More and more customers are requesting to initiate a Proof of Concept for Windows Intune. Customers are looking for a management solution for devices which are outside their corporate (and sometimes on-premise) environment because corporate users receive devices of this nature. Examples of these devices are tablets and smart phones (I haven’t seen any requests managing fat clients with Windows Intune).
Windows Intune provides a decent management solution to manage these kind of devices. Though I need to dedicate a blog about my more in-depth impressions about Windows Intune regarding functionality and usability, I believe the product itself is somewhat far from finished. However, knowing the nature of updating by the Windows Intune Product Team, it is a decent way to start managing these devices.
If you use Configuration Manager 2012 SP1, then add the Windows Intune subscription allows you to manage these devices by single console. Windows Intuse is more or less used as a stepping stone to deliver service to these mobile devices…
Setting up Windows Intune is painfully easy, verifying your domain can be quite a challenge.
You need to provide a domain which has a valid registrar. Organizations might have a local domain which isn’t registered but they do have an ‘external’ domain which is. According to the Windows Intune instructions, you need to add a DNS record in that domain that has the following properties:
- Name: @
- Type: TXT
- Body: MSxxxxxxxx (where ‘x’ is a number)
Unfortunately, some DNS servers don’t allow you to create such a record. reasons can be technical but also organizational because they simply don’t allow it. Adding an MX record is not allowed either.
NOTE: This issue is similar when using Office 365. However, if you already use Office 365 then you don’t need to do this again..
After looking around an alternative method was posted on the Office 365 forums, which is available here: http://community.office365.com/en-us/forums/148/t/3745.aspx#13965
The alternative method creates a DNS record with the following properties:
- Name: MSxxxxxxxx (the same numbers)
- Type: CNAME
- Alias: ps.microsoftonline.com
The alternative method should allow you to verify your domain.
I’m happy to see that Microsoft allows organizations to play around with Windows Intune to investigate its usage.
With the coming release of System Center 2012 R2 I expect Windows Intune to be upgraded as well. I hope that mobile devices can be managed more thoroughly.