Managing Mobility - Microsoft Enterprise Mobility - Accelerate, Protec and Manage your IT Infrastucture - Royal Albert Hall 2014
1 like•1,641 views
The document discusses a comprehensive approach to managing mobility in a corporate environment through Microsoft Intune and Azure services. It emphasizes a people-centric method for secure access to applications and data across various devices, enabling work anywhere while ensuring data protection. Key features include mobile device management, application management, and identity and access management, aimed at enhancing productivity without compromising security.
Managing Mobility - Microsoft Enterprise Mobility - Accelerate, Protec and Manage your IT Infrastucture - Royal Albert Hall 2014
- 1. Managing Mobility - a connected approach to new ways of working Herman Arnedo Mahr @hermanarnedo
- 3. Protect your data Enable your users Unify your environment People-centric approach Devices Apps Data
- 4. Secure and manage tools and resources Work anywhere, anytime, on any device A cloud-delivered, ready-for-hybrid solution Unify identity Manage apps and devices Protect data Username ••••••••••••• A rich, consistent user experience across all devices and platforms
- 5. Protect your data Enable your users Information protection Azure RMS Identity and access management Azure AD Premium Device and application management Microsoft Intune
- 6. Information protection Microsoft Azure Rights Management Service Information protection Connection to on-premises assets Bring your own key Mobile device management Microsoft Intune Mobile device settings management Mobile application management Selective Wipe Identity and access management Self-service password reset and group management Connection between Active Directory and Azure Active Directory Microsoft Azure Active Directory Premium Security reports and audit reports, multi-factor authentication
- 7. Single sign-on Self-service experiences SaaS applications Multi-factor authentication Desktop virtualization Access & information protection Mobile device & application management Hybrid identity Security reports New sync options
- 8. Self-service Single sign on ••••••••••• Username On-premises Simple connection Azure Active Directory Cloud Office 365 Public cloud SaaS Azure Other Directories Windows Server Active Directory
- 9. Phone callMobile app Single-use codes •••••••• SMS “ ” cloudOn-premises
- 10. Demo - Hybrid Identity Management
- 11. Mobile device & application management Access & information protection Desktop Virtualization Hybrid identity Managed productivity with Office mobile apps Mobile app management and app wrapping Conditional access to corporate resources Simplified device enrollment
- 12. Mobile application management PC managementMobile device management Microsoft Intune Intune helps organizations provide their employees with access to corporate applications, data, and resources from virtually anywhere on almost any device, while helping to keep corporate information secure.
- 13. Mobile devices and PCs Mobile devices System Center Configuration Manager Domain joined PCs Configuration Manager integrated with Intune (hybrid)Intune standalone (cloud only) IT IT Intune web console Configuration Manager console
- 14. Configuration Manager console (hybrid)Intune web console (cloud only)
- 15. Category Feature Exchange ActiveSync MDM for Office 365 Intune Standalone Intune + ConfigMgr (Hybrid) Device configuration Inventory mobile devices that access corporate applications ● ● ● ● Remote factory reset (full device wipe) ● ● ● ● Mobile device configuration settings (PIN length, PIN required, lock time, etc.) ● ● ● ● Self-service password reset (Office 365 cloud only users) ● ● ● ● Office365 Provides reporting on devices that do not meet IT policy ● ● ● Group-based policies and reporting (ability to use groups for targeted device configuration) ● ● ● Root cert and jailbreak detection ● ● ● Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) ● ● ● Prevent access to corporate email and documents based upon device enrollment and compliance policies ● ● ● Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps ● ● App deployment (Windows Phone, iOS, Android) ● ● Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles ● ● Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) ● ● Secure content viewing via Managed browser, PDF viewer, Imager viewer, and AV player apps for Intune ● ● Remote device lock via self-service Company Portal and via admin console ● ● PC Management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) ● ● PC software management ● ● Comprehensive PC management (e.g. Windows Server/Linux/Mac OS X support, virtual desktop and power management, custom reporting, etc.) ● OS deployment ● Single management console for PCs, Windows Server/Linux/Mac OS X, and mobile devices ●
- 16. Enforce corporate data access requirements Prevent data leakage on the device Enforce encryption of app data at rest App-level selective wipe
- 18. Maximize mobile productivity and protect corporate resources with Office mobile apps Extend these capabilities to existing line-of-business apps using the Intune App Wrapping Tool Enable secure viewing of content using the Managed Browser, PDF Viewer, AV Player, and Image Viewer apps Managed apps Personal appsPersonal apps Managed apps ITUser
- 19. Personal apps Managed apps Maximize productivity while preventing leakage of company data by restricting actions such as copy/cut/paste/save in your managed app ecosystem User
- 22. Personal apps Managed apps Company Portal Are you sure you want to wipe corporate data and applications from the user’s device? OK Cancel Perform selective wipe via self-service company portal or admin console Remove managed apps and data Keep personal apps and data intact ITIT
- 24. Mobile device & application management Access & information protection Desktop Virtualization Hybrid identity Conditional access to corporate resources Secure data sharing Easy management and control
- 25. Rights management Data encryption Policy enforcement Azure Active Directory Share internally Share externally
- 26. Vendor 2 Azure Rights Management ! Sender Vendor Username Password [email protected] ••••••••••••• Username Password [email protected] •••••••••••••
- 27. Sharing documents securely Use Microsoft Azure RMS to securely share documents with colleagues and business partners
- 28. Getting email notifications for document use [email protected]; [email protected] opened RMS blog post – Aug2014.docx.pdf [email protected] opened RMS blog post – Aug2014.docx.pdf [email protected] opened RMS blog post – Aug2014.docx.pdf [email protected] was denied access to BudgetWithCharts.xlsx.pdf [email protected] was denied access to BudgetWithCharts.xlsx.pdf [email protected] was denied access to BudgetwithCharts.xlsx.pdf
- 30. SaaS appsMicrosoft Azure Active DirectoryOther Directories