Overview
This article provides instructions for IT teams across the UC San Diego campus on using Intune to deploy Certificates and network configuration items as part of the campus-wide SecureConnect initiative for managed devices.
For Instructions on how to install Intune as an end user:
For more resources for the Secure Connect NAC, refer to the Support IT's Guide to SecureConnect NAC Enforcement.
Critical Concepts
Microsoft Intune is a cloud-based endpoint management solution. As part of the Secure Connect project, devices that are not part of the campus managed mobile device management system (MECM/Jamf/Intune) should enroll in Intune to receive campus device certificates, network configurations and compliance check for Qualys and Trellix.
Your department and supported users may fall into one of the following categories regarding Intune:
- We are part of the ITS-managed Intune platform. What should we do to prepare for NAC enforcement?
- We use a different MDM solution to manage our devices. What are our options?
- Moving from a Different MDM to the ITS-Managed Intune Platform
- Exception process for departments using other MDMs. (Coming Soon)
Instructions for ITS-Managed Intune Platform
Managed Devices
Prior to the day of deployment, each Intune site administrator will be notified when the following settings are available to assign. All certificates and compliance policy (minus the Wi-fi) may be assigned before your deployment date. If this is something you need, please contact the Secure Connect team. This will allow time for the compliance check to evaluate Qualys and Trellix installation.
Note! Please only assign the Wi-Fi settings on the day of deployment, as this will change the wireless authentication method from user name and password to certificate-based authentication.
- Within Intune Admin, you can check the configurations for deployment by going to “Configuration” tab under “Manage Devices” for both Windows and Mac.
- The Compliance policy will also show up in the “Compliance” section under “Manage devices.”
Unmanaged Devices
Users enrolling devices through Company Portal will be required to select a category.
- If they select your area designation (i.e., SIO, SSCF), the device will be managed by your area’s assigned policies.
- If the user selects *PERSONALLY-OWNED* (not UCSD-owned), the device will be managed by the general campus-wide SecureConnect settings.
Moving from a Different MDM to the ITS-Managed Intune Platform
Intune is a cloud-based MDM that utilizes MS Entra and not the On-Premise Active Directory. This tool does not rely on VPN to talk to the computer. Because it does not use on-prem Campus Active Directory, policies applied via GPO as well as printer installations and mapped drives will be handled differently.
To request to use the ITS-Managed Intune Platform, please submit a ticket via the IT Service Support Portal.
- In the “what service does this relate to?” field, input “Endpoint Cloud Management - Intune”
ITS Service Desk will provide a dedicated phone line and email support for IT personnel seeking assistance with Secure Connect compliance. The internal phone number and email address will be shared using the sysadmin mailing list. You can also contact the ITS Service Desk directly by calling (858) 246-4357, emailing support@ucsd.edu, or submitting a ticket at support.ucsd.edu.