Category: Uncategorized

Part 1 – Deploying Microsoft Intune PFX connector in an Enterprise world…common practices

On By Ronny de JongIn Active Directory Certificate Services, Andriod, Configuration Manager, Enterprise Mobility, Intune, iOS, Microsoft Intune, Network Device Enrollment Service, Simple Certificate Enrollment Protocol, Uncategorized, Windows 10, Windows 10 Mobile7 Comments

Last year I had the change to implement PFX certificate infrastructure for a large enterprise customer. Occasion of the project was a migration of Citrix XenMobile (XDM) to Microsoft Intune as strategic mobile device- and application management solution.

microsoft-intune-pfx-connector-architecture-overview
Microsoft Intune PFX connector certificate deployment architecture.

In a series of blogposts I’m sharing my experiences, design decisions, common practices and challenges of implementing Microsoft Intune PFX connector as certificate deployment mechanism in an enterprise environment.

Advertisements

Part 3 – Create & deploy Enterprise Data Protection using System Center Configuration Manager Current Branch

On By Ronny de JongIn UncategorizedLeave a comment

image

In this blog series of Enterprise Data Protection (EDP) I will provide you some more insights what EDP is, how it works and how to create & deploy EDP policies by Configuration Manager and Microsoft Intune.

In this 3rd blog post I’ll outline how to create & deploy Enterprise Data Protection policies by Configuration Manager Current Branch (1511) to Windows 10 devices.

Continue reading “Part 3 – Create & deploy Enterprise Data Protection using System Center Configuration Manager Current Branch” →

Azure AD Premium Public Preview Features…a closer look

On By Ronny de JongIn Active Directory, Active Directory Federation Services, Azure, Azure AD, Cloud, Enterprise Mobility, Enterprise Mobility Suite, Microsoft Intune, Uncategorized, Windows Server 2012 R22 Comments

image

Microsoft is continuously improving their Azure cloud services while new features get introduced in rapid pace. In this blog I want to consider some new Azure Active Directory Premium features which are currently in public preview. ’These features are:

  • Dynamic Groups
  • Azure Application Custom Domain publishing
  • Azure Conditional Application Access

Continue reading “Azure AD Premium Public Preview Features…a closer look” →

Name Suffix Routing into the rescue publishing Non-Claims-Aware application using Kerberos Constrained Delegation

On By Ronny de JongIn Active Directory, Active Directory Federation Services, Infrastructure, Uncategorized, Web Application Proxy, Windows Server 2012 R2Leave a comment

Last week I faced a challenge publishing non-claims-aware application (SharePoint 2013) using Kerberos Constrained Delegation (KCD) by Web Application Proxy (WAP).

ADFS cross forest Mirosoft Intune Infrastructure

The customer environment consists of a multi-forest active directory where user accounts and server objects each stored in a separate forest. Due to the introduction of Microsoft Enterprise Mobility Suite (EMS) we added a public User Principal Name (UPN) which was required to log on using a public domain namespace.

Continue reading “Name Suffix Routing into the rescue publishing Non-Claims-Aware application using Kerberos Constrained Delegation” →

Part 2 – Deploy certificates to mobile devices using Microsoft Intune NDES – Connector

On By Ronny de JongIn Active Directory Certificate Services, Andriod, Cloud, Enterprise Mobility, Infrastructure, iOS, Microsoft Intune, Network Device Enrollment Service, Office 365, Simple Certificate Enrollment Protocol, Uncategorized, Windows Phone 8.16 Comments

In part 1 of this blog series I provided some background and highlevel overview how the proces of deploying certificate profiles to devices works with Microsoft Intune.

In this second blog – part 2 – I’ll outline the setup and configuration of the Microsoft Intune NDES connector. As starting point, we assume that you have already installed a Certificate Authorithy (CA), NDES server and an active Microsoft Intune subscription.

Continue reading “Part 2 – Deploy certificates to mobile devices using Microsoft Intune NDES – Connector” →

Part 1 – Deploy certificates to mobile devices using Microsoft Intune NDES – Overview

On By Ronny de JongIn Active Directory Certificate Services, Azure, Cloud, Enterprise Mobility, Infrastructure, Microsoft Intune, Network Device Enrollment Service, Office 365, Simple Certificate Enrollment Protocol, Uncategorized, Web Application Proxy, Windows Server 2012 R26 Comments

With the recent updates of Microsoft Intune it is possible now deploying certificate profiles using Network Device Enrollment Service (NDES) to mobile devices.

In this blog series I’ll cover the different aspects of certificate enrollment proces by using Microsoft Intune (standalone).

Overview

Before going in details about NDES and hereby an brief overview of how NDES process works in relation to Microsoft Intune.

Microsoft Intune Standalone NDES

Continue reading “Part 1 – Deploy certificates to mobile devices using Microsoft Intune NDES – Overview” →

Troubleshooting: Federation for Windows Intune

On By Ronny de JongIn Active Directory, Active Directory Federation Services, Azure, Cloud, Configuration Manager, Enterprise Mobility Management, Infrastructure, Intune, Mobile Device Management, Office 365, System Center, Uncategorized, Windows Intune, Windows Server 2012 R2Leave a comment

During a Windows Intune proof of concept (PoC) I was facing some issues configuring federation in order to enable Signle Sign On (SSO).

Proxy Authentication

When configuring federation we couldn’t convert the the default domain to a federated domain type. By using the –Verbose –Debug parameters of convert –MsolDomainToFederated cmdlet the root cause became clear. Proxy Authentication was required and therefore we couldn’t convert the domain. One down two to go!

clip_image001_thumb[3] Continue reading “Troubleshooting: Federation for Windows Intune” →