Co-management

Co-management is a feature of Microsoft Intune/Configuration Manager that allows IT admins to use both Intune and Configuration Manager concurrently for Windows 10 and Windows 11 management. It combines your existing on-premises Configuration Manager environment with the cloud using Intune and other Microsoft 365 cloud services such as Windows 365. You can choose whether Configuration Manager or Intune is the management authority for the seven different workload groups.

As part of Endpoint Manager, co-management uses cloud features, including conditional access. You keep some tasks on-premises while running other tasks in the cloud with Intune.

Business continuity and disaster recovery

Business continuity and disaster recovery (BCDR) are critical components of any organization’s risk management strategy. Disruptions can occur at any time, whether it’s due to natural disasters, cyber-attacks, or other unexpected events, and without proper planning and preparation, the consequences can be catastrophic. Business continuity is the process of maintaining essential business operations during a disruption, while disaster recovery is the process of restoring critical IT systems and infrastructure after an outage. Both are essential for ensuring that organizations can recover quickly and minimize the impact of an unexpected event.

As you are aware, BCDR can be a daunting task, particularly when it comes to user desktops. Broadly speaking, the process of business continuity planning involves four key aspects: assessment, planning, capability validation, and communication. Experts from various fields, including compute...

RBAC roles and delegation

To administrate a Windows 365 environment, you will need administrative permissions. This is where role-based access control (RBAC) roles come into play. With RBAC roles, you will be able to manage specific permissions and actions for each IT user that needs to support your Windows 365 solution.

RBAC roles and structure

This might not be the first time you’ve heard about RBAC roles; it’s also a widely used permission system in Microsoft Azure subscriptions and in Azure AD. When looking inside Azure AD RBAC roles, we will find a Windows 365 dedicated role. So, what is the difference between using RBAC roles from Azure AD and Microsoft Intune?

With RBAC roles in Microsoft Intune, you’ll be able to choose specific a permission/action for every single aspect. An example of this is that you can turn off the resize feature for some specific administrative users but still give them permission to act on other features. By using RBAC roles...

Summary

We hope you’re getting warmed up now, as this architecture-focused chapter comes to an end. We’ve explained what services are cloudified as part of the Windows 365 architecture section, what services are Microsoft-managed, and what is still your responsibility as a customer. We’ve also taken a deep dive into the different connectivity layers and options to optimize your network connectivity from the endpoint to your Cloud PC.

In the next chapter, we will go into overdrive mode and start explaining how you can implement and manage Cloud PCs yourself. We’re pretty sure that it will be the chapter you will like the most!

Questions

At the end of each chapter, there are three questions you can use to evaluate your learning and challenge yourself. The questions for this chapter are as follows:

1. What is the most important component Windows 365 manages on behalf of the customer that is unique to the service – and there is no other solution doing so on the market?
2. What network port and protocol are used when using Windows 365?
3. For which scenarios is RDP Shortpath important?

Further reading

During your learning journey while going through the other chapters, if you want to learn more about the subjects covered in this chapter, you can do so by visiting the following websites:

• Test your Microsoft and Windows 365 connectivity via https://connectivity.office.com/
• Service health in the Microsoft 365 admin center is a great tool to detect potential service issues, including their scope of impact (https://admin.microsoft.com/#/servicehealth)
• Documentation of Windows 365 network requirments https://learn.microsoft.com/en-us/windows-365/enterprise/requirements-network?tabs=enterprise%2Cent

Co-management

Co-management is a feature of Microsoft Intune/Configuration Manager that allows IT admins to use both Intune and Configuration Manager concurrently for Windows 10 and Windows 11 management. It combines your existing on-premises Configuration Manager environment with the cloud using Intune and other Microsoft 365 cloud services such as Windows 365. You can choose whether Configuration Manager or Intune is the management authority for the seven different workload groups.

As part of Endpoint Manager, co-management uses cloud features, including conditional access. You keep some tasks on-premises while running other tasks in the cloud with Intune.

Business continuity and disaster recovery

Business continuity and disaster recovery (BCDR) are critical components of any organization’s risk management strategy. Disruptions can occur at any time, whether it’s due to natural disasters, cyber-attacks, or other unexpected events, and without proper planning and preparation, the consequences can be catastrophic. Business continuity is the process of maintaining essential business operations during a disruption, while disaster recovery is the process of restoring critical IT systems and infrastructure after an outage. Both are essential for ensuring that organizations can recover quickly and minimize the impact of an unexpected event.

As you are aware, BCDR can be a daunting task, particularly when it comes to user desktops. Broadly speaking, the process of business continuity planning involves four key aspects: assessment, planning, capability validation, and communication. Experts from various fields, including compute...

RBAC roles and delegation

To administrate a Windows 365 environment, you will need administrative permissions. This is where role-based access control (RBAC) roles come into play. With RBAC roles, you will be able to manage specific permissions and actions for each IT user that needs to support your Windows 365 solution.

RBAC roles and structure

This might not be the first time you’ve heard about RBAC roles; it’s also a widely used permission system in Microsoft Azure subscriptions and in Azure AD. When looking inside Azure AD RBAC roles, we will find a Windows 365 dedicated role. So, what is the difference between using RBAC roles from Azure AD and Microsoft Intune?

With RBAC roles in Microsoft Intune, you’ll be able to choose specific a permission/action for every single aspect. An example of this is that you can turn off the resize feature for some specific administrative users but still give them permission to act on other features. By using RBAC roles...

Summary

We hope you’re getting warmed up now, as this architecture-focused chapter comes to an end. We’ve explained what services are cloudified as part of the Windows 365 architecture section, what services are Microsoft-managed, and what is still your responsibility as a customer. We’ve also taken a deep dive into the different connectivity layers and options to optimize your network connectivity from the endpoint to your Cloud PC.

In the next chapter, we will go into overdrive mode and start explaining how you can implement and manage Cloud PCs yourself. We’re pretty sure that it will be the chapter you will like the most!

Questions

At the end of each chapter, there are three questions you can use to evaluate your learning and challenge yourself. The questions for this chapter are as follows:

1. What is the most important component Windows 365 manages on behalf of the customer that is unique to the service – and there is no other solution doing so on the market?
2. What network port and protocol are used when using Windows 365?
3. For which scenarios is RDP Shortpath important?

Further reading

During your learning journey while going through the other chapters, if you want to learn more about the subjects covered in this chapter, you can do so by visiting the following websites:

• Test your Microsoft and Windows 365 connectivity via https://connectivity.office.com/
• Service health in the Microsoft 365 admin center is a great tool to detect potential service issues, including their scope of impact (https://admin.microsoft.com/#/servicehealth)
• Windows 365 network requirements | Microsoft Learn: https://learn.microsoft.com/windows-365/enterprise/requirements-network?tabs=enterprise%2Cent