Microsoft Intune Integration
Overview
Microsoft Intune is a device management solution that uses the Modern Management Layer (MDM) to apply policies, restrictions, or deploy applications to devices. It is tightly integrated with Microsoft Azure and requires a separate licence.
Integration with Matrix42 UUX for UEM provides the ability to manage devices connected to multiple device management solutions from a single console based on the common user experience used by all Matrix42 products.
General users do not need to use the dedicated consoles such as Endpoint Manager (Intune), Silverback or Empirum Console (EMC). Only experts need these consoles - standard rollouts and troubleshooting are performed in the Matrix42 UEM console and Matrix42 Service Desk.
The combination of modern management and classic agent based management has many advantages such as:
- Intune is used for policies and Matrix42 UEM Agent for software packages
- Option for a local depot infrastructure
- Easier installation order and dependency handling
- Rollout progress is better observable and predictable
- Easier troubleshooting based on instantly available logs
- Reinstallation of software packages possible
- User part of installations
- Variables for machine and user
Requirements
- Installed and configured Matrix42 Digital Workspace Management
- Installed and configured UUX for UEM 23.0.3 or newer
- The Extension has a prerequisite to Intune Integration Core which is automatically installed
- Intune device visibility and management requires the Intune Inventory Data Provider and the Enterprise Management Platform license.
Installation
- Install the the Intune Extensions
- The required Intune Integration Extension is in the Matrix42 Extension Gallery.
- In the UUX go to the Administration -> Extension Gallery and log on with an Matrix42 Account.
- Select the Intune Integration Extension and install.
- Follow the steps in the dedicated online documentation.
- The device actions require additional App privileges as described in the installation guide.
Introduction
Display of devices imported from Intune
Imported devices are displayed in the UEM App in addition to the Asset Apps of the UUX. Users can view device details, search and filter in the Endpoint Devices navigation.
Device Actions for Intune devices
To allow users easy troubleshooting on endpoints which are managed by Intune several device actions are provided. this actions are also visible in the service desk application.
| Device Action | Android | iOS / iPadOS | Windows | macOS |
|---|---|---|---|---|
| Refresh | Yes | Yes | Yes | Yes |
| Wipe | Yes | Yes | Yes | Yes |
| Autopilot Reset | No | No | Yes | No |
| Restart | No | No | Yes | Yes |
Actions require the user to be part of the privileged user role:
| Device Action | User role |
|---|---|
| Refresh | UEM Device Admin or UEM Device User user roles |
| Wipe | UEM Device Admin user role |
| Autopilot Reset | UEM Device Admin user role |
| Restart | UEM Device Admin or UEM Device User user roles |
Action State
Intune managed devices with an active status show the current status of actions in the preview. This is live request to Intune when the tab is selected.
Management system set to "Modern" or Co-Managed" for Intune devices
- Management System is the name of the management layer used by device management. This was introduced by UEM.
- Classic - Empirum Agent based.
- Modern - Silverback or Intune via MDM.
- Co-Managemed - Classic and modern managed devices.
Current Limitations
- Devices imported by the Intune data provider do not show the last seen date in the Endpoint Devices list.