You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/intune/configuration/email-settings-android-enterprise.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ keywords:
7
7
author: MandiOhlinger
8
8
ms.author: mandia
9
9
manager: dougeby
10
-
ms.date: 08/02/2021
10
+
ms.date: 03/07/2022
11
11
ms.topic: conceptual
12
12
ms.service: microsoft-intune
13
13
ms.subservice: configuration
@@ -48,7 +48,7 @@ As an Intune administrator, you can create and assign email settings to Android
48
48
49
49
-**Email app**: Select **Gmail** or **Nine Work**. This app is the client app that connects to the email server you enter.
50
50
-**Email server**: Enter the host name of your Exchange server. For example, enter `outlook.office365.com`.
51
-
-**Username attribute from AAD**: This name is the attribute Intune gets from Azure Active Directory (Azure AD). Intune dynamically generates the username that's used by this profile. Your options:
51
+
-**Username attribute from AAD**: This name is the attribute Intune gets from Azure Active Directory (Azure AD). Intune dynamically generates the username that's used by this profile. Make sure your users have email addresses that match the attribute you select. Your options:
52
52
53
53
-**User Principal Name**: Gets the name, such as `user1` or `[email protected]`.
54
54
-**User name**: Gets only the name, such as `user1`.
When choosing to use **Custom** attributes, enter:
57
57
-**Custom domain name to use**: Enter a value that Intune uses for the domain name, such as `contoso.com` or `contoso`.
58
58
59
-
-**Email address attribute from AAD**: This name is the email attribute Intune gets from Azure AD. Intune dynamically generates the email address that's used by this profile. Your options:
59
+
-**Email address attribute from AAD**: This name is the email attribute Intune gets from Azure AD. Intune dynamically generates the email address that's used by this profile. Make sure your users have email addresses that match the attribute you select. Your options:
60
60
-**User principal name**: Uses the full principal name, such as `[email protected]` or `user1`, as the email address.
61
61
-**Primary SMTP address**: Uses the primary SMTP address, such as `[email protected]`, to sign in to Exchange.
-**Custom**: Get the attributes from a custom domain name. Also enter:
62
62
-**Custom domain name to use**: Enter a value that Intune uses for the domain name, such as `contoso.com` or `contoso`.
63
63
64
-
-**Email address attribute from AAD**: Choose how the email address for the user is generated. Your options:
64
+
-**Email address attribute from AAD**: Choose how the email address for the user is generated. Make sure your users have email addresses that match the attribute you select. Your options:
65
65
-**User principal name**: Use the full principal name as the email address, such as `[email protected]` or `user1`.
66
66
-**Primary SMTP address**: Use the primary SMTP address to sign in to Exchange, such as `[email protected]`.
67
67
-**Authentication method**: Choose how users to authenticate to the email server. Your options:
# Use remote help with Intune and Microsoft Endpoint Manager
31
31
32
-
In [public preview](../fundamentals/public-preview.md), *remote help* is an application that works with Intune and enables your information and front-line workers to get assistance when needed over a remote connection. With this connection, your support staff can remote connect to the user's device. During the session they can view the devices display and if permitted by the device user, take full control. Full control enables a helper to directly make configurations or take actions on the device.
32
+
In [public preview](../fundamentals/public-preview.md), *remote help* is an application that works with Intune and enables your information and front-line workers to get assistance when needed over a remote connection. With this connection, your support staff can remote connect to the user's device. During the session, they can view the device's display and if permitted by the device user, take full control. Full control enables a helper to directly make configurations or take actions on the device.
33
33
34
34
This feature applies to:
35
35
- Windows 10/11
@@ -55,7 +55,7 @@ The Remote help app supports the following capabilities:
55
55
56
56
-**Compliance Warnings** - Before connecting to a user's device, a helper will see a non-compliance warning about that device if it’s not compliant with its assigned policies. This warning doesn’t block access but provides transparency about the risk of using sensitive data like administrative credentials during the session.
57
57
58
-
Unenrolled devices always report as non-compliant. This is because until a device enrolls with Intune it can’t receive policies from Intune and as such is unable to establish its compliance status.
58
+
Unenrolled devices are always reported as non-compliant. This is because until a device enrolls with Intune it can’t receive policies from Intune and as such is unable to establish its compliance status.
59
59
60
60
-**Role-based access control** – Admins can set RBAC rules that determine the scope of a helper’s access, like:
61
61
- The users who can help others and the range of actions they can do while providing help, like who can run elevated privileges while helping.
@@ -71,7 +71,7 @@ The Remote help app supports the following capabilities:
- Devices must install the *remote help* app. Device users can download the app directly from the Microsoft. See [Install and update remote help](#install-and-update-remote-help)
74
+
- Devices must install the *remote help* app. Device users can download the app directly from Microsoft. See [Install and update remote help](#install-and-update-remote-help)
75
75
76
76
> [!NOTE]
77
77
> Remote help has the following limitations:
@@ -122,9 +122,9 @@ Microsoft does not store any data about either the sharer or the helper for long
122
122
123
123
## Install and update remote help
124
124
125
-
Remote help is available as download from Microsoft and must be installed on each device before that device can be used to participate in a remote help session.
125
+
Remote help is available as download from Microsoft and must be installed on each device before that device can be used to participate in a remote help session.
126
126
127
-
When an update to remote help that is required, users are prompted to install that version of remote help when the app opens. You can use the same process to download and install remote help to install an updated version. There's no need to uninstall the previous version before installing the updated version.
127
+
When an update to remote help is required, users are prompted to install that version of remote help when the app opens. You can use the same process to download and install remote help to install an updated version. There's no need to uninstall the previous version before installing the updated version.
128
128
129
129
- Intune admins can download and deploy the app to enrolled devices. For more information about app deployments, see [Install apps on Windows devices](../apps/apps-windows-10-app-deploy.md#install-apps-on-windows-10-devices).
130
130
- Individual users who have permissions to install apps on their devices can also download and install remote help.
@@ -183,14 +183,14 @@ To configure your tenant to support remote help, review and complete the followi
183
183
1. Sign in to [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and go to **Tenant administration** > **Remote help (preview)**.
184
184
185
185
2. On the **Settings** tab:
186
-
1. Set **Enable remote help** to **Enabled** to allow use of remote help. By default, this setting is *Enabled*.
186
+
1. Set **Enable remote help** to **Enabled** to allow the use of remote help. By default, this setting is *Enabled*.
187
187
2. Set **Allow remote help to unenrolled devices** to **Enabled** if you want to allow this option. By default, this setting *Disabled*.
188
188
189
189
3. Select **Save**.
190
190
191
191
### Task 2 – Configure permissions for remote help
192
192
193
-
The following Intune RBAC permissions manage use of the remote help app. Set each to *Yes* to grant the permission:
193
+
The following Intune RBAC permissions manage the use of the remote help app. Set each to *Yes* to grant the permission:
194
194
195
195
- Category: **Remote help app**
196
196
- Permissions:
@@ -215,7 +215,7 @@ After creating the custom roles that you'll use to provide different users with
215
215
216
216
4. On the **Admin Groups** page, select the group that contains the user you want to give the permissions to. Choose **Next**.
217
217
218
-
5. On the **Scope (Groups)** page, choose a group containing the users/devices that the member above will be allowed to manage. You also can choose all users, or all devices. Choose **Next** to continue.
218
+
5. On the **Scope (Groups)** page, choose a group containing the users/devices that the member above will be allowed to manage. You also can choose all users or all devices. Choose **Next** to continue.
219
219
220
220
>[!IMPORTANT]
221
221
>If a sharer’s device isn’t in the scope of a helper, that helper cannot provide assistance.
@@ -243,7 +243,7 @@ As a sharer, when you’ve requested help and both you and the helper are ready
243
243
244
244
At this time, the helper might request a session with full control of your device or choose only screen sharing. If they request full control, you can select the option to *Allow full control* or choose to *Decline the request*. Full control must be established before the help session starts. If full control is required after the sessions starts, both users must disconnect and restart the remote help session.
245
245
246
-
4. After establishing the type of session (full control or screen sharing), the session is established, and the helper can now assist resolving any issues on the device.
246
+
4. After establishing the type of session (full control or screen sharing), the session is established, and the helper can now assist in resolving any issues on the device.
247
247
248
248
During assistance, helpers that have the *Elevation* permission can enter local admin permissions on your shared device. *Elevation* allows the helper to run executable programs or take similar actions when you lack sufficient permissions.
249
249
@@ -268,9 +268,9 @@ As a helper, after receiving a request from a user who wants assistance by using
268
268
269
269
3. After the sharer enters the security code, as the helper you'll see information about the sharer, including their full name, job title, company, profile picture, and verified domain. The sharer will see similar information about you.
270
270
271
-
At this time, you can request a session with full control of the sharers device or choose only screen sharing. If you request full control, the sharer can choose to *Allow full control* or to *Decline the request*. Full control must be established before the help session starts. If full control is required after the sessions starts, both users must disconnect and restart the remote help session.
271
+
At this time, you can request a session with full control of the sharer's device or choose only screen sharing. If you request full control, the sharer can choose to *Allow full control* or to *Decline the request*. Full control must be established before the help session starts. If full control is required after the sessions starts, both users must disconnect and restart the remote help session.
272
272
273
-
4. After establishing that the session will use a shared display or full control, remote help will display a **Compliance Warning* if the sharers device fails to meet the conditions of its assigned compliance policies.
273
+
4. After establishing that the session will use a shared display or full control, remote help will display a **Compliance Warning* if the sharer's device fails to meet the conditions of its assigned compliance policies.
274
274
275
275
During assistance, helpers that have the *Elevation* permission can enter local admin permissions on your shared device. *Elevation* allows the helper to run executable programs or take similar actions when you lack sufficient permissions.
276
276
@@ -293,7 +293,7 @@ You can monitor the use of remote help from within Microsoft Endpoint Manager.
293
293
294
294
Remote help logs data during installation and during remote help sessions, which can be of use when investigating issues with the app.
295
295
296
-
**Installation of remote help** - When remote help installs or uninstalls, the following two logs are created in the device users Temp folder, for example `C:\Users\<username>\AppData\Local\Temp`. The \* in the log file name represents a date and time stamp of when the log was created.
296
+
**Installation of remote help** - When remote help installs or uninstalls, the following two logs are created in the device users' Temp folder, for example,`C:\Users\<username>\AppData\Local\Temp`. The \* in the log file name represents a date and time stamp of when the log was created.
0 commit comments