Microsoft Cloud Device Management comparisions
2 likes600 views
Microsoft Intune is a cloud-based management solution that allows organizations to securely manage mobile devices and PCs, providing access to corporate applications and data. It includes features such as conditional access, device compliance policies, and selective wipe capabilities for corporate data on personal devices. Intune supports various platforms, including Windows, iOS, and Android, and can be integrated with existing management systems like System Center Configuration Manager.
Microsoft Cloud Device Management comparisions
- 2. Mobile application management PC managementMobile device management Intune helps organizations provide their employees with access to corporate applications, data, and resources from virtually anywhere on almost any device, while helping to keep corporate information secure. User IT
- 3. Mobile devices and PCs Mobile devices System Center Configuration Manager Domain joined PCs Configuration Manager integrated with Intune (hybrid)Intune standalone (cloud only) IT IT Intune web console Configuration Manager console
- 4. Consistent experience across: Discover and install corporate apps Manage devices and data Ability to contact IT Customizable terms and conditions
- 5. Configuration Manager console (hybrid)Intune web console (cloud only)
- 8. Device Management Microsoft IntuneBuilt-InBuilt-in Microsoft Intune Conditional Access Selective Wipe LoB app
- 10. β’Mobile Device Management β’ Deploy certificates, WiFi, VPN, and email profiles automatically once a device is enrolled β’Mobile Application Management β’ Provide the ability to deny specific applications or URL addresses from being accessed on mobile devices β’PC Management β’ Simplify administration by deploying software and configuring Windows Firewall settings on computers based upon policies defined by the administrator
- 11. Office 365 MDM
- 12. Category Feature Exchange ActiveSync MDM for Office 365 Intune Standalone Intune + ConfigMgr (Hybrid) Device configuration Inventory mobile devices that access corporate applications β β β β Remote factory reset (full device wipe) β β β β Mobile device configuration settings (PIN length, PIN required, lock time, etc.) β β β β Self-service password reset (Office 365 cloud only users) β β β β Office365 Provides reporting on devices that do not meet IT policy β β β Group-based policies and reporting (ability to use groups for targeted device configuration) β β β Root cert and jailbreak detection β β β Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) β β β Prevent access to corporate email and documents based upon device enrollment and compliance policies β β β Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps β β App deployment (Windows Phone, iOS, Android) β β Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles β β Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) β β Secure content viewing via Managed browser, PDF viewer, Imager viewer, and AV player apps for Intune β β Remote device lock via self-service Company Portal and via admin console β β PC Management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) β β PC software management β β Comprehensive PC management (e.g. Windows Server/Linux/Mac OS X support, virtual desktop and power management, custom reporting, etc.) β OS deployment β Single management console for PCs, Windows Server/Linux/Mac OS X, and mobile devices β
- 13. β’ Ability to apply security policies β’ Selective wipe of Office 365 data β’ Familiar user experience β’ Included with all Office 365 commercial subscriptions, including Business, Enterprise, EDU and Government plans
- 14. Windows Phone 8.1 iOS 7.1+ Android 4+ Exchange Exchange ActiveSync includes native email and third-party apps, like TouchDown, that use Exchange ActiveSync. Exchange ActiveSync Exchange Mail Exchange ActiveSync Mail Exchange ActiveSync Email Office and OneDrive for Business No supported apps Outlook OneDrive Word Excel PowerPoint On phones and tablets: Outlook OneDrive Word Excel PowerPoint On phones only: Office Mobile https://technet.microsoft.com/library/ms.o365.cc.devicepolicysupporteddevice.aspx
- 18. β’ Now set the device policies
- 21. Note β Policies apply to security groups
- 24. Personal apps Managed apps Company Portal Are you sure you want to wipe corporate data and applications from the userβs device? OK Cancel Perform selective wipe via self-service company portal or admin console Remove managed apps and data Keep personal apps and data intact ITIT
- 25. β’Conditional Access : You can set up security policies on devices that connect to Office 365 to ensure that Office 365 corporate email and documents can be accessed only on phones and tablets that are managed by your company and are compliant. β’Device management : You can set and manage security policies such as device-level pin lock and jailbreak detection to help prevent unauthorized users from accessing corporate email and data on a device when it is lost or stolen. β’Selective wipe : You can easily remove Office 365 company data from an employeeβs device while leaving their personal data in place.
- 26. Intune Device and Application Management
- 27. Category Feature Exchange ActiveSync MDM for Office 365 Intune Standalone Intune + ConfigMgr (Hybrid) Device configuration Inventory mobile devices that access corporate applications β β β β Remote factory reset (full device wipe) β β β β Mobile device configuration settings (PIN length, PIN required, lock time, etc.) β β β β Self-service password reset (Office 365 cloud only users) β β β β Office365 Provides reporting on devices that do not meet IT policy β β β Group-based policies and reporting (ability to use groups for targeted device configuration) β β β Root cert and jailbreak detection β β β Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) β β β Prevent access to corporate email and documents based upon device enrollment and compliance policies β β β Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps β β App deployment (Windows Phone, iOS, Android) β β Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles β β Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) β β Secure content viewing via Managed browser, PDF viewer, Imager viewer, and AV player apps for Intune β β Remote device lock via self-service Company Portal and via admin console β β PC Management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) β β PC software management β β Comprehensive PC management (e.g. Windows Server/Linux/Mac OS X support, virtual desktop and power management, custom reporting, etc.) β OS deployment β Single management console for PCs, Windows Server/Linux/Mac OS X, and mobile devices β
- 28. Enroll β’ Provide a self-service Company Portal for users to enroll devices β’ Deliver custom terms and conditions at enrollment β’ Bulk enroll devices using Apple Configurator or service account β’ Restrict access to Exchange email if a device is not enrolled Retire β’ Revoke access to corporate resources β’ Perform selective wipe β’ Audit lost and stolen devices Provision β’ Deploy certificates, email, VPN, and WiFi profiles β’ Deploy device security policy settings β’ Install mandatory apps β’ Deploy app restriction policies β’ Deploy data protection policies Manage and Protect β’ Restrict access to corporate resources if policies are violated (e.g., jailbroken device) β’ Protect corporate data by restricting actions such as copy/cut/paste/save outside of managed app ecosystem β’ Report on device and app compliance User IT
- 29. Manage and Protect β’ No existing infrastructure necessary β’ No existing Configuration Manager deployment required β’ Simplified policy control β’ Simple web-based administration console β’ Faster cadence of updates β’ Always up-to-date Devices Supported β’ Windows PCs (x86/64, Intel SoC) β’ Windows RT β’ Windows Phone 8.x β’ iOS β’ Android Mobile devices and PCs Intune standalone (cloud only) IT Intune web console
- 30. System Center 2012 R2 Configuration Manager with Microsoft Intune β’ Build on existing Configuration Manager deployment β’ Full PC management (OS deployment, endpoint protection, application delivery control, custom reporting) β’ Deep policy control requirements β’ Greater scalability β’ Extensible administration tools (RBA, PowerShell, SQL reporting services) Devices Supported β’ Windows PCs (x86/64, Intel SoC) β’ Windows to Go β’ Windows Server β’ Linux β’ Mac OS X β’ Windows RT β’ Windows Phone 8.x β’ iOS β’ Android Mobile devices System Center Configuration Manager Domain joined PCs Configuration Manager integrated with Intune (hybrid) IT Configuration Manager console
- 31. Intune standalone (cloud only) Lightweight, agentless OR agent-based management PC protection from malware PC software update management Software distribution Proactive monitoring and alerts Hardware and software inventory Policies for Windows Firewall management Intune standalone (cloud only) Configuration Manager integrated with Intune (hybrid) Lightweight, agentless OR agent-based management Agent-based management only PC protection from malware PC protection from malware PC software update management PC software update management Software distribution Software distribution Proactive monitoring and alerts Proactive monitoring and alerts Hardware and software inventory Hardware and software inventory Policies for Windows Firewall management Policies for Windows Firewall management Operating system deployment PC, mobile device, Windows Server, Linux/Unix, Mac, and virtual desktop management Power management Custom reporting
- 63. Intune Policies
- 64. Category Feature Exchange ActiveSync MDM for Office 365 Intune Standalone Intune + ConfigMgr (Hybrid) Device configuration Inventory mobile devices that access corporate applications β β β β Remote factory reset (full device wipe) β β β β Mobile device configuration settings (PIN length, PIN required, lock time, etc.) β β β β Self-service password reset (Office 365 cloud only users) β β β β Office365 Provides reporting on devices that do not meet IT policy β β β Group-based policies and reporting (ability to use groups for targeted device configuration) β β β Root cert and jailbreak detection β β β Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) β β β Prevent access to corporate email and documents based upon device enrollment and compliance policies β β β Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps β β App deployment (Windows Phone, iOS, Android) β β Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles β β Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) β β Secure content viewing via Managed browser, PDF viewer, Imager viewer, and AV player apps for Intune β β Remote device lock via self-service Company Portal and via admin console β β PC Management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) β β PC software management β β Comprehensive PC management (e.g. Windows Server/Linux/Mac OS X support, virtual desktop and power management, custom reporting, etc.) β OS deployment β Single management console for PCs, Windows Server/Linux/Mac OS X, and mobile devices β
- 65. β’ β’ β’ β’ List of complete settings β’ β’ OMA-URI Settings β’ Configurator Profile β’ OMA-URI Settings β’ OMA-URI Settings β’
- 66. If compliant, email access is granted 7 Enrollment / compliance remediation 5 If not compliant, push device into quarantine Quarantine 4 2 Quarantine email with remediation steps Link to enroll device and compliance remediation steps Who does what? Intune: Evaluate policy compliance for device Azure AD: Authenticate user and provide device compliance status Exchange Online: Enforces access to email based on device state Attempt email connection 1 3 Azure Active Directory Set device management/ compliance status 6 Office 365 Mobile device Microsoft Intune
- 67. Personal apps Managed apps Maximize productivity while preventing leakage of company data by restricting actions such as copy/cut/paste/save in your managed app ecosystem User
- 68. Enforce corporate data access requirements Prevent data leakage on the device Enforce encryption of app data at rest App-level selective wipe
- 69. PC Management
- 70. Category Feature Exchange ActiveSync MDM for Office 365 Intune Standalone Intune + ConfigMgr (Hybrid) Device configuration Inventory mobile devices that access corporate applications β β β β Remote factory reset (full device wipe) β β β β Mobile device configuration settings (PIN length, PIN required, lock time, etc.) β β β β Self-service password reset (Office 365 cloud only users) β β β β Office365 Provides reporting on devices that do not meet IT policy β β β Group-based policies and reporting (ability to use groups for targeted device configuration) β β β Root cert and jailbreak detection β β β Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) β β β Prevent access to corporate email and documents based upon device enrollment and compliance policies β β β Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps β β App deployment (Windows Phone, iOS, Android) β β Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles β β Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) β β Secure content viewing via Managed browser, PDF viewer, Imager viewer, and AV player apps for Intune β β Remote device lock via self-service Company Portal and via admin console β β PC Management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) β β PC software management β β Comprehensive PC management (e.g. Windows Server/Linux/Mac OS X support, virtual desktop and power management, custom reporting, etc.) β OS deployment β Single management console for PCs, Windows Server/Linux/Mac OS X, and mobile devices β
- 71. Resources β’ MDM in Office 365 overview - https://technet.microsoft.com/en- US/library/ms.o365.cc.DevicePolicy.aspx β’ Different ways to manage devices with InTune - https://technet.microsoft.com/library/dn957912.aspx β’ Capabilities of Office 365 MDM β https://technet.microsoft.com/library/ms.o365.cc.devicepolicysupporteddevice.aspx β’ Manage mobile devices in Office 365 β https://support.office.com/en- us/article/Manage-mobile-devices-in-Office-365-dd892318-bc44-4eb1-af00-9db5430be3cd β’ EMS now available without Enterprise Agreement - http://blogs.technet.com/b/ad/archive/2015/03/12/azure-ad-and-enterprise-mobility-suite- now-broadly-available-outside-of-an-enterprise-agreement.aspx β’ Microsoft Intune features - http://www.microsoft.com/en-au/server- cloud/products/microsoft-intune/features.aspx
- 72. CIAOPS Resources β’ Blog β http://blog.ciaops.com β’ Free SharePoint Training via email β http://bit.ly/gs-spo β’ Free Office 365, Azure Administration newsletter β http://bit.ly/o365-tech β’ Free Office 365, Azure video tutorials β http://www.youtube.com/directorciaops β’ Free documents, presentations, eBooks β http://docs.com/ciaops β’ Office 365, Azure, Cloud podcast β http://ciaops.podbean.com β’ Office 365, Azure online training courses β http://www.ciaopsacademy.com β’ Office 365, Azure eBooks β http://www.ciaops.com/publications Twitter @directorcia Facebook https://www.facebook.com/ciaops Email director@ciaops.com Skype for Business admin@ciaops365.com