Enrollment

Enroll on departmental basis. Please contact your department Cyber Security Coordinator (CSC).

Participating departments must assign either their CSC (or other colleague) to take up the role of desktop support coordinator. He/She will work with ITSC Intune administrative team for the followings:

• Produce inventory for their department PC and work with ITSC for the enrollment
• assist their department users to remediate insecure configuration if discovered (e.g. window update has paused)
• work with ITSC for major upgrade (e.g. Windows 10/11 version reaching end-of-life)
• handle security alerts (e.g. machine infected by malware)

Roles of users and ITSC

• Users, department CSC and ITSC work jointly to protect the devices

• Users, usually granted with local administrator privilege of the device, will manage installation of applications

• They should also follow security practise provided on and off by ITSC (via their CSC) e.g. responding to security update prompt, upgrade OS and software to the latest versions, do not install unsafe software

• ITSC will define and mandate most security configurations on their devices, by referencing Enterprise level security best practice suggested by Microsoft

• By leveraging Intune and ATP, ITSC will detect security incident promptly and inform affected users for quick remediation

Minimum Requirements

• The device to be enrolled must be running Windows 10 version 1703 or later and are domain joined.
• If you device is not AD domain joined, or you have a new device, please refer to the procedure for joining Cloud Azure AD only below

Privacy

When you enroll a device, you give your organization permission to view certain pieces of information on your device, such as device model and hardware configuration. Your organization uses this information to help protect the corporate data on the device. Please refer to the HKUST data privacy policy statement.

Also, 

• ITSC would not examine the data stored in the PC
• The system configurations of the PC and the software installed are recorded for the purpose of providing the Intune services
• If security incident happens (e.g. malware infection, unsafe software being installed, users clicking a malicious URL), ITSC will be alerted and may perform investigation by examining the security log files.