Stop Manual Software Installation: Standardizing Your Brisbane Small Business Apps with Microsoft Intune

Summary

This guide helps you troubleshoot and resolve: Stop Manual Software Installation: Standardizing Your Brisbane Small Business Apps with Microsoft Intune. Follow the steps below to fix the issue.

Common Causes

Manual software installation is a time-consuming process that leaves Brisbane small businesses vulnerable to security gaps and inconsistent device configurations. By standardising your applications with Microsoft Intune, your organisation can deploy essential business software, security policies, and settings centrally. When combined with Windows Autopilot, new employees can open a sealed laptop, sign in with their business email, and have their device automatically configured with all required apps and file access without a technician ever touching the hardware.

Quick Fix Steps

1. Assign the appropriate Microsoft Intune licenses to your users.
2. Ensure devices are Microsoft Entra ID joined or hybrid joined.
3. Enrol your devices into Intune using Windows Autopilot.
4. Create and assign application packages to user or device groups.
5. Configure compliance policies and security baselines.
6. Test the onboarding process with a new device.

Detailed Instructions

1. Licensing and Portal Access

Before deploying applications, ensure your organisation has the necessary licensing. Intune is typically included in Microsoft 365 Business Premium or as a standalone add-on. Sign in to the Microsoft Intune admin centre using your global administrator credentials.

2. Setting Up Windows Autopilot

Windows Autopilot allows you to pre-configure devices so they are ready for use the moment a user logs in.

1. In the Intune admin centre, navigate to Devices > Windows > Windows enrolment.
2. Select Deployment profiles and click Create profile.
3. Choose Windows Autopilot and configure the deployment mode (e.g., User-driven).
4. Assign the profile to a group containing your new hire devices.
5. Collect the hardware hashes of your new devices and upload them via a CSV file in the Devices > Windows > Windows enrolment > Devices section.

3. Deploying Business Applications

Instead of installing software manually on every PC, you can push applications centrally.

1. Go to Apps > All apps > Add.
2. Select the app type (e.g., Microsoft Store app, Win32 app, or Microsoft 365 Apps).
3. Upload the installation files or select the app from the store.
4. Configure the installation settings and requirements.
5. Click Assignments, select Add group, and choose whether the app is Required or Available for the users.
6. Review and click Save and then Assign.

4. Configuring Security and Compliance

To ensure all devices meet your organisation's security standards, apply compliance policies.

1. Navigate to Endpoint security > Device compliance.
2. Create a policy requiring encryption, a minimum OS version, and a password/PIN.
3. Assign the policy to all staff devices.
4. Devices that fail compliance can be blocked from accessing company data until they are remediated.

5. Instant Offboarding and Remote Wipe

When an employee leaves the organisation, you can secure company data instantly without needing physical access to the device.

1. In the Intune admin centre, go to Devices > All devices.
2. Select the departed employee's device.
3. Choose Wipe to reset the device to factory settings, or Retire to remove only company data while keeping personal files.
4. Confirm the action to initiate the remote command.
5. After the wipe command has been sent and acknowledged, disable the user's Microsoft 365 account.

Troubleshooting

Device not appearing in Intune

• Ensure the device is connected to the internet during the initial setup.
• Verify that the hardware hash was uploaded correctly to the Autopilot deployment service.
• Check that the user has the correct Intune license assigned.
• Verify the device is Microsoft Entra ID joined.

Application failing to install

• Check the Device status and User status under the app assignments in the Intune portal.
• Ensure the device meets the minimum requirements specified in the app assignment.
• Restart the device to trigger a pending Intune sync.

User cannot access company files after enrolment

• Verify that the device is marked as Compliant in the Intune admin centre.
• Check if Conditional Access policies are blocking the device due to non-compliance.
• Ensure the user is a member of the group assigned to the required application.

If you host with us, you don't need to do this yourself — just Open a Ticket and our Brisbane team will get it sorted. If you encounter issues during setup or require assistance managing your Intune environment, Open a Ticket with our Brisbane support team.

Still Having Issues?