Installing and Managing the Microsoft Intune Integration

Guide Overview

This guide is designed to give Incident IQ administrators an overview of the following Microsoft Intune integration app related topics:

  • Managing settings that control asset creation and deletion, as well as when and what information is updated during syncs
  • Setting up location and model mappings
  • Sync and asset history lookup tools
  • Frequently asked integration questions

 

Guide Index

You can use the following links below to quickly navigate to a specific section in this document. To quickly return to this index simply use the "Return to Index" link located at the end of any section.

  1. Introduction
  2. Application Installation
  3. Setting up Automated Asset Creation
  4. Application Overview
    1. Overview Tab
    2. General Settings Tab
    3. Location Mappings Tab
    4. Model Mappings Tab
    5. Sync History Tab
    6. Asset History Tab
  5. Frequently Asked Questions
    1. What location should I use for my default location?
    2. Can I pull room information from Microsoft Intune into Incident IQ?
    3. Can I map certain fields coming from Microsoft Intune to default asset fields in Incident IQ?
    4. Why are assets not getting created during syncs?
    5. Why are asset tags not updating during syncs?

 

Introduction

The Microsoft Intune integration app is designed to give school districts the ability to create, manage, and automatically assign assets to students in Incident IQ by utilizing Intune asset data. In addition, this integration with Incident IQ also allows agents and admins the ability to view an asset's metadata in one convenient location. This includes basic device information, OS and firmware versions, as well as other data agents may find useful during the course of working a ticket.

Introduction_001.png

When installed, you can access the Microsoft Intune Integration app by selecting Incident IQ Apps > Apps Management. This will take you to your Installed Apps page where you can select the Options button to access the Microsoft Intune Integration app management page.

Introduction_002.png

[Return to Index]

 

App Installation

To install the Microsoft Intune integration app, begin by clicking on Incident IQ Apps > Browse on the left navigation bar.

Installation_001.png

Underneath the Asset Management section, click on the Microsoft Intune app. From here, simply select Install and follow the steps to complete the installation.

Installation_001.png

Once installed in Incident IQ you will need to click on Manage App Settings. From here, you will need to Authorize Incident IQ with an account in Microsoft Intune that has the ability to read and write data in the system to complete the installation process.

Installation_002.png

Installation_003.png

[Return to Index]

 

Setting up Automated Asset Creation

First, you will need to ensure that the Create Asset option is turned on. This is located in the in the General Settings tab of the app.

Create_Asset_001.png

Next you will need to ensure that locations have been setup in the Locations Tab. Please keep in mind that assets need to have a location when brought into the system. The way this works during a sync is as follows:

  • If an asset matches a custom mapping, then the asset will get created and assigned to the corresponding location the mapping is set to.
  • If an asset does not match a custom mapping, or no custom mappings are present, and a default location is selected, then the asset will get created and assigned to the default location.
  • If an asset does not match a custom mapping, or no custom mappings are present, and there is no default location set, then the asset will not be created during a sync.

For additional details, please refer to the Locations Tab section of this document.

Create_Asset_002.png

And finally, you will need to ensure that the particular model of the asset in mapped in the Model Mapping Tab.

Model_Mappings_003.png

Please note, when you first install your app this field will be blank. This is because Incident IQ has not yet run a sync to scan which models are stored in Intune. To pull model information in, simply click on Run Sync in the General Settings Tab. Once completed, you should see a full list of all available models in your Intune instance.

[Return to Index]

 

Application Overview

The following section is designed to give you a detailed overview of each tab of the application and their intended purpose. For this integration in particular, this includes:

Tab_Details.png

[Return to Index]

 

 Overview Tab

The Overview Tab provides gives you the ability to quickly review the status of the most recent sync between Incident IQ and Microsoft Intune.

Overview_Tab_001.png

Clicking on the View Details Results button will take you directly to the Sync History tab where you can review the count of assets updated, added, or skipped over during the sync.

Overview_Tab_002.png

Sync_History_Tab_001.png

[Return to Index]

 

 General Settings Tab

The General Settings tab houses many of the settings that control when information is brought in or updated automatically, as well as field mappings between the Microsoft Intune and Incident IQ. As such, you can find the following settings here:

  • Options that control if assets are automatically created, updated, and deleted during system syncs.
  • The ability to turn on automatic room assignment for assets if you are storing this data in Intune.
  • Custom field asset mapping options to pull in additional data for use in asset filters and custom view columns
  • An option to enable the use of remote asset features available in Intune directly on an asset detail's page by administrators and agents with the correct permissions

Intune_General_Tab_000.png

The Mapping section manages what data is created and updated in Incident IQ based on data coming from Intune. This includes:

  • Only Update Custom Fields: Selecting this option will only allow new information being pulled into custom fields to update during a sync.
  • Create Asset: Selecting this will automatically create assets in IIQ to match any new device discovered in Intune during a sync.
  • Update Asset: Selecting this will automatically update assets in IIQ to match any updates to a device's data discovered in Intune during a sync.
  • Delete Asset: Selecting this will automatically delete assets in IIQ to match any assets deletions that have occurred in Intune during a sync.

Intune_General_Tab_001.png

Turning on the Create Rooms option will allow syncs to automatically create rooms associated with assets in Intune for your locations if these rooms do not already exists in Incident IQ.

Intune_General_Tab_002.png

The Map custom values from microsoftIntune section allows you point specific field from Intune to specific asset fields in Incident IQ, as well as gives you the ability to pull in custom data fields for use in filters and custom view column options. To set one of these fields up, you will need to begin by clicking on the Add button.

Intune_General_Tab_003.png

Next, you will need to fill out the following field mapping options:

  • Select the data field in Microsoft Intune
  • Set whether the data only pulls from Intune to Incident IQ, sends from Incident IQ to Intune, or flows in both directions (if both, data will push from Incident IQ to Intune first.)
  • Specify if the data should map to an existing default field, or if it should be pulled in from.
  • If you pulling this information into a custom field, you will also need to set a field name, select a field type (text, number, or date), and set whether the field information needs to be searchable through filters.

Intune_General_Tab_004.png

Intune_General_Tab_005.png

Intune_General_Tab_006.png

Intune_General_Tab_007.png

You can control whether or not the Microsoft Intune integration will update the owner field in Incident IQ using the following options in the Automatic asset assignment in IIQ drop-down menu:

  • Don't automatically update asset owner in IIQ:  This option will prevent the Microsoft Intune integration from updating owner information in Incident IQ.
  • Automatically update owner in IIQ based on User Id in Microsoft Intune:  This option will automatically update the device ownership of assets in Incident IQ based on the User Id field in Microsoft Intune.
  • Automatically update owner in IIQ based on Email Address in Microsoft Intune:  This option will automatically update the device ownership of assets in Incident IQ based on the Email Address of the user in Microsoft Intune.

Intune_General_Tab_008.png

At the bottom of the page, you can enable remote device actions that administrators and agents with the correct permissions can access directly on an asset's details page in Incident IQ. These options include:

  • Bypass Activation Lock:  Allow a user to remotely bypass activation lock for an Intune managed device.
  • Clean Windows Device:  Allow a user to remotely clean a Windows device managed through Intune.
  • Delete User From Shared Apple Device:  Allow a user to delete a user from a shared Apple Intune managed device.
  • Disable Lost Mode:  Allow a user to remotely disable lost mode for an Intune managed device.
  • Locate Device:  Allow a user to remotely locate an Intune managed device.
  • Logout Shared Apple Device Active User:  Allow a user to remotely logout a shared Apple device active user for an Intune managed device.
  • Reboot Device:  Allow a user to remotely reboot an Intune managed device.
  • Recover Passcode:  Allow a user to remotely recover passcode for an Intune managed device.
  • Remote Lock:  Allow a user to remotely lock an Intune managed device.
  • Remote Wipe Device:  Allow a user to remotely wipe an Intune managed device.
  • Request Remote Assistance:  Allow a user to remotely request a remote assistance session for an Intune managed device.
  • Reset Passcode:  Allow a user to remotely reset the passcode for an Intune managed device.
  • Retire Device:  Allow a user to remotely retire an Intune managed device.
  • Shut Down:  Allow a user to remotely shut down an Intune managed device.
  • Sync Device:  Allow a user to remotely sync an Intune managed device.
  • Update Signatures for Windows Defender:  Allow a user to remotely update the signature for Windows Defender for an Intune managed device.
  • Update Windows Device Account:  Allow a user to remotely update the Windows device account for an Intune managed device.
  • Windows Defender Scan:  Allow a user to remotely trigger a Windows Defender Scan for an Intune managed device.

Intune_General_Tab_009.png

Please note, administrators are given full access to all remote features permissions by default. However, each of the remote features listed above are controlled by an individual permission. This makes it possible to customize which permissions an agent has access to, without needing to give them full access to all of the remote features. These permissions can be found underneath the App Specific section on policies and individual user permissions pages.

User_Permissions_001.png

User_Permissions_002.png

User_Permissions_003.png

[Return to Index]

 

 Location Mappings Tab

The Locations tab houses the fields needed to set where assets automatically get assigned to 

Location_Mappings_001.png

First, you will always want to ensure that a default location has been set in Incident IQ near the top of the tab. When set, the default location will be utilized as an assets location if it does not match any of your custom location mappings. This is especially important if you are using the Microsoft Intune integration to automatically create assets because assets must have a location set to be created.

Location_Mappings_002.png

The Custom Mapping Options allows you to choose how you would like devices to map in IIQ.

Location_Mappings_003.png

When either is selected, you will be presented with a list of locations currently in the system. From here, you can select Auto-Map Location Names to match location names between IIQ and Intune. Alternatively, you can also manually search for and select your location assignments if needed.

Location_Mappings_004.png

[Return to Index]

 

 Model Mappings Tab

The Model Mappings tab allows you to select or modify your model mappings between Microsoft Intune and Incident IQ. This essentially tells the system what model the asset should have in Incident IQ based on incoming model data during syncs.

Model_Mappings_001.png

You can use the Auto-Map Models button to automatically attempt to match models in your list of devices with models that already exist in IIQ.

Model_Mappings_002.png

Alternatively, you can also manually select what model your device should map to using the drop-down menus to the right of each listed device.

Model_Mappings_003.png

If your device will not auto-map and is not available from the drop-down options, then it most likely does not currently exist in IIQ. In this case, simply select the Create New Model button on the right of the device mapping in question to automatically create and activate this model during your data sync.

Model_Mappings_004.png

[Return to Index]

 

 Sync History Tab

This tab allows you to view your sync history between Incident IQ and Microsoft Intune.

Sync_History_Tab_001.png

Every sync, whether it completed successfully or not, is logged for reference purposes and available for review in the View details of a sync list.

Sync_History_Tab_002.png

Clicking on any sync, in particular, will open that sync's details. From here, you can review the full list of what devices were updated, created, deleted, or skipped during the sync. Additionally, you can narrow down your view by using the filter options at the top of the list.

Sync_History_Tab_003.png

[Return to Index]

 

 Asset History Tab

The Asset History tab allows you to search for any device's basic information currently located in Microsoft Intune.

Asset_History_001.png

Simply enter in a valid serial number in the Search for asset field to begin your search.

Asset_History_002.png

Once you've selected a device, you'll be able to see the following information:

  • Asset Tag
  • External ID
  • Model
  • Owner Email
  • Serial Number
  • Room

Additionally, you'll also see a list of actions applied to this device during recent system syncs.

Asset_History_003.png

[Return to Index]

 

Frequently Asked Questions

The following section consists of common questions that users have when installing and setting up the Microsoft Intune integration. Please note, if you do not find to an issue you are experiencing in this section please contact the Incident IQ Customer Support team for further assistance.

[Return to Index]

 

 What location should I use for my default location?

If you are unsure of what location you should utilize, we recommend setting the district/central office as your default location. Alternatively, you may also setup an entirely separate location (such as "Unassigned") to utilize for this purpose as well.

Location_Mappings_002.png

[Return to Index]

 

 Can I pull room information from Microsoft Intune into Incident IQ?

If you are storing room information in Microsoft Intune, you can tie this information to assets stored in Incident IQ. This includes the ability to create rooms for any given location if they do not already exist in the system. To do so, you will want to go to the General Settings tab and enable the room number option.

Intune_General_Tab_002.png

[Return to Index]

 

 Can I map certain fields in Microsoft Intune to default or custom asset fields in Incident IQ?

You can pull in data from Microsoft Intune for use in asset filtering and custom view columns in the General Setting tab of the integration app. To set one of these fields up, you will need to begin by clicking on the Add button at the bottom of the Map custom values from microsoftIntune section.

Intune_General_Tab_003.png

From here, you will now need to set the following:

  • Select the specific data field in Microsoft Intune you want to pull in as a custom field
  • Set whether the data only pulls from Intune to Incident IQ, sends from Incident IQ to Intune, or flows in both directions (if both, data will push from Incident IQ to Intune first.)
  • Specify if the data should map to a custom field
  • And finally, set a field name, select a field type (text, number, or date), and set whether the field information needs to be searchable through filters.

Intune_General_Tab_004.png

Intune_General_Tab_005.png

Custom_Field.png

Intune_General_Tab_007.png

[Return to Index]

 

 Why are assets not getting created during syncs?

For a sync to create assets automatically, the following options need to be turned on or mapped in app management as detailed in this section of this article:

  • The Create asset option must be turned on in the General Settings tab.
  • Location mappings, or a default location, must be set in the Location Mappings tab.
  • The model of the device must be mapped in the Model Mappings tab.

Please note, if your asset does not have a model associated with it in Microsoft Intune, then the asset cannot be added automatically. However, you can manually create or import the asset into the system to circumvent this issue. During the next system sync, if Incident IQ detects a matching serial number inside of Microsoft Intune, the system will then automatically associate the Intune data with this asset.

Create_Asset_001.png

Location_Mappings_002.png

Model_Mappings_003.png

[Return to Index]

 

 Why are asset tags not updating during syncs?

By default, Incident IQ does not have the option to update asset tags automatically enabled for asset integrations. To turn on asset tag updates during syncs, select Incident IQ Apps > Manage from the left navigation bar, and the click on the Data Mapping tab. From here, check the Asset Tag option underneath the Asset Field Mappings section and then save.

Asset_Tag_Update_001.png

Please note, even though this option is not enable by default, the asset tag field is required for asset creation. Because of this, when an asset is created during a sync without this option enable the following will occur:

  • If asset tag information is available, then the asset will be created with the asset tag stored in the Microsoft Intune.
  • If asset tag information is not available, then the asset will be created with the serial number filled in for the asset tag.

[Return to Index]

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.