newbie needs help with policies and enrolling users/devices

[MrMrkn]

Hi,

I am sort of new to Intune and Azure AD, and I am trying to understand the best I can how things work. My company is small and I only have so much time to put into it-administration, but I really would like some things to work. Now, they do not.

Primarily, I want to to be able to configure Edge policies and a client app for selected user groups. And I think the devices (or users?) must be connected to Intune to accomplish this?

I did manage to enroll my own computer to intune using this guide, but that seems not to affect the Edge settings in the computer, so something must be missing?

• Devices are all Windows 10 (pro or enterprise) and Azure joined
• There are no devices listed in Intune. All users are listed in Intune.
• All devices are listed in Azure. All users are listed in Intune.
• We do not have a server and no machines running Windows server.

Could someone please guide me to how I should proceed?

---------------------------------------------------

Background:

My first aim is to

1. a) configure Edge (77+) for my company, and
2. b) deploy an app via Intune

To configure Edge, I have:

1. followed this guide to create a policy (for starters, I only changed and activated the Start page url, default New tab url, and Company logo to see how it would behave)
   
2. and then this guide to assign the policy to a user group.
   

To deploy the app, I have followed this guide to create an MSI that I have uploaded to the app catalogue in Intune (https://portal.azure.com/#blade/Microsoft_Intune_Apps/MainMenu/1/selectedMenuItem/Overview) and assigned it to a user group.

However – neither Edge policies nor the app is working for the users in the selected group.

[#2]

Have you tried pushing Edge through the built-in deployment?
https://docs.microsoft.com/en-us/intune/apps/apps-windows-edge

IF you check the install status, what does it say?

[#3]

Hi,
Yes, I have. Installation status says 0 devices, 0 users.

[#4]

Do you see any installations pending?
Can you please provide a screenshot

[#5]

Thanks,
No installations pending, as far as I can see. Screenshot attached. (Device and user tabs look the same)

[#6]

To what group have you assigned this install and how (required, available...)?
Is it a group of devices/users?

Please include a screenshot of the members of the group

[#7]

@Thijs Lecomte 

Thanks for the effort you put into this :)

It is a user group created for testing, with only one member. Owner of the group (me) is not a member of the group.

I thought in the beginning, that adding an app and assigning it to a user group would automatically push it to the user's Azure AD joined devices. But that is maybe not the way it works?

The app settings are the same for Edge and the LOB client app (MSI) that I try to deploy.

[#8]

That is how it should work. So I am a bit confused why it's not working.

You say all your devices are AAD Joined.
Are they also Intune registered?

Do you see them if you go to devicemanagement.microsoft.com => devices ?

[#9]

@Thijs Lecomte 

Devices seem to be either joined or registered. I have used the exactly same method of connecting to AAD with all the computers, but some are registered and some joined (fresh Windows install - log in with Admin user account) The owner, user Admin, is member of the group testgrupp that I have assigned Edge.

No devices appear in Intune, apart from the one computer that I manually added via MDM yesterday (this computer is owned by me, and I am not a member of the testgrupp group.

Intune enrollment is set to Automatic for the user group testgrupp.

Also, no apps appear in the Company portal on a AAD joined device owned by testgrupp member Admin. The Company portal app also says that the device is not configured. (I am not really interested in using the Company portal, this was only a test to see if that would work)

[#10]

Hi @MrMrkn 

Very strange. All your settings look good and this how I have pushed on my end.

For fun, could you please add the workstation to the test group and give it another try?

Moe

[#11]

@MrMrkn 

The device that the user in testgrupp uses needs to be MDM enrolled, otherwise Intune policies won't have any affect.

You can manually enroll it into Intune to test it.

[#12]

@Moe_Kinani 

Good to kow it's not me, then :)

I created a new group and added two devices: the one that I added manually via MDM yesterday, and another device. I then assigned the group to Edge. However, the group info says there are no device members in the group. I have restarted the two devices.