ARCHIVED: Get started with Windows device management

This content has been archived, and is no longer maintained by Indiana University. Information here may no longer be accurate, and links may no longer be available or reliable.

On this page:


Overview

The Windows device management service has a production environment (UDM) and an identical, but distinct, test environment (UDT).

Departments typically add a few devices to UDT (test) to familiarize themselves with Windows endpoint management. Later, they can add devices to UDM, leaving some devices in UDT permanently for application and configuration testing before applying options to their production groups.

Request a Windows endpoint management environment for your department

To request a Windows endpoint management environment, contact Tier 2 including the following required information. Staff will forward your request to Endpoint Management Services.

  • Department name, campus, and client representative
  • Endpoint naming convention: The specific prefix used in Active Directory (AD), the department's organizational unit (OU) name, or the most frequently used department abbreviations (for example, IU-UITS).
  • Build OU: The area in Active Directory (AD) for all endpoints built into the service. Name the Build OU "NewlyJoined" with no spaces (for example, IU-UITS-NewlyJoined).
  • Endpoint administrators group: The local AD group for endpoints, injected during the build. The name must be 20 characters or fewer.
  • Console administrators group: The AD group of responsible IT administrators who need access to the console and the ability to manage objects in SCCM. The name must be 20 characters or fewer, and can be the same as the name of the IT administrator group.
    Note:
    You can manage AD groups via Group Policy (GPO). Be sure to comply with the Active Directory Certificate Provisioning requirement, and note that your machines must be enrolled in the Active Directory certificate process in order to communicate with the secure versions of our sites; for more, see Active Directory Certificate Enrollment Process.
  • Answer the following questions:
    • What is the primary purpose for using the Window device management service (for example, operating system and security updates, antivirus protection, application distribution, inventory, reporting)?
    • What previous experience do you have with the IT Administration of Microsoft SCCM or ConfigMgr?
    • What is your current anti-virus/anti-malware solution?
    • What are your current Windows and third-party software update solutions?
    • How many devices are in your environment? Include their types (desktop, laptop, server, etc.), their brands (for example, Dell or HP), and the number you plan on managing.

If you have questions about the Windows device management service, contact Tier 2.

This is document bdqt in the Knowledge Base.
Last modified on 2023-11-30 16:42:31.