Microsoft Enterprise Mobility Suite Presented by Atidan
3 likes•1,981 views
David J. Rosenthal discusses Microsoft's enterprise mobility solutions designed to integrate and secure productivity across various devices and applications. The document highlights the challenge of employees using non-approved apps and the importance of managing identity and access, emphasizing features such as multi-factor authentication and behavioral analytics. It also compares Microsoft's offerings with competitors, showcasing cost-effectiveness and flexibility in managing corporate data and applications in a mobile-first and cloud-first environment.
Microsoft Enterprise Mobility Suite Presented by Atidan
- 1. David J. Rosenthal CEO, Atidan Microsoft Technology Center, NYC January 14, 2016
- 2. Mobile First | Cloud First 61% of workers mix personal and work tasks in their devices* * Forrester Research: “BT Futures Report: Info workers will erase boundary between enterprise & consumer technologies,” Feb. 21, 2013 ** http://www.computing.co.uk/ctg/news/2321750/more-than-80-per-cent-of-employees-use-non-approved-saas-apps-report *** Verizon 2013 data breach investigation report >80% of employees admit to using non-approved software- as-a-service (SaaS) applications in their jobs** >75% percent of network intrusions exploited weak or stolen credentials ***
- 3. IT What's Driving Change? Employees CustomersBusiness Partners Devices Apps DataUsers
- 4. Microsoft Intune Microsoft Azure Active Directory Premium Microsoft Azure Rights Management Premium Mobile Device & App Management Identity & Access Management Information Protection Behavior based threat analytics Advanced Threat Analytics Easily manage identities across on-premises and cloud. Single sign-on & self-service for any application Manage and protect corporate apps and data on almost any device with MDM & MAM Encryption, identity, and authorization to secure corporate files and email across phones, tablets, and PCs Identify suspicious activities and advanced threats in near real time, with simple, actionable reporting
- 5. Microsoft’s Enterprise Mobility Solution Integrated, Secure identityAccess from many devices It protects Office betterManage and secure productivity It just worksPreserve existing investments Support iOS, Android, Windows, and 1000s of apps It’s comprehensive Customer’s need: Microsoft’s Solution:
- 6. The current identity reality…
- 7. Self-service Single sign on ••••••••••• Username Integrated Identity as the control plane Simple connection Cloud SaaS Azure Office 365Public cloud Other Directories Windows Server Active Directory On-premises Microsoft Azure Active Directory One common identity
- 8. Intelligent cloud Machine learning Security reports Privileged Identity Management App security Conditional access Multi-factor authentication Cloud App Discovery Detect threats User behavioral analysis Simple attack timeline Identity Driven Security
- 9. Microsoft Advanced Threat Analytics ATA Devices and servers Behavioral Analytics Forensics for known attacks and issues Advanced Threat Analytics Profile normal entity behavior (normal vs. abnormal) Search for known security attacks & issues Detect suspicious user activities, known attacks and issues SIEM Active DirectoryActive Directory
- 10. Manage your external identities B2B Collaboration Azure Active Directory B2C
- 11. • Manage and secure productivity • Multi-identity management for Office mobile apps • File / Data level protection It Protects Office Better – Managed Mobile Productivity
- 13. Windows Provable PC Health (PPCH) SharePoint Online Exchange Online User Microsoft Intune SharePoint Online Exchange Online User Microsoft Intune
- 14. Maximize mobile productivity and protect corporate resources with Office mobile apps – including multi-identity support Extend these capabilities to your existing line-of-business apps using the Intune App Wrapping Tool Enable secure viewing of content using the Managed Browser, PDF Viewer, AV Player, and Image Viewer apps Managed apps Personal appsPersonal apps Managed apps ITUser Corporate data Personal data Multi-identity policy
- 15. Personal apps Managed apps Maximize productivity while preventing leakage of company data by restricting actions such as copy, cut, paste, and save as between Intune-managed apps and unmanaged apps User
- 16. Encrypt files and data
- 17. It’s Comprehensive - Cross Platform • iOS, Android, Windows • 1000s of SaaS apps • LOB apps, RemoteApp
- 18. Cost Effective 1 Okta Enterprise Edition as of 3/1/2015. 2 Airwatch Orange Management Suite-Cloud as of 3/1/2015. 3 50% savings over standalone offers Microsoft EMS Other vendors Identity and access management Included $8 1 Mobile device and application management Included $10 2 Data protection Included No similar products Advanced threat detection Included No similar products Total cost (per user/month) Microsoft EMS $8.75 3 Other vendors $18
- 19. It Just Works - Flexible Architecture Matters • Always up to date • Works with what you have • Simple to set up and connect
- 20. EMS for O365 customers Manage Mobile Productivity Increase IT ProductivitySimplify app delivery and deployment LOB Apps SaaS Apps Mobility Management …
- 21. Mobile device and app management Access & Information protection Enterprise Mobility Suite RMS Protection via RMS for O365 • Protection for content stored in Office (on-prem or O365) • Access to RMS SDK • Bring your own Key RMS for O365+ • Protection for on-premises Windows Server file shares • Email notifications when sharing documents • Email notifications when shared documents are forwarded Basic Mobile Device Management via MDM for O365 • Device Settings Management • Selective Wipe • Built into O365 Mgmt. Console MDM for O365+ • PC Management • Mobile App Management (prevent cut/copy/past/save as from corporate apps to personal apps) • Secure content viewers • Certificate Provisioning • System Center integration Basic Identity Mgmt. via Azure AD for O365: • Single Sign on for O365 • Basic Multifactor Authentication (MFA) for O365 Azure AD for O365+ • Single Sign on for all cloud apps • Advanced MFA for all workloads • Self Service group management and password reset with write back to on prem directory • Advanced security reports • MIM (Server + CAL) GA Dec 2014 Hybrid identity management
- 22. Protect application access Help secure data everywhere Flexible device & app management EMS for Windows 10 customers
- 23. Windows 10 Enterprise Mobility Suite Mobile device and app management Information protection • Single sign-on for business cloud apps • Device set up and registration for Windows devices • Windows Store for Business • Traditional domain join manageability • Manageability via MDM and MAM • Encryption for data at rest and generated on device • Encryption for data included in roaming settings • Conditional access policies for enhanced single sign on security • MDM auto enrollment • Self-service group and application management • Password reset with write-back to on-premises directory • Cloud based advanced security reports • Microsoft Identity Manager • Mobile device management • Mobile app management • Secure content viewer • Certificate, WiFi, VPN, email profile provisioning • Agent-based management of Windows devices (domain joined via ConfigMgr and internet-based via Intune) • Tracking and notifications for shared documents • Protection for content stored in Office & Office 365 • Protection for on-premises Windows Server file shares • Behavioral analytics for advanced threat detection • Detection for known malicious attacks and security issues Identity and access management
- 24. Enterprise grade mobile solutions to drive business results OFFICE 365 ENTERPRISE MOBILITY SUITE WINDOWS+ +
- 27. The perimeter cannot help protect data stored in the cloudAccess control to corporate data today Mobile devices PCs Web browsers AppsData
- 28. Enterprise Mobility Suite Access control and data protection integrated natively in the apps, devices, and the cloud SharePoint Online Exchange Online
- 29. Containers Depends on specific DMZ infrastructure Works on- premises only SharePoint Server Exchange Server Corporate network Active Directory Firewall Firewall DMZ/ Perimeter network SDK/wrapper, managed browser, managed viewers Custom SDK/wrapper enables line-of-business apps to be managed Mobile application management Custom data container provides mobile productivity apps integrated with content and access systems Custom email app Custom file app Custom collab app Native device MDM Standard MDM provides device configuration and management
- 30. Standard on-premises integration SharePoint Online Exchange Online Cloud integration Intune App SDK Intune App Wrapping Tool Extensibility based on Azure AD and Intune Enable business apps to interoperate with Office mobile apps SharePoint Server Exchange Server Corporate network Active Directory Firewall Firewall DMZ/ Perimeter network Managed Office productivity and moreOffice 365: Mobile productivity Azure AD: Access control to Office 365 and SaaS apps Intune: App restrictions for Office mobile and LOB apps Azure Rights Management: Information protection at the file layer Native device MDMIntune: Cross-platform MDM
- 31. ITUser Protect corporate data accessed from devices On-premises Protect corporate data stored on devices
- 32. Conditional access policies IP Range Device State Advanced Windows 10 options User Group User On-premises Cloud Corporate apps
- 33. Azure Active Directory Offering Comparison
- 34. Azure MFA Offering Comparison MFA for O365/Azure Administrators Windows Azure Multi-Factor Authentication / EMS
- 35. Azure RMS Offering Comparison RMS for O365 Azure RMS (EMS)
- 36. Category Feature Exchange ActiveSync MDM for Office 365 Microsoft Intune (cloud only) Intune + ConfigMgr (hybrid) Device configuration Inventory mobile devices that access corporate applications ● ● ● ● Remote factory reset (full device wipe) ● ● ● ● Mobile device configuration settings (PIN length, PIN required, lock time, etc.) ● ● ● ● Self-service password reset (Office 365 cloud only users) ● ● ● ● Office365 Provides reporting on devices that do not meet IT policy ● ● ● Group-based policies and reporting (ability to use groups for targeted device configuration) ● ● ● Root and jailbreak detection ● ● ● Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) ● ● ● Prevent access to corporate email and documents based upon device enrollment and compliance policies ● ● ● Premium mobiledevice& appmanagement Self-service Company Portal for users to enroll their own devices and install corporate apps ● ● App deployment (Windows Phone, iOS, Android) ● ● Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles ● ● Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) ● ● Secure content viewing via Managed Browser, PDF Viewer, Image Viewer, and AV Player apps for Intune ● ● Remote device lock via self-service Company Portal and via admin console ● ● PC management Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) ● ● PC software management ● ● Comprehensive PC management (e.g. Group Policy, login scripts, BitLocker management, virtual desktop and power management, custom reporting, etc.) ● Windows Server/Linux/UNIX/Mac OS X support ● OS deployment and imaging ● Compare Microsoft Intune to MDM for Office 365
- 37. Existing Differentiated Features in Win7 /Win8.1 Domain Join and Group Policy Management Existing Win7 / Win 8.1 Enterprise features Windows 10: Management and Deployment Side-loading of LOB apps MDM auto enrollment Azure AD Join The Business Store Private Catalog Granular UX Control and Lockdown Windows 10: Security Microsoft Passport Enterprise Data Protection (EDP) Pass the Hash Mitigations (using Virtual Secure Mode) Device Guard Windows 10: Windows as a Service, Support, and Entitlements Windows Update for Business and Current Branch for Business Access to Long Term Servicing Branch Home Pro Enterprise EMS Management with Intune or ConfigMgr Intune MDM auto enrollment requires Azure AD Premium. Management and app delivery via Intune Advanced management via Intune Company Portal Management with Intune or ConfigMgr Extend EDP w/ Azure Rights Management for data encryption when files leave the device Management with Intune or ConfigMgr EMS and Windows 10 EMS EMS EMS