Event banner

Microsoft Intune & Configuration Manager: best practices to help you prepare for Windows 11

Event Ended
Wednesday, Jul 21, 2021, 12:00 PM PDT
In-Person

Event details

We've assembled some massive Microsoft Endpoint Manager muscle to support this hour of Ask Microsoft Anything (AMA). If you have questions on what you can implement and optimize now to better prepare you and your environment for Windows 11 upgrades, post them here! Want to troubleshoot Windows endpoint management in general? We can help with that too. Have feedback on how we can improve Microsoft Intune and Configuration Manager to better work for your organization? We'd love to hear your ideas.

Submit your questions for our engineering and product experts to answer live--or post your questions early in the Comments below and catch up when it's convenient for you.

Heather_Poulsen
Updated Jul 23, 2021

56 Comments

  • ChrisWilliams's avatar
    ChrisWilliams
    Copper Contributor
    Will there be more cross management capabilities between Config Manager and Intune moving forward to make a better single pane management point for both cloud managed devices and those which are still on prem.
  • EmyLoanzon's avatar
    EmyLoanzon
    Iron Contributor
    We currently migrated our work computers to Hybrid Join - when we deploy Windows 11, what do we need to do so that the Windows 11 computers are also in hybrid join mode?
    • Jason_Sandys's avatar
      Jason_Sandys
      Icon for Microsoft rankMicrosoft

      Hi EmyLoanzon, short answer here is nothing. The device state will be preserved during an in-place update/upgrade to Windows 11. Keep in mind though that hybrid Azure AD join is only meant as an interim path for existing devices that require a cloud identity. You should be pursing [full] Azure AD join for new devices going forward.

      • EmyLoanzon's avatar
        EmyLoanzon
        Iron Contributor
        You mean making Azure AD as the Source of Authority for our devices? We have apps that rely on on premise domain.
  • emyloa's avatar
    emyloa
    Copper Contributor
    Hello there! Will there be ways to clean up inactive devices both in MEM and Azure? MEM (Intune) has a built-in inactive device clean-up - But Azure AD does not. Will there be built in methods in Azure to clean-up inactive devices that syncs with the MEM inactive device clean up?
    • Jason_Sandys's avatar
      Jason_Sandys
      Icon for Microsoft rankMicrosoft

      Hi emyloa, thank you for the question. Similar to on-premises Active Directory, there is no built-in capability for this in Azure AD. I don't of any specific plans to add anything either. Also, similar to cleaning up on-prem AD, most organizations use a custom script that leverages the Graph API to accomplish this goal.

       

      We're interested in what you'd like to see though and why using a custom script does not meet your needs?

      • EmyLoanzon's avatar
        EmyLoanzon
        Iron Contributor
        Is there a way to automate the Azure AD Graph API script to clean up inactive devices - now and\or in future updates? Could you provide a reference to web links here? Thanks!
  • Glenntja's avatar
    Glenntja
    Copper Contributor
    I've been trialing out Windows 11 with Intune management Currently I experience issues with Always On VPN. Deploying it using the conventional Configuration Policy seems to create a VPN profile requiring me to input a Username + Password, even though the VPN client should be using a certificate When deleting the VPN client and syncing the device a new one should be created within a few minutes but it never is Attempting to create the VPN tunnel using a XML file doesn't work as well as Intune says the device is "Not Applicable" under Deployment Status Enrolling the device manually (a VM) using a Powershell Script pointing to the Profile XML seems to work and it then authenticates with the correct certificate Are you aware if this should work in Windows 11 or not?, I've not filed a bug report yet as I've been busy doing other tasks but I'd like to see that our setup works smooth on Windows 11 prior to the official launch date
    • David_Guyer's avatar
      David_Guyer
      Icon for Microsoft rankMicrosoft
      Please file feedback, and if you can do so from the feedback hub, logs care uploaded that help the engineering team understand and fix the issue. Thank you for trying out Windows 11!
    • Joe_Lurie's avatar
      Joe_Lurie
      Icon for Microsoft rankMicrosoft
      We are investigating this integration and will have more to share when more info is available. Sorry to be vague, but we are still looking into this.
  • Michael-CM's avatar
    Michael-CM
    Iron Contributor
    would be very interesting to know when all the MSIX Goodness (except the simple already included MSIX deployment) come to Configuration Manager TPs and Releases. I hope very soon for MSIX App Attach, Config Packages, Updates, Bundles etc.
  • Aremah's avatar
    Aremah
    Copper Contributor
    Is this going to be a streamed event or a text-only AMA?
Date and Time
Jul 21, 202112:00 PM - 1:00 PM PDT