MDM: Fundamentals, Security, and the Modern Desktop: Using Intune, Autopilot, and Azure to Manage, Deploy, and Secure Windows 10

The first major book on MDM written by Group Policy MVP and renowned expert, Jeremy Moskowitz

With Windows 10, organizations can create a consistent set of configurations across the modern enterprise desktop--for PCs, tablets, and phones--through the common Mobile Device Management (MDM) layer. MDM gives organizations a way to configure settings that achieve their administrative intent without exposing every possible setting. One benefit of MDM is that it enables organizations to apply broader privacy, security, and application management settings through lighter and more efficient tools. MDM also allows organizations to target Internet-connected devices to manage policies without using Group Policy (GP) that requires on-premises domain-joined devices. This makes MDM the best choice for devices that are constantly on the go.

With Microsoft making this shift to using Mobile Device Management (MDM), a cloud-based policy-management system, IT professionals need to know how to do similar tasks they do with Group Policy, but now using MDM, with its differences and pitfalls.

- What is MDM (and how is it different than GP)

- Setup Azure AD and MDM Auto-Enrollment

- New PC Rollouts and Remote Refreshes: Autopilot and Configuration Designer

- Enterprise State Roaming and OneDrive Documents Roaming

Microsoft Group Policy MVP Jeremy Moskowitz teaches you MDM fundamentals, essential troubleshooting techniques, and how to manage your enterprise desktops.

這是一本由 Group Policy MVP 和知名專家 Jeremy Moskowitz 撰寫的關於 MDM 的首部重要著作。

隨著 Windows 10 的推出，組織可以透過共同的行動裝置管理 (MDM) 層，在現代企業桌面上（包括個人電腦、平板電腦和手機）建立一套一致的配置。MDM 讓組織能夠配置設定，以實現其管理意圖，同時不暴露所有可能的設定。MDM 的一個好處是，它通過更輕巧和高效的工具，使組織能夠應用更廣泛的隱私、安全和應用管理設定。MDM 還允許組織針對連接到互聯網的設備進行管理策略，而無需使用需要在本地加入域的設備的群組策略（GP）。這使得 MDM 成為經常在移動中的設備的最佳選擇。

隨著微軟轉向使用基於雲的策略管理系統 MDM，IT 專業人員需要了解如何使用 MDM 執行與群組策略相似的任務，並了解其差異和潛在問題。

本書內容包括：
- 什麼是 MDM（與 GP 的區別）
- 設置 Azure AD 和 MDM 自動註冊
- 新的個人電腦部署和遠程刷新：自動駕駛和配置設計師
- 企業狀態漫遊和 OneDrive 文件漫遊
- 微軟群組策略 MVP Jeremy Moskowitz 教授您 MDM 基礎知識、必要的故障排除技巧以及如何管理企業桌面。

JEREMY MOSKOWITZ, is a 15-year Microsoft MVP awardee and is founder of MDMandGPanswers.com and CTO of PolicyPak Software. Since becoming one of the world's first MCSEs, he has performed Active Directory, Group Policy and MDM planning and implementations for some of the nation's largest organizations. His best-selling book Group Policy Fundamentals, Security, and Troubleshooting, Third Edition is on desks of administrators everywhere.

JEREMY MOSKOWITZ，是一位連續15年獲得 Microsoft MVP 獎項的人，也是 MDMandGPanswers.com 的創辦人和 PolicyPak Software 的首席技術官。自從成為世界上首批 MCSE 認證者之一以來，他為一些國內最大的組織進行了 Active Directory、Group Policy 和 MDM 計劃和實施。他的暢銷書《Group Policy Fundamentals, Security, and Troubleshooting, Third Edition》已經成為管理員必備的工具。