Body
Norwich ITS is switching management systems from ManageEngine to Microsoft Intune. This overview serves as a reference document for users who are being migrated
This is a living document and will be updated as needed.
What does this mean for you?
- We will be relocating your computer in our directory systems to enable the automatic enrollment of your device into Intune using your Norwich Credentials. This process will be invisible to you.
- After we make the move, you will need to be connected to the Norwich network, either by being on campus or by connecting to the VPN, for your computer to receive the policy. You can ensure this happens faster by connecting to the Norwich network, or the VPN, and opening Command Prompt and entering the command ‘gpupdate /force’ into the terminal window and pressing Enter. This will force your computer to get updated Group Policies from the domain.
- You should eventually notice a Windows-style notification in the bottom right corner of the screen asking for your credentials, this step will add your computer to Intune.
- When your device comes under Intune management, it will begin to receive these things:
- the Company Portal application – This will replace the Norwich Self Service app from ManageEngine and will be your resource for all applications, and where you will find device management and sync settings.
- updated security policies
- patches to existing applications
- One of the patches will be for Cisco AnyConnect/Secure Client, you may lose Internet during the process of this update.
- new applications
- Your computer will force a restart at some point shortly after being enrolled. This is to enable new security policies allowing for more user-friendly control of applications and background processes, keeping us more secure.
- You’ll begin receiving Microsoft Intune notifications for software installations and updates.
- Windows Update will automatically manage updates for your OS and built-in Microsoft apps.
- ManageEngine will be uninstalled from your device.
- Cisco Secure Client will no longer manage your Wi-Fi connections. Instead, the built-in Windows network settings will be used.
(Note: Cisco Secure Client will still manage wired connections on campus.)
- The Windows 11 upgrade will become available for supported devices through Windows Updates.
- You’ll need at least 40GB of free space to begin the upgrade.
- While the upgrade is optional for now, all eligible devices will be automatically upgraded on October 1.
- Windows 10 reaches End of Life on October 25, after which it will no longer be supported by Microsoft or Norwich ITS.
- We will inform users how to reset their own device so that they are in control of when this happens and when they are ready to do so.
- You will no longer be an admin on your computer, and you will be dropped to a standard user. You can use the Admin by Request application to request raising your privileges in two different scenarios:
- The simplest, and more likely to be approved, method will be the ‘Run as Administrator’ method, allowing you to run single instances of things like installers, applications that need elevated privileges to run, etc.
- The second method, which will be more scrutinized during the approval process as it gives a higher level of access, is the “Admin Session’ method. This allows you to request your privileges be elevated for 30 minutes, understanding that everything you do will be logged and reviewed by the various departments within Norwich ITS, like User Support Services, Systems and Operations, and Information Security.
- If you need to install applications, they must be approved by Norwich ITS to be able to run. Anything installed by Intune, or from the Company Portal application will be considered approved to run. If there are specific ap0plications you need to do your job, the time is now to let us know what those are so we can ensure they are available to you before we exit audit mode for our application control systems. Anything not approved once we leave audit mode will be blocked from running on Norwich owned computers.
- You will not be able to write data to external USB drives that are not encrypted. The process to encrypt a drive using BitLocker, will erase all data currently on the drive, use caution when performing this action. If your department requires the use of external USB drives, you must let IT User Support Services and Information Security know by submitting a ticket in our ticketing system, TeamDynamix (TDX), here: https://its.norwich.edu
- You may experience slow computer speeds at first as there is a lot to process when the transition occurs. Please make sure to restart your computer at least once a day for the first week or so after the transition to ensure optimal operating conditions.
- Your experience will be fully optimized once your device has been reset, taking the operating system back to a ‘new, out of box’ state. This can happen at a later time, and you will be able to do this yourself if you wish.
This is a living document and will be updated as needed.