Set up Microsoft Intune on Linux

Based on https://www.jdegoeij.com/posts/intune-ubuntu-24-04/

For Ubuntu 24.04

1. Using sudo gnome-text-editor /etc/apt/sources.list.d/ubuntu.sources, add this to the end of the file: In the pt server, pick the server that is closest to where you leave

   Types: deb
   URIs: http://pt.archive.ubuntu.com/ubuntu/
   Suites: mantic
   Components: main restricted universe multiverse
   Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
   
   Types: deb
   URIs: http://security.ubuntu.com/ubuntu/
   Suites: mantic-security
   Components: main restricted universe multiverse
   Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
               

2. Install Microsoft Edge

3. Install Microsoft Intune dependencies

   sudo apt install openjdk-11-jre libicu72 libjavascriptcoregtk-4.0-18 libwebkit2gtk-4.0-37
               

4. Install Microsoft Intune according to Microsoft's documentation

5. Reboot your computer

6. Go to Further instructions

For older versions of Ubuntu

1. https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-device-linux

2. Go to Further instructions

Further instructions

Setup PAM policy

Required if your organization requires some password complexity

1. Use sudo gedit /etc/pam.d/common-password to replace

   password	requisite			pam_pwquality.so retry=3
               

   with

   password        requisite                       pam_pwquality.so retry=3 minlen=8 dcredit=-1 ocredit=-1 ucredit=-1 lcredit=-1
               

Troubleshooting

Your password complexity still shows as non-compliant

1. sudo rm /run/intune/1000/pwquality
                   

2. Open Intune, and refresh the issues.

Unknown problems

You can diagnose further problems by looking at what Microsoft Intune is searching for in your computer.

Just use Linux's strace command to check what calls are being made by Microsoft Intune to the Linux kernel

intune-portal & sudo strace -p $! -e trace=\!poll,recvmsg,writev,write,read,shmget,shmat,shmctl,futex