Legacy Update: Get back online, activate, and install updates on your legacy Windows PC

This whitepaper describes best practices for securing and hardening NDES to enable the deployment of certificates with Microsoft Intune and System Center Configuration Manager

• This white paper discusses the architectural and configuration practices to secure a deployment of the Network Device Enrollment Service (NDES). It describes the best practices for designing network security, operating system configuration and service modifications to increase the integrity of issued certificates and minimize security risks. The paper also addresses the new Windows Server 2012 R2 NDES policy module feature and its configuration for Microsoft Intune and System Center Configuration Manager deployments.

Files

Status: Live This download is still available on microsoft.com. The downloads below will come directly from the Microsoft Download Center.

File	SHA1 Hash	Size
Securing and Hardening Network Device Enrollment Service for Microsoft Intune and System Center Configuration Manager.docx	4aa5ddc069b2309aa6cbd9270bf93ec24a285e83	814 KB

File sizes and hashes are retrieved from the Wayback Machine’s indexes. They may not match the latest versions of files hosted on Microsoft servers.

• Microsoft Word is required to view the whitepaper document.

• Download the document and view in Microsoft Word.