SCUG.DK: Protecting Company Data using EMS, April 2015
Download as PPTX, PDF1 like2,595 views
The document discusses the importance of mobile device management using Microsoft's Enterprise Mobility Suite (EMS). EMS provides a single management console for IT administrators to manage mobile devices and applications through solutions like Microsoft Intune and Azure Active Directory. The presentation provides an overview of setting up an EMS environment, including creating accounts, subscriptions, configuring Azure AD sync, and enrolling devices for management and policy enforcement. Mobile application management and conditional access features are also demonstrated to control access to corporate resources based on device enrollment status.
SCUG.DK: Protecting Company Data using EMS, April 2015
- 1. System Center User Group Denmark, April 2015 Protecting Company Data using the Enterprise Mobility Suite
- 2. Key Takeaways Why is mobile management important? What is EMS and why do you need it? How do we get started with EMS? © EG A/S 2
- 3. Ronni Pedersen Microsoft MVP: Enterprise Client Management Senior Infrastructure Architect Founder: System Center User Group Denmark Microsoft Certified Trainer Microsoft TechNet Moderator Twitter: https://twitter.com/ronnipedersen Blog: http://www.ronnipedersen.com/ Mail: Ronni.Pedersen@eg.dk © EG A/S 3
- 4. WARNING !!!! This is not technical training so please join the discussion This is a User Group, not a class room
- 6. • SCCM is undisputed winner of PC Mgmt w/ >70% share • You need to look into a MDM solution today • I believe Microsoft is the long-term winner Growth is all in Mobile Devices 349 315 296 294 293 292 725 1,010 1,131 1,283 1,434 1,579 162 231 270 308 340 368 0 500 1,000 1,500 2,000 2,500 1 2 3 4 5 6 Series3 Series2 Series1 Devices Shipments (MM) Source: IDC
- 7. Licensing Microsoft Intune (Standalone) Enterprise Mobility Suite Microsoft Intune Azure Active Directory Premium Azure Rights Management Enterprise Cloud Suite Enterprise Mobility Suite Office 365 Enterprise E3 Windows Software Assurance (Per User) http://www.microsoft.com/licensing/about- licensing/briefs/enterprise-cloud-suite.aspx © EG A/S 7
- 8. Enterprise Mobility Suite Microsoft Intune Mobile and Device Management Azure Active Directory Premium Hybrid Identity Management Azure Rights Management Information Protection © EG A/S 8
- 9. User Group Discussion Why do we need to manage our mobile devices?
- 10. Getting Started with Intune Setting up the environment
- 11. Process Overview Prepare • Create Accounts for cloud services • Create Subscriptions Deploy • Add Public DNS • Configure AD Users with Public Domain UPNs • Deploy and Configure Azure AD Sync Configure • Configure Configuration Manager for Mobile Device Management • Configure Device Enrolment © EG A/S 11
- 12. Create accounts for the cloud Start by creating dedicated admin accounts: Microsoft account: https://signup.live.com/ Apple ID: https://appleid.apple.com/account Google account: https://accounts.google.com/Signup © EG A/S 12
- 13. Create the trial subscriptions Microsoft Office 365: http://aka.ms/ITcampO365Trial Microsoft Intune: http://aka.ms/tryintune Microsoft Azure Active Directory (AD) Premium: http://azure.microsoft.com/en-us/pricing/free-trial Azure Rights Management: https://manage.windowsazure.com © EG A/S 13
- 14. Single management console for IT admins © EG A/S 14
- 16. User Group Discussion Microsoft Intune Standalone or Hybrid with SCCM?
- 17. Device Enrolment
- 18. ITUser
- 19. Devices enrolled Apply policies Company Portal Recommended apps for user’s devices ITUser
- 20. Mobile Device – Personal vs Corporate App Management By default, user-enrolled devices are “Personal” Complete inventory of all Apps on the device only when set to Corporate Only the admin can specify corporate-owned devices ! Personal vs. Corporate Owned Devices
- 21. DEMO Device Enrollment and Inventory
- 22. User Group Discussion Why would our users enrol their devices? What's the benefit?
- 24. Conditional access for Office 365 7 5 4 2 1 3 6
- 25. Intuitive end-user experience To access your Contoso e-mail and other company resources, this device needs to be enrolled with Contoso. Part of this process includes installing the Company Portal. Click first link below to begin this process. Step 1 Enroll your device. Step 2 Once you’ve enrolled your device, click here to Activate your enrollment.
- 28. Mobile Application Management © EG A/S 28 Personal apps
- 29. Mobile Application Management © EG A/S 29
- 31. Questions © EG A/S 31
- 32. © EG A/S 32
Editor's Notes
- #25: This diagram displays the integration with O365 to manage access to the email. Requires users enroll their devices as well as being compliant with Intune policies before getting access to email.
- #26: Let’s take a closer look at the end user experience when the device is not enrolled or compliant. When the user tries to access email from his personal device, the access is blocked and the user get an email explaining the reason why the email is not available as well as instructions on what to do to get access to the email. First thing to do is to enroll the device to Intune. Once the device is enrolled, Intune company portal will check the device for compliance and fix the issues, if necessary, in order to make the device compliant. After that the user will get the email flowing to the device.