CoLabora Unified Communication (UC) User Group Meeting - June 2015. Topic About: Protecting Company data using Enterprise Mobility Suite (EMS) Speaker: Ronni Pedersen (MVP - www.ronnipedersen.com)

1. CoLabora User Group Meeting, June 2015
Protecting Company Data using the
Enterprise Mobility Suite

2. Key Takeways
© EG A/S 2
 Why is mobile management important?
 What is EMS and why do you need it?
 How do we get started with EMS?

3. About me…
© EG A/S 3
Ronni Pedersen
Senior Infrastructure Architect, EG A/S
Microsoft MVP: Enterprise Client Management
Founder: System Center User Group Denmark
Microsoft Certified Trainer
Microsoft TechNet Moderator
Contact Me
Twitter: https://twitter.com/ronnipedersen
Blog: http://www.ronnipedersen.com/
Mail: Ronni.Pedersen@eg.dk
Phone: +45 7260 2452

4. Enterprise Mobility Suite

5. • SCCM is undisputed winner
of PC Mgmt w/ >70% share
• You need to look into a MDM
solution today
• I believe Microsoft is the
long-term winner
Growth is all in Mobile Devices
349 315 296 294 293 292
725
1,010 1,131
1,283
1,434
1,579
162
231
270
308
340
368
0
500
1,000
1,500
2,000
2,500
1 2 3 4 5 6
Series3 Series2
Series1
Devices Shipments (MM)
Source: IDC

6. Licensing
Microsoft Intune (Standalone)
Enterprise Mobility Suite
Microsoft Intune
Azure Active Directory Premium
Azure Rights Management
Enterprise Cloud Suite
Enterprise Mobility Suite
Office 365 Enterprise E3
Windows Software Assurance (Per User)
http://www.microsoft.com/licensing/about-
licensing/briefs/enterprise-cloud-suite.aspx
© EG A/S 6

7. Enterprise Mobility Suite
Microsoft Intune
Mobile and Device Management
Azure Active Directory Premium
Hybrid Identity Management
Azure Rights Management
Information Protection
© EG A/S 7

8. Getting Started with Intune
Setting up the environment

9. Process Overview
Prepare
• Create Accounts for cloud services
• Create Subscriptions
Deploy
• Add Public DNS
• Configure AD Users with Public Domain UPNs
• Deploy and Configure Azure AD Sync
Configure
• Configure Configuration Manager for Mobile Device Management
• Configure Device Enrolment
© EG A/S 9

10. Create accounts for the cloud
Start by creating dedicated admin accounts:
Microsoft account: https://signup.live.com/
Apple ID: https://appleid.apple.com/account
Google account: https://accounts.google.com/Signup
© EG A/S 10

11. Create the trial subscriptions
Microsoft Office 365:
http://aka.ms/ITcampO365Trial
Microsoft Intune:
http://aka.ms/tryintune
Microsoft Azure Active Directory (AD) Premium:
http://azure.microsoft.com/en-us/pricing/free-trial
Azure Rights Management:
https://manage.windowsazure.com
© EG A/S 11

12. Single management console for IT admins
© EG A/S 12

13. DEMO
Configuring Microsoft Intune

14. Device Enrolment

15. ITUser

16. Devices
enrolled
Apply policies
Company Portal
Recommended apps for user’s devices
ITUser

17. Mobile Device – Personal vs Corporate
App Management
 By default, user-enrolled devices are “Personal”
 Complete inventory of all Apps on the device only when set to Corporate
 Only the admin can specify corporate-owned devices !
Personal
vs.
Corporate Owned
Devices

18. DEMO
Device Enrollment and Inventory

19. Conditional Access

20. Conditional access for Office 365
7
5
4
2
1
3
6

21. Intuitive end-user experience
To access your Contoso e-mail and
other company resources, this device
needs to be enrolled with Contoso. Part
of this process includes installing the
Company Portal. Click first link below to
begin this process.
Step 1
Enroll your device.
Step 2
Once you’ve enrolled your device, click
here to Activate your enrollment.

22. DEMO
Conditional Access

23. Mobile Application Management

24. Mobile Application Management
© EG A/S 24
Personal apps

25. Mobile Application Management
© EG A/S 25

26. DEMO
Mobile Application Management

27. Questions
© EG A/S 27

28. © EG A/S 28