Re:Microsoft no longer allows admins to block Windows Store ...
by lstamour on Friday May 06, 2016 @01:42AM
(#11641946)
It is too bad about Intune. I think the Azure AD with joining is only hybrid, unless I've missed something, which means you still need a local AD resource. Reminds me of Azure-compatible Storage Spaces Dorect -- an amazing idea until they told me I would need four identically configured servers and I realised it would be a waste of time when I only need one server and less redundancy to start. Wish they could figure out a way to provide AD entirely remotely, for those willing to require the Internet always working 24/7 to locate and manage devices on their own network... Though maybe something like bonjour could also replace those functions of AD.
It used to be an optional tier of Windows Intune (now known as Microsoft Intune), which they have since killed (stupid decision, IMO). However, you can just directly join a Windows 10 (Pro?) system to Azure AD, Enterprise is only necessary for things like DirectRoute, you may not be able to block the Windows Store entirely but you can restrict people from using non-whitelisted applications IIRC.
If you want to manage software updates, deploy applications, Microsoft Intune is still a great option (even includes endpoint protection for PC's) at $6/usr/mo. It's just too bad they got rid of the $10/usr/mo tier that had the Windows Enterprise license.