Windows InTune V2


Windows Intune was released to General Availability (GA) today on March 23rd 2011 but already the next version is being worked on, at least according to Twitter.

image

I haven’t seen anyone else mention this but Maarten is a SCOM MVP and the hashtags indicate this came directly from today’s MMS2011 keynote speech, so I think it’s safe to believe it Smile Plus it is in no way unusual for Microsoft to be working on the next version of a product before they’ve even released the first edition…

If Windows Intune V2 does include Software Distribution, that will be pretty amazing. That will enable IT departments/Managed Service Providers (MSP’s) to deploy new software to users from a remote location via the web. Although it will of course be limited by internet bandwidth between the 2 points, this will make so many things so much easier for so many people! That could well be the point that sees InTune take hold in larger organizations…

Microsoft Windows InTune: Computers Overview


image

This is the second screen in the Windows InTune Console:

Computers

On the left you can see a list of all the computer groups that I’ve created. These machines are on 3 different networks but they all appear in this one central view, which makes administration very easy!

Selecting a group on the left takes you into a new view where you can see much more granular detail on the machines. At the minute, I’ve only got one machine in each group but you get the idea Smile

image

The “View Properties” button takes you deeper into that machine, with more sections available to view:

image

The first few tabs are all quite self explanatory…but the final two are very interesting.

Hardware

This gives an amazingly detailed list of the hardware in and related to the machine. For my laptop, this information includes:

  • Model
  • Serial Number
  • BIOS Name & Version
  • CPU Name/Type/Speed
  • Number of disks
  • Disk model
  • Disk Size
  • Number of partitions
  • Network adapter
  • IP Address
  • MAC Address
  • Monitor Resolution
  • Printers (including Soft printers like OneNote)

and more. It’s similar to the free ware program CPU-Z (which you may be familiar with) in that it gets really deep into you machine to give you all the information you could possibly need!

Software

This gives a list of all software installed on the machine…in this case:

image

It then gives you an idea of the category such as Browser, OS, Utility etc and also tells you if it’s a Virtual Application.

You can export these lists to either .csv or .html files for use with other applications and systems.

This feature fits really well in to the whole Software Asset Management piece, as organizations will have a complete, current list of all software installed on all machines. It’s very quick to update with added/removed software which will enable companies to be confident of compliance at all times.

Groups:

Creating a group is very straight forward. It has 3 sections, each with just one selection to make:

image

Details = Group name (and an optional description field)

Parent Group = Choose which group this will link off from. Either “All Computers” or one of your own.

Members = Choose which machines to add to the group.

Done.

I’ll cover deploy software to machines etc in a later post.

Microsoft Windows Intune: Online Systems Management


Microsoft Windows InTune is the new Cloud based systems management tool from Microsoft, formerly known as “System Center Online” and has been long awaited. The ability to manage multiple locations/organizations from one central, online point is attractive to a lot of people for a lot of reasons…so let’s take a look @ InTune.

There are at least 10 sections inside InTune so I’m going to cover them in a number of posts, we’ll start with – System Overview:

image

image

This is the first screen you see when you log in to the Windows InTune Admin Console and it immediately gives you a great overview of yours systems. It shows:

  • If Machines are infected/unprotected
  • If there are updates for your machines
  • A number of other alerts

Malware Protection:

From here you can see which machines have Malware protection turned off completely and also if they have overdue scans or specific parts of the protection, such as USB device scanning, turned off.

1 click takes you to a list of machines, from where you can turn on protection.

Updates:

This, not surprisingly, gives you a list of all the updates that are available for you machines be they for the OS or applications.

One issue with this is that, as default, it shows you ALL possible updates:

image

however, these can easily be filtered:

image

image

Another problem I have noticed is that it wants to give my laptop updates for Office 2007, as well as Office 2010; oddly, this doesn’t happen with my other 2010 machines. I had a number of issues when upgrading Office versions and I’m inclined to believe that there are some Office 2007 remnants on the machine that are being picked up by Intune.

Should you choose to approve an update for a machine/machines, you then reach this screen:

image

Choose the groups on which you want to install the updates, click approve and job done!

I feel it would be a smoother experience and require less clicks, if you could see the machine names on the same screen as all the updates. Currently, you must:

  • Select the update
  • click on “x computers need this update”
  • Check the groups/machines
  • Go back to the previous screen
  • Approve Update

Showing the machines names/groups on the initial screen would remove a lot of that.

You can also access the updates via the individual machine screen, I’ll cover that in a later post.

Alerts by Type:

This section, as well as the above, also includes other types of alerts…not just updates and malware. This is where InTune starts to differentiate itself from other products, for example:

image

If I click through, it tell me:

image

That is pretty cool, and something that is very useful for System Admins. I didn’t expect InTune to cover things like this, certainly not in the beta, so I’m pleasantly surprised Smile However, you can’t initiate the defrag from InTune.

The 2 options on the right hand side “Create Computer Group” and “View a Report” will be covered in later posts.

Summary:

This is a brief look at just the first screen of Microsoft Windows InTune but I’m sure you will agree that it already looks very interesting. So stay tuned for the remaining posts in this series (at least 9!) and ask any questions you may have in the comments Smile

Cheers

Rich

%d bloggers like this: