Feb 11 2020 07:59 AM
Feb 11 2020 07:59 AM
I am sort of new to Intune and Azure AD, and I am trying to understand the best I can how things work. My company is small and I only have so much time to put into it-administration, but I really would like some things to work. Now, they do not.
Primarily, I want to to be able to configure Edge policies and a client app for selected user groups. And I think the devices (or users?) must be connected to Intune to accomplish this?
I did manage to enroll my own computer to intune using this guide, but that seems not to affect the Edge settings in the computer, so something must be missing?
Could someone please guide me to how I should proceed?
My first aim is to
To configure Edge, I have:
To deploy the app, I have followed this guide to create an MSI that I have uploaded to the app catalogue in Intune (https://portal.azure.com/#blade/Microsoft_Intune_Apps/MainMenu/1/selectedMenuItem/Overview) and assigned it to a user group.
However – neither Edge policies nor the app is working for the users in the selected group.
Feb 11 2020 08:39 AM
Feb 11 2020 09:12 AM
Feb 11 2020 11:15 AM - edited Feb 11 2020 11:16 AM
Feb 11 2020 10:15 PM
Feb 11 2020 11:09 PM
Thanks for the effort you put into this :)
It is a user group created for testing, with only one member. Owner of the group (me) is not a member of the group.
I thought in the beginning, that adding an app and assigning it to a user group would automatically push it to the user's Azure AD joined devices. But that is maybe not the way it works?
The app settings are the same for Edge and the LOB client app (MSI) that I try to deploy.
Feb 11 2020 11:27 PM
Feb 12 2020 01:06 AM - edited Feb 12 2020 01:09 AM
Devices seem to be either joined or registered. I have used the exactly same method of connecting to AAD with all the computers, but some are registered and some joined (fresh Windows install - log in with Admin user account) The owner, user Admin, is member of the group testgrupp that I have assigned Edge.
No devices appear in Intune, apart from the one computer that I manually added via MDM yesterday (this computer is owned by me, and I am not a member of the testgrupp group.
Intune enrollment is set to Automatic for the user group testgrupp.
Also, no apps appear in the Company portal on a AAD joined device owned by testgrupp member Admin. The Company portal app also says that the device is not configured. (I am not really interested in using the Company portal, this was only a test to see if that would work)
Feb 12 2020 01:28 AM
Very strange. All your settings look good and this how I have pushed on my end.
For fun, could you please add the workstation to the test group and give it another try?
Feb 12 2020 01:53 AM
The device that the user in testgrupp uses needs to be MDM enrolled, otherwise Intune policies won't have any affect.
You can manually enroll it into Intune to test it.
Feb 12 2020 02:18 AM - edited Feb 12 2020 02:30 AM
Good to kow it's not me, then :)
I created a new group and added two devices: the one that I added manually via MDM yesterday, and another device. I then assigned the group to Edge. However, the group info says there are no device members in the group. I have restarted the two devices.