Microsoft Intune - Global Azure Bootcamp 2018
1 like1,446 views
Microsoft Intune provides mobile device and application management solutions that enable employees to access corporate resources securely from various devices. The platform offers flexible deployment options, including cloud-only and hybrid configurations, and includes features for identity management, data protection, and device compliance. Users can enroll devices, manage applications, and enforce security policies through a self-service portal, ensuring data protection and productivity.
Microsoft Intune - Global Azure Bootcamp 2018
- 1. Microsoft Intune Mobile device and application management from the cloud
- 2. MDM Deployment Options Overview Mobile Application Management (MAM) Summary Agenda
- 3. Mobile Application Management (MAM) PC managementMobile Device Management (MDM) ITUser Microsoft Intune Intune helps organizations provide their employees with access to corporate applications, data, and resources from virtually anywhere on almost any device, while helping to keep corporate information secure.
- 4. Information protection Identity-driven security Managed mobile productivity Identity and access management Azure Information Protection Premium P2 Intelligent classification and encryption for files shared inside and outside your organization (includes all capabilities in P1) Azure Information Protection Premium P1 Encryption for all files and storage locations Cloud-based file tracking Microsoft Cloud App Security Enterprise-grade visibility, control, and protection for your cloud applications Microsoft Advanced Threat Analytics Protection from advanced targeted attacks leveraging user and entity behavioral analytics Microsoft Intune Mobile device and app management to protect corporate apps and data on any device Azure Active Directory Premium P2 Identity and access management with advanced protection for users and privileged identities (includes all capabilities in P1) Azure Active Directory Premium P1 Secure single sign-on to cloud and on-premises apps MFA, conditional access, and advanced security reporting EMS E3 EMS E5
- 6. Mobile devices and PCs Mobile devices System Center Configuration Manager Domain joined PCs Configuration Manager integrated with Intune (hybrid)Intune standalone (cloud only) IT IT Intune web console Configuration Manager console
- 7. Mobile devices and PCs Intune standalone (cloud only) IT Intune web console Manage and Protect • No existing infrastructure necessary • No existing Configuration Manager deployment required • Simplified policy control • Simple web-based administration console • Faster cadence of updates • Always up-to-date Devices Supported • Windows PCs (x86/64) • Windows RT • iOS • Android • OS X
- 8. Mobile devices System Center Configuration Manager Domain joined PCs Configuration Manager integrated with Intune (hybrid) IT Configuration Manager console System Center Configuration Manager with Microsoft Intune • Build on existing Configuration Manager deployment • Full PC management (OS deployment, endpoint protection, application delivery control, custom reporting) • Deep policy control requirements • Greater scalability • Extensible administration tools (RBA, PowerShell, SQL reporting services) • Windows RT • iOS • Android Devices Supported • Windows PCs (x86/64) • Windows to Go • Windows Server • Linux • OS X
- 9. Category Feature Microsoft Intune (cloud only) Intune + ConfigMgr (hybrid) Device configuration Inventory mobile devices that access corporate applications ● ● Remote factory reset (full device wipe) ● ● Mobile device configuration settings (PIN length, PIN required, lock time, etc.) ● ● Self-service password reset (Office 365 cloud only users) ● ● Office365 Provides reporting on devices that do not meet IT policy ● ● Group-based policies and reporting (ability to use groups for targeted device configuration) ● ● Root and jailbreak detection ● ● Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) ● ● Prevent access to corporate email and documents based upon device enrollment and compliance policies ● ● Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps ● ● App deployment (Windows Phone, iOS, Android) ● ● Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles ● ● Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) ● ● Secure content viewing via Managed Browser, PDF Viewer, Image Viewer, and AV Player apps for Intune ● ● Remote device lock via self-service Company Portal and via admin console ● ● PC management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) ● ● PC software management ● ● Comprehensive PC management (e.g. Group Policy, login scripts, BitLocker management, virtual desktop and power management, custom reporting, etc.) ● Windows Server/Linux/UNIX/Mac OS X support ● OS deployment and imaging ●
- 11. Consistent experience across Windows, Android, and iOS Discover and install corporate apps Manage devices and data Ability to contact IT Customizable terms and conditions
- 13. Maximize mobile productivity and protect corporate resources with Office mobile apps – including multi-identity support Extend these capabilities to your existing line-of-business apps using the Intune App Wrapping Tool Enable secure viewing of content using the Managed Browser, PDF Viewer, AV Player, and Image Viewer apps Managed apps Personal appsPersonal apps Managed apps ITUser Corporate data Personal data Multi-identity policy
- 14. Personal apps Managed apps Maximize productivity while preventing leakage of company data by restricting actions such as copy, cut, paste, and save as between Intune-managed apps and unmanaged apps User
- 15. Conditional access policies IP Range Device State Advanced Windows 10 options User Group User On-premises Cloud Corporate apps
- 16. Bulk Enrollments
- 17. Device Enrollment Manager (DEM) account Apple Configurator Apple Device Enrollment Program (DEP) Windows AutoPilot Windows 10 provisioning profile
- 18. Enrolls devices on behalf of users Apply policies ITDevice Enrollment Manager Distributes to users Restaurant School Retail Store
- 19. Export device enrollment profile from Intune Configure iOS devices with the Apple Configurator iOS devices will automatically enroll on first power on Import to Apple Configurator ITUser
- 20. User IT
- 22. Enroll • Provide a self-service Company Portal for users to enroll devices • Deliver custom terms and conditions at enrollment • Bulk enroll devices using Apple Configurator or service account • Restrict access to Exchange email if a device is not enrolled Retire • Revoke access to corporate resources • Perform selective wipe • Audit lost and stolen devices Provision • Deploy certificates, email, VPN, and WiFi profiles • Deploy device security policy settings • Install mandatory apps • Deploy app restriction policies • Deploy data protection policies Manage and Protect • Restrict access to corporate resources if policies are violated (e.g., jailbroken device) • Protect corporate data by restricting actions such as copy, cut, paste, and save as between Intune- managed apps and personal apps • Report on device and app compliance User IT
- 23. ▪ Sign up for a free trial. ▪ Request an enterprise mobility proof-of- concept from your account team or partner ▪ Find a partner with competency in devices, deployment, identity, and access ▪ Take advantage of your Software Assurance Planning Services benefits ▪ Learn more about our enterprise mobility products and solutions: ▪ Enterprise Mobility Suite: aka.ms/EnterpriseMobilitySuite ▪ Mobile device and application management ▪ Microsoft Intune: aka.ms/MicrosoftIntune ▪ System Center Configuration Manager