31. Configure a Windows Shared Multi-user Device with Microsoft Intune

hello everyone welcome to Ms subtiv webcast in this video we are going to see the steps on how to configure a Windows shared multi-user device settings in InTune besides the normal Windows user devices which we can configure with Microsoft InTune we can also configure other forms of devices shared multi-user device type is a Windows device that doesn't have a primary user but is shared between multiple users it can be used in schools where the devices are shared between multiple students and teachers it can be also used in other shared device environments such as a factory with this setting the InTune administrator can turn on the shared PC feature to allow one user at a time users cannot switch between different sign-in accounts on the device when the user signs out we also choose to remove all user specific settings and users can sign into these shared devices with a guest account after users sign in the credentials are cached as they use the device and users only get access to features which we allow we can use a shared multi-user device profile to configure the device this applies some policy settings by default and we have some configuration options for which we can make a choice for example we can choose when the device goes into sleep mode if users can see and save files locally enable or disable power management settings and Etc we can also control if the guest account deletes when the user signs off or delete inactive accounts when a threshold is reached when the profile is created in InTune we can deploy or assign the profile to device groups in our organization we can also assign this profile to device groups with mixed device types and operating system versions first sign in to the Microsoft endpoint manager admin Center as a global administrator or an InTune service administrator we can access Microsoft endpoint manager using the URL https endpoint.microsoft.com on home page click on devices under policy click on configuration profiles click on create profile plus icon on the create a profile blade under platform select Windows 10 and later select profile type as templates from the list select shared multi-user device template click on share multi-user device click on create enter a descriptive name for the new profile here I'm giving neem paste shared multi-user device settings under a description for the profile the setting is optional but recommended after entering the description I'm going to click on next on configuration settings let's go through the options now if we enable shared PC mode option this means only one user can log into the device at a time if the text user required to log in then the first user needs to log off I'm going to click on enable to enable shared PC mode guest account option is used to create a guest account option on the sign in screen guest accounts don't require any user credentials or Authentication the settings creates a new local account each time it is used let's click on this drop down arrow here we have other options first guest option only allows a local guest account to sign into the device domain option only allows an Azure active directory domain account to sign into the device and last guest and domain option allows both local guest account and domain account to sign into the device in this example we only want to allow an Azure active directory domain account to sign into the test device so we will select domain option choose account management option if you want to delete accounts automatically we are not going to configure these options right now I'll try to create a separate video on guest account and its management options with local storage users can save and View files on the device's hard disk let me click on the drop down arrow enabled option allows user to see and save files locally using File Explorer in this example we will choose disabled option to prevent users from saving and viewing files on the device's hard drive so let me select disabled for local storage then we have power policies power policies setting allow or prevent users from changing the power settings using enabled option users can hibernate the device can close the lead to slip the device and change the power settings with disabled option uses can't turn off hibernet can't override all slip actions such as closing the lead and can't change the power settings we will select disable option for power policies next and the number of inactive seconds between 0 to 18 000 before the device goes into sleep mode 0 means the device never slips if you don't set a time the device goes into sleep mode after 3600 seconds that means 60 minutes in this example we will enter 180 seconds let me enter the value 180 use sign in when PC wakes option if you want your user must sign in after the device comes out of the sleep mode if we choose enabled that means it requires users to sign in with the password when device comes out of sleep mode disabled means users don't have to enter their username and password we will select enable option for this setting next enter the time in minutes when automatic maintenance task such as Windows update will run the default start time is midnight or 0 minutes change this start time by entering a start time in minutes from Midnight for example if you want maintenance to begin at 2 am then enter 120. if you want maintenance to begin at 8 pm then you need to enter value 1200. in the last option we can choose education policies option if policy is for Education environment are enabled in our case we are not going to use that you can adjust the settings and options as per your organization's requirement for testing purpose we have selected these options click on next to continue under included groups click on add groups for tasting purpose we will select artist device group name test win client let me select the group and click on select make sure test wind grind group with one device is listed under included groups click next to continue on applicability rules tab we can specify how to apply this profile within an assigned group InTune will only apply the profile to device is that meet the combined criteria of these rules for example we can create applicability rule so configuration profile settings will only apply to devices from the selected group if device OS addition is Enterprise Edition since we have only one device in our test device group I'm not going to use applicability rules click next on review plus create tab review configured settings if you are okay with it then click on create to create profile and assign it to selected group we can see the confirmation message profile test shared multi-user device settings created successfully let me click on refresh now the policy also display in the configuration profile list the next time when device checks in with InTune the policy will start applying it on that specific device to taste this let's go to a Windows 10 device this Windows 10 device is member of artist device group name test win client first we will perform manual sync with InTune let me click on sync to start the process we can see the sync was successful to see the result quickly I'm going to restart this Windows 10 device after restart let's again sign into this Windows 10 computer as you can see login screen options are changed now the last is sign in user information is not available on login screen we have to manually enter the username to sign into this device tap the username user1 at msf Surat V2 dot on microsoft.com enter the user account password to sign into this Windows 10 device once log into the device there are many places to look for limited experience and specific configurations in the policy we have configured the setting to prevent users from saving and viewing files on the device's hard drive try to create a new folder on the desktop right click on desktop in the context menu we can see we don't have option to create a new folder on desktop let's open File Explorer there is no this PC no C drive only download folder will be available to user to store the data even users cannot access the control panel let's try to open control panel let's type command control and press enter key we can see the message we cannot open control panel your organization has blocked it search for power options click on Power and slip settings at top we can see message some of these settings are hidden or managed by your organization we can also confirm the configured settings for screen turn of time limit which is 3 minutes let me close this click on start button click on use profile picture click on username and here we can see we don't have the option to switch user account from these to user1 to other user account so that means the configuration profile with multi-user device settings is successfully applied on this Windows 10 device that's all for this video on how to configure a Windows shared multi-user device settings in InTune using Microsoft endpoint manager admin Center thank you all for watching this video have a nice day

Channel: MSFT WebCast

Views: 12,207

Keywords: intune, azure active directory, microsoft intune, intune tutorial, intune tutorial beginners, microsoft intune tutorial, intune basics, intune mdm tutorial, microsoft intune for beginners, mdm, configure a windows shared multi-user device with intune, Windows 10 shared device settings, Configuring shared multi-user devices, Shared multi-user device configuration in Intune, Multi-users devices with Intune, Shared multi user device, Manage Shared Devices in Intune, msintune

Id: ySQN20Eq3Sg

Length: 14min 2sec (842 seconds)

Published: Fri Mar 03 2023