设置 IntuneSet up Intune

以下设置步骤有助于使用 Intune 实现移动设备管理 (MDM)。These set-up steps help you enable mobile device management (MDM) by using Intune. 必须先执行设备管理,然后才能授予用户对公司资源的访问权限或管理设备上的设置。Devices must be managed before you can give users access to company resources or manage settings on those devices.

某些步骤(例如设置 Intune 订阅和设置 MDM 机构)是在多数情况下都需要执行的。Some steps, such as setting up an Intune subscription and setting the MDM authority, are required for most scenarios. 其他步骤(例如配置自定义域或添加应用)是可选步骤,具体取决于公司需要。Other steps, such as configuring a custom domain or adding apps, are optional depending upon your company's needs.

如果当前正在使用 Microsoft Endpoint Configuration Manager 管理计算机和服务器,则可以使用共同管理云连接 Configuration ManagerIf you're currently using Microsoft Endpoint Configuration Manager to manage computers and servers, you can cloud-attach Configuration Manager with co-management.

提示

在符合条件的计划中,如果购买的 Intune 许可证达到 150 个,就可以使用 FastTrack 中心权益If you purchase at least 150 licenses for Intune in an eligible plan, you can use the FastTrack Center Benefit. 通过此服务,Microsoft 专家将协助用户针对 Intune 做好环境准备。With this service, Microsoft specialists work with you to get your environment ready for Intune. 请参阅 FastTrack 企业移动性 + 安全性 (EMS) 中心权益See FastTrack Center Benefit for Enterprise Mobility + Security (EMS).

步骤Steps 状态Status
11 支持的配置 - 在准备阶段需要了解的信息。Supported configurations - Need-to-know info before you start. 包括支持的配置和网络要求。This includes supported configurations and networking requirements.
22 登录 Intune - 登录试用订阅或创建新的 Intune 订阅。Sign in to Intune - Sign in to your trial subscription or create a new Intune subscription.
33 配置域名 - 设置 DNS 注册,以将公司域名与 Intune 连接。Configure domain name - Set DNS registration to connect your company's domain name with Intune. 此操作可在连接 Intune 和使用资源时为用户提供熟悉的域。This gives users a familiar domain when connecting to Intune and using resources.
44 添加用户 - 添加用户和组,或连接 Active Directory 以与 Intune 同步。Add users and groups - Add users and groups, or connect Active Directory to sync with Intune. 除非设备是“无用户”网亭设备,否则必须执行此操作。Required unless your devices are "userless" kiosk devices, for example. 使用组来分配应用、设置和其他资源。Groups are used to assign apps, settings, and other resources.
55 分配许可证 - 向用户授予使用 Intune 的权限。Assign licenses - Give users permission to use Intune. 所有用户设备和无用户设备都需要 Intune 许可证才能访问服务。Each user or userless device requires an Intune license to access the service.
66 设置 MDM 机构 - 使用用户和设备组以简化管理任务。Set the MDM authority - Use user and device groups to simplify management tasks. 使用组来分配应用、设置和其他资源。Groups are used to assign apps, settings, and other resources.
77 添加应用 - 可以将应用分配给组,并可自动或选择性地安装应用。Add apps - Apps can be assigned to groups and automatically or optionally installed.
88 配置设备 - 设置用于管理设备设置的配置文件。Configure devices - Set up profiles that manage device settings. 设备配置文件可预配置电子邮件、VPN、Wi-Fi 和设备功能的设置。Device profiles can preconfigure settings for email, VPN, Wi-Fi, and device features. 它们还可对设备进行限制,以帮助同时保护设备和数据。They can also restrict devices to help protect both devices and data.
99 自定义公司门户 - 自定义用户在注册设备和安装应用时使用的 Intune 公司门户。Customize Company Portal - Customize the Intune Company Portal that users use to enroll devices and install apps. 公司门户应用中和 Intune 公司门户网站上均显示这些设置。These settings appear in both the Company Portal app and the Intune Company Portal website.
1010 启用设备注册 - 通过设置 MDM 机构并启用特定平台实现对 iOS/iPadOS、Windows、Android 和 Mac 设备的 Intune 管理。Enable device enrollment - Enable Intune management of iOS/iPadOS, Windows, Android, and Mac devices by setting the MDM authority and enabling specific platforms.
1111 配置应用策略 - 基于 Microsoft Intune 中的应用保护策略提供特定设置。Configure app policies - Supply specific settings based on app protection policies in Microsoft Intune.