There are only 2 things the IT needs to do to enable Click Device Compliance. conditional access. Under MANAGE, click Policies. First, we define a compliance policy in Intune Click Enterprise Compliance Policy and click Properties. Admin Console which basically checks to verify, Review some of the settings in the policy by clicking on if the device is healthy or not. As you can see, Settings and clicking on each of the categories: there are multiple settings that can be checked on the devices running Windows, Windows Email Phone, iOS, and Android. Device Health Device Properties System Security Click X on each open blade until back at the Microsoft Intune overview blade. In the list, click Conditional Access. Second, we enable the conditional access policy. In this example, it is enabled for Exchange In the list, click Conditional Access in Azure Active Online. The appropriate restrictions and targeted Directory. groups are configured. Now employees in these Click Exchange Online Policy. groups need to have their devices enrolled and Click on Cloud Apps to show Exchange Online is selected. healthy in order to access the email. On the Exchange Online Policy blade, under Access Controls, click Grant to show the requirement for compliant device. On the Exchange Online Policy blade, point to Enable Policy setting. On the Exchange Online Policy blade, click Users and groups to show the selected groups. Create a Configuration Policy Click X on each open blade until back at the Microsoft Intune overview blade. In Microsoft Intune, configuration policies are groups of settings that control features on computers and mobile Click Device configuration. devices. You create policies by using templates that Click Profiles. contain recommended or customized settings, and then deploy them to device or user groups. In these demos, I Click + Create profile. will show you a variety of policy setting for managing mobile devices. Set the Name to Enterprise Device Profile. In the Platform drop down list, select iOS. You add all configuration policies the same way. The Review some of the options in the Profile Type drop down only difference is that you choose different policy list. templates, depending on what you want to manage. In the drop down list, click Device restrictions. Within each type of profile there are a whole variety of configuration settings, from device restrictions to Review the categories of restrictions. configuring Wi-Fi and VPN settings for devices.
There are only 2 things the IT needs to do to enable conditional access. First, we define a compliance policy in Intune Admin Console which basically checks to verify, if the device is healthy or not. As you can see, there are multiple settings that can be checked on the devices running Windows, Windows Phone, iOS, and Android. Second, we enable the conditional access policy. In this example, it is enabled for Exchange Online. The appropriate restrictions and targeted groups are configured. Now employees in these groups need to have their devices enrolled and healthy in order to access the email. Click Device Compliance. Under MANAGE, click Policies. Click Enterprise Compliance Policy and click Properties. Review some of the settings in the policy by clicking on Settings and clicking on each of the categories: Email Device Health Device Properties System Security Click X on each open blade until back at the Microsoft Intune overview blade. In the list, click Conditional Access. In the list, click Conditional Access in Azure Active Directory. Click Exchange Online Policy. Click on Cloud Apps to show Exchange Online is selected. On the Exchange Online Policy blade, under Access Controls, click Grant to show the requirement for compliant device. On the Exchange Online Policy blade, point to Enable Policy setting. On the Exchange Online Policy blade, click Users and groups to show the selected groups. Create a Configuration Policy In Microsoft Intune, configuration policies are groups of settings that control features on computers and mobile devices. You create policies by using templates that contain recommended or customized settings, and then deploy them to device or user groups. In these demos, I will show you a variety of policy setting for managing mobile devices. You add all configuration policies the same way. The only difference is that you choose different policy templates, depending on what you want to manage. Within each type of profile there are a whole variety of configuration settings, from device restrictions to configuring Wi-Fi and VPN settings for devices. Click X on each open blade until back at the Microsoft Intune overview blade. Click Device configuration. Click Profiles. Click + Create profile. Set the Name to Enterprise Device Profile. In the Platform drop down list, select iOS. Review some of the options in the Profile Type drop down list. In the drop down list, click Device restrictions. Review the categories of restrictions.