Windows 10 og Intune #EVRYWhatsNext

1. Windows 10 og Intune
#WhatsNext – Forsommerens kuleste roadshow på 9 lokasjoner
02.06.2015 Brummundal
Jan Ketil Skanke http://jankesblog.com
Twitter @janke75

2. 2
Hva er Microsoft Intune

3. Windows 8.1 Windows 10
Enkle
sikkerhetsinstillinger
Nedlåsing av enheten
Full administrasjon
Phone PC Phone PC
Store investeringer i ny funksjonalitet for både
mobil og PC
Mobil Administrasjon (MDM)
#EVRYWhatsNext

4. • Provisioning
• Bulk enrollment
• Simple bootstrap
• Converged protocol
• Azure AD Integration
• Extended set of policies
Client certificate management
• Enterprise Wi-Fi
• VPN management
• Email provisioning
• MDM Push
• Device Update control
• Kiosk, Start screen, Start menu
configuration and control
• Curated Windows Store
• Business Store Portal (BSP) app
deployment; license reclaim
• Enterprise App management
• Simplified LOB app management
• Win32 (MSI) app management
• App inventory (LOB/store apps)
• App allow/deny lists via Applocker
• Enterprise data protection
• Full device wipe
• Remote Lock, PIN reset, Ring,
& Find
• Enhanced inventory for compliance
decisions
• Unenrollment with alerts
• Removal of Enterprise
configuration (apps, certs, profiles,
policies) and Enterprise encrypted
data (with EDP)
• Additional device inventory
• Provisioning
• Bulk enrollment
• Simple bootstrap
• Converged protocol
• Azure AD Integration
• Extended set of policies
Client certificate management
• Enterprise Wi-Fi
• VPN management
• Email provisioning
• MDM Push
• Device Update control
• Kiosk, Start screen, Start menu
configuration and control
• Curated Windows Store
• Business Store Portal (BSP) app
deployment; license reclaim
• Enterprise App management
• Simplified LOB app management
• Win32 (MSI) app management
• App inventory (LOB/store apps)
• App allow/deny lists via Applocker
• Enterprise data protection
• Full device wipe
• Remote Lock, PIN reset, Ring,
& Find
• Enhanced inventory for compliance
decisions
• Unenrollment with alerts
• Removal of Enterprise
configuration (apps, certs, profiles,
policies) and Enterprise encrypted
data (with EDP)
• Additional device inventory
Windows 10 og MDM
#EVRYWhatsNext

5. Auto MDM registrering med Azure AD
AAD join: Bedriftseid eller BYOD
Add AAD account: Personlig enhet
Bulk registrering av IT
Bruk provisjoneringspakker på “Vanilla” PC
Windows 10 gir deg flere valg for innrullering
Password
Sign in to your work or school account
Sign inCancelPrivacy statement
Forgot your password?
If your organization uses Office 365 or other business services
from Microsoft, use the same user name and password to sign in
here.
Sign in
What account should I use?
|someone@example.com
Work or school account
Allow this PC to be managed ?
AcceptCancel
Contoso requires this PC to be managed before it can access org
resources.
What you get on this PC:
• Email, Calendar, Contacts
• OneDrive for Business
• Access to company apps
How this PC is controlled by Contoso:
• Enforce PIN lock
• Partial device wipe
• Enforce password policy
• Monitor device location
Questions? Contact Contoso IT Help Desk at (206) 555-1234.
StartStart
#EVRYWhatsNext

6. Du har flere policies for bedre kontroll
Kamera policies
Bluetooth
Synkronisering instillinger
Roaming
Exchange Active Sync policies
Konfigurering av epost-profiler
Microsoft “Passport”
PIN policies
Firewall & Defender
Blokker internettdeling via Wifi
Auto connect VPN
Cortana
Tema bakgrunn & farge
Dette er bare noen eksempler, det kommer over 100 nye policies
#EVRYWhatsNext

7. Auto connect VPN
VPN trafikk filter
Applikasjonsbaserte filter
En plattform
VPN: åpen for 3-parts plug-ins
Bedre VPN administrasjon
#EVRYWhatsNext

8. MDM evaluates compliance
Device health attestation
Windows health attestation service
Trenger du tilgang? Bevis at du er “frisk”!
Important resources
Documents
Email
1
2
Access please
You’re in
Important resources
Documents
Email2
1
5
3
4
Here is my proof
Prove to me you are healthy
Access please
MDM & Windows
Attestation Service
#EVRYWhatsNext

9. Administrere oppdateringer via MDM
 Kontroller når og hvordan
 Søk og nedlastning
 Godkjenning for auto install
 Velg din kilde
 Microsoft Update
 Bedriftens oppdatering server (WSUS)
Oppdateringsstatus
#EVRYWhatsNext

10. Bedriftens data holdes sikret og separert
“Enterprise data protection”
Brukervennlig separering av
jobbdata og personlig data
Administrer hva som er
“Enterprise”-data
Logg beviste datalekasjer
for business
personal
Business
Apps & Data
Managed
Personal Apps
& Data
Unmanaged
Data exchange is
blocked or audited
#EVRYWhatsNext

11. Enterprise Data Protection
#EVRYWhatsNext
1
Bruker registerer i Intune eller AADomain join
Intune provisjonerer policies og
krypteringsnøkler
User
2
PROVISJONERING:
NØKLER OG
POLICIES
Policies:
Enterprise allowed apps
Network policies
App restriction policy

12. Enterprise Data Protection
#EVRYWhatsNext
User
DATA SYNK
Data som kommer inn fra en
enterprise nettverkslokasjon
er kryptert på enheten.
Eksempler: OneDrive For
Business, Corp Exchange
mail, filer, etc.

13. Enterprise Data Protection
#EVRYWhatsNext
User
DATA
SEGMENTATION
Brukere kan lagre til enterprise mapper og
dette vil da automatisk krypteres.
Brukere får opp et valg om å lagre som
privat- eller bedriftsdata.
IT administrator kan konfigurere hvilke
apps som alltid vil beskytte data.

14. Skaffe “store apps” via Business Store
Bulk kjøpt av apper
Gratis og Prislagte apper
Fleksible distribusjonmodeller
Azure AD for store
Windows app license mgmt.
#EVRYWhatsNext

15. Smartere fjerning av innhold
Sertifikater, VPN, Wifi, Epost profiler, policies
Applikasjoner & App data
“Enterprise data protection” data
Enten admin eller bruker kan slette
Server varslet om bruker sletter tilkobling
Admin kontrollerer om bruker kan slette seg
Konsistent opplevelse
Fjern bedriftens data på en enkel måte
#EVRYWhatsNext

16. • Provisioning
• Bulk enrollment
• Simple bootstrap
• Converged protocol
• Azure AD Integration
• Extended set of policies
Client certificate management
• Enterprise Wi-Fi
• VPN management
• Email provisioning
• MDM Push
• Device Update control
• Kiosk, Start screen, Start menu
configuration and control
• Curated Windows Store
• Business Store Portal (BSP) app
deployment; license reclaim
• Enterprise App management
• Simplified LOB app management
• Win32 (MSI) app management
• App inventory (LOB/store apps)
• App allow/deny lists via Applocker
• Enterprise data protection
• Full device wipe
• Remote Lock, PIN reset, Ring,
& Find
• Enhanced inventory for compliance
decisions
• Unenrollment with alerts
• Removal of Enterprise
configuration (apps, certs, profiles,
policies) and Enterprise encrypted
data (with EDP)
• Additional device inventory
• Provisioning
• Bulk enrollment
• Simple bootstrap
• Converged protocol
• Azure AD Integration
• Extended set of policies
Client certificate management
• Enterprise Wi-Fi
• VPN management
• Email provisioning
• MDM Push
• Device Update control
• Kiosk, Start screen, Start menu
configuration and control
• Curated Windows Store
• Business Store Portal (BSP) app
deployment; license reclaim
• Enterprise App management
• Simplified LOB app management
• Win32 (MSI) app management
• App inventory (LOB/store apps)
• App allow/deny lists via Applocker
• Enterprise data protection
• Full device wipe
• Remote Lock, PIN reset, Ring,
& Find
• Enhanced inventory for compliance
decisions
• Unenrollment with alerts
• Removal of Enterprise
configuration (apps, certs, profiles,
policies) and Enterprise encrypted
data (with EDP)
• Additional device inventory
Windows 10 og MDM
#EVRYWhatsNext

17. Jan Ketil Skanke http://jankesblog.com
Twitter @janke75