Microsoft Windows Intune: Online Systems Management


Microsoft Windows InTune is the new Cloud based systems management tool from Microsoft, formerly known as “System Center Online” and has been long awaited. The ability to manage multiple locations/organizations from one central, online point is attractive to a lot of people for a lot of reasons…so let’s take a look @ InTune.

There are at least 10 sections inside InTune so I’m going to cover them in a number of posts, we’ll start with – System Overview:

image

image

This is the first screen you see when you log in to the Windows InTune Admin Console and it immediately gives you a great overview of yours systems. It shows:

  • If Machines are infected/unprotected
  • If there are updates for your machines
  • A number of other alerts

Malware Protection:

From here you can see which machines have Malware protection turned off completely and also if they have overdue scans or specific parts of the protection, such as USB device scanning, turned off.

1 click takes you to a list of machines, from where you can turn on protection.

Updates:

This, not surprisingly, gives you a list of all the updates that are available for you machines be they for the OS or applications.

One issue with this is that, as default, it shows you ALL possible updates:

image

however, these can easily be filtered:

image

image

Another problem I have noticed is that it wants to give my laptop updates for Office 2007, as well as Office 2010; oddly, this doesn’t happen with my other 2010 machines. I had a number of issues when upgrading Office versions and I’m inclined to believe that there are some Office 2007 remnants on the machine that are being picked up by Intune.

Should you choose to approve an update for a machine/machines, you then reach this screen:

image

Choose the groups on which you want to install the updates, click approve and job done!

I feel it would be a smoother experience and require less clicks, if you could see the machine names on the same screen as all the updates. Currently, you must:

  • Select the update
  • click on “x computers need this update”
  • Check the groups/machines
  • Go back to the previous screen
  • Approve Update

Showing the machines names/groups on the initial screen would remove a lot of that.

You can also access the updates via the individual machine screen, I’ll cover that in a later post.

Alerts by Type:

This section, as well as the above, also includes other types of alerts…not just updates and malware. This is where InTune starts to differentiate itself from other products, for example:

image

If I click through, it tell me:

image

That is pretty cool, and something that is very useful for System Admins. I didn’t expect InTune to cover things like this, certainly not in the beta, so I’m pleasantly surprised Smile However, you can’t initiate the defrag from InTune.

The 2 options on the right hand side “Create Computer Group” and “View a Report” will be covered in later posts.

Summary:

This is a brief look at just the first screen of Microsoft Windows InTune but I’m sure you will agree that it already looks very interesting. So stay tuned for the remaining posts in this series (at least 9!) and ask any questions you may have in the comments Smile

Cheers

Rich

Microsoft Online Services


Microsoft Online Services are getting ever closer to being a reality in the corporate world, with the official US launch on Monday (17-11-08). The UK launch will follow in the Spring so around March/April 2009.

The first acronym was SAAS or “Software-As-A-Service” with perhaps the biggest example being Salesforce.com, the CRM system. This is an online only model where the customer doesn’t have anything “on-premise” (installed at the customer site) and instead it is all in the “Cloud” (the internet). Microsoft realised that that doesn’t always suit all customers..they often like to have at least some portion of the software installed on-premise too, be it for Disaster Recovery, integration with other existing systems, high levels of customization and many other reasons so they invented Software+Services. The “Plus” is the key..customers can have the software on premise, in the cloud or a mix of both giving them a greater level of flexibility.

Microsoft Online Services AKA BPOS (Business Productivity Online Suite) provides corporate users with Microsoft hosted versions of the software, accessed via the internet. The products included in the BPOS Suite are:

  • Exchange Online
  • Sharepoint Online
  • Office Communications Server (OCS)*
  • Live Meeting

*It’s to be noted that OCS isn’t available as yet and will be making an appearance a little while into 2009.

Mary Jo Foley has a new post with info on future S+S offerings from Microsoft. Their stated aim is to have a web-based service to match all their exisitng on-premise offerings and it looks like ForeFront Security and System Center Management tools are the next in the line up. This would likely encompass anti-virus, web/content filtering, firewalls, online backup, disaster recovery and more-quite a good string to their bow.

Some people might wonder what the point of this is and while there are many reasons that customers will looks at BPOS, here are what I see as the 2 key drivers.

The Small to Medium Business (SMB’s)

I first took a real look at BPOS over at the WPC in Houston and right away I could see the potential for SMB’s. These are customers typically around the 50-100 user mark (although they could be smaller/bigger) who love the features of (usually) Sharepoint server and can see that collaboration, enhanced search, wiki’s, portals and more would benefit their business by increasing efficiency. However, they often can’t afford the initial monetary outlay for Sharepoint and/or don’t have the people to deploy, configure and maintain a Sharepoint installation.

Typically this brings an end to the matter until the customer increases in size to make the internal administration do-able or they find a chunk of cash down the back of the sofa 😉 BPOS however, will be a perfect solution as it can resolve both the afore mentioned issues.

Because BPOS is hosted at Microsoft’s DataCenters in The Cloud, the customer doesn’t need to worry about learning the skills to deploy and configure the software at installation, ensuring they have the people and time to perform ongoing maintenance, deploying updates & patches-Microsoft will take care of all that.

Because BPOS is charged on a monthly basis, this allows customers to spread the costs over the course of the 12 months, rather than paying it all in one hit up-front.

The Busy Corporate

In some ways this is similar to the first example but it applies to bigger companies. Most corporates around the 300+ user mark have a very long to-do list..upgrade network switching, implement SAN (Storage Area Network), desktop refresh, move to a virtual infrastructure and so on. Added into/onto a list like this, deploying something such as Sharepoint or Office Communications Server can seem a daunting, perhaps impossible task to system admins. They’ll need to purchase and deploy new servers, perhaps upgrade parts of the network to cope with the increased demand, add extra security and plenty more which can mean that the timescales for deployments such as this are quite lengthy and keep growing.

BPOS can cut through all that. The busy admins don’t need to do anything other than grant users access to the services. As they don’t need to deploy, upgrade or install anything-the implementation timescales can be drastically reduced, which is good for all involved.

BPOS will allow companies to realise the many benefits that these Microsoft products can offer them much quicker than is currently possible.

Although the BPOS suite includes all the mentioned products, they are also available individually which gives customers the flexibility to have, for example, an on-premise Exchange server with a Cloud based Sharepoint server. Alternatively you can have the same product both on-premise and online so a big corporate HQ could have Exchange onsite, while their satellite offices could use the MS hosted version.

As for the licensing side of things, I do have some info. Customers that have current Software Assurance (SA) will be able to purchase the services at a reduced cost to reflect their already increased investment in MS technology, and they will need to keep their SA current alongside their BPOS licensing. This means should they choose to move away from BPOS at a later date, they will still be fully licensed for the most current perpetual versions of the software too. Customers that don’t have SA will have to purchase a User Subscription Licence (USL) to gain access to the BPOS suite. Should they choose to revert back to soley on-premise software, they won’t retain any entitlement to the software (as it is a non-perpetual subscription).

Many people view S+S as a bit of a black art or perhaps a fad but I really think this is a watershed moment for anyone that uses software. The companies that embrace Software+Services from the start, be they MS partners or end users, will really have an advantage over their competitors in the long run. As a Microsoft Gold Partner I’m very excited about the new things that BPOS will bring along 🙂

*Update* I heard today direct from Microsoft that Dynamics CRM will be available as an online version in July 2010, so a little while yet.

If you have any questions or comments about moving to a Microsoft hosted solution, please feel free to leave a comment and I’ll help you out as best I can!

Cheers

Rich