You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/intune/fundamentals/cloud-configuration.md
+24-23Lines changed: 24 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,12 +2,12 @@
2
2
# required metadata
3
3
4
4
title: Use Windows cloud configuration in Microsoft Intune
5
-
description: Use a guided scenario to configure Windows 10 in a cloud configuration. Cloud config focuses on browsing using Microsoft Intune and Endpoint Manager, and using Microsoft 365 apps.
5
+
description: Use a guided scenario to configure Windows 10/11 in a cloud configuration. Cloud config focuses on browsing using Microsoft Intune and Endpoint Manager, and using Microsoft 365 apps.
# Guided scenario - Windows 10 in cloud configuration
31
+
# Guided scenario - Windows 10/11 in cloud configuration
32
32
33
-
Windows 10 in cloud configuration is a Microsoft-recommended device configuration. You can turn any Windows 10 Professional, Enterprise, and Education device into a cloud-optimized device.
33
+
Windows 10/11 in cloud configuration is a Microsoft-recommended device configuration. You can turn any Windows 10/11 Professional, Enterprise, and Education device into a cloud-optimized device.
34
34
35
35
It’s ideal for:
36
36
@@ -40,28 +40,28 @@ It’s ideal for:
40
40
41
41
Cloud config makes these devices easy to use, and secures these devices with Microsoft-recommended security features.
42
42
43
-
With Windows 10 in cloud configuration:
43
+
With Windows 10/11 in cloud configuration:
44
44
45
45
- You can configure new devices, or reuse existing hardware.
46
46
- End users get an easy-to-use, and familiar Windows experience.
47
47
- Administrators get a uniform device configuration across devices, which makes management and troubleshooting easier.
48
48
- You can customize the names of your resources, so they're easy to see and monitor.
49
49
50
50
> [!TIP]
51
-
> To learn more about Windows 10 in cloud configuration, see [Windows 10 in cloud configuration](https://aka.ms/cloud-config).
51
+
> To learn more about Windows 10/11 in cloud configuration, see [Windows 10/11 in cloud configuration](https://aka.ms/cloud-config).
52
52
53
53
## What this guided scenario does
54
54
55
55
Using Microsoft Endpoint Manager, you can use a guided scenario to deploy a cloud configuration. The guided scenario automatically creates all the resources you need, including the following resources:
56
56
57
57
- Creates a new Azure AD security group, or uses an existing Azure AD security group.
58
58
- Deploys the Microsoft Edge and Microsoft Teams apps. For more information on deploying these apps individually, see:
59
-
-[Add Microsoft Edge for Windows 10](../apps/apps-windows-edge.md)
60
-
-[Add Microsoft 365 apps to Windows 10 devices](../apps/apps-add-office365.md)
59
+
-[Add Microsoft Edge for Windows 10/11](../apps/apps-windows-edge.md)
60
+
-[Add Microsoft 365 apps to Windows 10/11 devices](../apps/apps-add-office365.md)
61
61
62
-
- Creates a Windows 10 security baseline policy with recommended security settings that are already configured.
62
+
- Creates a Windows 10/11 security baseline policy with recommended security settings that are already configured.
63
63
64
-
For more information about security baselines, and what they do, see [Use security baselines to configure Windows 10 devices](../protect/security-baselines.md).
64
+
For more information about security baselines, and what they do, see [Use security baselines to configure Windows client devices](../protect/security-baselines.md).
65
65
66
66
- Creates a Windows Autopilot enrollment profile that automatically enrolls devices in Microsoft Intune.
67
67
@@ -79,15 +79,15 @@ Using Microsoft Endpoint Manager, you can use a guided scenario to deploy a clou
79
79
80
80
- Creates a compliance policy that monitors compliance and health. Users are allowed to use noncompliant devices, and access resources. If your organization blocks access to non-compliant devices, then create another compliance policy that blocks access, and assign it to the same group.
81
81
82
-
For more information on the compliance settings you can configure on your own, see [Windows 10 and later settings to mark devices as compliant or not compliant](../protect/compliance-policy-create-windows.md).
82
+
For more information on the compliance settings you can configure on your own, see [Windows client settings to mark devices as compliant or not compliant](../protect/compliance-policy-create-windows.md).
83
83
84
84
- Deploys a Windows PowerShell script that removes built-in apps, and simplifies the Start menu.
85
85
86
-
For more information about PowerShell scripts, see [Use PowerShell scripts on Windows 10 devices](../apps/intune-management-extension.md).
86
+
For more information about PowerShell scripts, see [Use PowerShell scripts on Windows client devices](../apps/intune-management-extension.md).
87
87
88
-
- Creates a Windows 10 update ring policy. This policy automatically updates the devices, including product updates, drivers, and Windows updates.
88
+
- Creates a Windows client update ring policy. This policy automatically updates the devices, including product updates, drivers, and Windows updates.
89
89
90
-
For more information about update rings, and creating your policy, see [Update rings for Windows 10 and later policy](../protect/windows-10-update-rings.md).
90
+
For more information about update rings, and creating your policy, see [Update rings for Windows client devices](../protect/windows-10-update-rings.md).
91
91
92
92
> [!TIP]
93
93
> This guided scenario creates all these resources for you, automatically. If you want create your own individual resources, and not use the guided scenario, then you can. For the specific steps, see the [cloud config overview and setup guide](https://aka.ms/CloudConfigGuide).
@@ -101,20 +101,21 @@ Using Microsoft Endpoint Manager, you can use a guided scenario to deploy a clou
101
101
- Microsoft Teams
102
102
- OneDrive for Business
103
103
- Windows 10 Pro
104
+
- Windows 11 Pro
104
105
105
106
All of these services are included with the Microsoft 365 E3 license. For more security options and features, it's recommended to use the Microsoft 365 E5 license. To help decide which license is right for your organization, see [Transform your enterprise with Microsoft 365](https://www.microsoft.com/microsoft-365/compare-microsoft-365-enterprise-plans).
106
107
107
108
-[Set the MDM authority to Intune](mdm-authority-set.md). The mobile device management (MDM) authority setting determines how you manage your devices. As an IT admin, you must set an MDM authority before users can enroll devices for management.
108
-
- Enable automatic enrollment for Windows 10 devices. For more information, see:
109
-
-[Quickstart: Set up automatic enrollment for Windows 10 devices](../enrollment/quickstart-setup-auto-enrollment.md)
110
-
-[Enable Windows 10 automatic enrollment](../enrollment/windows-enroll.md#enable-windows-automatic-enrollment)
109
+
- Enable automatic enrollment for Windows client devices. For more information, see:
110
+
-[Quickstart: Set up automatic enrollment for Windows client devices](../enrollment/quickstart-setup-auto-enrollment.md)
111
+
-[Enable Windows 10/11 automatic enrollment](../enrollment/windows-enroll.md#enable-windows-automatic-enrollment)
111
112
112
113
- Sign in as the Intune Service Administrator, also known as the Intune Administrator. For more information on the roles in Intune, see [Role-based access control (RBAC) with Microsoft Intune](role-based-access-control.md).
113
114
114
115
## Step 1 - Introduction
115
116
116
117
1. Open the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
117
-
2. Select **Troubleshooting + support** > **Guided scenarios** > **Deploy Windows 10 in cloud configuration** > **Start**.
118
+
2. Select **Troubleshooting + support** > **Guided scenarios** > **Deploy Windows 10 and later in cloud configuration** > **Start**.
118
119
3. Select **Next**.
119
120
120
121
## Step 2 - Basics
@@ -139,7 +140,7 @@ Choose how your devices are named when they enroll, and choose the prefix of all
139
140
140
141
Your settings look similar to the following image:
141
142
142
-
:::image type="content" source="./media/cloud-configuration/guided-scenario-basics.png" alt-text="Configure the device name template and resource name prefix in a Windows 10 in cloud configuration guided scenario in Microsoft Intune and Endpoint Manager.":::
143
+
:::image type="content" source="./media/cloud-configuration/guided-scenario-basics.png" alt-text="Configure the device name template and resource name prefix in a Windows 10/11 cloud configuration guided scenario in Microsoft Intune and Endpoint Manager.":::
143
144
144
145
- Select **Next**.
145
146
@@ -180,7 +181,7 @@ Look at the following properties:
180
181
181
182
As the resources are being created in the Endpoint Manager admin center, the status is shown, similar to the following image:
182
183
183
-
:::image type="content" source="./media/cloud-configuration/guided-scenario-deployment-status.png" alt-text="Review and the Windows 10 in cloud configuration guided scenario deployment status in Microsoft Intune and Endpoint Manager.":::
184
+
:::image type="content" source="./media/cloud-configuration/guided-scenario-deployment-status.png" alt-text="Review the Windows 10/11 in cloud configuration guided scenario deployment status in Microsoft Intune and Endpoint Manager.":::
184
185
185
186
If there's an error, then the guided scenario isn't deployed, and all changes are reverted. The [Cloud configuration overview and setup guide](https://aka.ms/CloudConfigGuide) is also a good resource.
186
187
@@ -197,12 +198,12 @@ When it deploys successfully, you can use the monitoring and reporting features
197
198
You can also:
198
199
199
200
- Add preregistered Windows Autopilot devices to the group. Add them to the group before you enroll or apply any policies.
200
-
- Add existing Windows 10 devices that are already enrolled. Microsoft recommends removing other apps and profiles targeted to these devices. After adding them to the group, reset the devices so they start fresh with just cloud config applied.
201
+
- Add existing Windows client devices that are already enrolled. Microsoft recommends removing other apps and profiles targeted to these devices. After adding them to the group, reset the devices so they start fresh with just cloud config applied.
201
202
202
203
For information on the policy refresh times, see [Common questions and answers with device policies in Microsoft Intune](../configuration/device-profile-troubleshoot.md#how-long-does-it-take-for-devices-to-get-a-policy-profile-or-app-after-they-are-assigned).
203
204
204
205
- Microsoft recommends only assigning cloud config settings and apps. After this guided scenario deploys, then you can add any other required resources, such as certificates, VPN profiles, line-of-business apps, and more. Be sure to deploy these policies to the same group as this guided scenario. Remember, keep the list small, and only include resources your users need.
205
-
- Microsoft doesn't recommend using Windows 10 in cloud configuration with shared devices, because of a OneDrive sync issue with shared devices. Shared devices typically have multiple users that sign in and sign out.
206
+
- Microsoft doesn't recommend using Windows 10/11 in cloud configuration with shared devices, because of a OneDrive sync issue with shared devices. Shared devices typically have multiple users that sign in and sign out.
206
207
- After the guided scenario is deployed, you can go to a policy, and see the settings and their configured values. You can change any of these settings to another value, if you like.
207
208
- To remove the guided scenario settings from devices, go to each policy created by the cloud config guided scenario. Configure the settings to **Not Configured**. Deploy each policy again to the same group as this guided scenario.
208
209
@@ -213,4 +214,4 @@ When it deploys successfully, you can use the monitoring and reporting features
213
214
## Next steps
214
215
215
216
- To learn more about guided scenarios, and see the other scenarios are available, go to [Guided scenarios overview](guided-scenarios-overview.md).
216
-
- To learn more about Windows 10 in a cloud configuration, see [Windows 10 in cloud configuration](https://aka.ms/cloud-config).
217
+
- To learn more about Windows client in a cloud configuration, see [Windows 10/11 in cloud configuration](https://aka.ms/cloud-config).
0 commit comments