Teams devices and intune.Manage collaboration experiences in Teams for iOS and Android with Microsoft Intune

Looking for:

Managing Microsoft Teams Rooms with Intune - Microsoft Tech Community. 

Click here to DOWNLOAD

   

 

Microsoft Teams IP Phones and Intune Enrollment - Microsoft Tech Community - Creating Teams Devices Groups

 

This post answers a few of the frequently asked questions and provides general guidance. Teams Room devices can be enrolled and managed by Intune to provide many of the device management and security capabilities available to other endpoints managed by Intune. Because these devices run Windows 10 under the hood, several of the Windows 10 features will be available to use, but many are not applicable or recommended.

Windows 10 based Teams devices arrive from suppliers prepared with an OS image, user accounts, and pre-configured profiles. For a smooth, automatic MDM enrollment, sign in to the device with the admin profile and perform the Azure AD join from the Settings menu. We recommend you use an Intune device enrollment manager DEM account specifically because Teams Room devices are shared and DEM accounts are more practical for managing shared-device scenarios.

Learn more about DEM accounts here. The Teams Rooms resource account can be used for Intune enrollment, but it should not be used for Windows 10 sign-in on the device because it can cause issues during automatic sign-in of the Microsoft Teams Room application account.

Please use a tenant or device admin account to administer local device settings. An additional tip is to name Teams Room devices with a prefix that allows devices to be grouped dynamically.

You can rename devices with either a Windows 10 configuration policy or manually per device in Intune. Depending on your current scenario, there are several other enrollment options available:.

For more details about available enrollment methods, see Intune enrollment methods for Windows devices. Recommendation: Use Windows configuration profiles to configure device settings that you need to change beyond the shipped defaults. The following Windows 10 Configuration Policy types may be used with Windows 10 based meeting room devices:.

Check for supported hardware here. Learn more about available configuration policies here: Create a device profile in Microsoft Intune. Compliance policies Recommendation: Use compliance policies to achieve the desired security level for your Teams devices.

You can use compliance policies on your Teams Room devices. Make sure to create the appropriate exclusions for any existing Windows 10 compliance policies that are currently deployed in your organization to All devices.

For example, you may have configured the setting Maximum minutes of inactivity before password is required in a policy for all Windows 10 desktop devices but this would result in a poor meeting room experience if applied to Teams Room devices. If you currently have Windows 10 compliance policies deployed to large groups of devices, make sure you use the Exclude group feature so that you can target a more specific compliance policy for the Teams Room devices.

For detailed guidance, see Use compliance policies to set rules for devices you manage with Intune. Conditional Access policies with only location-based conditions can be applied to Microsoft Teams Rooms accounts at this time. Microsoft is currently working on updates that will allow additional conditions to be set, such as device compliance. Then you can use the dynamic group feature to group together all devices that start with MTR. The reason for device-group assignment is that Teams Room devices sign in to Windows with a local user account instead of an Azure AD user account and during sync with Intune, would not request any user-assigned policy.

As always, we want to hear from you! If you have any suggestions, questions, or comments, please comment below. You can also tag IntuneSuppTeam on Twitter. You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in. Products 68 Special Topics 42 Video Hub Most Active Hubs Microsoft Teams. Security, Compliance and Identity.

Microsoft Edge Insider. Microsoft FastTrack. Microsoft Viva. Core Infrastructure and Security. Education Sector. Microsoft PnP. AI and Machine Learning. Microsoft Mechanics.

Healthcare and Life Sciences. Small and Medium Business. Internet of Things IoT. Azure Partner Community. Microsoft Tech Talks. MVP Award Program. Video Hub Azure. Microsoft Business. Microsoft Enterprise. Browse All Community Hubs. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Showing results for. Show only Search instead for. Did you mean:. Sign In. Managing Microsoft Teams Rooms with Intune. Intune Support Team. Published Dec 16 PM Depending on your current scenario, there are several other enrollment options available: Use Windows Configuration Designer to create a Windows 10 provisioning package that performs a bulk Azure AD Join.

Details are here. Windows 10 Configuration Profiles Recommendation: Use Windows configuration profiles to configure device settings that you need to change beyond the shipped defaults. The following Windows 10 Configuration Policy types may be used with Windows 10 based meeting room devices: Profile type Can you use the profile? Conditional Access Conditional Access policies with only location-based conditions can be applied to Microsoft Teams Rooms accounts at this time.

More info and feedback As always, we want to hear from you! Removed mention of device compliance checks for CA; that feature is coming. Tags: Microsoft Endpoint Manager. Resize Editor. Version history. Last update:. Updated by:. Education Microsoft in education Office for students Office for schools Deals for students and parents Microsoft Azure in education.

 

Teams devices and intune

 

Speakerphones See all. Poly Sync A personal, USB and Bluetooth smart speakerphone. Yealink CP Jabra Speak Engineered to power your meetingswith seamless, premium audio Learn more. Jabra Speak MS. Yealink MP54 for Microsoft Teams. Lenovo ThinkSmart View. Yealink VP59 for Microsoft Teams.

Dial up productivity. Teams Rooms See all. Microsoft Surface Hub 2S. Yealink MVC Poly Studio X Lenovo ThinkSmart Hub large room. Logitech Tap with MeetUp. Monitors See all. Poly Studio P Web cameras See all. Huddly IQ. Yealink UVC A brilliant video experience for the personal desktop.

Logitech CE business webcam. Budget webcam with p and integrated privacy shutter. Logitech MeetUp with expansion mic.

Super-wide field of view for small spaces. Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. A successful deployment of Teams phone devices and Teams Displays starts with planning. This article will take you through the tasks and steps to deploy these devices in your organization.

It also provides guidance on devices usage, licensing, integrating with your environment, touchpoints, and management. The Microsoft Adoption Hub is a great place to get started on your adoption journey with Microsoft Teams. Planning the rollout of Teams phones and Displays in your organization starts with your deployment goals. Teams devices support hybrid work in meeting rooms, offices, and other functional spaces. You'll need to determine where these devices will be used and by whom.

Now that you've identified your device personas, you need to determine which certified devices you want to use and how many of them you need. To help you make this decision, consider the following questions:. Now you know how many devices you need, the next step is to determine how many licenses are needed. Microsoft Mechanics. Healthcare and Life Sciences. Small and Medium Business. Internet of Things IoT. Azure Partner Community. Microsoft Tech Talks.

MVP Award Program. Video Hub Azure. Microsoft Business. Microsoft Enterprise. Browse All Community Hubs. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Showing results for. Show only Search instead for. Did you mean:. Sign In. Managing Microsoft Teams Rooms with Intune. Intune Support Team. Published Dec 16 PM Depending on your current scenario, there are several other enrollment options available: Use Windows Configuration Designer to create a Windows 10 provisioning package that performs a bulk Azure AD Join.

Details are here. Windows 10 Configuration Profiles Recommendation: Use Windows configuration profiles to configure device settings that you need to change beyond the shipped defaults. The following Windows 10 Configuration Policy types may be used with Windows 10 based meeting room devices: Profile type Can you use the profile?

Conditional Access Conditional Access policies with only location-based conditions can be applied to Microsoft Teams Rooms accounts at this time.

   

 

Teams devices and intune -

   

You can also create and assign configuration profiles to a device or groups of devices. To manage devices, such as change device configuration, restart devices, manage updates, or view device and peripheral health, you need to be assigned one of the following Microsoft admin roles:. For more information about admin roles in Teams, see Use Teams administrator roles to manage Teams.

You can manage any device that's certified for, and enrolled in, Teams. A device is automatically enrolled the first time a user signs in to Teams on the device. For a list of certified devices that can be managed, see:. To manage devices, in the left navigation of the Microsoft Teams admin center , go to Teams Devices , and then select the device type. Each type of device has its own respective section, which lets you manage them separately.

You can use the Teams admin center to view and remotely manage your Teams Rooms on Windows devices across your organization. The Teams admin center makes it easy to see, at a glance, which devices are healthy and which need attention, and lets you focus on specific devices to see detailed information about device health, meeting performance, call quality, and peripherals.

Here are some things you can do to manage your Teams Rooms devices. Microsoft Tech Talks. MVP Award Program. Video Hub Azure. Microsoft Business. Microsoft Enterprise. Browse All Community Hubs. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Showing results for. Show only Search instead for. Did you mean:. Sign In. Managing Microsoft Teams Rooms with Intune.

Intune Support Team. Published Dec 16 PM Depending on your current scenario, there are several other enrollment options available: Use Windows Configuration Designer to create a Windows 10 provisioning package that performs a bulk Azure AD Join.

Details are here. Windows 10 Configuration Profiles Recommendation: Use Windows configuration profiles to configure device settings that you need to change beyond the shipped defaults. The following Windows 10 Configuration Policy types may be used with Windows 10 based meeting room devices: Profile type Can you use the profile? Agus Rachman. Published Jan 28 PM 7, Views. You have connected your Intune tenant with managed Google Play in order to manage Android Enterprise devices.

You have configured your enrollment restrictions such that Android work profile enrollment restrictions are applied to the end user account that you are using to enroll. This approach is recommended if you are managing Android Enterprise work profile devices in the same Intune tenant as your Teams device. If you are not actively using Android Enterprise in your Intune tenant, you can remove the connection to managed Google Play following the directions here under " Disconnect your Android enterprise administrative account ".

Disconnecting your Intune tenant from managed Google Play will disable Android Enterprise enrollment entirely for your tenant. Th erefore, t his option is only recommended if you are not managing any Android Enterprise devices in your Intune tenant.

Device-based Exception via Intune Intune allows creating device compliance policies in the tenant for the Android-based devices accessing organizational data. Tags: Call Quality Dashboard. Resize Editor. Version history. Last update:. To apply Intune app protection policies against apps on Android devices that aren't enrolled in Intune, the user must also install the Intune Company Portal.

Teams for iOS and Android supports app settings that allow unified endpoint management, like Microsoft Endpoint Manager, administrators to customize the behavior of the app. Teams for iOS and Android supports the following configuration scenarios:. For configuration scenarios that require device enrollment on Android, the devices must be enrolled in Android Enterprise and Teams for Android must be deployed via the Managed Google Play store.

For more information, see Set up enrollment of Android Enterprise personally-owned work profile devices and Add app configuration policies for managed Android Enterprise devices. Each configuration scenario highlights its specific requirements. For example, whether the configuration scenario requires device enrollment, and thus works with any UEM provider, or requires Intune App Protection Policies.

App configuration keys are case sensitive. Use the proper casing to ensure the configuration takes effect. Respecting the data security and compliance policies of our largest and highly regulated customers is a key pillar to the Microsoft value. Some companies have a requirement to capture all communications information within their corporate environment, as well as, ensure the devices are only used for corporate communications.

To support these requirements, Teams for iOS and Android on enrolled devices can be configured to only allow a single corporate account to be provisioned within the app. This configuration scenario only works with enrolled devices.