EndpointAdmin

 In this blog we will show you how to integrate third party mobile threat defense with Microsoft Endpoint Manager and how it works. You can create compliance policy based on Sophos Mobile Threat Defense and if the device is non compliant you can block access of company resources like Teams, Exchange Online, Sharepoint etc. using conditional access policy. Use Sophos Mobile with Intune - Intune on Azure | Microsoft Docs Integrate Your Sophos Mobile with Microsoft Intune: Login to your Sophos Portal using Admin Credential. Go to Mobile. From Mobile, Go to Setup>Sophos Setup. From Sophos Setup, Go to Intune MTD. Click on Bind Now you have to approve using Microsoft 365 global admin credential. If you are not signed in, sign in with your global administrator account in Microsoft 365 portal in the same browser. After approving save the settings in Sophos Mobile. Go to Tenant Administration>Connectors and tokens>Mobile Threat Defense. You can see that already 1 active connection. Th

Corporate device identifiers is a option by which admin can approve mobile devices to be enrolled in Intune. A device can not be enrolled without an entry of a serial number in Intune portal. This feature helps administrator to monitor and manage efficiently which device are getting enrolled. In this blog we will discuss on how to enable corporate device identifiers in personally owned work profile devices. First, we need to restrict enrolling mobile device work profile by end user. From Devices, go to Enroll Devices. Select Device type restriction from Create restriction. Write down the name and description, click on Next. Block the personally owned device enrollment for Android and iOS, Click Next. Assign a User group for this restriction policy. Click on Next. Click on Create. Now we need to create corporate device identifier. We need to add serial number for the device which we want to approve for enrollment. From Devices> Enroll Devices> Corporate Device Identifier> Add

From Devices, Go to Windows Click on Windows Enrollment>Automatic Enrollment Select All and Click Save From Windows 10 machine which you want to enroll in intune, Click on Start Menu>Settings. Click on Accounts. Click on Connect. Write down your Office365 Email Address and click on Continue. Enter Your password and click Sign In Click on No . Enter Your Mobile number for Multi-factor Authentication.

Login to Microsoft365 Admin Portal from  https://admin.microsoft.com/ From Setting , Click on Domain Click on Add Domain Write down your public domain name and click on Use the domain Select Add a TXT record to the domain's DNS Record Add the TXT value to your public domain's DNS Record. Click on Verify Click on  Continue From Advance Option, Select Intune and Mobile Device Management for Microsoft 365. And add the CNAME records to your public domain's DNS. After Adding the record click on Continue. Click on Done while Domain setup is complete Now add new user and assign Intune license to user. From Microsoft365 admin portal, go to User>Active User>Add User Write Down the required information and password and click on Next . Assign enterprise mobile + Security license and Click Next. Click on N ext . If you need to give admin privilege to user, you can assign it from this page. Click on Next. And then Finish Adding.   Now the user is ready to use Intune features.