to businesses like yours. And it’s how businesses will be able to swiftly and efficiently scale their IT resources.

So, it’s not surprising that Microsoft’s Windows 365 environment supports this feature because of how easy it is to use. For starters, deploying Cloud PCs is going to be a relatively simple exercise. But, if your organization’s demands for computing resources such as storage and processing power change, then you’ll be able to address those demands with very little fuss. And with the growing interest in cloud computing, Windows 365 needs to be a top consideration as the service of choice.

What is Scalability?

So, what exactly is scalability with regard to cloud computing? Simply put, this refers to the ability to either increase or decrease your IT resources at your convenience. And it’s a valuable feature to have when your business needs require it.

Therefore, if your business is growing, you can swiftly make the necessary changes to your cloud computing environment. Gain additional resources such as storage, processing power, and bandwidth. And you can easily do this without the potentially huge financial outlay that may otherwise be required to upgrade your hardware or change your infrastructure. This will then translate t more cost-effective business operations. And it will boost your performance even further.

Whatever cloud services your business would like to use, scalability will be key in ensuring that you get the best possible experience. Fortunately, for clients of Windows 365, the system functions in a way that enables you to scale quickly so that businesses, regardless of size, can easily meet their computing needs.

Although we often think of scaling up for growing business, in some cases, you may find yourself needing to scale down. As a result, admins can also remove virtual desktops according to the needs of the business and not just increase the number.

Scalability Features of Windows 365

With Windows 365, Microsoft offers clients the next step in desktop virtualization technology. It gives organizations plenty of features that will help to optimize IT operations and increase productivity. Among these features include those that can help you to swiftly scale up or down according to your needs. In this section, we’re going to look at some of these scalability features.

FLEXIBLE PRICING

In addition to offering clients two versions of the service － Windows 365 Business and Windows 365 Enterprise － Microsoft has a flexible pricing arrangement in place to meet different needs. You can find the lowest-end SKUs costing $20 a month and the highest-end at just over $150. The pricing model is meant to ensure that both small and large enterprises can find something to adequately meet their requirements without having to pay for more than they need.

For instance, regular frontline workers will not need anywhere near the same computing power as web developers, software engineers, etc. And the benefit of having this fixed monthly subscription is that it makes it easier to plan accordingly for your IT expenditures.

Furthermore, despite there being two different editions to cater to different types of organizations, the range of features that will be available to clients is pretty much the same. This helps to alleviate any concerns about potentially getting an inferior service to clients paying for the higher-end subscription plans.

So, even if your organization is relatively small at the moment, Windows 365 allows you to pay only for what you need, and then as you continue to grow, you can eventually scale up as needed without worrying about significant additional expenses.

SELF-SERVICE PORTAL

The availability of self-service is something that can help to streamline business processes and enhance overall client satisfaction. Relying on manual processes as well as depending on external support, can massively hinder the efficiency with which your business can operate.

This is why Windows 365 provides clients with a self-service portal whose aim is to ensure that it eliminates as many obstacles as possible. Therefore, by giving clients the control needed to perform certain actions, we can expect to see fewer disruptions and faster implementation of important changes.

With this control, admins can create, manage, and deploy virtual desktops very quickly and without any trouble. And this will also help to minimize IT friction because of the reduction in downtime as well as dependency on help desks.

Simply put, getting greater control allows your business to run more smoothly and without needing any additional IT resources. This is something that will also benefit you financially as you can expect a reduction in IT expenses.

RESOURCE ALLOCATION

One thing that we should not forget is that virtual resources are similar to your regular traditional resources in that they are exhaustible. It’s important to remember that this ‘cloud’ that we so often talk about requires physical hardware on the other side. This means that when it comes to the allocation of resources, we should not abandon the principles that we have been using all along.

We’ve already discussed the flexible pricing that Windows 365 clients can leverage. But businesses can still have concerns about the cost of cloud computing resources. Hence the need for resource optimization to ensure that resources are being placed precisely where they are needed.

Microsoft wants Windows 365 to be as cost-efficient as possible for clients, which is why you can allocate resources in a way that maximizes usage and thus improves productivity. By directing resources such as memory, storage, and processing power to areas with the heaviest workload, you can enhance the efficiency of your business processes.

With the ideal resource allocation strategy in place, you can also reduce your cloud computing costs. And the best way to craft that strategy is to have a full understanding of how Windows 365 works, the workloads of various users, and the network your organization uses.

RAPID DEPLOYMENT

One of the things that can make businesses hesitate about implementing new technologies is the potential downtime. Whenever possible, businesses want to avoid spending several days or weeks deploying new software. Getting a new system set up as quickly as possible is the most ideal scenario. And Windows 365 is designed precisely for this purpose. One of the things that Microsoft constantly repeats about Windows 365 is its ease of use and deployment.

Even without bringing in additional IT resources, you can easily have a new Cloud PC within half an hour. As the age-old cliché goes, “time is money,” and so being able to set up new Cloud PCs this quickly only makes Windows 365 that much more attractive.

Therefore, whether it’s deploying new virtual desktops or scaling up your computing resources, Windows 365 can handle this in minutes, not hours or days. This means that when the need arises, businesses can make a swift response to changes in computing resource demands.

CENTRALIZED MANAGEMENT

Decentralized systems can breed a lot of chaos that can negatively impact how efficiently your IT staff can work. If a problem arises and is dealt with in one department but keeps occurring in other departments, then your organization’s productivity will expectedly suffer.

Centralized management capabilities such as those you get with Windows 365 will not only improve performance but will help to potentially reduce operating costs while simultaneously enhancing overall security. Administrators can utilize a single console to monitor and manage all virtual desktops, thus making the job easier. By leveraging these benefits, your business can scale its computing resources quickly and without compromising on security or efficiency.

INTEGRATION WITH MICROSOFT AZURE

An undeniable part of the success of Windows 365 is the fact that it exists on Azure infrastructure. Because of this, it can take advantage of components of the already successful Azure Virtual Desktop (AVD). This gives Windows 365 access to arguably the most secure platform you can get. Azure’s industry-leading security measures and identity management can provide Cloud PCs with more than adequate security.

Furthermore, businesses will benefit from exceptional computing resources, including virtual machines. There are also databases, computing power, and as much storage as companies need. And you get access to these vast resources. Moreover, as your business continues to grow, you’ll have the option to implement a secure upscale of your resources. The reason why all of this is achievable, with almost no difficulty whatsoever, is because of the tools and services. Essentially, you’ll be using the same arsenal of resources you usually use for the process.

Benefits of Windows 365 Scalability

As we’ve already discussed above, scalability plays a key role in how businesses can efficiently utilize their resources. The scalability features that Windows 365 avails to its clients come with several benefits:

REDUCED COSTS

Probably the biggest benefit your business stands to gain from the above-mentioned features is reduced IT expenditure. Because of how easy the scaling process is, you won’t need to bring in any additional IT personnel to do the job. Moreover, you also don’t need to make costly infrastructure changes or purchase additional hardware. All of this, combined with the flexible pricing plans and self-service portal, will help your business to reduce IT expenses. And this is something that will be particularly beneficial to smaller enterprises that could struggle with the costs of scaling their computing resources.

IMPROVED EFFICIENCY

Businesses know that occasionally unexpected opportunities will occur, and the ability to effect a swift response will be essential if they are to take advantage. The centralized management and rapid deployment features available with Windows 365 will give you just that. If you suddenly experience a significant increase in traffic, then you will need to respond with a quick and efficient scaling of your computing resources. And this should be done without compromising performance or quality of service. You can be certain that if you miss this opportunity, another business will be eagerly waiting to take advantage.

INCREASED FLEXIBILITY

Windows 365 is great for offering your employees increased flexibility in their working conditions. But this flexibility also extends to the entire organization. Setting up IT infrastructure is often a very costly endeavor for any business. So, having a service like Windows 365 helps businesses to purchase only what they need. And as the business grows, you won’t have to worry too much about scaling up or down, as necessary. This is because Windows 365 is flexible enough to do that quickly and cost-efficiently. Businesses, large or small, can easily adapt to a changing environment without the usual challenges that often accompany the task.

ENHANCED SECURITY

Remote work obviously comes with its fair share of security concerns. This is why a lot of businesses are apprehensive about migrating to the cloud. Windows 365, however, has a foundation built on Azure cloud infrastructure. And it offers excellent security. Organizations will know that users, regardless of where they are working, should be just as secure as those working on-premises. The security measures you put in place will significantly reduce the risk of malicious access to employees’ devices and your organization’s network. In addition, the centralized management capabilities simplify the management and monitoring of all virtual devices. This results in an ability to fortify your security posture even more.

Wrap up

Scalability should be a key priority for any business, regardless of sector. You need to have strategies in place to scale as needed without hindrance due to a lack of resources. As your business grows, new clients should be able to receive the same quality of service that has built your reputation thus far.

And this is why services like Windows 365 are offering businesses the kinds of capabilities that will adequately meet their needs at whatever stage of growth they may be. The ease with which you can scale allows your business to evolve efficiently and without incurring unnecessary costs. Windows 365 could just be the technology you need to help take your business to the next level.

Igniting The Future of AI With Microsoft

Posted on November 12, 2024 by Thomas.Marcussen

Every year, Microsoft holds its Ignite conference, which is open to all partners, IT professionals, developers, and IT enthusiasts. At this Ignite 2024 event, attendees will be treated to keynotes, sessions, and hands-on events. These will be delivered by Microsoft experts as well as other industry leaders.

This year, at Ignite 2024, the key focus will be AI, the role that Microsoft is playing, and what people can expect in the short and long term. We have all probably had some experience with the impact of AI and machine learning processes on how we conduct our business.

So, considering all the cutting-edge innovations currently in development, you can expect Ignite 2024 to be an exciting and informative affair.

The impact of AI on business

OPERATIONAL EFFICIENCY

The capabilities of AI have resulted in a positive impact being felt across different business sectors. With the transformative effect of AI, enterprises can significantly improve how they operate. As the age-old cliché goes, time is money.

By using AI, your organization can start to operate more efficiently by automating most of your time-consuming and repetitive tasks. The benefit is that employing a better and much faster process for dealing with these tasks. This will free employees up to focus on more productive tasks. Expectedly, this could give you an edge in today’s very competitive business landscape.

DATA ANALYSIS

There is no denying the importance of data in the success of any enterprise. But, with the availability of big data, organizations need reliable tools to quickly help them sift through that data and provide valuable insights. Due to the exceptional tools that AI provides, businesses can gather and swiftly analyze huge volumes of data in a very short time.

Consequently, this gives you valuable insights regarding client wants and needs. And when coupled with information about the general behavior of the market, you can immediately start implementing the necessary actions.

Moreover, AI can help minimize human error in the data analysis process while also picking up trends or anomalies that may have gone unnoticed.

IMPROVED SECURITY MEASURES

As businesses increasingly look to AI and cloud-based solutions to improve efficiency and productivity levels, the need for robust security measures becomes more apparent. Every organization needs to be adequately prepared when dealing with the sophisticated attack methods that cybercriminals are using.

Fortunately, AI can also play a key role in your security strategy. Similarly to how it analyzes data for improving your business operations, it can detect patterns or anomalies that could weaken your security posture. By helping identify these issues, AI enables you to reinforce your security measures. It also ensures that sensitive data remains out of reach for unauthorized access.

CUSTOMER ENGAGEMENT

AI can be an extremely useful tool that your organization can utilize to improve the customer experience. The efficient analysis of large amounts of information can give you incredible data insights that are necessary for developing an ideal personalized customer experience.

A lot of companies and brands are already using AI customer service automation to create a more efficient 24/7 customer support system. Not only can services such as these provide excellent feedback, but they can help customers resolve simple issues much faster.

Furthermore, having information that allows you to personalize customer engagement will help employees deliver higher levels of customer satisfaction.

Ignite 2024 Conference

This year, the Ignite conference will not only be focusing on all the latest Microsoft innovations. It will also be taking a deep dive into the power of AI. Attendees can additionally expect to learn about how the power of AI can drive productivity across different industries.

From Microsoft personnel to leading industry experts, the event will offer plenty for participants to choose from with a schedule packed with plenty of sessions and hands-on training. All of this will be taking place at the McCormick Place Convention Center, conveniently located in Chicago, Illinois.

Apart from those leading the sessions, you can expect to meet experts from various tech sectors whose expertise could be invaluable to your organization. However, it’s not just the leading experts who will be around. You also get to meet tech enthusiasts with different levels of experience.

Networking among various groups of people can provide you with greater information about all the amazing innovations happening around the globe. In addition to these groups of people, expect to see business leaders and Microsoft partners who will have plenty to add to the experience.

Why should you attend?

When it comes to tech conferences, one may wonder why they should bother attending. After all, with countless blogs, podcasts, and various other tech platforms, you have plenty of choices regarding where and how you get your tech news and updates. Despite this, however, there are some very good reasons why you should consider attending events like Ignite 2024.

UNIQUE OPPORTUNITIES

Attending tech conferences can give you learning opportunities that other platforms cannot deliver. You get to interact with Microsoft experts, industry leaders, and other professionals. The wealth of information available from keynote speeches, hands-on workshops, and breakout sessions can be instrumental to professional development. Both the learning experience and the engagement with top experts will give you an edge that will not only benefit you but your company as a whole.

CULTIVATE CONNECTIONS

We can all appreciate the value that networking can bring to our lives. From expanding your career prospects to professional development, cultivating mutually beneficial connections can often be the key to success. We’ve all heard the expression, “It’s not what you know but who you know.”

Granted, this doesn’t always ring true. But there’s no denying the impact that well-developed networks can have on one’s career and business endeavors. By connecting with like-minded individuals, you get the opportunity to interact with others who may inspire your creativity. It’s here that you’ll find those who can expose you to cutting-edge innovations. Moreover, you can learn insights that only individuals with certain expertise can provide.

LEAVE YOUR COMFORT ZONE

Another great thing about attending conferences like Ignite is that it takes you out of your comfort zone. Whatever you do and wherever you work, immersing yourself in an environment away from your typical daily routine can be a refreshing and motivational experience.

Take the time to learn about the latest AI and machine learning innovations. Also, commune with others and share ideas. See what other experts, professionals, and IT enthusiasts have to offer, and it might just inspire you to greater success. And if nothing else, enjoy the time off away from work and make the most of it!

Presence of sponsors

As already mentioned, in addition to Microsoft personnel, Ignite 2024 will have plenty to showcase from other industry experts. As the drive toward empowering companies with AI and machine learning technology gains momentum, plenty of tech businesses are pushing the boundaries with innovative solutions. Some of the sponsors you will be seeing at the event include:

Intel – a tech giant that is working on hardware and software solutions, designed to help enterprises benefit fully from AI. It should be exciting to see what products and services they are developing to enable organizations to support AI at scale.
AMD – one of the key things that AMD is doing is working on high-performance hardware and software products to leverage the full power of their AI solutions. Additionally, by tailoring the capabilities of their products and services to your unique needs, AMD contributes to more efficient operations.
Rubrik – with the threats that enterprises are constantly dealing with, solutions that can fortify your data security are necessary. Due to the capabilities of AI, Rubrik can do a lot to enhance your cybersecurity through swift threat detection and analysis, recovery, and resilience.
Kyndryl – businesses have much to gain with innovative solutions that speed up the development and implementation of AI-powered processes. Companies can learn how to simplify their operations while potentially scaling up productivity by leveraging generative AI at scale.
Dell Technologies – Dell is heavily invested in developing infrastructure that is optimized for AI. Businesses need to have products and services that are powered by AI and that can be deployed anywhere. Considering this, you can expect to learn about the work Dell is putting in to eliminate barriers and support companies with their AI strategies.
Fujitsu – Fujitsu is focused on providing companies with AI platforms and technologies uniquely tailored to their needs. The goal of this approach is to empower businesses to take advantage of the full power of AI technology and get the best ROI.
NVIDIA – NVIDIA plays a central role in the processing power of AI due to its GPUs, which are fundamental to AI computations. This allows us to benefit from more efficient AI processes. And this is crucial for the further development of AI and its applications across different industries.

Additional event information

The Ignite 2024 conference will be running from November 18-22, 2024. However, attendees should know that day one is an optional half-day. The conference will come to a close on the afternoon of the 22nd. For those attending online, the dates will be from November 19-21. And they also get live streams for keynotes and some sessions. Additionally, they will have access to the following features:

Session scheduler
Attendee and Featured Partner directory
Digital Favorites
On-demand access to keynotes and sessions
Digital swag, including wallpapers, Microsoft Teams backgrounds, and more.

DAY 1

In-person attendees who will be in Chicago for day one (November 18) with a Technical or Partner Business pass can take advantage of this opportunity to add a pre-day lab or workshop. Running officially from 1:00 PM to 5:00 PM CT, this will be available for an additional fee of USD $325. As a participant in these interactive sessions, you can start preparing yourself for what’s to come in the days ahead.

PLUS PASS

If you’d like to have exclusive access to the Microsoft Ignite room block at the Hyatt Regency McCormick Place and Marriott Marquise Chicago, then you’ll need a Plus Pass. This pass, previously known as a Premier or Convenience Pass, is available as an add-on to a full conference registration pass.

Those who are interested will need to move quickly, as this pass will be available on a first-come, first-served basis and only while rooms are still available. With the Plus Pass, you will have access to a dedicated check-in station on Level 3 of the West Building, from where you can pick up your name badge and official conference swag.

ACCOMMODATION

Reserving a hotel can be done during the registration process. In-person attendees will find that there are pre-arranged hotel room blocks at hotels offering exclusive rates to Microsoft Ignite 2024 registrants. However, only reservations made through the registration website will qualify for the event rate. This means that hotels won’t be able to book rooms at the event rate through their reservation offices.

Wrap up

Attending the Ignite 2024 conference promises to be quite an experience. One that everyone who wants to stay a step ahead of the latest in AI innovation should be excited about. Take advantage of the opportunity to commune with Microsoft experts, industry leaders, and multiple other professionals. And with an online platform available, even if you can’t make it to Chicago, you can still partake in plenty of events from wherever you may be.

Understandably, the world is bristling with excitement over the transformative effect of AI on industries across different sectors. We all want to see how these innovations will continue to impact our business operations. As such, the conference which we are now counting down to is one not to be missed.

Nerdio: Enhancing the Windows 365 Experience

Posted on November 6, 2024 by Thomas.Marcussen

For years now, many organizations have been looking at remote work situations to assess just how feasible this can be for their operations. Undoubtedly, businesses would want to know the cost implications of establishing such a setup. They’d also want to know the difficulties involved and how security issues are addressed, among other things.

This is why Windows 365 has garnered plenty of interest in recent years. With the Windows 365 Cloud PC, businesses can expect to get powerful virtual PCs that are easy to set up, cost-efficient to run, and highly secure. And when you bring a service such as Nerdio into the mix, you can offer clients an even better experience.

Explaining Windows 365

Let’s start by going over what exactly this product is. The Windows 365 Cloud PC is a virtualization service that Microsoft introduced to businesses a few years ago in 2021. The service’s design enables users to stream their Windows 10 or 11 desktop, its settings, any applications, and content from the Microsoft Cloud to any of their devices.

As a business, this means that your workers can experience the full Windows ecosystem whether someone is using a personal or corporate-owned device. Regardless of where they are working, Microsoft aims to take the cloud computing experience to a higher level.

Having an option like this opens up vast possibilities for businesses. Workers no longer need to be restricted to the physical confines of their office buildings and can work from anywhere. Some surveys show that as much as 73% of today’s workers want to have the option to work remotely. We can see why a lot of organizations show a growing interest in this service.

So, with essentially what is an Operating System-As-A-Service solution, Windows 365 offers virtual desktops that can be accessed in any modern web browser. And with a large number of available features, businesses can get the digital solutions necessary to bring about technological transformation.

Benefits of Windows 365

Windows 365 has plenty of great features that make it an attractive option for many businesses. Among some of them, organizations can expect:

IMPROVED FLEXIBILITY

As a virtual workstation with access from anywhere, the Windows 365 Cloud PC gives users increased flexibility regarding where they can work. With an internet connection and a modern work browser, you can access your Cloud PC wherever you are. Additionally, you have the freedom to use any device, be it your PC, Mac, iPad, Android device, etc.

This simplifies working outside the office even more. You don’t necessarily have to go out and purchase new devices that would enable you to access your Cloud PC. Moreover, if individuals get to use the devices that they are most comfortable with, this may potentially increase productivity for some.

GREAT SECURITY

With all the flexibility and remote access that Windows 365 offers, it is imperative that the security measures be of the highest standard. Fortunately, as data is stored on a Microsoft Cloud, clients enjoy guarantees that their data is extremely secure. And this can be further enhanced by using Zero Trust principles.

Features including strict authentication of all users and use of just-in-time and just-enough-access, among others, provides you with the kind of cyber security needed for the complexities of today’s modern environment and the hybrid workplace. Therefore, admins will have less to worry about regardless of whether people are in the office or working remotely.

COST-EFFECTIVE

Hardware costs can be prohibitive for businesses, especially for those that have just started operations. By using Windows 365, organizations can pour their finances into other critical areas because hardware expenditure is significantly reduced.

And since heavy computing is being carried out on the cloud, you won’t need to worry about having the latest, most powerful devices. This is something that benefits even the more established organizations as well.

Using Windows 365 can help to reduce the costs of regularly refreshing your hardware. As long as your devices meet the minimum requirements, you can use them just fine.

REDUCE YOUR CARBON FOOTPRINT

Data centers can be the cause of significant carbon emissions. As such, considering options like Windows 365 for virtual workstations can go a long way in reducing an organization’s carbon footprint. Especially when the Microsoft Cloud operates far more efficiently than traditional data centers.

Some have even stated that it may operate up to 93% more efficiently. And when you combine that with reduced hardware refresh cycles, your organization can potentially make huge strides toward achieving a green operation. Any organization attempting to achieve net-zero emissions may find using Windows 365 to be hugely beneficial towards achieving that goal.

ACCESSIBILITY

One of the best features of Windows 365 is that it’s not a service that targets only big businesses. From massive organizations to smaller ones with less than 300 users, most can find an option that can meet their unique needs.

Microsoft offers two core subscription models, Windows 365 Business for smaller enterprises and Windows 365 Enterprise for the larger ones. Arguably, the best thing about these options is that they share the same range of features. They also provide several Cloud PC configurations from which to choose.

What is Nerdio?

After going over what Windows 365 is and what it offers, one may naturally wonder what Nerdio is and why you would need it. By definition, Nerdio is a deployment, management, and optimization platform for Managed Service Providers (MSPs.) It’s a solution for those using Azure Virtual Desktop and Windows 365.

Its design helps users simplify the use of their virtual workstations by addressing challenges that clients may often encounter. For instance, people who have previously had issues with storage management in the native solutions will get the assistance they need with managing storage.

In addition to increasing user efficiency, one of the most attractive features of Nerdio for businesses is that it aims to help enterprises with native Microsoft Cloud technologies to run more cost-efficiently.

Tools like the Cost Estimator provide precise information that will help you plan accordingly for the technologies you intend to use. Therefore, not only will virtual desktop users be empowered, but organizations will have a tool that can minimize costs.

Prerequisites

Before your organization can deploy Nerdio Manager for Enterprise (NME), you will need to meet several requirements, including the following:

VNET AND SUBNET

You’ll first need to pre-create a VNET as well as a SUBNET. If your environment is Active Directory-joined, then you need to have connectivity to Active Directory or Microsoft Entra Domain Services domains. You should also verify that DNS and any peerings or WAN connections have been established and are working. Before you can deploy NME, you need to check the following:

AVD and Azure should have several necessary URLs and ports available.
Tasks in NME will require additional URLs, which must be accessible for the successful completion of the provisioning process.

DIRECTORY CREDENTIALS AND SERVICE ACCOUNT

To join host virtual machines to the domain, there will be directory credentials required. Additionally, you’ll need a service account with delegated privileges to join computers to the domain. You should note that a domain account could be suitable but is not necessarily required.

ADMINISTRATOR PRIVILEGES

The administrator responsible for carrying out the NME deployment must have the necessary privileges for Microsoft Entra ID and the Azure subscription. Nerdio recommends the Global Admin and Owner privileges as the best option for simplifying the deployment process. Admins should be aware that NME is not assigned as Global Admin or Owner on the subscription.

Despite that, you still need these permissions to complete the setup. Furthermore, if you have access to another Global Admin user capable of granting consent to the required permissions for NME, the Global Admin privilege becomes unnecessary. However, subscription owner privileges still remain necessary.

FUNDED AZURE SUBSCRIPTION

This subscription is another requirement, and it must have the following resource providers:

Microsoft.DesktopVirtualization
Microsoft.Compute
Microsoft.Storage
Microsoft.Automation
Microsoft.RecoveryServices
Microsoft.SQL
Microsoft.Insights

Most of these resource providers should be automatically enabled by the deployment from the Microsoft Azure Marketplace. Not only that, but NME needs to validate if any resource providers are missing during the initial configuration.

Reasons to choose Nerdio

It’s also important to know that there is far more to Nerdio than just simplifying virtual desktop use or increasing cost efficiency. In this section, we’ll be going over why your organization needs to consider Nerdio as a potentially essential tool for your business operations. According to information provided by Nerdio, there is far more on offer than just cost-savings, and this includes:

AUTOMATION AND REPEATABILITY

Most businesses can appreciate how automation can significantly improve efficiency and minimize human error. This means that certain, often mundane, tasks can be carried out with a greater degree of consistency as well as accuracy.

By providing automation, Nerdio can help you optimize workflows and reduce time wastage. And with almost everything you can do within Nerdio automation, this places the service at least a notch above similar products.

It’s not rare to find management tasks within Windows 365 that some may find too complex or time-consuming. This is precisely why Nerdio would be the ideal solution for handling such issues. The ability to automate some of these repetitive tasks will not only save time but also contribute to cost efficiency.

Furthermore, IT teams will be glad for the help that Nerdio offers them as it reduces their burden by automating routine processes such as on-demand desktop provisioning, desktop (image) management, and software deployment.

DISASTER MANAGEMENT

One of the unfortunate things that businesses need to prepare for is system outages. Whether it be due to software/hardware faults or some cyber security event, every organization needs to have a plan in place to handle disruptions. Without the capabilities to swiftly identify and rectify the problem, productivity will grind to a halt, and businesses can suffer massive financial losses.

Ideally, you would want to minimize downtime as much as possible to prevent prolonged customer dissatisfaction. Here is where Nerdio can come through for organizations with excellent tools:

Proactive Measure	Service
Automated regular critical data and system backups	Most people will appreciate the need for having secure data backups in case the unexpected ever happens. So, in the event of a cyber attack, or hardware failure, etc, you can quickly have your system restored. With Nerdio automating this process, you can expect swift, consistent backups with the risk of suffering data loss reduced to a minimum.
Disaster recovery as a service (DRaaS)	This unique solution gives organizations a reliable backup in the event of a systems failure. Having your data and systems replicated to an alternative region safeguards against prolonged downtime in case of disaster. In some cases, your system may be back up in under 30 minutes.
Specified alternative VM sizes and types	Sometimes, organizations may encounter resource shortages in Azure regions. When facing such situations, Nerdio has the capabilities to help you resolve Azure compute capacity limits by providing fallback VM sizes. Therefore, even if your preferred VM size in the region is unavailable, you can still continue with operations such as host creation, auto-scale, auto-grow, and auto-heal.

MANAGEMENT MADE SIMPLER

Nerdio offers clients a great solution to simplify management that comes in the form of three-click management. This service provides your Help Desk with a powerful and user-friendly portal that enables you to manage all aspects of Windows 365.

By using this feature, your organization can easily manage multiple features from one place, including RBAC with an end-user portal, performance and utilization monitoring, alerts and notifications, and MSIX AppAttach, among many others.

DYNAMIC SCALING

Most people can probably agree that manually handling the scaling up and down of resources during traffic spikes can be a burdensome task. This is why organizations with regularly fluctuating workloads can leverage dynamic scaling to minimize time wastage while optimizing resource usage. Nerdio monitors various aspects, such as CPU and RAM, that provide essential data that can be used to determine the actions that need to be implemented.

Additionally, to ensure an even better experience, this service extends to storage as well, and this includes attached disks, Azure files, and more. Ultimately, this service ensures that your business runs as efficiently as possible by helping to allocate resources accordingly. Whenever traffic spikes occur, those who require greater access to resources will get what they need when they need it.

UPDATES AND PATCHING

Keeping up with routine updates can be a hassle for a lot of people. Whether it’s for personal or corporate devices, sometimes people won’t implement the necessary actions to ensure that their devices maintain high levels of security and performance. Most of the time, the reason for this is simple – performing these processes manually can be labor-intensive and thus time-consuming.

Also, recognize the errors that one could easily make. With a lot of IT teams already burdened with a never-ending list of tasks, many virtual machines under their control may end up not getting necessary updates and patches, leaving them vulnerable.

Fortunately, Nerdio has a solution for this by offering automation for the update and patching process, thus lightening the load on IT departments. One of the ways you can take advantage of this is by setting up recurring schedules within Nerdio that will automatically install updates a pre-determined number of days after Patch Tuesday. Once this is set up, Nerdio will update your chosen image with the latest patches and the sys prepping process. All this while removing the complexities that the administrator may otherwise have to deal with.

After the update process is complete, you can choose a host pool to test the updates. By doing so, you can verify that all apps are working as they should and that you don’t have any driver or performance issues. Another thing that Nerdio will handle is backing up critical components and integrating them with the Azure Computer Gallery.

With a safety net in place, you can easily go back to your previous versions if the situation ever calls for it. This means that you get to roll out the updated image to your production host pools using the same automated mechanisms only after you’ve satisfactorily tested that everything works as you want it to.

PROOF OF BUSINESS VALUE

The process of establishing an entire AVD environment can potentially be such a massive task that few would envy taking on. Nerdio can help you make this task a lot more manageable by enabling you to provision multiple host pools and machines that can be availed to users within a couple of hours.

Similarly, when a client wants to start a Proof of Value, Nerdio uses this same mechanism. Leveraging the same mechanism helps to maximize efficiency for your organization. Moreover, this can also be combined with scaling profiles.

Nerdio enhances the Windows 365 experience

Nerdio already has a great setup with AVD, so it should come as no surprise that it can also offer services to improve the Windows 365 experience. Moreover, Nerdio Manager starts by providing additional management capabilities for users in addition to what they already get with the native Windows 365 service. Those familiar with the excellent image management options that Nerdio provides for AVD will be glad to know that this will be extended to Windows 365 as well. Not only that, but you’ll be getting it in a single management interface, side-by-side.

With everything being automated and scheduled according to your convenience, image-based software deployments, as well as updating and patching MEM-managed Windows 365 machines, should become much easier.

Those who may find themselves in need of a File Server or an Azure Files file share will benefit immensely from the auto-scaling, auto-provisioning, and fine-tuning that Nerdio Manager can deliver. However, this only applies to Enterprise Windows 365 because it has the same network flexibility as AVD. Some of the options you can look forward to are listed below:

Readying your environment with the necessary prerequisites for Windows 365.
Creation and management of on-prem network connections and provisioning policies.
Creation and management of desktop images, including backups and versioning.
Management of Active Directory profiles.
Assignment of licenses, groups, and users.
Cloud PC provisioning as well as re-provisioning.
Cloud PC machine restarting.
Leveraging a single interface to manage multiple environments.
Management of Cloud PC user settings.
Providing a comprehensive overview of all provisioned Cloud PCs and their status.
There is an audit of everything, and this can be viewed in detail.

But, before you can enable Windows 365, you need to know a few things. If you are going to successfully complete the process, the individual who wants to enable Windows 365 must be a global administrator. You also need to verify that an Intune license is available in the Entra ID tenant where Nerdio Manager is installed.

Furthermore, you should ensure that the Entra ID has the requisite approval on an application permission request consent page. If you are presented with an option to “grant consent on behalf of my organization“, you must approve.

Wrap up

Cloud computing has evolved to a point where it can offer businesses exceptional computing abilities that are difficult to ignore. By working with services such as Windows 365, organizations can take advantage of very powerful virtual workstations regardless of their choice of physical devices.

Users will have excellent accessibility with great security measures in place to ensure business networks are well protected. And if you want to enhance the experience even more, then partnering up with Nerdio can help you do just that. It provides you with tools that will make setting up and managing your virtual desktops a far simpler task. By doing so, you can lighten the burden for admins and potentially improve overall productivity.

Exciting New Features Coming To Windows 365 and Microsoft Intune

Posted on October 30, 2024 by Thomas.Marcussen

When it comes to which tech products and services to use, businesses certainly have plenty of choices. There are so many players in the tech landscape that winning over new clients is often a huge challenge. With this in mind, tech companies need to go above and beyond to retain the customers they already have. For Microsoft, this means ensuring its Windows 365 and Intune offerings continuously update and offer new features.

Doing this helps these services continue to deliver the exceptional quality that customers expect. But more importantly, these services want to enhance the experience even more so that they remain the best in class. With that said, what can we expect from these products in the near future?

What’s coming to Microsoft Intune?

Intune is one of the leading endpoint management platforms available. It is constantly pushing the boundaries of what it can offer to customers. Especially now, with the growing interest in hybrid and remote workforces.

Microsoft Intune is helping companies better manage access to organizational resources. It’s also simplifying app and device management across various devices. With this in mind, new features are consistently in development to improve management. And some of those upcoming features to be excited about include:

Microsoft Intune: On-Demand remediations – single device

We should expect the rollout for this one to begin in December 2024. Remediations are excellent tools that help you address problems a lot faster. These script packages will detect and resolve common support issues on a user’s device. And they’ll do so before they even realize there’s a problem. By running remediations on-demand on a single device, you can immediately start resolving issues. Find resolution without waiting for the predetermined remediation schedule.

Microsoft Intune: Enrollment time grouping for iOS/iPadOS automated device enrollment

Enrollment time grouping (ETG) for iOS/iPadOS automated device enrollment (ADE) is another feature. It will support targeted apps and policies in reaching devices faster. This helps minimize delays, common with device setup.

However, it’s only going to be part of the new iOS/iPadOS enrollment policies. For devices to be part of that group upon enrollment, admins need to add a static Entra ID group into the enrollment policy. This will also reduce the latency of targeted apps and policies. The rollout is on the schedule for October 2024.

Microsoft Intune: Scoped and targeted device clean-up rule

The preview will be available in November 2024, with the rollout starting the following month. With this rollout, admins will be able to clean up inactive devices from their tenant by providing capabilities of running these rules at a platform level. I’m sure we can all attest to the need for a clean environment.

Microsoft Intune: Security Baselines for HoloLens 2

To get the best level of security for your organizational resources, it is advisable to use the security baselines that Microsoft considers the best practice guidelines. This should enhance your security and improve the experience in deploying and supporting HoloLens 2 devices to customers in various industries. The rollout will be coming in October 2024.

Microsoft Intune: SCEP certificate delivery

With the rollout scheduled to begin in October 2024, Microsoft Intune is offering this solution to its customers as well as other external partners. This feature’s design can deliver SCEP certificates with all the necessary security requirements to devices to mitigate the KFC issue.

Microsoft Intune: Enhanced device inventory for Windows devices

Few things can increase work efficiency the way that easily having access to all the information you need when you need it can. This is what businesses will get when this service rolls out in October 2024. And it will enable them to obtain more inventory information about their Windows devices. You get to specify which device properties you need to collect as well as from which devices. With this done, you can view that information for your devices.

Microsoft Intune: Simplified App Control policy creation experience (curated workflow)

In keeping in line with the need to increase efficiency, this solution’s upcoming October 2024 update rollout will do a lot to make life easier for IT admins. This capability will help you configure App Control policies with built-in toggles in the console that expose all App Control for Business capabilities.

Microsoft Intune: Work-hour access controls for Front-Line Workers

This solution can contribute significantly to simplifying workforce management as well as enhancing your overall security posture. Coming in October 2024, this feature will help IT admins with work-hour access controls for front-line workers. Once workers have clocked out, admins can swiftly put in place measures to prevent Teams access or notifications.

Microsoft Intune: Endpoint Privilege Management on single session Azure Virtual Desktop

Anything that can simplify user management will be a welcome addition to the tools that IT admins already have. With this in mind, admins will be happy, as it enables them to use Privilege Management elevation rules and policies to simplify how they manage standard users on Azure Virtual Desktop. The rollout for this one is on the schedule for September 2024.

Microsoft Intune: Endpoint Privilege Management rules support specifying allowable command arguments

Similar to the previous solution, this one is also coming to market in September 2024. This will give admins Endpoint Privilege Management rules support that can specify a list of allowable command parameters. Consequently, this will restrict elevation to only the allowed or mandatory arguments.

Microsoft Intune: New design for Windows Company Portal app

This new and updated design should give users a platform that is easier to use and streamline workflow. You should expect to see changes in the Home, Devices, and Downloads & updates pages. These intend to enhance the overall user experience. Additionally, this updated design will be very simple to understand and thus use. It will clearly highlight any areas that require action from the user.

Windows 365 features in development

For Windows 365, Microsoft has provided us with information about the exciting new features that are currently in development but not yet released. These should help improve the security posture of organizations and enhance the end-user experience. We haven’t found any release dates as of yet. It would be useful for planning purposes to look at what we could soon see coming to our Cloud PCs.

DEVICE MANAGEMENT

Features	What to expect
Support for symmetric NAT with RDP Shortpath	The goal is to develop an RDP Short path in Windows 365 such that it can support setting up an indirect UDP connection using Traversal Using Relays around NAT (TURN) for symmetric NAT. Most are probably aware that TURN is a widely accepted standard for device-to-device networking for low latency, high-throughput data transmission.
Chroma subsampling default change to 4:2:0	Both Intune and Windows 365 want to help enterprises operate more efficiently. And in this case, that can be achieved by reducing monitor support issues. The Windows 365 service will be able to do so by defaulting the chroma subsampling at 4:2:0 (instead of the previous 4:4:4).
Cloud PC gallery images update to Microsoft Teams 2.1	Another feature that we should expect to see in the future is Windows 365 Cloud PC gallery images with Microsoft 365 applications being updated to use Microsoft Teams 2.1. These images will include: Windows 11 Enterprise + Microsoft 365 Apps 21H2Windows 10 Enterprise + Microsoft 365 Apps 22H2Windows 10 Enterprise + Microsoft 365 Apps 21H2
Windows 365 support for HEVC video coding	Windows 365 is also working on providing support for Hardware High Efficiency Video Coding (HEVC) h.265 4:2:0 on compatible GPU-enabled Cloud PCs.
Azure network connections inactive state	In the future, some Azure network connections will start getting marked as inactive under some conditions. These conditions are as follows: ANCs not associated with provisioning policies for more than four weeks, ANCs with provisioning policies that have no Cloud PCs associated with them for more than four weeks. IT administrators need to be aware that inactive ANCs will be skipped during health checks and cannot be assigned to provisioning policies. However, if need be, you can reactivate these ANCs.

DEVICE SECURITY

Features

What to expect

Cloud PC support for FIDO devices and passkeys on macOS and iOS

Many consider Fast Identity Online (FIDO) to be the future of authentication measures. These protocols allow you to swiftly and securely authenticate to various services without the need for a password. Because of the ease of deployment, convenience, and extremely high security, it’s no surprise that FIDO is now widely supported and used. Therefore, macOS and iOS users will be glad to know that Windows 365 is working on enabling Cloud PCs to support FIDO devices and passkeys for Microsoft Entra ID sign-in on their devices.

MONITOR AND TROUBLESHOOT

Features	What to expect
End user manual connectivity check	I’m sure we’ve all experienced the frustrations that always come with faulty connections. All one wants in that instance is to quickly figure out what’s wrong and resolve it. Currently, connectivity health checks are run on individual Cloud PCs, but in the future, end-users will have the tools to manually run connectivity checks on their Cloud PCs from windows365.microsoft.com.
Update to Cloud PC action status report	The Cloud PC action status report officially allows you to view the actions that admins have taken as well as on which Cloud PCs these actions have been taken. In addition, you get to see the status of these actions. To access this report, you need to sign in to the Microsoft Intune admin center. Once there, select Devices > Monitor > Cloud PC actions (preview). With the update that is soon to come to the Cloud PC action status report, you will be able to view batches of devices in which actions have been activated. Furthermore, customers will be able to see the batch current progress.

PROVISIONING

Features

What to expect

New health check: UDP TURN (preview)

The Azure network connection (ANC) health checks are one of the more unique features that Windows 365 provides. These health checks, which are run regularly, help to ensure that the provisioning of Cloud PCs is successful in addition to verifying that end-users are getting the best possible Cloud PC experience. The update that Windows 365 has mentioned, will see a new UDP TURN being added to the Azure Network Connections health checks.

SECURITY

Features

What to expect

New settings for Windows 365 security baselines

In the near future, customers should expect to receive new configuration settings for the Windows 365 security baseline. These Windows 365 security baselines provide customers with a set of policy templates that are founded on security best practices and experience from real-life situations. By using these baselines, customers can obtain security recommendations that will improve their cyber security and reduce the risks facing their networks. With these security baselines, security configurations for Windows 11, Windows 10, Microsoft Edge, and Microsoft Defender for Endpoint will be enabled. Before fully implementing any Configuration changes, however, it’s always safer to first test the security baseline on a pilot group of Cloud PCs.

Wrap up

Getting updates and new features is always an important part of keeping our apps and devices performing at optimum levels. Technology is constantly evolving. And without regular updates, the user experience can suffer negative impacts within a short space of time. Devices can slow down, apps can develop issues that hinder productivity, and security can become compromised.

This is why Microsoft works hard to stay ahead of the issues with a stream of new features and services frequently released to Microsoft Intune and Windows 365. These upgrades guarantee end-users that they will continue to receive industry-leading quality of service, enabling their user experience to improve even further.

Microsoft Ignite 2024: An Event Not To Miss

Posted on October 4, 2024 by Thomas.Marcussen

The impact that AI is having on businesses has been growing steadily for several years now. With its integration into key software and applications that many companies use, AI can offer many advantages. These include automation of certain processes, minimizing human error, greater operational efficiency, and more.

Hence, it’s not a surprise that this year’s Microsoft Ignite will be placing its focus on the power of AI. There will be much for attendees to learn that will enable them to modernize their businesses and optimize productivity. For those still considering attending, there are plenty of reasons to convince you to make the trip.

What is Microsoft Ignite?

Before we get into what you can look forward to at Microsoft Ignite 2024, let’s go over what exactly Microsoft Ignite is. Simply put, it is an annual conference hosted by Microsoft that targets developers, IT professionals, and partners. Attendees of these annual events will learn plenty about the latest Microsoft innovations. There are countless exciting sessions as well as hands-on events.

However, the conference is not just about Microsoft’s latest technologies. Attendees also get the opportunity to network and collaborate with other professionals.

This means that in addition to picking up new skills and techniques, you get to expand both your professional and social networks. And those planning on attending this year will be heading to the McCormick Place Convention Center in Chicago, Illinois. The event is scheduled to run from November 18 – 22, 2024.

Microsoft Ignite 2024

This year’s event certainly appears to be one that will be well worth attending. With a key focus on taking full advantage of the power of AI and the Microsoft Cloud, there should be plenty to learn that will benefit businesses.

Unlike before, the technology that we now have available can provide people in just about any industry with the expertise they need whenever they need it. Microsoft wants to enable clients to fully appreciate what they have available to them. The Microsoft team also wants to make sure everyone gets the best out of it.

At the Microsoft Ignite 2024 conference, you can expect to learn about solutions that can modernize your organization and manage your own apps.

In addition, these solutions will improve business and data security, optimize productivity, and help expand key networks that your organization depends on to thrive. Going through this learning experience can massively impact how businesses enhance their work operations.

Trying to keep up with all the technological innovation can be a massive task when you consider everything else you need to get done.

So, taking a few days to attend a conference will help. It’s where you can tailor your experience to learn what’s most important to you and can be a great way to sift through the huge amounts of information we constantly deal with.

Things To Look Forward To

Kicking off the conference, attendees can expect inspiring and informative keynote sessions. These are delivered by Microsoft executives as well as other special guests. These sessions are eye-opening in covering all that’s going on in the tech space and all the innovations that people can look forward to. In addition to keeping up with what’s going on through various tech platforms, the keynote sessions can help to provide an even more comprehensive overview of benefits.

Expectedly, Microsoft CEO Satya Nadella will take the lead. On opening the event, he will be sharing what we should expect from Microsoft both in the short and long term. Expect to hear about groundbreaking work that is taking place to optimize the use of AI. There will be insights into all brilliant technologies that are on the horizon, set to bring about great change in business as well as personal lives.

TECH-RICH CONTENT

Anyone who previously attended Ignite will confirm. There is so much to learn from the sessions that Microsoft has planned for the conference. All the developers and IT professionals can find something that they will enjoy partaking in, and that draws their interest.

To further enrich the experience, attendees will get more than just experts in certain areas appearing on a podium to give a presentation. You get to participate in hands-on sessions as well as immersive workshops that offer an in-depth look at technological development across various areas of interest.

ADVANCED AI AND MACHINE LEARNING

Advanced AI and machine learning have the potential to bring about huge positive changes for enterprises. By leveraging the emerging power of AI, organizations can benefit from the automation of cumbersome manual processes dealing with data and decision-making processes.

Integrating AI and machine learning into an organization’s processes can create a far more efficient system that utilizes data-driven insights. As most will be aware, this is the era of big data. And we need technologies that help to analyze that data, allowing us to take swift action when required.

Part of the key focus of Microsoft Ignite 2024 will be to thoroughly examine cutting-edge techniques. Moreover, there will be a focus on the potential for positive transformation in various areas of industry. Because of the learning capabilities of machine learning models, predictions and decision-making processes are always improving.

By extension, this means that we should also expect business environments to change in a way that can improve operational efficiency. One of the main areas of interest is the raft of machine learning services that Azure is bringing to the table. The applications of these services can enable better data analysis, improved decision-making, and increased productivity.

THE LATEST AZURE INNOVATIONS

Microsoft Azure is one of those platforms where so much innovation is happening that it would not be difficult to miss some things. So, when you look at it from that perspective, you can appreciate the value of attending the conference.

There will be much to learn regarding areas such as making the most of on-premises, multi-cloud, and edge environments to give your organization countless advantages. The additional skills you can pick up can enable you to simplify business operations and implement measures that can increase productivity.

FORTIFYING BUSINESS NETWORKS

All of us are aware of the security risks that all businesses have to deal with as the sophistication of cyberattacks continues to grow. No organization can afford to be relaxed when it comes to security protocols. Without adequate security measures in place, you simplify the task of nefarious actors out there who are looking to compromise your networks. And if they manage to achieve that, the cost to your organization may potentially leave your business crippled.

At Ignite 2024, attendees will get the opportunity to learn about the best available cybersecurity measures. Enterprises need to start using enhanced defense mechanisms and zero-trust principles to strengthen their data security. Putting in place such measures while also leaning on the invaluable insights you constantly receive will enable you to not just defend yourself but be proactive in how you go about it. Microsoft can provide you with just the right tools to ensure that your IT professionals have all they need to safeguard their networks.

EXPANDING YOUR NETWORKS

Regardless of which industry you work in, networking can be a key part of implementing successful strategies. Meeting the right people can enable you to develop mutually beneficial relationships that could ultimately take your business to entirely new levels. For IT professionals, developers, and even IT enthusiasts, events such as Ignite 2024 can put you in contact with countless like-minded individuals whose expertise you can tap into. You will meet people from not only the U.S. but other countries as well.

The great thing about networking is that it’s far more than just taking from others. But your skills and expertise may be of great value to other professionals. You never know how raising your profile in this manner may help you in the future. Such a network may give you access to unparalleled expertise that could bode well for some of your current and future projects.

Not to mention the opportunities that may be available to you simply because someone put your name forward in a meeting. And if nothing else, meeting new people may enrich your social life and allow you to enjoy the conference beyond the learning sessions.

LINK UP WITH THE EXPERTS

Attending workshops and hands-on sessions is one thing, but another thing that attendees will appreciate is the opportunity to meet some of the experts. This can be hugely beneficial in helping you get a more comprehensive understanding of the material that may have been discussed in a workshop. I’m sure we’ve all probably been in a situation where we still had a ton of questions after a workshop, but there just wasn’t enough time to address them all.

Fortunately, at the conference, Microsoft addresses that with an “Ask the Experts” zone. This will give attendees the chance to further interact with Microsoft engineers as well as other experts. By creating such an opportunity, attendees will be given any further information they need, and may potentially help them add a few more valuable IT professionals to their networks.

Online attendance

Now, at this point, you may be thinking to yourself that if you can’t make it to Chicago, then the Ignite conference is not for you. However, you would be wrong. Microsoft appreciates that there are plenty of folks in the U.S. and across the globe who would love to attend the event but can’t make it for one reason or another. To ensure that all guests and anyone who wants to participate in Ignite 2024 can do so, Microsoft is offering interested parties the option to attend the conference online.

Undoubtedly, this is wonderful news for anyone who cannot physically travel to Chicago. You can attend the conference comfortably from wherever you may be. The best part of this is that you can get involved at no cost. So, prepare yourself to learn plenty from keynotes and breakout sessions and even participate in live discussions. All those connecting online can join in:

Live-stream keynotes
Live-stream breakout sessions
Live hybrid discussion sessions
Digital swag
Microsoft Cloud Skills Challenge

In addition to what you get with the online experience, you can access features such as attendee and featured partner directory, attendee networking, session scheduler, on-demand access to keynotes, breakouts, and discussion sessions.

Enjoy the city

Apart from attending the conference, you can also take advantage of this opportunity to enjoy the city. Chicago, being a place that is rich in culture and has countless activities that you can partake in, can be a great place to relax and refresh while away from the office. You can take the popular Chicago Architecture River Cruise as a great way to explore the incredible architecture of this city.

And once you are done marveling at the city’s architecture, you can move on to a walking and food tour that will take you to must-see landmarks while also enjoying the culinary skills at various eateries. Once your day’s activities are done, you can continue your good time by checking out the vibrant after-hours scene. Whether you are looking for live music, shows to attend, or just a nice restaurant, there’s bound to be something for you.

Wrap up

Development in the AI and machine learning space is coming on in leaps and bounds. There is plenty of innovation going on all around us, and Microsoft is right in the middle of it. We are seeing better solutions for the analysis of big data, improvement of decision-making, and productivity tools.

At the Ignite 2024 conference, there will be sessions on all this from Microsoft personnel and other experts. Regardless of which industry you work in, this event will have plenty on the schedule that can impact you. So, whether you are traveling to Chicago or attending online, this event is one that you should not miss.

Microsoft Intune: The Key to Enhancing Endpoint Management

Posted on August 27, 2024 by Thomas.Marcussen

As technology continues to evolve, businesses like yours are constantly looking for solutions that can give them that little bit extra. What may appear to be small innovations will eventually add up to give you significant advantages over other organizations.

One area where businesses stand to gain massively concerns cloud-based management solutions. The potential benefits of using solutions like Microsoft Intune include getting access to excellent features, enhanced security, and improved endpoint management among others.

IT admins will get to work better because they have the flexibility to oversee users and their various devices, even if they are personally owned. Considering all there is to gain, we need to take a look at why and how your organization should be migrating to the cloud.

Why Microsoft Intune?

If your organization has a well-run IT infrastructure, why should you even consider Microsoft Intune? What do you stand to gain? The most obvious answer would be that if your organization wants the best in endpoint management, then you would be hard-pressed to find a better solution than Intune.

Over time, Intune has firmly established itself as a leading device management solution that will offer you seamless application integration for all your various devices. It gives your IT admins the capability to ensure that all the devices and apps that employees are using are fully compliant with your organization’s security requirements.

Mobile devices have evolved to the point where they are now very much capable of performing most and in some cases all of the functions needed to do our jobs. This has inevitably created the need for the mobile device management features that Intune can offer. IT admins can monitor these devices and thus enforce organizational security policies.

This gives businesses the flexibility to empower their employees to use their respective mobile devices for work-related purposes without compromising the security of their networks. Such policies can potentially increase productivity by enabling employees to use the devices of their choice as well as work remotely.

It would be hard to advocate for Microsoft Intune without mentioning the issue of cost-effectiveness. We can go on and on about all the benefits that Intune can offer, but cost can ultimately decide for you.

Fortunately, choosing Intune is a decision that could help you reduce IT costs. Switching to a cloud-native management system will mean your business spends less on physical hardware as well as on-premises IT management systems.

This reduction in physical infrastructure will allow your organization to reallocate resources elsewhere and therefore operate with even greater efficiency.

Preparing for the future

Considering the changes we have witnessed in the tech landscape in just the last fifteen years alone, we should always be looking to future innovations. Organizations need to be in a position to take full advantage as each next big innovation rolls out.

To do that, going cloud-native would offer you the best approach. By fully transitioning to the cloud, you can put your organization in a position to fully benefit from better insights, AI analytics, as well as the multitude of other capabilities that AI can deliver.

Furthermore, using a cloud-native approach can help you centralize data which in turn will make it easier for AI to manage this data and produce actionable insights. This may help organizations enhance their security by getting a better grasp of potential future threats.

Considering new possibilities

Getting someone to change the way they do things can often be an incredibly difficult challenge. And this applies to both personal and professional life. Regardless of the benefits to gain from migrating to the cloud, it may be difficult to inspire change. If an IT team has put in the effort to create a well-designed and efficient IT infrastructure, it’s going to be hard to convince them to consider alternative solutions.

At this point, businesses will need to evangelize users who can truly highlight the beauty of the changing tech landscape and encourage their IT teams to expand their visions.

It’s going to take more than a simple presentation to convince people that they are potentially missing out on some significant innovations. Rather than simply forcing change on people, proving to them how they stand to benefit from the changes a solution like Microsoft Intune can bring, may work a lot better.

As individuals grow more familiar with the amazing endpoint management capabilities that Intune can offer, you may start to see a greater willingness to change their mindset.

Of great importance, however, is to exercise patience and not expect to see an immediate change in how people approach things. Let them experience for themselves the value that going cloud-native will give them.

Implementing changes

Once you get the ball rolling concerning changing the mindset, it’s important to start looking at how exactly you can start making the necessary changes. Even as more and more recognize the benefits of making the transition, the pathway to achieving that may still cause some trepidation.

Fortunately, the feedback that Intune receives from its clients will go a long way in helping others move forward. IT professionals need to realize that the dependable key information flow processes they use will remain intact.

According to those who have successfully migrated, one of the best ways to smoothen the transition is by establishing small pilot programs and then rolling out changes incrementally. With that done, you can place at the forefront of the project individuals who have fully bought in and are willing to help bring others to a similar vision.

Doing it this way enables you to minimize any negative outcomes while simultaneously maximizing the effect that the small wins give your organization. As long as your advocates continue to communicate clearly every step of the way, you should have a much easier time implementing changes.

Working together

An important reason why Microsoft Intune has taken its capabilities to another level over the last decade can probably tie to the constant back and forth with clients. The team at Intune embarked on a process of trying to simplify things for users. They did so after discovering the challenges presented by the power and flexibility of Intune.

The various options and configurations available may be difficult for clients to master and what they often want are simple instructions telling them exactly what they need to do.

To address the concerns that clients have raised, the support team has offered what they are calling a one-size-fits-most guidance. This system provides organizations with the necessary tools to configure the basic settings required to make endpoints more secure and productive with Intune.

Clients will also be happy to discover that the Microsoft Intune documentation hub has been streamlined. There is a focus on highlighting the guidance system thereby further simplifying the implementation process.

Additionally, even more support is available from the Intune Tech Community. This team consists of fellow IT admins and support professionals.

Integration with other services

Microsoft offers its clients a wide array of products and services that enable organizations to provide their employees with the best possible tools. Having such an ecosystem means that end-users can produce to the best of their abilities with everything they need availed to them. Microsoft Intune plays a key role in this through its integration with other products and services that aim to help in endpoint management such as:

Configuration manager

This platform is ideal for on-premises end-point management and Windows Server. It’s a service that will help you increase the productivity and efficiency of your IT teams, maximize both software and hardware investments, and empower your end-users by ensuring they get what they need when they need it.

Configuration Manager offers you a powerful management application that will help you better manage every device in your organization. Using both Intune and Configuration Manager together can be a great way for those who are still hesitant about going fully cloud-native to gradually make the transition at their own pace.

Windows autopilot

Windows Autopilot gives you a service developed to eliminate the provisioning challenges that have plagued organizations in the past. With Autopilot, you can provision new devices and send them directly to users from an OEM or device provider.

Thus, what you will get is a greatly simplified deployment and provisioning process that can deliver a custom out-of-the-box experience with an easy self-service configuration process. Not to mention how features like zero-touch, self-service deployments can make life easier for IT admins.

Endpoint analytics

Endpoint Analytics delivers valuable insights that enable your business to assess how it is operating as well as evaluate the quality of the experience that users are getting. By going over this data, your organization can quickly identify policies or hardware issues that are negatively impacting end-users. Doing this allows you to be proactive in dealing with problem areas and thus maintain consistent productivity levels.

Additionally, this service will give your organization better visibility concerning frequently encountered problems such as long boot times. Often, these issues tend to persist unnecessarily simply because IT doesn’t have the necessary insights.

Microsoft 365

Microsoft 365 is undoubtedly one of the best cloud-powered productivity platforms that you can get. Signing up for this service will give you excellent end-user productivity Office apps such as Outlook, Teams, Sharepoint, OneDrive, and more. And one of its most attractive features is that you can use it anywhere.

You can easily install it on PCs, Macs, tablets, and phones. You can easily use Microsoft Intune to deploy Microsoft 365 apps to the users and devices in your organization. Furthermore, the continuous support that you get means that you will always have the most up-to-date modern productivity tools that Microsoft offers.

Microsoft defender for Endpoint

All of the services we have gone over in this section will require excellent security features and that is what Defender for Endpoint offers. It gives your organization the capabilities to prevent, detect, investigate, and respond to threats. By going through Intune, you get the option of creating a service-to-service connection between Intune and Defender for Endpoint. Each organization can customize the compliance policies it uses to ensure that it establishes what it considers to be an appropriate level of risk. And when you combine this with Conditional Access features, you can prevent access to organizational resources by any devices that fall short of your compliance regulations.

Expanding the vision

As we’ve already discussed, there are plenty of benefits that you can gain from using Microsoft Intune. But, what’s even better is that within the Microsoft ecosystem, there is so much that your organization can take advantage of. And one of the solutions that has been growing in popularity over the last few years is the Windows 365 Cloud PC.

Clients will be able to leverage the Microsoft Intune admin center to use their Cloud PCs. The latter provides the opportunity to stream Windows 10 or Windows 11 onto almost any device, thereby offering users the ability to take their desktops anywhere.

In a world where the attraction of remote work is constantly growing, having the option of the Windows 365 Cloud PC can be key to bringing in top talent to your organization. Following the pandemic a few years ago, once business operations started to normalize, there were plenty of people who realized that they would actually prefer having the option to work part-time or even full-time from home.

For organizations that have decided that this is something they can do, leveraging Microsoft Intune to go cloud-native would offer arguably the best way to do it. From there, you can tap into the Cloud PC environment and offer your employees powerful, secure desktops they can use from anywhere.

What does the Cloud PC do for your organization?

We’ve talked a bit about Intune and why your organization should consider going for a cloud-native approach. But, what about the Windows 365 Cloud PC? In addition to what you get with Intune, the Cloud PC offers plenty of benefits that will enhance work solutions in the cloud.

One that most businesses will appreciate is the flexibility that is provided allowing organizations to select a plan that is most ideal for them. Not only that, but you are not permanently stuck with the option that you pick. Depending on the needs of end-users, you’ll be able to scale your operations up or down as you see fit.

ENHANCED SECURITY

Whenever the issue of remote work comes up, security is going to be a massive concern for businesses. This is why the Windows 365 team has gone to great lengths to ensure maximum data protection for end-users and their organizations.

The Cloud PC takes full advantage of Zero Trust principles to assure clients that their data will have very high-level security. To further strengthen the security of the platform, clients are recommended Conditional Access as well as Azure AD Multi-Factor Authentication.

FEW TO NO COMPATIBILITY ISSUES

Another concern that clients would understandably have has to do with integrating specific applications with the Cloud PC. For IT admins in particular, losing control over how they manage devices is a real concern. Fortunately, when it comes to Windows 365, compatibility with your existing applications should not be a problem.

It’s because the Cloud PC’s design supports any apps you may have been using on Windows 7, Windows 8.1, and Windows 10, should work on Windows 365 as well. And in case you encounter any challenges, you will be able to get assistance via the Fast Track App Assure program.

EASE-OF-USE

If you’re trying to convince people about a new service, your job will be significantly harder if the platform is complex and therefore difficult to navigate. With the Windows 365 Cloud PC, however, the platform aims to ensure simplicity. Even from the initial setting up, organizations won’t need to bring in specialist IT personnel to configure their Cloud PCs.

And once that’s done, IT admins can continue to manage and deploy endpoints similarly to how they’ve been doing all along. End-users as well won’t face any huge challenges because they will continue using the same applications.

Enrolling devices in Microsoft Intune

Having looked at what Intune can offer your organization, the next step is to go over what you need to know about enrolling devices. Together with Microsoft Entra ID, Intune will facilitate a secure, streamlined process for the registration and enrolment of all devices that require access to your organization’s resources. You can start using Intune for endpoint management once users and devices have been registered within your Microsoft Entra ID (tenant).

During the enrolment process, Intune will install a Mobile Device Management (MDM) certificate on the enrolling device. It’s this certificate that will handle communication with the Intune service and thus enable Intune to begin enforcing organizational policies such as:

Compliance policies designed to help users and devices meet the organization’s rules.
Enrollment policies that determine the number or types of devices someone can enroll.
Configuration profiles that configure work-appropriate features and settings on the devices.

Policy details

Generally, you should expect policies to deploy during the enrolment process. However, certain groups that may have more sensitive roles within the organization will often require stricter policies.

So, what a lot of organizations will first do is create a baseline of required policies for users and devices. Once you’ve established this baseline, you can start building on it depending on the use cases as well as the needs of various groups.

Devices running Android, iOS/iPadOS, Linux, MacOS, and Windows will all be eligible for enrolment in Intune as long they are running a supported version of the OS. By default, you’ll find that enrolment is enabled for all platforms.

But, if the need arises, you can use an Intune enrolment restriction policy to restrict certain platforms. Microsoft Intune enables mobile device management for both personal devices and corporate-owned devices.

Personal devices

In this category, the devices being referred to are personally owned PCs, tablets, and mobile phones. In bring-your-own-device (BYOD) scenarios, these personal devices can be MDM enrolled in Intune. Because of the supported enrollment methods, employees or students can use personal devices for work or school tasks.

IT admins will need to add device users in the Microsoft Intune admin center, configure their enrollment experience, and then set up Intune policies. Once that’s done, the device user needs to navigate to the Intune Company Portal app to start and complete the enrolment.

Corporate-owned devices

This category includes the same type of devices – PCs, tablets, and mobile phones. Except in this case, these devices are owned by the organization and then given out to employees or students for use at work or school.

For these types of devices, Intune offers organizations more granular settings and policies. You should expect to find more password settings for corporate-owned devices thus enabling you to enforce stricter password requirements. Devices that meet specific criteria will be automatically marked by Intune as corporate-owned.

Wrap up

At this point, we have all witnessed the increase in cloud usage by companies of all sizes. The various platforms available have been able to offer businesses an increasing array of capabilities that are constantly improving.

Solutions like Microsoft Intune can now provide powerful endpoint management systems that allow organizations exceptional flexibility and scalability. These capabilities will allow businesses to operate their IT infrastructure more efficiently and provide end-users with the tools to thrive.

To cater to different businesses and where they may be on their journey, Intune gives you pathways that you can take as you migrate to the cloud. You can choose what works for you from co-management until you get to full cloud-native. There is much to be gained from leveraging the cloud not only right now but as we look at all the future innovations currently in development.

Optimizing Software Packaging – What To Know About Advanced Installer

Posted on August 5, 2024 by Thomas.Marcussen

One of the best tools that IT professionals can have in their arsenal is a packaging tool. This simplifies their tasks and saves them time. Businesses need to provide their IT teams with comprehensive packaging tools that are easy to deploy and highly compatible.

One such product that has garnered a significant amount of interest is Advanced Installer. What you get with this powerful packaging tool for developers, businesses, and ISVs, among others, is an advanced application packaging software. It simplifies software deployment in a big way.

And before fully committing, organizations can try out the trial version. It comes with full features allowing them to make a more informed decisions. To help you with that task, let’s go over what you have to look forward to with Advanced Installer.

Introduction

As already mentioned, Advanced Installer is a software packaging and deployment tool designed to eliminate the challenges often encountered with packaging and updating software.

Clients get an all-in-one packaging tool that can create, edit, update, and repackage MSI, EXE, App-V, APPX, and MSIX. Because of the user-friendly and intuitive design as well as the plethora of features and capabilities, IT professionals should expect an application that optimizes the packaging process.

Businesses will also appreciate how easy the integration will be. They’ll also enjoy the compatibility that provides support for various platforms and formats. In addition, IT professionals can easily create customizable and visually appealing installers. They can also benefit from the integration of Advanced Installer with popular development tools and environments.

Ultimately, using Advanced Installer gives your organization a product that enables you to build reliable MSI packages. These meet the latest Microsoft Windows logo certification requirements and generally follow the recommended Windows Installer best practices.

Requirements

Before proceeding with the purchase and installation of Advanced Installer, it’s also important to be aware of the specific requirements that the application demands. In the table below, you’ll find both the hardware and software requirements that you need to know.

Hardware	Software
Required minimum: Core 2 class CPU1GB RAM1366 × 768 screen resolution 2GB hard drive space	Advanced Installer IDE – for Advanced Installer to run properly on a system, you will need: Windows 7 or newer. The latest Windows Platform SDK. However, this is optional as it will only be required when building certain types of packages.
What is recommended: i5 class CPU4GB RAM1920 × 1200 screen resolution 10GB hard drive space	Create Install Packages – Advanced Installer produces MSI or EXE install files that are designed to run on: Windows 7 or newer Windows Server 2008 R2 or newer.
	Create MSIX Packages – Advanced Installer produces MSIX packages that are designed to run on: Windows 10 version 1507 or newer Windows Server 2016 (Long Term Servicing Channel) or newer.
	For Java – Advanced Installer for Java can create install bundles to install Java programs on these versions of MacOS: Mac OS 10.x Power PC Mac OS 10.x Intel.
	Windows 10/11 Compatibility – Advanced Installer and the EXE/MSI install packages it generates have been shown to work on Windows 10 and Windows 11.

Latest upgrades

Some new, recently announced updates for Advanced Installer are available. One in particular of great interest is the new nested Context Menus for File Associations in MSIX. The goal of this feature is to give organizations a more organized and efficient user interface. It ultimately streamlines the management of file associations.

As a result of this, you should have improved navigation and better usability. Moreover, clients will now also find a reboot option for NewPrerequisite and UpdatePrerequisite command lines coupled with support for Java versions 19 through 22.

The above improvements combine with new translations for default strings, a refactored build log for improved clarity, and an AppInstaller theme that is now supporting BrowseDlg dialog for a better user experience. More than just the new features, however, Advanced Installer has addressed challenges that clients were facing, including:

Fix EXE icon issue in non-English language projects.
Addressing the problem of the “Install side-by-side” option not always preserved on upgrades.
Fixing the reboot prompt issues during uninstallation.
Resolved the issue that was causing files to be digitally signed twice in an MSIX build.
Address the problem causing the description field to fail to set MSI name in UAC using trusted signing.
Corrected the issue causing the system to not prompt for the certificate password when the entered password was incorrect.
Resolved the problem of scheduled tasks failing if they were scheduled to run at task creation.

Available features

In the table below, you’ll find a few of the wide range of features that Advanced Installer has to offer.

Architect	Enterprise	Professional	Freeware
Repackager – seamlessly capture, customize, and repackage existing installations into MSI packages. Upgrade legacy setups to Windows Installer technology.	Updater – checking for downloads and installation of patches and updates is done automatically.	IIS – Web Sites, Virtual Directories and Web Applications, App-Pools, User Accounts.	MSI – create valid MSI setups for your applications that meet all the written and unwritten Windows Installer rules.
MSI Quick-Edit – enables you to create, transform, or edit existing MSI packages directly from the Advanced Installer GUI.	JSON Files Updates – without writing any code, you can manage JSON files that are part of the installation package or present on the target machine.	Multilingual and Localized – get over 30 translations that are all ready to use, as well as easy to modify and create.	UAC – build installers that will run seamlessly on Windows 10/8.1/8/7/Vista supporting the security model.
MSIX Custom Scripts – use PowerShell scripts to resolve any of the compatibility issues of your application after you create an MSIX.	Installer Continuous Integration – provides built-in support for integration with Azure DevOps, GitHub Actions, Jenkins, TeamCity, and Bamboo.	Themes – also get over 50 built-in beautiful themes to give your installer a professional look.	Imports – bring in relevant imports from Visual Studio, InstallShield LE, Inno Setup, WiX, Eclipse, NSIS, and regular MSI/MSM packages.
MSIX Package Editor – can offer an immediate view of your package content, enabling you to customize anything from Advanced Installer’s user interface.	Dialog Editor – enables you to visually customize existing installer dialogs or create new ones entirely from scratch.	Custom Actions – if you execute your code during installation, you can extend your installer’s capabilities.	32-bit or 64-bit – provides the option to build setups that both run and install on 32-bit processors and/or the latest 64-bit Intel and AMD CPUs.
MSIX Modification Packages – enables you to extend and update your MSIX packages. You’ll also be able to separate your main application package from its updates, thus speeding up Windows 10 updates.	Convert EXE installers to MSIs – an extremely capable wizard that converts any EXE setup into an MSI ready for network deployment through Active Directory.	Native Launcher – create a native launcher for your Java applications and customize the process name, file name, icon, version, splash-screen, JRE/JDK detection and selection, user-friendly error handling.	Side-by-side – if you have different versions of your application and want to not only install them simultaneously but have them running side by side, you can easily create packages for all the different versions.
Package Support Framework – the capabilities of the PSF integration for MSIX packages will allow you to minimize any AppCompat issues without writing any code.	Office Add-ins – leverage the included specialized templates to greatly simplify the creation of installers for popular software platform extensions, plug-ins, and add-ins.	Prerequisites – search for, download, and install prerequisite applications, frameworks, and run-times.	Upgrades – older versions of your product installed on the user’s machine will be detected and upgraded. Additionally, installation over newer ones will be blocked.

Pricing and Licensing

Once you have decided to use Advanced Installer, you can go ahead and start the purchase from the purchase page. For those who may need additional clarification on any issue, they can quickly find assistance with the support team. Once completed, you can start planning to deploy the package you choose on certain machines.

Fortunately, there is no limit to the number of machines you can deploy a package. As long as you have a licensed version of Advanced Installer, you can successfully create an unlimited number of install packages. You can then distribute these packages royalty-free to any number of users

When it comes to the issue of upgrades, you can purchase your subscription/license upgrade from the upgrades page. After upgrading your subscription, you’ll need to log out before logging in again. Once logged into Advanced Installer, you can refresh your subscription details. For clients with perpetual licenses, their license keys won’t change.

All they have to do is run the registration wizard once more in Advanced Installer. You can get access to the features from the new edition to which you upgraded by opening the project in Advanced Installer. In the toolbar, go to Home > Options > Project Type tab, and choose the desired project type.

The table below contains information regarding the pricing structure.

	Architect	Enterprise	Professional
Cost	$359 per user per month. The option for a team subscription is available.	$139 per user per month. The option for a team subscription is available.	$39 per user per month. The option for a team subscription is available.
What you get	In addition to everything that Enterprise offers, you will also get Repackager, MSI Quick-Edit, Reports Generator, App-V, MSIX (Re)packaging, MSIX Package Editor, SCCM, and Intune.	In addition to everything you get in Professional, you also get CI/CD Integration, Dialog Editor, Updater, XML Patching, Databases, Trial and Licensing, Merge Modules Authoring, EXE to MSI (wrapper), Automated VM Testing, and Drivers.	The main features available include Trusted Signing Native Integration, Visual Studio Extension, PowerShell Automation, MSIX, Themes, Services, Prerequisites, IIS, .NET, COM, ODBC, Internationalisation, Java Native Launcher, and Installer Analytics.

Registration process

After purchasing Advanced Installer, you can now begin the registration process. However, if you are using the Freeware version, registration is not necessary. Clients that opt for the Professional, Enterprise, and Architect versions will require a valid registration to continue use after the trial period has lapsed. All you need to do is navigate to the File > Help > Register menu.

ONLINE REGISTRATION

If you want to download the license online, then the first thing you’ll need is an internet connection. With that established, Advanced Installer will connect to the appropriate server and download the license file to your device.

REGISTRATION BY EMAIL

In this case, an internet connection is not a requirement for the device in question. Once you have noted your Computer ID, you can email it in using any other device connected to the internet. Coupled with the valid License Key, you should forward these details to support at advancedinstaller.com. You can also expect to receive your response within 48 hours. The response will contain your license file as well as additional instructions.

LICENSE SERVER REGISTRATION

This method of registration by using a license server is only a valid option for owners with floating licenses. You’ll need to verify that your network administrator has correctly installed and configured the License Server. You won’t be able to complete the registration if you don’t have both the server’s host name and the port number.

Wrap up

Organizations are constantly searching for productivity tools that can empower their teams and increase operational efficiency. Tools such as Advanced Installer are ideal in that they can simplify tasks such as packaging and deployment of software. The capabilities of this application will deliver a faster overall process and a seamless installation experience that minimizes headaches. And as we move forward Advanced Installer will only get better as the development team leverages the feedback from clients.

Managed Home Screen: A Configuration Guide

Posted on July 18, 2024 by Thomas.Marcussen

As a business, it’s important to always be on the lookout for devices and applications that can improve the way you carry out your business operations. With platforms such as Managed Home Screen (MHS), the benefits to your business will be clear to see for everyone.

What MHS offers is an application for corporate Android Enterprise devices. This works for those enrolled via Intune and running in multi-app kiosk mode. Once installed on these devices, MHS will function as a launcher for other approved apps to run on top of it.

In previous articles, we have gone over the new features that Microsoft has added to MHS. We’ve also covered their benefits to your organization. In this article, we’ll be discussing some of the key configuration aspects of the Managed Home Screen platform.

When do you configure the Managed Home Screen app?

Start by verifying if your devices meet the prerequisites. This is because Intune only supports the enrollment of Android Enterprise dedicated devices for Android devices running OS version 8.0. In addition, these devices should be able to connect to Google Mobile Services.

Likewise, MHS only supports Android devices running OS version 8.0 and above. If you find that the settings are available through device configuration profiles, then you should configure the settings there. This will be faster, limit errors, and give you a better Intune-support experience.

Also, note that there are some MHS settings only available via the App configuration policies pane in the Intune admin center. When using App configuration:

Head over to the Microsoft Intune admin center and select Apps > App configuration policies.
Add a configuration policy for Managed devices running Android.
Select Managed Home Screen as the associated app
To configure the different available MHS settings, select Configuration settings.

Selecting a Configuration Settings Format

To define configuration settings for MHS, there are two methods available:

Configuration designer – enables you to configure settings with an easy-to-use UI. It allows you to toggle features on or off and set values. With this method, you’ll find a few disabled configuration keys with the value type BundleArray. The only way to configure these keys is by entering JSON data.
JSON data – with this option, you can define all possible configuration keys using a JSON script.

Moreover, by adding properties with Configuration Designer, you can automatically convert these properties to JSON. Do so by selecting Enter JSON data from the Configuration settings format dropdown.

Using Configuration Designer

Configuration designer will enable you to select pre-populated settings and their associated values. In the table below, you’ll find a list of the MHS available configuration keys, value types, default values, and descriptions. The description gives you the expected device behavior based on selected values. Note that the BundleArray type of configuration keys disable in the Configuration Designer.

Configuration to customize applications, folders, and general appearance of Managed Home Screen

Configuration Key	Value Type	Default Value	Description	Available in device configuration profile
Set allow-listed applications	bundleArray	You can find it under the Enter JSON Data section	Enables you to define the set of apps you see on the home screen form along with the apps installed on the device. Entering the app package name of the apps that you want visible allows you to define the apps. Any app that you choose to allow-list in this section needs to be already installed on the device to be visible on the home screen.	Yes
Set pinned web links	bundleArray	You can find it under the Enter JSON Data section	Enables you to pin websites as quick launch icons on the home screen. Using this configuration allows you to define the URL and add it to the home screen for the end-user to launch in the browser with a single tap.	Yes
Create a Managed Folder for grouping apps	bundleArray	You can find it under the Enter JSON Data section	Enables you to create and name folders and group apps within these folders. End-users can’t rename or move folders and neither can they move the apps within the folders. Folders will appear according to the order of creation and apps according to alphabetical order. If you have apps that you want to group into folders, they must first be assigned as required to the device and must have been added to the Managed Home Screen.	Yes
Set Grid Size	string	Auto	Enables you to set the grid size for apps to be positioned on the managed home screen. Use the format “columns ; rows ” to set the number of app rows and columns to define grid size. When defining grid size, the maximum number of apps visible in a row on the home screen is the number of rows you set. Likewise, the maximum number of apps visible in a column on the home screen is the number of columns you set.	Yes
Lock Home Screen	bool	TRUE	Eliminates the ability of the end-user to move around app icons on the home screen. Enabling this configuration key locks the app icons on the home screen. End-users can’t drag and drop to different grid positions on the home screen. When turned to false, end-users will be able to move around the app and weblink icons on the Managed Home Screen.	Yes
Application Order Enabled	bool	FALSE	Turning this setting to True will enable you to set the order of apps, weblinks, and folders on the Managed Home Screen. After it’s enabled, you can set the ordering with app_order.	Yes
Application Order	bundleArray	You can find it under the Enter JSON Data section	Enables you to set the order of apps, weblinks, and folders on the Managed Home Screen. You can only use this setting if Lock Home Screen is enabled, the grid size is defined, and the Application Order enabled is set to True.	Yes
Applications in folder are ordered by name	bool	TRUE	False enables items in a folder to appear in the order they’re specified. If not for this, they will be displayed in alphabetical order.	No
Set app icon size	integer	2	With this, you can define the icon size for apps displayed on the home screen. Below are the values that you can use in this configuration for different sizes: 0 (Smallest),1 (Small), 2 (Regular), 3 (Large)4 (Largest).	Yes
Set app folder icon	integer	0	With this, you can define the appearance of app folders displayed on the home screen. The appearance can be selected from the values below: Dark Square(0)Dark Circle(1)Light Square(2)Light Circle(3)	Yes
Set screen orientation	integer	1	Using this, you can set the orientation of the home screen to portrait mode, landscape mode, or allow auto rotate. The orientation can be set by entering the values below: 1 (for portrait mode),2 (for Landscape mode),3 (for Autorotate).	Yes
Set device wall paper	string	Default	By using this, you can select a wall paper of your choice. All you need to do is enter the URL of the image that you want to set as a wallpaper.	Yes
Define theme color	string	light	Decide whether you want Managed Home Screen app to run in “light” or “dark” mode.	No
Block pinning browser web pages to MHS	bool	FALSE	By turning this restriction to True, you can prevent users from pinning web pages from any browser onto Managed Home Screen.	No
Enable updated user experience	bool	FALSE	Switching to True will enable the updated app design to be displayed along with the improvements to user workflows for usability and supportability, for MHS. However, if you keep it as False, users will continue to see previous workflows on the app An important thing to note here is that from August 2024 onwards, previous Managed Home Screen workflows will no longer be available and all devices will need to use the updated app design.	No
Top Bar Primary Element	choice		This key helps you choose whether the primary element of the top bar will be the device Serial Number, Device Name, or Tenant Name. You can only use this setting when the Enable sign in key is set to false. Otherwise, the user’s name will be shown as the primary element when the key is set to True. If you want the top bar to be visible on users’ devices, you must set Enable updated user experience to true.	No
Top Bar Secondary Element	choice		This key helps you choose whether the secondary element of the top bar will be the device Serial Number, Device Name, or Tenant Name. If you want the top bar to be visible on users’ devices, you must set Enable updated user experience to true.	No
Top Bar User Name Style	choice		This setting enables you to select the style of the user’s name in the top bar based on the following list: display name last name, first name first name, last name first name, last initial You can only use this setting when the Enable sign in key is set to True. If you want the top bar to be visible on users’ devices, you must set Enable updated user experience to true.	No

Key things to note

Ensure the Managed Home Screen app seamlessly meets Google Play Store’s requirements. This is contingent on the app’s available update at the API level. However, doing it this way translates to a few changes to how Wi-Fi configuration works from Managed Home Screen. So, some of the changes you should expect to encounter include:

Users won’t be able to change the Wi-Fi connection for the device, whether it be enabling or disabling the connection. However, despite not being able to turn the Wi-Fi on or off, users can still switch between networks.
In addition, users also won’t be able to automatically connect to a configured Wi-Fi network with a first-time password requirement. Instead, after entering the password for the first time, the configured network will then automatically connect.

ANDROID DEVICES RUNNING OS 11

All those who are using Android devices running OS 11 should note another aspect. Whenever an end-user tries to connect to a network via the Managed Home Screen app, a consent pop-up prompt will appear. This pop-up is from the Android platform itself and therefore not specific to the Managed Home Screen app.

Furthermore, users will see a request to enter a password. This happens when attempting to connect to a password-protected network via the Managed Home Screen app.

You’ll notice that the network will only change if the device does not have a connection to a network. This includes instance when you have input the right password. All devices already connected to a stable network won’t connect to a password-protected network via the Managed Home Screen app.

ANDROID DEVICES RUNNING OS 10

For individuals using Android devices running OS 10, there’s another consideration. When an end-user tries to connect to any network using the Managed Home Screen app, they will receive a prompt with a consent via notifications.

Because of this prompt, users whose devices are running OS 10 must have access to the status bar. Also, notifications to be able to complete the consent step. Therefore, IT admins may need to use General settings for dedicated devices to avail the status bar. They’ll also do so for notifications to the appropriate end-users whenever necessary.

Furthermore, users will see a request to enter a password. This happens when attempting to connect to a password-protected network via the Managed Home Screen app. You’ll notice that the network will only change if the device does not have a connection to a network. This applies even if you have input the right password.

BLUETOOTH CONSIDERATIONS

If a device is running Android 10+ and using Managed Home Screen, successful Bluetooth pairing on devices that require a pairing key requires certain conditions. IT admins will need to enable a few Android system apps and these are as follows:

Android System Bluetooth
Android System Settings
Android System UI

Managing troubleshooting issues

One of the best updates that Microsoft brought to Managed Home Screen is the introduction of enhanced troubleshooting features. Users now get access to a debug menu, which includes the pages for Get Help, Exit Kiosk Mode, and About.

This access aims to simplify the troubleshooting process for device users which can reduce downtime and thereby increase productivity. To help even further, you’ll find configurations in the table below. These help troubleshoot various problems that users can encounter on their devices:

Configuration Key	Value Type	Default Value	Description	Available in device configuration profile
Exit lock task mode password	string		Input a 4-6-digit code to use to temporarily drop out of lock-task mode for troubleshooting.	Yes
Enable easy access debug menu	bool	FALSE	Switch this setting to True and you can access the debug menu from the Managed Settings menu while in Managed Home Screen. If you want to exit kiosk mode, you’ll need to go to the debug menu to find the capability. With that done, you need to click the back button about 15 times. Alternatively, if you want to keep the entry point to the debug menu only accessible via the back button, you should keep the setting switched to False.	Yes
Enable MAX inactive time outside of MHS	bool	FALSE	If you want to automatically re-launch Managed Home Screen after a set period of inactivity, you’ll need to switch this setting to True. Note that the timer will only count inactive time and, upon configuration, will reset each time the user interacts with the device while outside of MHS. To set the inactivity timer, use Max inactive time outside MHS. This setting is kept off by default. You can only access this setting if Exit lock task mode password has been configured.	No
MAX inactive time outside MHS	integer	180	Specify the maximum amount of inactive time (in seconds) that a user can spend outside of MHS before it is automatically re-launched. Users will find this configuration set to 180 seconds by default. If you want to use this setting, Enable MAX inactive time outside of MHS must be set to true.	No
Enable MAX time outside MHS	bool	FALSE	If you want to automatically re-launch MHS after a set period of time, you must set this setting to True. The timer considers both active and inactive time spent outside of MHS. You need to use MAX time outside MHS to set the inactivity timer. This setting is kept off by default. You can only use this setting after Exit lock task mode password has been configured.	No
MAX time outside MHS	integer	600	You must specify the maximum amount of absolute time (in seconds) that a user can spend outside of MHS before it is automatically re-launched. Users will find this configuration set to 600 seconds by default. You can only use this setting if Enable MAX time outside of MHS is set to true.	No

Microsoft ecosystem provides Android users with an optimal experience

Managed Home Screen and all its features are helping to enhance the user experience. MHHS supports Android users who rely on the Microsoft ecosystem for business purposes. For years, the relationship between Microsoft and Android has allowed for a better integration between the concerned platforms. It also provides end-users a better overall experience. All of this fits in perfectly with the evolution we have witnessed in the development of excellent mobility solutions.

Over the last few years, there has been a significant increase in those who appreciate the possibility of remote work. Plenty are enjoying the option of being able to work from home. There are additional benefits, including creating their own schedules. But they can also maintain or even increase their productivity levels.

Android users make up a decent portion of Microsoft clients. So, it’s not surprising that Microsoft aims to provide users with all the solutions they need. And Microsoft outfits users to be successful in their business operations. And with Managed Home Screen, Android users get an app that can further enhance their interaction with the Microsoft ecosystem.

The ability for organizations to customize and control user experiences is paramount. It enables them to ensure that end-users will have access to everything they need while simultaneously putting in certain restrictions.

Additionally, end-users can enjoy a much-improved experience. This is because MHS enables businesses to create consistent and simplified experiences across device types and OEMs.

End-users can expect continued innovations and improved features thanks to the global network of experts established by Microsoft and Google. These client specialists, with deep knowledge of Android devices and services, significantly contribute to the ongoing development of services. They will also further enhance the user experience.

It’s because of collaborations like these and the expertise obtained that MHS users can access features that address issues on-device. It’s also how they painlessly equip Microsoft support to troubleshoot issues on-device. So, as the improvements continue to roll out, businesses and individuals will take a keen interest. All of these changes can improve how they do business.

Wrap up

If there is anything that we can expect with regard to technology, it’s that we will continue to see changes. Most intend to improve the end-user experience. The features that Managed Home Screen offers, as well as the available improvements, are a testament to Microsoft’s goal. Microsoft continuously aims to create the optimal experience for Android users.

With feedback from Android experts being a key part of development, end-users can expect ongoing improvements. They can also expect to reap the many benefits of an ever-improving Microsoft ecosystem. One only has to take a look at the depth of products and services available to Android device users. It’s then evident that businesses have plenty to benefit from with these programs and features.

Managed Home Screen: What Your Should Know

Posted on July 3, 2024 by Thomas.Marcussen

It doesn’t take too long as you go through the latest tech news and updates to realize just how badly lax security could affect your organization. All nefarious actors need is a small opportunity. And your business may end up paying dearly. This is where Managed Home Screen comes into play.

Hence the need to implement the best possible security measures that you can. And when you use platforms such as Managed Home Screen (MHS), you’ll get excellent features that will help you enhance your overall security.

The platform will give your organization the ability to customize and control Android Enterprise dedicated devices. This allow for restricted access to only what a user may require. As we continue our deep dive into Managed Home Screen, we will end up with a clearer idea of how this platform can best serve your interests.

What to know about general availability

In a previous article, we discussed the updated features that Microsoft introduced to the Managed Home Screen experience. There are a few things that businesses should know about general availability.

To begin, you should be aware that with the general availability of the updated MHS experience, all previous MHS workflows will be obsolete. Not only that, but support will no longer be available for these previous workflows. The new updated features will not be added to previous workflows, as well.

However, admins can still move to the updated experience by setting Enable updated user experience to “true” for 90 days. But, after the 90 days, the app configuration will be removed, and all devices will need to start using the updated MHS experience.

Below are some of the new capabilities recently added for the updated experience:

Brightness Slider and Adaptive Brightness – with this tool, IT admins will be able to expose a setting that enables users to access a brightness slider to adjust the device screen brightness. Moreover, IT admins can also expose a setting that allows users to turn adaptive brightness on and off on the device.
Autorotation – this next tool helps IT admins expose a setting that is designed to enable users to turn on and off the device’s autorotation.
Domain-less Login and Custom Login Hint Text – another feature coming to the updated experience will be support for domain-less sign-in. Admins can configure domain names which will then be automatically added to usernames when signing in. In addition, MHS will begin providing users with a custom login hint string on the sign-in screen.
Session PIN Inactivity Timer – in scenarios where a device has been inactive for a specified period of time, IT admins can leverage this feature to demand users to enter their session PIN to resume activity on Managed Home Screen.

Why is Managed Home Screen making changes?

With the updates that have been made to Managed Home Screen, one may be wondering what’s behind all the changes. And the simple reality is that the new features were needed. Applications need to keep improving if they are to meet the ever-evolving needs of businesses.

It goes without saying, but the competition among players in the tech space is brutal. A new application or service can be introduced to the market, and if it can do the job far more efficiently, then you may find yourself losing clients.

Moreover, organizations are now acutely aware that there are nefarious actors constantly looking for vulnerabilities in their systems and if they find any it can be catastrophic for their businesses. Updates can address any existing performance issues and vulnerabilities that may potentially exist.

In addition, new features will also address productivity issues that your business has to deal with. As technology continues to evolve, organizations like yours will be looking to improve their products and services. Updates allow you to harness the latest and very best features for your applications. This will also give your team a better user experience overall. And ultimately, your business can operate more efficiently.

Furthermore, newer updates can help you get even better performances from your devices. At one point or another, we’ve all probably had the frustrating experience of an app crashing. It’s never a pleasant experience and can result in some lost work progress. By updating your applications, you can significantly reduce the chances of these occurrences.

Benefits of Managed Home Screen’s new features

The improvements that Managed Home Screen has made will have benefits for both IT admins as well as end users. These advantages include:

Closing the security gap – enhancing your security features means that you reduce potential attack areas. Also, it’s significantly harder for hackers to carry out successful attacks. This is something that will complete by requiring end users to enter their session PIN to resume activity on Managed Home Screen. This is after the device has been inactive for a specified period. Having this feature reduces the risk of unauthorized personnel gaining access to a device when the user is not using it. To set it up, you need to set the “Minimum inactive time before session PIN is required” setting to the number of seconds the device is inactive before the end user must input their session PIN.
Quicker resolution of issues – if the troubleshooting process is ineffective, it can cause endless downtime and that’s not good for business. MHS improved that process by introducing a feature that will give users access to a debug menu. This includes the pages for Get Help, Exit Kiosk Mode, and About. What this does is give users the ability to go to the Get Help page and easily upload logs. Moreover, users will be able to view Management Resources. It allows them to launch adjacent management apps whenever necessary. With the appropriate support available, your organization can quickly address any performance issues. You can also ensure productivity levels remain optimal.
Improve ease of use – one of the best ways to help users work more efficiently is to enable them to have the option to customize certain settings to their liking. Undoubtedly, the immediate concern would be about the risk of increasing vulnerabilities. But, the solution to that is to restrict what users can customize. This provides that they still get the benefits of personalized apps and devices while maintaining high security standards. One of those settings that users can now change is device screen brightness.

Additional benefits of Managed Home Screen

With the updated features, you can expose settings in the Managed Home Screen app to adjust screen brightness for Android Enterprise devices. You’ll have the option of exposing a setting in the app to allow end users to access a convenient brightness slider to adjust the device screen brightness. Furthermore, you’ll now also be able to expose a setting to allow end users to toggle adaptive brightness.

Simplified setup – few things can help users be more productive than using an application with a clean look and access to everything you need. This is what MHS is aiming for with the addition of a top bar. Users will now have quick access to device-identifying information. You get the option to configure this top bar as you see fit. And there will be two descriptive elements available for display. IT admins get to select between serial number, device name, and tenant name for the top and bottom elements in situations where the device is not configured with sign-in.

The top bar will also give quick access to settings as well as the sign-out button. The settings wheel icon sits in the upper right-hand of the top bar. And tapping this icon will display the settings that the IT administrator has selected to reveal to users within MHS settings. Another advantage you can expect is that this settings icon will be located on the top bar by default. And to avoid compromising security, IT admins still get to pick which settings a user can configure. Or they can disable it altogether by enabling or disabling the configuration key “Show managed settings”.

Enhanced security measures for dedicated devices

As we know by now, Managed Home Screen works on devices enrolled into Intune as Android Enterprise dedicated devices. With the increasing sophistication of today’s cyber attacks, organizations need to ensure that their security is of the highest standard.

Bearing that in mind, in this section, let’s take a look at some of the settings that can improve security for fully managed, dedicated, and corporate-owned work profile devices.

Screen capture (work profile-level)

Enabling “Block” will not only stop you from taking screenshots, but will also prevent content from being shown on display devices without a secure video output. However, you should be aware that this setting is set to “Not configured” by default, and Intune doesn’t modify it. You should also know that if the default settings allow, the OS might let users capture the screen contents as an image.

Camera (work profile-level)

Enabling “Block” will prevent access to the device’s camera. Again, you should note that this setting is set to “Not configured” by default and Intune doesn’t change it. Another thing that is important for security is that Intune only manages camera access but doesn’t have access to pictures or videos. The OS may also, by default, allow access to the camera.

Default permission policy (work profile-level)

The objective of this setting is to define the default permission policy for requests for runtime permissions, and the options you have are the following:

Default (default) – Use the device’s default setting.
Prompt – Users see a prompt to approve the permission.
Auto grant – Permissions grant automatically.
Auto deny – Permissions are automatically denied.

Date and Time changes

Enabling “Block” will stop users from manually setting the date and time. Additionally, you should note that this setting is set to “Not configured” by default, and Intune doesn’t change it. This will also mean that if the OS default settings permit, users may be able to set the date and time.

Roaming data services

Enabling “Block” will prevent data roaming over the cellular network. And as before, this setting defaults to “Not configured,” and Intune doesn’t change it.

Wi-Fi access point configuration

Enabling “Block” will stop users from creating or changing any Wi-Fi configurations. Additionally, you should note that this setting defaults to “Not configured” and Intune doesn’t change it. As we’ve also seen before, if the OS default settings permit, users may be able to change the Wi-Fi settings on the device.

Bluetooth configuration

Enabling “Block” will stop users from configuring Bluetooth on the device. Additionally, you should note that this setting defaults to “Not configured,” and Intune doesn’t change it. As we’ve also seen before, if the OS default settings permit, using Bluetooth on the device may be possible.

Tethering and access to hotspots

Enabling “Block” will prevent tethering and access to portable hotspots. And again, this setting defaults to “Not configured,” and Intune doesn’t change or update it. Take note that the OS might allow tethering and access to portable hotspots by default.

USB file transfer

Enabling “Block” will prevent transferring files over USB. And again, this setting defaults to “Not configured,” and Intune doesn’t change or update it.

External media

Enabling “Block” will prevent using or connecting any external media on the device. And again, this setting defaults to “Not configured,” and Intune doesn’t change or update it. Take note that the OS might allow file transfers by default.

Beam data using NFC (work-profile level)

Enabling “Block” is going to prevent the use of Near Field Communication (NFC) technology to beam data from apps. On the other hand, if set to “Not configured“, which is the default setting, Intune will not change or update the setting. However, you should not forget that the OS might allow using NFC to share data between devices by default.

Developer settings

Enabling “Allow” will let users access developer settings on the device. On the other hand, if set to “Not configured,” which is the default setting, Intune will not change or update the setting.

Microphone adjustment

Enabling “Block” will stop users from unmuting the microphone and adjusting the microphone volume. However, if set to “Not configured,” which is the default setting, Intune will not change or update the setting.

Factory reset protection emails

You need to select Google account email addresses. Then, you need to provide the email addresses of device admins who can unlock the device after it’s wiped. When entering the email addresses, make sure to separate them with a semi-colon e.g., [email protected];[email protected]. Note that these emails will only apply in scenarios during a non-user factory reset, like running a factory reset using the recovery menu. And as with previous settings, if set to “Not configured,” which is the default setting, Intune will not change or update the setting.

System update

To determine how the device handles over-the-air updates, you’ll need to pick from the following options:

Device Default (default) – stick to the device’s default setting, meaning that when the device connects to Wi-Fi, is charging, and is idle, the OS updates automatically. For app updates, the OS first checks that the app is not running in the foreground.
Automatic – implements an automatic update process without user involvement.
Postponed – updates postpone for a period of 30 days, at the end of which users receive a prompt to install the update. For critical security updates, however, device manufacturers or carriers may block their postponement.
Maintenance Window – also provides an automatic update process but that occurs during a daily maintenance window that you set in Intune. If the installation tries and fails for 30 days, you will subsequently see a prompt to perform the installation. This setting will apply to OS and Play Store app updates.

Freeze periods for system updates

This one is optional. If you are going to set the System update setting to Automatic, Postponed, or the Maintenance window, then you must use this setting to create a freeze period:

Start date – provide a start date using the MM/DD format and it can be up to 90 days long.
End date – provide an end date using the same MM/DD format and it can be up to 90 days long.

Take note that all incoming system updates and security patches will be blocked during the freeze period. And this also includes manually checking for updates.

Location

Enabling “Block” will disable the Location setting on the device and prevent users from turning it on. However, it’s worth noting that disabling this setting will affect every setting that also relies on device location. This includes the Locate device remote action that admins use. On the other hand, if set to “Not configured,” which is the default setting, Intune will not change or update the setting.

When to enroll devices as dedicated devices

One of the things that may have a lot of people wondering is the issue of when exactly you should be looking at enrolling a device as a dedicated device. According to the information available from Microsoft, Intune’s Android Enterprise dedicated device solution is for clients who want their Android devices enrolled with no user-affinity.

On top of that, this device solution requires that the device runs Android OS 8+ and should be able to connect directly to Google Mobile Services (GMS). Below are the three main scenarios that Intune envisions for dedicated devices:

AS A DIGITAL SIGN

Typically locked into one application that shows viewers desired information. A good example of this would be the train schedules or flight schedules that you may see at the train station or airport respectively. In these particular situations, there will be zero-to-minimal physical user interaction.

TASK-BASED DEVICES

In this case, we’ll be looking at a situation of locked into a single application or multiple applications and used for specific tasks. What you then have is a setup where the device is not privy to who is using it or where. We can see an example of how this would work with package delivery drivers.

As they clock into their shift, the delivery driver receives a device. This devices helps to navigate to their location, scan packages, and complete other role-based tasks. Once the driver completes their tasks, the device can then be returned for the next delivery driver to use.

MULTI-USER, TASK DEVICES

In the third scenario, we’re looking at locked into a single app or a set of apps, and used for specific tasks. Users need to sign in on at least a single application on the device and unlike the previous scenario, the apps in this case will need to know who is using the device and when.

The general recommendation for this scenario is to enable Shared Device mode. For instance, you can look at a factory setup where a device may used by multiple people, such as shift workers, maintenance staff, delivery drivers, etc.

So, every individual using the device will get the same apps and policies, but the key difference is that the relevant information displayed by the apps will vary from person to person, depending on their sign-in information.

Wrap up

As a business, it’s crucially important to always be on the lookout for applications and services that can give you an advantage. Something that can improve the quality of what your organization is producing by enhancing worker efficiency. For Managed Home Screen clients, the platform improvements can offer such benefits.

You get features that help you maintain high security standards by allowing IT admins to put in place any necessary restrictions. But, even with these restrictions, end users will still get quicker access to what they need, faster resolution of issues, and a more streamlined workflow.

Enhancing the Intune Experience With Managed Home Screen

Posted on June 11, 2024 by Thomas.Marcussen

All the devices and applications that we use need both security and feature updates now and again to ensure that we always get the best possible performance. Whether these are personal or work devices, without regular improvements, the performances will eventually not be good enough to meet our requirements.

One of the platforms that helps to optimize the user experience is Managed Home Screen. Using this feature can deliver a better experience. Within the Intune environment, all users with enrolled devices as Android Enterprise dedicated devices can benefit.

In this article, we’ll be taking a look at what Managed Home Screen is and how it can improve workflows.

What is Managed Home Screen?

With Managed Home Screen, users get an Android application that is compatible on devices enrolled into Intune as Android Enterprise dedicated devices. The application means to cover corporate-owned devices that are running in multi-app kiosk mode.

On these devices, Managed Home Screen acts as the launcher for other approved apps to run on top of it. The benefit to IT admins is greater control over the customization of devices, as well as being able to restrict the capabilities that the end user can access. The availability of these features means that your business can:

Easily maintain control over how these devices work. The customization and control you have over the Android devices allows you to determine specifically what users can access.
Enhance the user experience by establishing a consistent and simplified experience across device types and OEMs that makes it significantly easier to perform all tasks to a high standard.
Gain access to all the relevant troubleshooting workflows that one would need to fix issues on-device. Or provide Microsoft support with the necessary tools to troubleshoot issues on-device.
Utilize an improved sign-in and sign-out experience with a device configured with Shared device mode.

Customization benefits

Additionally, the availability of customization will allow you to completely modify the overall appearance and feel of your home screen.

You can do things such as:

Set a custom wallpaper that can truly bring your branding to the fore. Or, you could use the custom wallpaper as a visual indicator to distinguish various devices.
You can relocate applications to the home screen so you have your important and most frequently used apps in a place that facilitates easy access. Not only that, but this can help you design a setup that is consistent across devices for your users.
Those who may have plenty of apps on the home screen can easily simplify things by categorizing apps into specific folders.
Because devices can have varying screen sizes, you’ll also get the option to modify the size of apps and folders appearing on the home screen.
To get even quicker access to vital app data, you can add custom widgets to the home screen.
When a device is inactive, you can set a screen saver to hide the home screen.

Dedicated devices

We just mentioned that Managed Home Screen is usable on devices enrolled into Intune as Android Enterprise dedicated devices. But, what exactly are ‘dedicated devices’? This term simply refers to corporate-owned devices not associated with a particular user. Additionally, these devices will normally be in use for performing specific tasks.

So, if you want to enroll Android devices with no user-affinity then this option will suit you. However, it’s also important to note that Intune’s Android Enterprise dedicated device solution will require that the devices run Android OS 8+ and be able to connect to Google Mobile Services (GMS).

Setting up Managed Home Screen

Setting up your device with Managed Home Screen is a process that will take several steps. But, once you have a device that meets the requirements, you can begin.

Setting up an Intune enrollment profile and device group

Start by creating an enrollment profile to generate an enrollment token first, and attach it to a device group. In the Endpoint Manager admin center, navigate over to  Devices > Android > Android enrollment > Corporate-owned dedicated devices. You’ll need to fill in the Name but filling in the Description is optional. After this, select Type. Be sure to select Corporate owned dedicated device with Azure AD shared mode if you expect that your devices may require users to access M365 applications, other App Protection Policies, or Conditional Access policies. When everything’s done, click Create.

CREATING A DEVICE GROUP

Head over to Groups > All groups > New group. You’ll need to fill in the Group Name but filling in the Group Description is optional. Make sure that the Group type is set to “security”. Then, proceed to change Membership type to Dynamic device, after which you need to Add a dynamic query. By using dynamic queries, you can have your device automatically added to a group based on the property of your choice.

Approve and assign Managed Home Screen and MORE Managed Google Play apps

This next step will ensure that the Managed Home Screen successful downloads and installs on your enrolled devices. It should also automatically launch. You’ll find Managed Home Screen already synced in the console when you venture over to navigate Apps > All apps as soon as you have linked your Intune and Managed Google Play accounts. After that, you can:

Click Managed Home Screen.
Select Properties > Assignments (edit).
Add your device group from Step 2 officially to the Required assignments.
Save.

If you want to add public, private, or web applications, go ahead and stay in Apps > All apps and choose “add.” Navigate to Select app type and choose Managed Google Play app.

Manage Android Enterprise system apps

One thing that you will notice is that system applications will often disable by default upon enrollment. To enable these applications and show the icon on the device, you start by heading back to Apps > All apps in Intune and selecting Add in the top left corner. After choosing Select, proceed to fill out the App information, and assign it as “Required” or “Uninstall” to the group that you created in Step 2. At this point, you can select “Required” if you want the application to be available on the device or “Uninstall” if you prefer that it remain hidden on the device.

Creating a device configuration profile

Having this profile is crucial because it enables you to not only configure device-level behavior but to configure kiosk mode as well. To begin the process, navigate to Devices > Configuration profiles > Create profile. Next, go to Platform, and select “Android Enterprise.” With that done, head to Profile and  select “Device restrictions” beneath “Fully Managed, Dedicated, and Corporate-Owned Work Profile.”

After this, select Create, and then you need to fill in the Name of your profile but filling in the Description is optional. Once everything is ready you can select Next.

Creating an app configuration profile

Be mindful that this step is completely optional. Once you have completed the steps already given above, you will be ready to enroll your devices. So, this step is ideal for those who want to learn how to utilize all the available Managed Home Screen features. Additionally, this step will help you to configure the complete list of features that Managed Home Screen has to offer.

In the Endpoint Management admin center, head over to Apps > App configuration policies > Add > Managed devices. Then, you need to fill in the Name and as with other sections, the Description is optional. Select Android Enterprise for platform, Fully Managed, Dedicated, and Corporate-Owned Work Profile Only for profile type, and Managed Home Screen for targeted app. As soon as you are ready to continue, select Next.

A. Using configuration designer to setup Managed Home Screen features

Choose Use configuration designer from the Configuration settings format drop-down menu. Select Add to open a panel with all the available Managed Home Screen configuration keys. Choose the configuration keys that you want to edit and then click OK. All the configuration keys have default values and if you want to modify a configuration value, hover over and then interact with each row under the “Configuration value” column. Click Next as soon as all the necessary changes have been made.

Navigate to the Assignments page under Included groups, choose Select groups to include, next  and pick the device group you created in the second step. You can review by clicking Next, and once set, click Create.

B. Using JSON data to setup Managed Home Screen features

You can complete the configuration of the home screen by using JSON to create your folders, add widgets, and order items. If you need to edit your existing app configuration profile, you can do so by clicking on the policy you just created in Apps > App configuration policies. After that, select Properties > Settings (Edit). Choose Enter JSON data from the Configuration settings format drop-down menu. You should be able to see all your existing configurations in JSON format.

B.1. Add a managed folder to your home screen

You can organize your home screen better by creating a folder that you get to manage. This is something that you can only do using JSON data format in an app configuration policy. You’ll need to add the JSON snippet below in where feature configurations go:

Replace “PLACEHOLDER_FOLDER-NAME” with a name of your choice.
Replace “PLACEHOLDER_APP-PACKAGE-NAME” with the package name of the app that you want to put inside your folder. You have the option to add as many apps as you want.
B.2. Configure custom ordering of items on the home screen

A few things will happen if you want to create a custom ordering of items on the home screen. These include:

Apps, widgets, and folders should already be added to your home screen allow-list.
The home screen should be locked because this ensures that a user cannot make changes by moving things around themselves.
A grid size for all your home screen pages should be set.
App ordering mode should be enabled.

At this point, you can set the position of an item to an assigned grid position. Note that the positions will read from smallest to largest from left to right and then top-to-bottom.

DEVICE ENROLLMENT

As already alluded to earlier, devices should be running Android OS 8+ and run with Google Mobile Services (GMS). As soon as a device is ready, you can enroll from a factory-reset state using:

Near Field Communication
Token entry
QR code scanning
Google’s Zero Touch Enrollment
Samsung’s Knox Mobile Enrollment

User credentials are not necessary during enrollment or provisioning because these dedicated devices are not user-associated. Select the type of enrollment that you want and follow the instructions given in this section.

COMPLETION OF SETUP

After the setup process finalizes, you’ll find yourself on the device’s home screen. Then, the device will proceed to sync policies with Intune after which apps will begin to download and install on the device. And after Managed Home Screen has been installed, it will auto-launch and show you all your configurations.

Improvements to Managed Home Screen

Pursuant to the feedback that Microsoft received from its clients, some eye-catching new design changes have been made to the app to optimize usability. However, these new features are only available on the updated experience.

Although, you can look forward to an improved user experience, Microsoft has not made any intentional changes to feature support and you can expect only minor changes in current functionality such as:

You’ll no longer see the company logo on the Session PIN screen, but you will still have it on the home screen.
Swiping down will no longer give you access to the Managed Home Screen settings.

Addition of the top bar

A top bar is now available to the Managed Home Screen page with the intention of simplifying access as well as to enable quick access to device-identifying information. This top bar can configure as necessary and thus allows for the display of two descriptive elements.

IT administrators can decide between serial number, device name, and tenant name for the top and bottom element in situations where the device is not configured with sign-in. On the other hand, if the device is configured with sign-in, the top element will display the signed in user’s name.

Easily discoverable settings and sign out button

Another benefit of the top bar is that it enables quick navigation to settings as well as the sign-out button. However, for the latter, this is only possible when sign-in is configured. If you go to the upper right-hand corner of the top bar, you’ll now find a settings wheel icon.

When a user taps this icon, they’ll see which settings the IT administrator has selected to reveal to them within MHS settings. One thing to note with the updated experience is that swiping down on the device will no longer give you access to settings.

You can now find the Settings icon located on the top bar by default. IT admins get to decide which settings a user can configure or disable it altogether by enabling or disabling the configuration key “Show managed settings”. There are a couple of situations in which the Settings icon will still display, and these are:

When a user is signed in, the Settings icon is available to view the user’s profile information.
When device permissions are required but no user is signed in, the Settings icon will be available for the user to grant permissions. Moreover, you won’t see any additional settings unless configured.

Updated permissions flow

Updating the permissions granting flow has been necessitated by the desire to ensure that device users do not miss essential permissions. Upon launching MHS initially, a dialogue will appear requesting users to grant any required permissions. Users can get to the settings screen where the required settings will be clearly laid out by tapping either the message or the settings wheel.

By tapping on the message, users will be redirected to the correct page in the Android settings page to grant the permission that is needed for the functionality of all configurations that are set by the IT administrator for Managed Home Screen.

In the event a user rejects the permission, a message will then be displayed on the screen and a red dot will appear on the settings app icon. Ultimately, this update to the permissions flow has been designed to prevent permissions from being missed and to optimize the functions of Managed Home Screen.

Enhanced troubleshooting features

Managed Home Screen is helping to simplify the process of troubleshooting device issues. The new features that have been introduced will give users access to a debug menu, which includes the pages for Get Help, Exit Kiosk Mode, and About.

Users can now go to the Get Help page and easily upload logs. In addition, users can also view Management Resources, allowing them to launch adjacent management apps whenever necessary.

And if you want important information on Managed Home Screen, including the privacy statements, accessibility statements, and third-party configurable compliance links, if enabled, you’ll easily find it on the About page.

The updated debug menu can only appear within settings after an IT admin has configured easy access to the debug menu. Without this action, users will need to tap the back button 15 times to unhide the debug menu.

Start using the updated experience

To begin using the updated experience, you need to follow the steps given below:

Start by verifying that the target devices are running version 2.2.0.91169 or higher of Managed Home Screen.
Within the Intune admin center, head over to Apps > App configuration policies > Add > Managed devices. (And if you already have an app configuration policy in place for the target devices, you can skip the next step)
Filling in the Name will be required, but the Description is optional. Select Android Enterprise for platform, Fully Managed, Dedicated, and Corporate-Owned Work Profile Only for profile type, and Managed Home Screen for targeted app. When everything’s done, click Next.
To configure your settings, you can use either configuration designer or JSON data. Navigate to the Configuration settings format drop-down menu, and select Use configuration designer . Choose Add and this will open the panel with the available Managed Home Screen configuration keys.
Next, you need to choose the configuration key Enable updated user experience and switch it to True. For those using JSON data, they need to add the key and value below:

“key”: “enable_updated_user_experience”,

“valueBool”: true

Lastly, head over to the Assignments page and look under Included groups. Then, you need to choose Select groups to include and select the device group that you want to include in the public preview. You can review by clicking Next, and once all is set, click Create.

Another important thing to note is that this updated experience only works on the newest version of the Managed Home Screen application. So, you need to turn on the updated app experience and then verify that your devices are running the latest version of Managed Home Screen. If everything is in order, you should expect to see the updated workflows on the device.

Wrap up

Technology has been improving at a lightning speed and an ever-increasing pace for a long time now. The devices available to us, the operating systems, as well as the countless applications, have all gotten significantly better. So, it’s not surprising that businesses want platforms that can empower their workers to operate more efficiently and thus be more productive.

With Managed Home Screen, Microsoft offers its clients a tool that will do that and more. Businesses can get a tool with a lot of great features that will help users to get more from the available technology while eliminating time-consuming distractions.

And as updates like the ones we discussed today continue to be developed, MHS users can look forward to even more improvements that will optimize workflows and enhance their interaction with Intune.