Manage Ubuntu Linux with Microsoft Intune

Manage Ubuntu Linux with Microsoft Intune

Manage Linux with Intune

It is now possible to register in Microsoft Intune Linux workstations. To date, the equipment must run the Ubuntu distribution Ubuntu Desktop 22.04 or 20.04 LTS. When installing the Linux distribution, it is recommended to activate encryption. This may be required by Microsoft Intune.

Prereqiusites

Different prerequisites must be respected.

  • Download and install Ubuntu Desktop 22.04 or 20.04 LTS. You can dowsload iso file here
  • Install Microsoft Edge web browser, version 102. X or later
  • Install Microsoft Intune app for Linux

Create compliance policy

Before to enroll device on Microsoft Intune, we will create a compliance policy. From the Intune web portal, click on Devices then on Linux.

Create compliance policy on intune

Click on Compliance policies then on Create policy.

Create compliance policy

Select Linux on the Platform drop-down list and Settings catalog on Profile type drop-down list then click on Create.

Create compliance policy

Enter the desired name then click on Next.

Intune compliance policy

Click on Add settings to add compliance parameters.

Add compliance parameter

Select the desired parameter.

Compliance policy parameter
Compliance policy parameter
Compliance policy for linux

Configure action for noncompliance device then click on Next.

actions for noncompliance

Assign the policy then click on Create.

Create compliance profile

The policy has been created.

Install Microsoft Edge

Microsoft Edge is installed on Ubuntu desktop by command line.

Install prerequisites

The following command line permit to install the prerequisites for install Microsoft Edge on Ubuuntu desktop.

sudo apt install software-properties-common apt-transport-https wget
Install prerequisites for edge

It is now necessary to download and install the repository key. Run the following command

wget https://packages.microsoft.com/keys/microsoft.asc -O- | sudo apt-key add -
Install repository key wget https://packages.microsoft.com/keys/microsoft.asc -O- | sudo apt-key add -

The repository can now be added to Ubuntu.

sudo add-apt-repository "deb [arch=amd64] https://packages.microsoft.com/repos/edge stable main"
Add the repository to Ubuntu sudo add-apt-repository "deb [arch=amd64] https://packages.microsoft.com/repos/edge stable main"

Install Microsoft Edge

From the Ubuntu, run the following command to install Microsoft Edge.

sudo apt install microsoft-edge-stable
Install edge sudo apt install microsoft-edge-stable

Microsoft Edge has been installed.

Edge has bben installed
Microsoft Edge has been installed

Install Microsoft Intune app

Microsoft Intune app must be installed to Ubuntu for enroll the computer.

Install prerequisites

Curl must be installed on the Ubuntu computer. Run the following command to install it.

sudo apt install curl gpg
install curl

It is now necessary to install the Microsoft package signing key. Run the following command for download public Microsoft GPG key

curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > microsoft.gpg
curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > microsoft.gpg

Add public Microsoft GPG key with the following command.

sudo install -o root -g root -m 644 microsoft.gpg /usr/share/keyrings
sudo install -o root -g root -m 644 microsoft.gpg /etc/apt/trusted.gpg.d/

Run the command to add the software repository with the command. For Ubuntu 22.04 :

sudo sh -c 'echo "deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft.gpg] https://packages.microsoft.com/ubuntu/22.04/prod jammy main" > /etc/apt/sources.list.d/microsoft-ubuntu-jammy-prod.list'

Run the command to add the software repository with the command. For Ubuntu 20.04 :

sudo sh -c 'echo "deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft.gpg] https://packages.microsoft.com/ubuntu/20.04/prod focal main" > /etc/apt/sources.list.d/microsoft-ubuntu-focal-prod.list'
sudo sh -c 'echo "deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft.gpg] https://packages.microsoft.com/ubuntu/22.04/prod jammy main" > /etc/apt/sources.list.d/microsoft-ubuntu-jammy-prod.list'

Delete the microsoft.gpg file with the command

sudo rm microsoft.gpg
Remove the file

Install the Microsoft Intune app

Run the following command to install the Microsoft Intune application. Reboot the computer after the application is installed.

sudo apt update

sudo apt install intune-portal
sudo apt update
Install intune-portal

Intune application has been installed.

install intune application

Enroll Linux device

From the Ubuntu, lauch the Microsoft Intune application then click on Sign in.

Lauch application intune and click on sign in

Enter username and password of the user. An intune licence must be assigned to the user before to enroll the device..

Enter username of the user

Click on Register to continue enrollment.

Click on Register to continue enrollment

A new windows appear, click on Begin.

Click on begin to begin enrollment

All the information that my organization can see appears. Click on Begin.

begin enrollemnt

The computer has been enrolled and is compliant.

Device has been enrolled

The linux computer has been enrolled to Microsoft Intune.

Device has been enrolled

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.