Overview
for CoreImage devices
Welcome to using your Intune-managed CoreImage device!
HITS is using Intune for more than just mobile device management. It is using Intune to manage parts of its fleet of CoreImage PCs.
Let's get started!
- How to complete the setup of your new Intune-CoreImage device
When you first get your new Intune-CoreImage device, you will log into it using your Michigan Medicine email address and password to complete its setup. Whereas the Classic-CoreImage could only be built at Michigan Medicine, this new Intune-CoreImage can be enrolled anywhere with an internet connection such as at your home. This automated enrollment process is referred to as Autopilot.
- What do I do if I'm asked to "Set up for personal use" when enrolling a device?
- If you see a failure during enrollment due to an application not installing, click "Continue anyway" in the lower-left corner instead of "Try again."
- What do I do if I see "CLE" on the login screen?
- How to find your Intune-CoreImage device's name
They no longer have an 8-character Device Name. Instead, the new Intune-CoreImage devices have automatically generated names composed of an MM prefix followed by the devices' respective serial numbers (e.g., MM-A1B2C3). - How to logoff / sign out
Windows' built-in sign off feature replaces the custom Logoff tile (the yellow X) in the start menu. - How to install applications using Company Portal
- Company Portal replaces Classic-CoreImage's Software Center in the start menu.
- When you open Company Portal for the first time, you will be asked to choose between "Personal" and "Corporate." Choose Corporate.
- You can install many applications directly from Company Portal. For a list of available applications, refer to this article.
- If you need a licensed or otherwise restricted application, you can request it via the Service Catalog.
- Applications requested via the Service Catalog will be automatically installed; however, that could take hours to trigger. You may be able to expedite their installation by syncing policies.
- How to uninstall packaged applications using Company Portal.
- How do I resolve compliance warnings in Company Portal?
- Adobe Reader is not available for Intune-CoreImage. If using Edge to interact with PDFs is insufficient, please install Adobe Creative Cloud from Company Portal and use it to install Adobe Acrobat Pro.
- How to install printers
- How to access your files
- OneDrive files will automatically appear as part of the automatically configured OneDrive Backup for PC (Desktop, Documents, and Pictures).
- The H, R, S, and T drives all appear in File Explorer automatically; however, if remote, you will need to connect to the VPN to access their contents. In cases where these network drives do not appear or remain in a disconnected state or are unusable even after starting the VPN, follow this process: Refresh policy using the Company Portal, reboot, sign into Windows, start the VPN connection again, and try to access the drives again.
- Intune-CoreImage devices show the name of the last user to login instead of asking for a username. Device Support or similar support staff will be able to log into the device while you are still logged in to perform support tasks using Windows' Fast User Switching feature.
- Instead of being already logged into the Citrix client, you will need to configure the Citrix client to remember your Michigan Medicine password.
- You may notice the lack of presence in Outlook--the little dot indicating whether you are available in Teams, in a meeting, etc. If you do not see the presence indicator in Outlook, please follow these instructions to restore that functionality. Jump to step 4 in the instructions where you are guided to open Teams' settings and make a modification.
- You may run a Windows Updates scan yourself from within the Settings application: Settings application > Update & Security > Windows Update (Microsoft link). The scan will attempt to find updates to the Windows operating system and other Microsoft software updates, including hardware device drivers. Required updates will still be managed centrally. Operating system updates and hardware drivers are required updates. Drivers will be delayed by ~30 days after they are released. A complete list of items that are updated via Windows Updates is located here.
- Intune-CoreImage does not run Maintenance, nor does it use GreenIT. Instead, it uses Microsoft's default power plan that you can customize (Microsoft link).
*The screensaver's timer cannot be changed and will lock access to the desktop when it starts.Power (Balanced profile) Screen Off (minutes) Sleep (minutes) Screensaver* (minutes) Laptop - Battery 5 30 15 Laptop - Plugged in 15 30 15 Desktop 10 10 15 - You can request remote access to your Intune-CoreImage device using the Service Catalog item. Only the Primary User of the target Intune-CoreImage device can remote desktop to it. Also, you cannot use Windows Virtual Desktop to access the remote Intune-CoreImage device.
Source Device Target Device -- Classic-CoreImage Intune-CoreImage Classic-CoreImage Intune-CoreImage WVD Personal Device - If you need elevated permissions (i.e., admin rights), you can request them through the Just-In-Time process.
Related Information
Intune-CoreImage support overview for IT Service Providers (HITS internal link)
What is Intune? (Microsoft external link)
CoreImage - How to find the version of Windows my CoreImage device is using
Background
As HITS evolves its management of desktops and laptops, it is shifting some CoreImage computers to use Microsoft's Intune endpoint management platform. Intune is also used for corporate and personally owned (BYOD) mobile devices at Michigan Medicine. This CoreImage modernization effort expands Intune's use to managing some corporate Windows PCs. CoreMac will continue to be managed with U-M ITS's Izzy platform. Personally owned Windows and Mac devices will not be managed by Intune; their owners should continue to use Windows Virtual Desktop.
The first portion of the CoreImage fleet addressed by this shift to using Intune are new, individually assigned CoreImage computers. This splits the CoreImage fleet into two different but related products: The Classic-CoreImage used for shared and Kiosk computers and the Intune-CoreImage used for individually assigned computers.
