AZSMUG Q1 2025 Meeting

Date and time: Friday, March 7, 2025, 9:00 AM - 3:00 PM MST-AZ

Location: phoenixNAP 3402 E University Dr, Phoenix, AZ 85034

Agenda:

9:00 AM – 9:30 AM Welcome 9:30 AM – 10:30 AM Certificate Deployment Strategies with Microsoft Intune - Richard Hicks 10:30 AM – 10:40 AM Break 10:40 AM – 11:40 AM Sponsor Session - Recast Software 11:40 AM – 12:30 PM Lunch Sponsored by Recast Software 12:30 PM – 1:30 PM Migrating to Intune in under 5 months - Kyle Schroeder 1:30 PM – 1:40 PM Break 1:40 PM – 2:40 PM Bootstrapping Tiered Admin Classes in Entra - Michael Soule 2:40 PM – 3:00 PM Closeout

Certificate Deployment Strategies with Microsoft Intune - Richard Hicks This session will explore the intricacies of issuing and managing certificates using Microsoft Intune. We'll start by considering common use cases for certificate authentication. We'll cover the different options for delivering certificates with Intune, including PKCS and SCEP. We'll delve into supporting technologies like Network Device Enrollment Service (NDES) and discuss the deployment and high availability options for the Intune Certificate Connector. The session will also cover Cloud PKI for Intune and on-premises Active Directory integration. Additionally, we'll share security best practices for certificate lifecycle and key management in an enterprise environment.

Richard Hicks is the founder and principal consultant at Richard M. Hicks Consulting, Inc. A Microsoft Most Valuable Professional (MVP) with more than 25 years of experience implementing secure remote access and public key infrastructure (PKI) solutions, he is a widely recognized enterprise mobility and security infrastructure expert sought after by organizations worldwide. His mission is to help companies provide visibility, control, and assurance for their field-based users and devices, ensuring the highest security and productivity for today's highly mobile workforce.

Migrating to Intune in under 5 months - Kyle Schroeder Migrating >180k devices across all major platforms to Intune in under 5 months. Global migration to Intune from WS1 of over 180k devices (Windows, Mac, iOS and Android) across the globe, without device wipes (mostly) in less than 5 months? Yes you can!

Kyle Schroeder has been working in end-user support and enterprise device management for over 30 years in a variety of positions, but all ultimately at the same company (now Bayer). He has experience with Altiris/Symantec Management Platform, AirWatch/Workspace One, M365/Office, GPO, software packaging, domain migration (during COVID no less!), PowerShell, SQL and other related technologies. Currently he is heavily involved in the mass migration of nearly >180k devices across multiple platforms to Intune, and now with a secondary. He is a Chandler AZ resident for over 10 years.

Bootstrapping Tiered Admin Classes in Entra - Michael Soule Bootstrapping tiered admin classes in Entra for better delegation of roles in a tenant including Intune. In this session, we will cover a new feature to support bootstrapping groups in alignment with EAM and registering corresponding Access Packages and PIM. The groups can be further assigned to specific authorizations and monitored through the core EntraOps feature set.

Michael Soule focuses on product development and innovation for public cloud technologies with Sentinel Technologies, a nationwide managed services provider. Working with clients nationally on cloud, identity, and governance topics.

Sponsors

Recast Software offers enhanced control of enterprise endpoints and scalable IT automation. Our software is trusted by tens of thousands of organizations worldwide, elevating the digital employee experience impacting over 60 million devices.

Our mission is to simplify the work of IT teams and enable them to create highly secure and compliant environments. Our software does this by seamlessly integrating with existing IT infrastructure to surface critical intelligence, increase first-call resolution, reveal vulnerabilities, quickly remediate issues, ensure compliance, enhance security, and maintain clear visibility across all devices.

phoenixNAP is a global IaaS provider founded in 2009 with a goal to commoditize enterprise-grade technology and make it accessible to organizations of different sizes. For over a decade now, our mission has been to provide outstanding value using state-of-the-art technology and service, while continually improving our technical and human assets.

Registration link: https://forms.office.com/r/CGZivNKP6K

Thanks,

AZ Systems Management User Group