Teamviewer in Intune

September 8, 2016

Hello,

Since the beginning of the computer era , endusers require support, preferably on site with some coffee and chocolates to go. But reality is remote using some kind of tool that allows remote control.

Windows 8 and above lack that functionality with windows intune, not the fault of Intune but something proper to the OSE itself.

Now we can integrate cloud service 1 ( Intune ) with cloud service 2 ( Teamviewer ) for remote assistance. Great ! Let’s see how it goes.

First we need to activate the teamviewer functionality in Intune.

Check out Administrator -> Teamviewer -> Activate

clip_image002

Now follow the wizard as it will guide you through the creation of a user with the required service and allows the creation of a trial account for testing.

clip_image004

Now let’s pretend to be a needy user on a Windows 10 anniversary update build so he/she opens the intune portal and requests assistance

clip_image006

Now we ( the admin ) actually the same person 🙂 sees the alert in the intune admin console

clip_image008

Now we can immediately start the session from the console …

clip_image010

Teamviewer software is being downloaded and installed

clip_image012

And request validation is launched on the client machine

clip_image014

After installation connection is created automatically

clip_image016

The user grants access …

clip_image018

… Et voila we have client side to see who is taking control …

clip_image020

… And the admin side for helping out our customer.

clip_image022

You can perform some more advanced actions like blank screen on user side, block input, lock screen etc.

clip_image024

And you recieve a free word of advice from and a pat on the back from Teamviewer ! We (always) play it fair.

So there you have it, easy and simple but a world of difference for our connected enduser.

Enjoy

Gino D


Intune software deployment

March 15, 2013

Hello,

Deploying software using intune is easy , but what is it goes wrong ?

Then we need to some digging.

Step 1 what gets executed at the side ?

If we add no parameters to the installation in intune there are still some default parameters added by the intune installation. In order to find out open the log file updates.log in C:\Program Files\Microsoft\OnlineManagement\Logs. On the example we deployed orca.msi without parameters in the console.

So in intune it looks like this


In the log file it looks like this

Attention if you open the log file in cmtrace you’ll get a non realtime view but a “old” content. Check with notepad to be sure that you see the latest content.


So make sure that if you run the command manually ( as system ) that it works. Now let’s say we add the conventional install parameters.

So the commandline looks like this


Now force a refresh policy on the client


I had to manually check for updates using intune console before the installation kicked in once more and then



As you can see on the following link the /q parameter will cause the installation to fail. http://technet.microsoft.com/en-US/library/jj662695.aspx

Now we’ll see the failed install in intune.

You can click on the link for additional info


That’s all for now, next time we’ll go into the detection mechanism in intune.

Regards

Gino d



Manage Windows RT with Windows Intune

January 31, 2013

Hi all,

As you might have seen in the previous post it is possible to manage iOS devices using Windows Intune.

In this post I’ll describe how to enroll and manage a Windows RT device.

To start, logon to the Intune Admin Page:

https://login.microsoftonline.com/login.srf?wa=wsignin1.0&rpsnv=2&ct=1359573844&rver=6.1.6206.0&wp=MCMB

Open the admin console and go to Administration, select Mobile Device Management, Windows RT Management

31012013_01

A Sideloading key can be added to install line of business apps on Windows RT devices.

On the Windows RT device open the charms bar and search for company applications.

31012013_02

The Company applications setting opens in desktop mode

31012013_03

Login using the credentials known in the Windows Intune Console.

Also fill in the serveraddress enterprisenrollment-s.manage.microsoft.com (this is the serveraddress that can be seen in the Windows RT Mobile Device Enrollment Setup). If there was a domain name provided earlier enter it again here (possibly this will not be needed if the Windows RT device is connected to a corporate WLAN network).

31012013_04

Wait until connection succeeds

31012013_05

Click Install the management application

31012013_06

You will be redirected to Internet Explorer, from there you can can choose to view the application in the Windows Store.

From there the application can be installed.

31012013_07

31012013_08

Open the application and sign in with the Windows Intune account

31012013_09

31012013_10

After being logged in the company portal shows an overview off all available applications. They can be ordered using categories. Some information about the devices is also present and contact details which can be useful for support. These contact details are provided in the Windows Intune Admin Console.

31012013_11

The complete enrollment procedure shown here, can also be found on http://technet.microsoft.com/en-us/library/hh441723.aspx. This website also describes the enrollment of other mobile devices.

An additional device is shown in the Intune console.

31012013_12

Now you can enforce all kinds of items like :

-> Remote wipe

-> Allow picture password

-> …

A full list is available at http://onlinehelp.microsoft.com/windowsintune/jj738616.aspx

In the next post I’ll show you how an app from the Windows Store can be made available in the company portal.

Cheers,

B


Manage iOS with Windows Intune

January 30, 2013

Hello,

Did you know you can manage iOS, Android, Windows Phone 8 and Windows 8RT through direct management ( without EAS ) using Windows intune ?

Windows Intune is the SaaS Microsoft management Client solution.

Let’s complete the steps for managing a standard Ipad.

First take an Intune 30-day trial account and verify the online help : http://technet.microsoft.com/en-US/library/jj733654.aspx

Log on to the Intune Admin Page : https://login.microsoftonline.com/login.srf?wa=wsignin1.0&rpsnv=2&ct=1359573844&rver=6.1.6206.0&wp=MCMBI&wreply=https:%2F%2Faccount.manage.microsoft.com%2Flanding.aspx%3Ftarget%3D%252fDefault.aspx&lc=1033&id=500516

Open the admin console and set Intune as mobile device management authority.



Now the next steps are described in the help file on the right. You need to create a certificate in order to allow your intune service to communicate with the Apple push notification service.

First download the CSR from the intune portal.


Then use this csr in order to create a apple certificate. Use the following website : https://identity.apple.com/pushcert/

Log on with an Apple ID and use the create certificate in order to create the certificate.


Watch out ! There is a certain procedure that needs to be followed if you create the certificate using IE. Details are provided in the help file or you can just use a Safari browser for the creation of the certificate.

Now browse using your Ios device ( 5.0 or higher ) to https://m.manage.microsoft.com/ in order to enroll the device.


But … The following error occured when browsing to the site :


Solution was to open the Intune portal and verify the the user used to log on is part of the Intune Group. This is not the case default.


Retry and … Success !


Install the profile.




After the correct installation you’ll see a new app on the iOS device, this supplies access to the company portal where you can offer signed application package.


Now the device appears in the intune console.


Now you can enforce all kinds of items like :

-> Enforce passwords

-> Allow camera

-> …

A full list is available at http://onlinehelp.microsoft.com/windowsintune/jj738616.aspx

We’ll perform this next time. Bye.


%d bloggers like this: