通过 Intune 软件客户端将 Windows 电脑作为计算机进行管理Manage Windows PCs as computers via Intune software client

适用于:经典门户中的 IntuneApplies to: Intune in the classic portal
在寻找有关 Azure 门户中 Intune 的文档吗?Looking for documentation about Intune in the Azure portal? 请转到此处Go here.

Intune 提供了可供组织管理移动设备的全面的解决方案。Intune provides a comprehensive solution for organizations to manage mobile devices. Intune 可以使用 Windows 10 操作系统的内置新式设备管理功能将 Windows 电脑作为移动设备进行管理。Intune can manage Windows PCs as mobile devices using the modern device management capabilities built in to the Windows 10 operating system. Intune 也可通过 Intune 软件客户端将 Windows 电脑作为计算机进行管理,从而满足组织的管理需求。To meet your organization’s management needs, Intune can also manage Windows PCs as computers with the Intune software client. 此管理方法使用旧版 Windows 操作系统中的传统计算机管理功能。This management method uses traditional computer management capabilities in the legacy Windows operating system.

Intune 软件客户端最适合运行旧版操作系统(例如 Windows 7)且无法将其作为移动设备进行管理的 Windows 电脑。The Intune software client is best suited for Windows PCs running legacy operating systems such as Windows 7 which cannot be managed as mobile devices. Intune 软件客户端使用“组策略”等管理功能管理云中的电脑。The Intune software client uses management capabilities like Group Policy to manage PCs from the cloud.

Intune 最多可支持使用该软件客户端将 7,000 台 Windows 电脑作为计算机进行管理。Intune supports management of Windows PCs as computers using the software client for up to 7,000 PCs. 对于更大规模的部署,可将 Windows 10 电脑作为移动设备进行管理。For larger deployments, manage Windows 10 PCs as mobile devices. Intune 的每个版本和 Windows 10 的每个更新均包含基于移动设备管理体系结构的管理功能。Each release of Intune and update of Windows 10 includes management features based on the mobile device management architecture. 强烈建议将你的组织迁移到作为移动设备进行管理的 Windows 10 中。We strongly recommend that you move your organization to Windows 10 managed as mobile devices.

备注

可使用 Intune 客户端软件将 Windows 8.1 和更高版本设备作为电脑或移动设备进行管理。You can manage Windows 8.1 and later devices either as PCs by using the Intune client software or as mobile devices. 但不能在同一个设备上同时使用这两种方法。You cannot use both methods on the same device. 请在谨慎考虑后再决定是否通过 Intune 客户端软件管理电脑。Carefully consider before deciding to manage PCs with the Intune client software. 本主题仅适用于通过运行 Intune 客户端软件将设备作为电脑管理。This topic applies only to managing devices as PCs by running the Intune client software.

Intune 电脑客户端管理要求Requirements for Intune PC client management

硬件:安装 Intune 客户端软件的最低硬件要求如下:Hardware: The following are minimum hardware requirements for installing the Intune client software:

要求Requirement 更多信息More information
网络Network 客户端要求 PC 具有 Internet 连接。The client requires the PC to have Internet connectivity.
处理器和内存Processor and Memory 请参阅 PC 操作系统的处理器和 RAM 要求。Refer to the processor and RAM requirements for the PC's operating system.
硬盘空间Disk space 安装客户端软件之前必须有 200 MB 可用磁盘空间。200 MB available disk space before the client software is installed.

软件:安装该客户端软件的软件要求如下:Software: The following are software requirements for installing the client software:

要求Requirement 更多信息More information
操作系统Operating system 运行 Windows Vista 或更高版本的 Windows 设备。Windows device running Windows Vista or later.
不支持家庭版各版本。Home edition versions are not supported.
管理权限Administrative permissions 安装客户端软件的帐户必须具有该设备的本地管理员权限。The account that installs the client software must have local administrator permissions on that device.
Windows Installer 3.1Windows Installer 3.1 PC 至少必须安装 Windows Installer 3.1。The PC must have, at a minimum, Windows Installer 3.1.

查看 PC 上 Windows Installer 的版本:To view the version of Windows Installer on a PC:

在电脑上,右键单击 %windir%\System32\msiexec.exe,然后单击“属性”。On the PC, right-click %windir%\System32\msiexec.exe, and then click Properties.

你可以从 Microsoft Developer Network 网站上的 Windows Installer Redistributables(Windows Installer 可再分发文件) 中下载最新版本的 Windows Installer。You can download the latest version of Windows Installer from Windows Installer Redistributables on the Microsoft Developer Network website.
删除不兼容的客户端软件Remove incompatible client software 安装 Intune 客户端软件之前,需从该电脑卸载任何 Configuration Manager、Operations Manager、Operations Management Suite 和 Service Manager 客户端软件。Before you install the Intune client software, uninstall any Configuration Manager, Operations Manager, Operations Management Suite, and Service Manager client software from that PC.

部署 Intune 软件客户端Deploying the Intune software client

可以以 Intune 管理员身份通过各种方式向用户提供 Intune 软件客户端。As an Intune admin, you can make the Intune software client available to users in a variety of ways. 请参阅在 Windows 电脑上安装 Intune 软件客户端,获取相关指南。For guidance, see Install the Intune software client on Windows PCs.

使用 Intune 客户端软件时具有的计算机管理功能Computer management capabilities with the Intune client software

在大多数情况下,你将向 Microsoft Intune 注册设备,这样可提供更多的功能。In most scenarios, you will enroll your devices with Microsoft Intune, which provides a greater set of capabilities. 但是,你也可以通过使用 Intune 软件客户端来管理电脑,该客户端提供以下功能:However, you can also manage PCs by using the Intune software client, which provides the following features:

  • 软件更新管理 - 可使电脑保持最新版本,并决定何时进行更新。Software update management - You can keep PCs up to date and decide when updates are applied.

  • Windows 防火墙策略 - 可帮助确保公司所用电脑的 Windows 防火墙均处于活动状态且均配置正确。Windows Firewall policy - This helps to ensure that no PC that's used in your company has an inactive or improperly-configured Windows Firewall.

  • 反恶意软件保护 - Intune 包括 Endpoint Protection,它有助于保护你的电脑免遭恶意软件侵害。Anti-malware protection - Intune includes Endpoint Protection, which helps protect your PCs from malware.

  • 远程协助 - Intune 允许用户与 IT 支持人员联系,后者可使用 Intune 附带的远程桌面功能来提供协助(需要 TeamViewer 软件)。Remote assistance - Intune lets users contact IT support staff, who can then provide assistance by using a remote desktop feature that is included with Intune (requires TeamViewer software).

  • 软件许可证管理 - 跟踪有多少软件许可证可用,以及有多少可用的许可证已使用。Software license management - Track how many software licenses are available, and how many available licenses are being used.

  • 应用部署 - 将软件部署到你管理的 PC。App deployment - Deploy software to PCs that you manage. 在使用软件客户端管理电脑时,一些应用管理功能不可用。Some app management features are not available when you manage PCs with the software client.

用于 Intune 软件客户端的策略和应用部署Policies and app deployments for the Intune software client

虽然 Intune 客户端软件通过管理软件更新、Windows 防火墙和 Endpoint Protection 支持帮助保护电脑的管理功能,但由 Intune 客户端软件管理的电脑不能以其他 Intune 策略为目标,包括特定于移动设备管理的 Windows 策略设置。While the Intune client software supports management capabilities that help protect PCs by managing software updates, Windows firewall, and Endpoint Protection, PCs managed with the Intune client software cannot be targeted with other Intune policies, including those Windows policy settings that are specific to mobile device management.

在使用 Intune 客户端软件管理 Windows 电脑时,只能使用“计算机管理”部分下显示的策略。When you use the Intune client software to manage Windows PCs, you can use only the policies shown under the Computer Management section.

Intune 使用与 Windows Server Active Directory 域服务 (AD DS) 组策略对象 (GPO) 执行方式类似的策略来管理 Windows 电脑。Intune manages Windows PCs using policies, similar to how Windows Server Active Directory Domain Services (AD DS) Group Policy Objects (GPOs) do. 如果使用 Intune 管理 Active Directory 加入域的计算机,请确保 Intune 策略不与组织中使用的其他 GPO 冲突If you manage Active Directory domain-joined computers with Intune, ensure that Intune policies do not conflict with other GPOs used in your organization. 请参阅组策略入门了解详细信息。To read more, see Group Policy for beginners.

为新的 Windows 电脑策略选择模板

在部署应用时,只能使用 Windows Installer(.exe、.msi)。When deploying apps, you can use only the Windows Installer (.exe, .msi).

选择平台和电脑客户端软件文件的位置

Windows 电脑的常见任务Common tasks for Windows PCs

可以使用 Intune 管理控制台在安装了客户端的 Windows 电脑上执行其他常见的计算机管理任务:You can use the Intune admin console to perform other common computer management tasks on Windows PCs that have the client installed:

有关上述任务的详细信息,请参阅常见的计算机管理任务For more information about the above tasks, see common computer management tasks.

Intune 客户端软件的管理限制Management limitations of the Intune client software

某些管理选项(可用于将电脑作为移动设备管理)不能用于使用 Intune 客户端软件管理的电脑:Some management options, which can be used to manage PCs as mobile devices, cannot not used for PCs that are managed with the Intune client software:

  • 完全擦除(选择性擦除可用)Full wipe (selective wipe is available)
  • 条件性访问Conditional access

还需注意,在 Intune 管理控制台中,只有在已使用 Intune 客户端软件注册设备后,才会显示某些部分,例如“更新”、“保护”和“许可证”。Also note that in the Intune admin console, certain sections, such as Updates, Protection, and Licenses appear only if you have enrolled devices using the Intune client software.

仅为电脑客户端显示的管理控制台项

故障排除帮助Help with troubleshooting

Intune 客户端软件通常在后台静默运行,无需许多用户交互或故障排除。The Intune client software usually runs quietly in the background without the need for much user interaction or troubleshooting. 如果需要解决电脑管理问题,可以检查日志。If you need to resolve PC management issues, you can check the logs. Intune 客户端软件和相应的日志安装在 %Program Files%\Microsoft\OnlineManagement 目录下。The Intune client software and corresponding logs are installed under the %Program Files%\Microsoft\OnlineManagement directory.

还可以查看故障排除 Microsoft Intune 中的客户端安装问题来检查可能出现的问题以及任何解决方案或解决方法。You can also review Troubleshoot client setup in Microsoft Intune to check for issues that might occur, and any resolutions or workarounds.