This document provides an overview of Microsoft solutions that enable a people-centric IT model and the consumerization of IT. It discusses how Microsoft solutions can empower users by simplifying BYOD enrollment, enabling consistent access across devices, and supporting modern work styles with VDI. It also describes how Microsoft solutions can unify the management of on-premises and cloud-based devices and simplify application and settings management across platforms. Finally, it covers how Microsoft solutions help protect corporate data through selective wiping of devices, policy-based access control, and multifactor authentication.
Security and Governance Strategies for the Consumerization of ITMicrosoft
Consumerization of IT introduces the notion of unmanaged devices, also referred to as untrusted platforms. When planning for the consumerization of IT, enterprises must develop strategies to mitigate risks and protect sensitive assets, and develop policies for information protection, data management, platform security, and other related areas. This white paper discusses security and governance strategies that help mitigate risk.
This white paper is one part of the “Microsoft Recommendations for a Consumerization of IT Strategy” series. This series introduces the phenomenon known as the consumerization of IT, including strategies for supporting the proliferation of devices in the workplace, and supporting work tasks on personal devices at diverse locations.
CARE –AN ARCHITECTURAL APPROACH FOR A MULTIMEDIA ASSISTANCE SYSTEM FOR SINGLE...IJITCA Journal
In contrast to the increasing degree of automation in the production industry, commissioning and maintenance activities will essentially be limited to manual activities. Production involves repetitive actions that are manageable and clearly defined as a process. Unlike this, commissioning and maintenance have to deal with uncontrollable, undefined, and non - standardized processes. The paper provides a
framework for a multimedia assistance system for singletons. It was found that the paradigm has to consist of five key components to provide tailored assistance to customers. These key components are Expertise, Infrastructure, Application & Platforms, Security & Privacy and Business Process & Business Model. The resulting stack and the overlaying business model are called "CaRE – Custom Assistance for Remote Employees". With possible Architectural Smells and Anti-Pattern in mind, a Microservice Architecture shall be presented which forms the backend-system of CaRE.
The explosive growth in the popularity of mobile devices and growth in their powerful features has led to a sharp rise in the usage of smartphones, tablets and mobile POS devices in the corporate world. Apart from the mobility advantage, these devices have become more efficient to offer better business growth and increased networking advantage to bring better employee productivity at the workplace. As the market for these devices continues to develop at an exponential rate, concerns about the safety of the sensitive corporate data present on mobile device, in transit or at rest also grow proportionately as the tracking the data, relying on its integrity becomes increasingly challenging. Further enforcing corporate governance, complying with local laws and trans-border regulations also pose a serious challenge in this case. Hence a technical method to secure, monitor, manage and supports mobile devices deployed across mobile operators, service providers and enterprises is need of the hour which has led to the development of Mobile Device Management(MDM).
ANALYSIS ON IDENTITY MANAGEMENT SYSTEMS WITH EXTENDED STATE-OF-THE-ART IDM TA...ijasuc
Every person has his/her own identity. It’s important to manage a digital identity in a computer network,
with high priority. In spite of different applications we use in organization, resources need to be managed
and allotted to the appropriate user with proper access rights. Identity management or IdM refers to how
humans are identified, authorized and managed across computer networks. It covers issues such as how
users are given an identity, the protection of that identity and the technologies supporting that protection.
This paper attempts to provide an analysis to various identity management systems based on the state-ofthe-art identity taxonomy factors.
MANAGE DEVICES AND APPS FROM THE CLOUD
With the proliferation of mobile devices in the workplace, employees can, and do, work from just about anywhere. To stay productive, this mobile workforce demands consistent access to corporate resources and data from any location on any device. This trend has introduced significant challenges for IT administrators who want to enable enterprise mobility while ensuring that corporate resources are protected from unauthorized access.
Leveraging Microsoft Intune, you can deliver application and device management completely from the cloud, or on-premises through integration with System Center 2012 Configuration Manager, all via a single management console.
Microsoft has also incorporated manageability and data protection directly into the Intune-managed Office mobile apps to help maximize productivity while providing the flexibility to extend these same management capabilities to your existing line-of-business apps through the Intune App Wrapping Tool.
Intune is included as part of Microsoft’s Enterprise Mobility Suite, the most cost-effective way to leverage Microsoft’s enterprise mobility cloud services for all of your employees.
Security and Governance Strategies for the Consumerization of ITMicrosoft
Consumerization of IT introduces the notion of unmanaged devices, also referred to as untrusted platforms. When planning for the consumerization of IT, enterprises must develop strategies to mitigate risks and protect sensitive assets, and develop policies for information protection, data management, platform security, and other related areas. This white paper discusses security and governance strategies that help mitigate risk.
This white paper is one part of the “Microsoft Recommendations for a Consumerization of IT Strategy” series. This series introduces the phenomenon known as the consumerization of IT, including strategies for supporting the proliferation of devices in the workplace, and supporting work tasks on personal devices at diverse locations.
CARE –AN ARCHITECTURAL APPROACH FOR A MULTIMEDIA ASSISTANCE SYSTEM FOR SINGLE...IJITCA Journal
In contrast to the increasing degree of automation in the production industry, commissioning and maintenance activities will essentially be limited to manual activities. Production involves repetitive actions that are manageable and clearly defined as a process. Unlike this, commissioning and maintenance have to deal with uncontrollable, undefined, and non - standardized processes. The paper provides a
framework for a multimedia assistance system for singletons. It was found that the paradigm has to consist of five key components to provide tailored assistance to customers. These key components are Expertise, Infrastructure, Application & Platforms, Security & Privacy and Business Process & Business Model. The resulting stack and the overlaying business model are called "CaRE – Custom Assistance for Remote Employees". With possible Architectural Smells and Anti-Pattern in mind, a Microservice Architecture shall be presented which forms the backend-system of CaRE.
The explosive growth in the popularity of mobile devices and growth in their powerful features has led to a sharp rise in the usage of smartphones, tablets and mobile POS devices in the corporate world. Apart from the mobility advantage, these devices have become more efficient to offer better business growth and increased networking advantage to bring better employee productivity at the workplace. As the market for these devices continues to develop at an exponential rate, concerns about the safety of the sensitive corporate data present on mobile device, in transit or at rest also grow proportionately as the tracking the data, relying on its integrity becomes increasingly challenging. Further enforcing corporate governance, complying with local laws and trans-border regulations also pose a serious challenge in this case. Hence a technical method to secure, monitor, manage and supports mobile devices deployed across mobile operators, service providers and enterprises is need of the hour which has led to the development of Mobile Device Management(MDM).
ANALYSIS ON IDENTITY MANAGEMENT SYSTEMS WITH EXTENDED STATE-OF-THE-ART IDM TA...ijasuc
Every person has his/her own identity. It’s important to manage a digital identity in a computer network,
with high priority. In spite of different applications we use in organization, resources need to be managed
and allotted to the appropriate user with proper access rights. Identity management or IdM refers to how
humans are identified, authorized and managed across computer networks. It covers issues such as how
users are given an identity, the protection of that identity and the technologies supporting that protection.
This paper attempts to provide an analysis to various identity management systems based on the state-ofthe-art identity taxonomy factors.
MANAGE DEVICES AND APPS FROM THE CLOUD
With the proliferation of mobile devices in the workplace, employees can, and do, work from just about anywhere. To stay productive, this mobile workforce demands consistent access to corporate resources and data from any location on any device. This trend has introduced significant challenges for IT administrators who want to enable enterprise mobility while ensuring that corporate resources are protected from unauthorized access.
Leveraging Microsoft Intune, you can deliver application and device management completely from the cloud, or on-premises through integration with System Center 2012 Configuration Manager, all via a single management console.
Microsoft has also incorporated manageability and data protection directly into the Intune-managed Office mobile apps to help maximize productivity while providing the flexibility to extend these same management capabilities to your existing line-of-business apps through the Intune App Wrapping Tool.
Intune is included as part of Microsoft’s Enterprise Mobility Suite, the most cost-effective way to leverage Microsoft’s enterprise mobility cloud services for all of your employees.
Mobile Device Management and Mobile Security Strategy - a presentation by Rap...RapidValue
This paper explains the MDM strategies and what you have to do to ensure mobile security such as
1. Defining IT policies
2. Asset and Inventory management
3. Configuration management
4. Remote wipe and data encryption
5. VPN
6. Password policies
7. Tunnel gateway
8. Jail break detection
9. Malware protection
Analysis of Payment Card Industry Data Security Standard [PCI DSS] Compliance...IJERA Editor
The Payment Card Industry Data Security Standard (PCI DSS) aims to enhance the security of cardholder data and is required when cardholder data or authentication data are stored, processed or transmitted. The implementation of enabling processes from COBIT 5 can complement compliance to PCI DSS. COBIT 5 assists enterprises in governance and management of enterprise IT and, at the same time, supports the need to meet security requirements with supporting processes and management activities. This paper provides analysis of mapping of COBIT 5 supporting processes to PCI DSS 3.0 security requirements. It also presents domains which support the simultaneous application of COBIT 5 and PCI DSS 3.0 which would help create collaborations within the enterprise
Internet of things is one of the catch words now a day.
It promises a great future for the internet. Today common types
of communications are person to person, machine to person, or
person to machine. But Internet of things brings a new
technology where a type of communication is machine to
machine. Many technology and protocols have been studied for
this new communication. One of the new and emerging
technologies is VMware Pulse IoT center which provides IoT
device management in a pretty manner. It serves as management
glue between hardware. This paper will take a look on features,
benefits and working of VMware pulse IoT center including
summary of IoT solutions by VMware pulse IoT center.
Preparing for Mobile Device Management & Bring your Own DeviceWaterstons Ltd
Smart phones and tablets are invading the business environment at top speed, with “bring your own device” (BYOD) providing a number of benefits for organisations across all sectors. With the right implementation, and ongoing secure support, performance through technology can be achieved in areas such as employee satisfaction, cost reduction, team work and collaboration and productivity.
Charlie Hales and Nigel Robson cover the important considerations a business should make before implementing an MDM/BYOD strategy, and will consider the ongoing implications of allowing corporate data to be accessed on personal devices ensuring the maximum benefit to businesses, customers and the end users.
Mobile Device Management: Securing your Mobile Environment.[x]cube LABS
Whitepaper on Mobile Device Management that discusses the role of MDM in enterprise mobility and how it can be an effective way to secure your mobile environment.
Mobile device management (MDM) is one of the most essential and widely-used technologies in 2021 – but that doesn’t mean everyone understands it. People may use the term mobile device management meaning something else, or not understand what they need for their ideal mobile device management system. While it is easy to find mobile device management solutions, it can be hard to choose which mobile device management free trials to try.
You’ll find the answers to many common questions here, as well as clear steps for implementing mobile device management in your business.
This paper discusses the adoption of cloud computing by many businesses and organizations. Cloud
adoption has many benefits such as reduced IT costs, and accelerated adoption of new services. However, this
accelerated adoption present challenges to effective Identity Management. Many existing Identity Management
problems exist in cloud computing, but are further complicated. Now IT professionals must think outside the
realm of the internal IT infrastructure to integrate cloud services into the organization. User
provisioning/deprovisioning, credential management, auditing/access monitoring, and federal regulation
compliance must be considered across the boundaries of the internal organization’s network. Traditional
Identity Management systems can be leveraged to solve these issues. Most cloud service providers have means
to integrate on-premise Identity Management systems and identity records into their services. This requires
bridiging and/or proxy systems for on-premise resources to interact with cloud services. Vendors such as
Microsoft andCelestix provide such systems that bridge between on-premise and the cloud. New solutions are
also being developed and adopted with a “cloud first” approach in the form of Identity as a Service (IDaaS).
This is an evolving new approach that has potential to also revolutionize how Identity Management is conducted
in organizations. Any solutions adopted to meet cloud Identity Management challenges must still comply with
organizational and federal regulation requirements.
Enterprise Mobile Device Management (MDM)SPEC INDIA
SPEC INDIA’s Mobile Device Management a feature rich solution for Enterprise MDM needs. With many features and functionalities it is so helpful in many industries. Here we introduce you to some of the top features of our Enterprise Mobile Device Management Software. Get a Free POC of our MDM visit: http://www.spec-india.com/business-solutions/mobile-device-management.html
Information Systems and Knowledge ManagementMeenakshi Paul
Information Systems and Knowledge
Management, Information, data and Intelligence, The Characteristics of Valuable Information, Relevance, Quality, Timeliness, Completeness, Knowledge Management, Global Information Systems, Decision Support Systems, Databases and Data Warehousing, Input Management, Computerized Data Archives Networks and Electronic Data Interchange, The Internet and Research
Cost Estimating with BIM requires web collaboration - simple business processes that are possible with today's technology tools. Collaboration is the first step in cost estimating.
Zeeland Content Strategy breakfast. What is the future of content? How social objects can help you to create a natural, flowing and less rigid content strategy.
The Emergence of Intelligent Content (Revised)Joe Gollner
White paper tracing the recent history of content technologies and their convergence in what can be called "the age of intelligent content".
Revised in September 2010.
Mobile Device Management and Mobile Security Strategy - a presentation by Rap...RapidValue
This paper explains the MDM strategies and what you have to do to ensure mobile security such as
1. Defining IT policies
2. Asset and Inventory management
3. Configuration management
4. Remote wipe and data encryption
5. VPN
6. Password policies
7. Tunnel gateway
8. Jail break detection
9. Malware protection
Analysis of Payment Card Industry Data Security Standard [PCI DSS] Compliance...IJERA Editor
The Payment Card Industry Data Security Standard (PCI DSS) aims to enhance the security of cardholder data and is required when cardholder data or authentication data are stored, processed or transmitted. The implementation of enabling processes from COBIT 5 can complement compliance to PCI DSS. COBIT 5 assists enterprises in governance and management of enterprise IT and, at the same time, supports the need to meet security requirements with supporting processes and management activities. This paper provides analysis of mapping of COBIT 5 supporting processes to PCI DSS 3.0 security requirements. It also presents domains which support the simultaneous application of COBIT 5 and PCI DSS 3.0 which would help create collaborations within the enterprise
Internet of things is one of the catch words now a day.
It promises a great future for the internet. Today common types
of communications are person to person, machine to person, or
person to machine. But Internet of things brings a new
technology where a type of communication is machine to
machine. Many technology and protocols have been studied for
this new communication. One of the new and emerging
technologies is VMware Pulse IoT center which provides IoT
device management in a pretty manner. It serves as management
glue between hardware. This paper will take a look on features,
benefits and working of VMware pulse IoT center including
summary of IoT solutions by VMware pulse IoT center.
Preparing for Mobile Device Management & Bring your Own DeviceWaterstons Ltd
Smart phones and tablets are invading the business environment at top speed, with “bring your own device” (BYOD) providing a number of benefits for organisations across all sectors. With the right implementation, and ongoing secure support, performance through technology can be achieved in areas such as employee satisfaction, cost reduction, team work and collaboration and productivity.
Charlie Hales and Nigel Robson cover the important considerations a business should make before implementing an MDM/BYOD strategy, and will consider the ongoing implications of allowing corporate data to be accessed on personal devices ensuring the maximum benefit to businesses, customers and the end users.
Mobile Device Management: Securing your Mobile Environment.[x]cube LABS
Whitepaper on Mobile Device Management that discusses the role of MDM in enterprise mobility and how it can be an effective way to secure your mobile environment.
Mobile device management (MDM) is one of the most essential and widely-used technologies in 2021 – but that doesn’t mean everyone understands it. People may use the term mobile device management meaning something else, or not understand what they need for their ideal mobile device management system. While it is easy to find mobile device management solutions, it can be hard to choose which mobile device management free trials to try.
You’ll find the answers to many common questions here, as well as clear steps for implementing mobile device management in your business.
This paper discusses the adoption of cloud computing by many businesses and organizations. Cloud
adoption has many benefits such as reduced IT costs, and accelerated adoption of new services. However, this
accelerated adoption present challenges to effective Identity Management. Many existing Identity Management
problems exist in cloud computing, but are further complicated. Now IT professionals must think outside the
realm of the internal IT infrastructure to integrate cloud services into the organization. User
provisioning/deprovisioning, credential management, auditing/access monitoring, and federal regulation
compliance must be considered across the boundaries of the internal organization’s network. Traditional
Identity Management systems can be leveraged to solve these issues. Most cloud service providers have means
to integrate on-premise Identity Management systems and identity records into their services. This requires
bridiging and/or proxy systems for on-premise resources to interact with cloud services. Vendors such as
Microsoft andCelestix provide such systems that bridge between on-premise and the cloud. New solutions are
also being developed and adopted with a “cloud first” approach in the form of Identity as a Service (IDaaS).
This is an evolving new approach that has potential to also revolutionize how Identity Management is conducted
in organizations. Any solutions adopted to meet cloud Identity Management challenges must still comply with
organizational and federal regulation requirements.
Enterprise Mobile Device Management (MDM)SPEC INDIA
SPEC INDIA’s Mobile Device Management a feature rich solution for Enterprise MDM needs. With many features and functionalities it is so helpful in many industries. Here we introduce you to some of the top features of our Enterprise Mobile Device Management Software. Get a Free POC of our MDM visit: http://www.spec-india.com/business-solutions/mobile-device-management.html
Information Systems and Knowledge ManagementMeenakshi Paul
Information Systems and Knowledge
Management, Information, data and Intelligence, The Characteristics of Valuable Information, Relevance, Quality, Timeliness, Completeness, Knowledge Management, Global Information Systems, Decision Support Systems, Databases and Data Warehousing, Input Management, Computerized Data Archives Networks and Electronic Data Interchange, The Internet and Research
Cost Estimating with BIM requires web collaboration - simple business processes that are possible with today's technology tools. Collaboration is the first step in cost estimating.
Zeeland Content Strategy breakfast. What is the future of content? How social objects can help you to create a natural, flowing and less rigid content strategy.
The Emergence of Intelligent Content (Revised)Joe Gollner
White paper tracing the recent history of content technologies and their convergence in what can be called "the age of intelligent content".
Revised in September 2010.
Content Fusion; or, There a Piece of Data Lodged in my DocumentJoe Gollner
This presentation attempts to introduce the concept of Intelligent Content. Appropriately, it was delivered as a featured presentation at Intelligent Content 2009. It traces the history of open markup technologies and argues that this history underlies many of the innovations now occuring online and many that are only becoming visible on the horizon.
This is a 25 minute session on the business value of social software. The recording is from a session given in Eindhoven, Netherlands on 30 March 2011.
This presentation is divided into the following sections:
- A brief history of collaboration and sharing
- An introduction into "2.0" and consumer tools reaching into the business world
- Attention. Collaboration. Discovery.
- A quick demo of Socialtext Dashboard, Workspaces, and People
- Best practices for successful implementation and adoption of social software
- Things to look for in choosing a vendor
People-Centric vs. Content-Centric: The Copernican Revolution to be a Social ...Louis Richardson
We're all heavily invested in managing our content, but we still have significant business problems we can't address. Consider a new perspective...a people centric one.
Knowledge worker spend 30% of their time looking for data. And only knowledge allows us to achieve Innovation and Productivity.
Enteprise 2.0 offers the context and collaborative tools to address these issues. Improving productivity and encouraging collaboration, Enterprise Social Software is the key communication solution for globally distributed enteprises on highly competitive markets.
Tracxn Research: Enterprise Collaboration Landscape, August 2016Tracxn
File synchronisation and sharing (Box, Dropbox), conferencing (BlueJeans Network, Fuze), and messaging and chat room (Slack, Symphony) are the top three business models, each having seen over a billion dollars in investments.
Enterprise 2.0 - Efficient Collaboration and Knowledge ExchangeAcando Consulting
How to enable dispersed teams to coordinate their actions to achieve their goals and how to enable an organization to harness its collective intelligence - with the use of social software and principles of social media.
From NDC Oslo 2015 - Workshop with Denise Jacobs, Doc Norton, and Carl Smith
Even high functioning teams occasionally have a hard time making decisions or coming up with creative ideas. There are times when the conversation seems to drag on long after a decision is reached. There are times when we have too many people involved in the discussion or the wrong people involved. There are times when we're not sure whose the actual decision maker. And there are those times when we just seem to be out of synch with each other. This creative collaboration workshop provides tools that help resolve all of these issues. Come have some laughs with Denise, Doc, and Carl, play with new friends, and learn one or two new techniques you can try at home.
Organisational productivity is about assessing and improving the efficiency and effectiveness of public and private sector organisations. Four productivity models are explained and linked to a wide range of productivity improvement methodologies.
Co-creation is a hot topic these days. Involving customers in the decision flow of a brand/company is one of the cool, new ways of doing marketing. In our research we found that some companies go a few steps further. Some succeed in intergrating the voice of the customer in ALL their decision flows. This paper describes the different steps to evolve from a one time co-creation project to structural collaboration.
The growing needs of today’s workforce demand that IT become more agile in how it provides access to desktop and device resources such as applications and corporate data. As a result, IT organizations struggle to provide the computing flexibility required by the modern workforce while balancing organizational requirements of compliance, security and reliability. System Center desktop solutions enable IT to empower users by streamlining the connection of any authorized user to the applications or resources they need—regardless of their location or connectivity. System Center achieves this by managing the delivery of traditional, virtual application, mobile, streamed and virtual desktop infrastructure, providing both secure access and the consistent, optimized performance that today’s users expect.
How to Build a Consumerization of IT StrategyMicrosoft
As technology becomes more central in people’s personal lives, consumer technologies have been steadily entering into the workplace and increasingly blurring the lines between home and work. This trend, known as the consumerization of IT, has the potential to play a significant role in improving business productivity and agility for enterprises.
The consumerization of IT helps organizations realize increased productivity and enhance workforce capabilities, while maximizing IT investments.
This white paper presents: • An introduction to the consumerization of IT. This description discusses general industry drivers and the Microsoft perspective about mobile workforces and the consumerization of IT.
• The value proposition of adopting a consumerization of IT strategy. Benefits include increased employee productivity and satisfaction.
• Enterprise device options. This section highlights the trade-offs between agility and control (business-centric versus IT-focused decisions).
This white paper is one part of the “Microsoft Recommendations for a Consumerization of IT Strategy” series. This series introduces the phenomenon known as the consumerization of IT, including strategies for supporting the proliferation of devices in the workplace and supporting work tasks on personal devices at diverse locations.
Microsoft Solves BYOD Using Microsoft System Center Configuration Manager and...Microsoft
Microsoft IT enables employees to bring their own devices to work. IT distributes personal hardware budgets to internal departments. We have worked hard to make IT-standard devices be compelling and easy to acquire, but teams can buy what they want. We have clear practices related to support based on the device.
We expanded our device support with the growth of tablets and smart phones. We believe internal users should opt into being managed by IT, where they give up some control in order to get more access to corporate resources. For example, if the device doesn't have TPM-enforced bit locker and multi-factor authentication, the user can't get to sensitive data. We recommend Windows-based devices over others due to usability and security, and we provide guidance to employees with personal devices. That said, we have more than 10,000 iOS and Android devices on our network, and many more Macs (Microsoft has software for the Macintosh and a dedicated business group). Read this IT technical case study on unified device management for more details.
10 Reasons to Strengthen Security with App & Desktop VirtualizationCitrix
Explore 10 reasons why app and desktop virtualization should be the foundation for your layered approach to information security. It will enable organizations to pursue priorities such as mobility, flexwork and consumerization while effectively managing risk.
This paper analyzes the challenges involved with BYOD, the ways to leverage the benefits and also brings out the best practices in order to effectively utilize the BYOD trend.
Integrating Enterprise Mobility - an Assessment WHITE PAPERMobiloitte
We offer complete satisfaction to our customers by following standardized SDLC processes, hiring the best of breed developers and mastering most of our requirements gathering, wireframing, designing, developing, testing, delivering, deploying and maintenance tasks.
Ours is an off-shore model, but we ensure that both customer and Mobiloitte are always in touch by keeping communications open, providing regular updates and iterative releases so that the customer is always well informed.
Research shows that the bring your own device (BYOD) movement has reached a critical point: a range of studies show that more than half of companies surveyed allow employees use personally owned devices to access the corporate network. With VMware as your partner for managing device diversity, you can create a flexible yet secure BYOD environment that increases efficiency, lowers operating costs and drives productivity.
Manage and deploy apps to devices to make sure users have access to the tools they need for their jobs. In contrast to Intune, which delivers unified endpoint management and device security across numerous platforms, Microsoft Defender for Identity concentrates on sophisticated threat detection and protection within on-premises Active Directory systems.
Visit: https://techsolworld.com/
How the Consumerization of IT Affects Your BusinessMicrosoft
This white paper presents the reference model and taxonomy for the consumerization of IT, supported by business scenarios and strategies for supporting consumerization of IT initiatives.
This white paper is one part of the “Microsoft Recommendations for a Consumerization of IT Strategy” series. This series introduces the phenomenon known as the consumerization of IT, including strategies for supporting the proliferation of devices in the workplace and supporting work tasks on personal devices at diverse locations.
Be prepared to face any business challenge with a highly secured remote workforce that comes with Intune deployment and Microsoft PKI integration. Also, stay ahead of the curve by transitioning towards a passwordless future, maximizing security while eliminating the need for passwords.
Utilizing Microsoft 365 Security for Remote Work Perficient, Inc.
With an increasingly mobile workforce, and the spread of shadow IT, the rapid rise of cybercrime - companies must find unique ways to effectively manage their sprawling SaaS portfolio.
Similar to Enabling People Centric Processes - a Microsoft IT Preview Guide (20)
Microsoft Teams Phone
Stay connected with voice and video calling using Microsoft Teams Phone on your computer, tablet, mobile device, or desk phone.
Stay connected with a modern calling solution
Make and receive voice and video calls directly in Microsoft Teams. Stay in touch and get more done anywhere.
Calling in the flow of work
Work smarter with an all-in-one app that brings together calling, chat, meetings, and collaboration.
Business-critical calling
Use built-in, innovative, and AI-powered calling experiences and integrated partner software solutions.
Devices for any calling scenario
Benefit from a wide portfolio of devices for any business need and get flexible financing options.
Simple set up and management
Easily add, monitor, and manage voice and video calling from the Teams admin center.
Microsoft Teams Phone with Calling Plan includes:
Cloud-based phone system with advanced features including call transfer, multilevel auto attendants, and call queues.
A domestic calling plan with 3,000 minutes2 per user, per month within the US and Canada.
Call from anywhere, on any device through the Microsoft Teams app on desktop, mobile, web, and desk phones.
Around-the-clock customer support seven days a week, backed by Microsoft.
Teams Phone with Calling Plan requires a Microsoft 365 subscription that includes Microsoft Teams
Microsoft Teams
Built for hybrid work
Feel seen and heard no matter where you are and do your best work, your way.
Empower people and teams in a hybrid work world
Flexible work is here to stay, and embracing it is critical to your future success. The latest tools from Microsoft empower hybrid work environments and enable flexible work beyond organizational boundaries.
Whats New in Microsoft Teams Hybrid Meetings November 2021David J Rosenthal
Microsoft Teams
Built for hybrid work
Feel seen and heard no matter where you are and do your best work, your way.
Empower people and teams in a hybrid work world
Flexible work is here to stay, and embracing it is critical to your future success. The latest tools from Microsoft empower hybrid work environments and enable flexible work beyond organizational boundaries.
Microsoft Viva Connections
A curated, company-branded experience that brings together relevant news, conversations, and resources in the apps and devices you use every day. Viva Connections is included in all Microsoft 365 plans with SharePoint Online.
Create connection
Encourage meaningful connections across the organization in a hybrid workplace.
Drive alignment
Rally the entire organization around your vision, mission, and strategic priorities.
Empower contribution
Foster a culture of inclusion by empowering every employee to contribute ideas and share feedback.
Built on Microsoft 365
Deploy and manage Viva Connections through your existing infrastructure.
Protect your hybrid workforce across the attack chainDavid J Rosenthal
Security is one of the most important considerations for SMBs. In fact, 77% of SMBs in a recent survey consider security a top feature when purchasing new PCs.1
Last year alone, 67% of SMBs experienced a security breach that cost, on average, 3.3% of their revenue.1 That’s a big risk to both profitability and reputation, and it shows how critical strong security protections are for businesses.
The good news is that 69% of SMBs in a recent survey agreed that new Windows 10 Pro devices offered better security and data protection than older devices.1
Research shows that modern devices help business owners by preventing identity attacks, minimizing phishing, and reducing the risk of malware attacks. These are all common ways that bad actors steal business data, steal personal information, or hold our devices hostage in exchange for huge amounts of ransom money.
And with modern PCs, most security functions can happen in the cloud, without interrupting worker productivity.
Connections is a company branded employee app in Teams. It is a gateway to your employee experience, with personalized news, communications, tasks, people and resources. It provides a single curated employee destination that can be configured for specific roles like frontline workers. So, leaders can communicate and engage their employees, and employees can get easy access to the tools and resources they need from one place.. Connections builds on existing capabilities in Microsoft 365 like SharePoint and Yammer. And it pulls your communications together into a pre-configured app in Teams, designed for both desktop and mobile workers. It also acts as a launching pad to the other 3 Viva modules
Insights brings together Workplace Analytics, MyAnalytics and Glint into a unified insights app in Teams to provide data-driven and privacy-protected insights for individuals, managers and leaders. For example, employees get personalized insights, only they can see, that help them protect their time for breaks, focused work, and learning in order to promote improved productivity and wellbeing.
Topics focuses on knowledge and expertise. Topics applies AI to identify knowledge and experts and organize them into shared topics. AI automatically creates a topic page for each topic. It’s like Wikipedia for the enterprise where AI does the first draft. And these topic pages are surfaced as Topic Cards right in the flow of work in Office and Teams.
Finally, Learning allows employees to easily discover informal and formal learning in the flow of work. It aggregates content from LinkedIn Learning, Microsoft Learn and 3rd party training content and your own organizations content – all in one place. Along with providing aggregation and recommendations, it also allows managers to assign and track training, as well as report on training within and across teams.
Connections is a company branded employee app in Teams. It is a gateway to your employee experience, with personalized news, communications, tasks, people and resources. It provides a single curated employee destination that can be configured for specific roles like frontline workers. So, leaders can communicate and engage their employees, and employees can get easy access to the tools and resources they need from one place.. Connections builds on existing capabilities in Microsoft 365 like SharePoint and Yammer. And it pulls your communications together into a pre-configured app in Teams, designed for both desktop and mobile workers. It also acts as a launching pad to the other 3 Viva modules
Insights brings together Workplace Analytics, MyAnalytics and Glint into a unified insights app in Teams to provide data-driven and privacy-protected insights for individuals, managers and leaders. For example, employees get personalized insights, only they can see, that help them protect their time for breaks, focused work, and learning in order to promote improved productivity and wellbeing.
Topics focuses on knowledge and expertise. Topics applies AI to identify knowledge and experts and organize them into shared topics. AI automatically creates a topic page for each topic. It’s like Wikipedia for the enterprise where AI does the first draft. And these topic pages are surfaced as Topic Cards right in the flow of work in Office and Teams.
Finally, Learning allows employees to easily discover informal and formal learning in the flow of work. It aggregates content from LinkedIn Learning, Microsoft Learn and 3rd party training content and your own organizations content – all in one place. Along with providing aggregation and recommendations, it also allows managers to assign and track training, as well as report on training within and across teams.
Connections is a company branded employee app in Teams. It is a gateway to your employee experience, with personalized news, communications, tasks, people and resources. It provides a single curated employee destination that can be configured for specific roles like frontline workers. So, leaders can communicate and engage their employees, and employees can get easy access to the tools and resources they need from one place.. Connections builds on existing capabilities in Microsoft 365 like SharePoint and Yammer. And it pulls your communications together into a pre-configured app in Teams, designed for both desktop and mobile workers. It also acts as a launching pad to the other 3 Viva modules
Insights brings together Workplace Analytics, MyAnalytics and Glint into a unified insights app in Teams to provide data-driven and privacy-protected insights for individuals, managers and leaders. For example, employees get personalized insights, only they can see, that help them protect their time for breaks, focused work, and learning in order to promote improved productivity and wellbeing.
Topics focuses on knowledge and expertise. Topics applies AI to identify knowledge and experts and organize them into shared topics. AI automatically creates a topic page for each topic. It’s like Wikipedia for the enterprise where AI does the first draft. And these topic pages are surfaced as Topic Cards right in the flow of work in Office and Teams.
Finally, Learning allows employees to easily discover informal and formal learning in the flow of work. It aggregates content from LinkedIn Learning, Microsoft Learn and 3rd party training content and your own organizations content – all in one place. Along with providing aggregation and recommendations, it also allows managers to assign and track training, as well as report on training within and across teams.
Our end-to-end, integrated portfolio of cloud solutions across Microsoft 365, Dynamics 365, and Azure is built on a foundation of security and privacy and helps every organization in every industry build resilience and improve the bottom line.
Azure Arc offers simplified management, faster app development, and consistent Azure services. Easily organize, govern, and secure Windows, Linux, SQL Server, and Kubernetes clusters across data centers, the edge, and multicloud environments right from Azure. Architect, design, and build cloud-native apps anywhere without sacrificing central visibility and control. Get Azure innovation and cloud benefits by deploying consistent Azure data, application, and machine learning services on any infrastructure.
Gain central visibility, operations, and compliance
Centrally manage a wide range of resources including Windows and Linux servers, SQL server, Kubernetes clusters, and Azure services.
Establish central visibility in the Azure portal and enable multi-environment search with Azure Resource Graph.
Meet governance and compliance standards for apps, infrastructure, and data with Azure Policy.
Delegate access and manage security policies for resources using role-based access control (RBAC) and Azure Lighthouse.
Organize and inventory assets through a variety of Azure scopes, such as management groups, subscriptions, resource groups, and tags.
Learn more about hybrid and multicloud management in the Microsoft Cloud Adoption Framework for Azure.
Windows Server 2022 is now in preview, the next release in our Long-Term Servicing Channel (LTSC), which will be generally available later this calendar year. It builds on Windows Server 2019, our fastest adopted Windows Server ever. This release includes advanced multi-layer security, hybrid capabilities with Azure, and a flexible platform to modernize applications with containers.
Windows 365 also creates a new hybrid personal computing category called Cloud PC, which uses both the power of the cloud and the capabilities of the device to provide a full, personalized Windows experience. This new Windows experience comes as organizations around the world grapple with the best ways to facilitate hybrid work models where employees are both on-site and distributed across the globe.
The Windows 365 Cloud PC experience is:
Versatile, familiar and productive by delivering users their personalized content, settings, and applications
Simple to deploy and manage from a single console, easy for anyone to use
Secure by design, leaving no data on the device
Available on any device and optimized for the best experience on a Windows PC at a predictable price
And lastly, it’s scalable and resilient to support changing workforce needs and new business scenarios
Designed for hybrid work
Productive
Improve employee productivity and focus with a simple, powerful user experience.
Collaborative
Discover a smarter way to collaborate with Microsoft Teams integration.
Secure
Protect data and secure access with a Zero Trust-ready operating system.
Consistent
Make adoption easy with app compatibility and cloud management.
Productive and collaborative
Reach your individual and team goals with built-in assistance features in Windows 11.
Simple, modern visuals
Snap assist
Personalized widgets
Intelligent video conferencing
Share a window while presenting
Meet now in Microsoft Teams
The Microsoft Teams call and chat function in the taskbar of Windows 11.
Meet now in Microsoft Teams
Connect with anyone on any platform with fast, easy-to-use calling and chat right from the taskbar.
The most secure Windows yet
Increase security with hardware-based integrity protection in Windows 11, from the silicon to the cloud.
Go passwordless
Get secure, multifactor single sign-on from devices to the cloud and apps with Windows Hello for Business.
Perfect for remote work
Ship employees a corporate-owned device secured by company policy and easily provisioned by them.
Microsoft Scheduler for M365 - Personal Digital AssistantDavid J Rosenthal
An assistant for everyone
Enjoy the speed of a virtual assistant augmented with human understanding.
Easy scheduling
Save time by handing off the time-consuming task of scheduling using your own words.
Works 24/7
Request a meeting at any time. Cortana works around the clock even when you are offline or busy.
You control your data
Scheduler works within your Microsoft 365 compliance boundaries and keeps the data inside your organization. You control your data.
Smart technology with human assistance
Increased reliability that will always complete your request by using human assistance to resolve ambiguities and context.
Grows with your needs
Available 24/7 and capable of handling thousands of requests at the same time.
What is New in Teams Meetings and Meeting Rooms July 2021David J Rosenthal
Chat
Share your opinion, and your personality. Send gifs, stickers, and emojis in a group chat or in one-to-one messages.
Instant messaging
Meet
Instantly go from group chat to video conference with the touch of a button. Teams of 2 or 10,000 can meet in one place, no matter how many places they’re in.
Online meetings
Call
Make and receive calls with internal and external groups using Microsoft Teams Phone, Operator Connect, or Direct Routing.
Voice calling
Collaborate
Easily find, share, and edit files in real time using familiar apps like Word, PowerPoint, and Excel in Teams.
Video conferencing
Make meetings more personal and increase your productivity by collaborating in real time.
Screen sharing
Keep everyone on the same page by sharing your screen so they can see the same content.
Custom backgrounds
Create the perfect virtual setting by choosing, uploading, or blurring your background.
Together mode
Digitally sit in a shared background, making it feel like you’re in the same room with everyone else.1
File sharing
Co-author files in real time. Securely store, access, share, and collaborate on files from anywhere.
Apps and workflows
Streamline tasks and critical business processes by integrating apps and workflows.
Market availability
Available in 53 languages and 181 markets. Connect across Windows, Mac, iOS, and Android.
Privacy and security
Meet regulatory, legal, and organizational needs with industry-leading compliance offerings.
The Java ecosystem is very broad, with different technologies including Java SE, Java EE/Jakarta EE, Spring, numerous application servers, and other frameworks. Wherever you are in Java, Azure supports your workload and process with an abundance of choice – from IaaS to fully managed services. You can run any application architecture, from monoliths, to containerized monoliths, all the way to completely microservices based apps.
We see three broad patterns for running Java applications in the cloud, depending on how much control or productivity you need.
The first is lift and shift with Virtual Machines:
Virtual machines provide the most flexibility, control and visibility while moving to the cloud, especially for initial lift and shift of Java workloads. Azure provides a variety of Java focused VM images and solutions templates in the Azure Marketplace to get you up and running quickly.
The second is modernization using containers:
Containers provide portability, flexibility, scalability, manageability, repeatability, and predictability.
Azure provides best of breed support for Docker and Kubernetes, especially through the Azure Kubernetes Service (AKS) and Azure Red Hat OpenShift.
Finally, Azure has the most managed hosting options for Java applications of any major cloud platform with fully managed PaaS for Spring, Tomcat, and JBoss EAP:
Managed services offer ease-of-use, ease-of-management, productivity, and lower total cost of ownership.
You can focus on building your applications, not managing infrastructure.
All of this is supported by managed databases and DevOps tooling:
Use fully managed SQL and NoSQL databases, including PostgreSQL, MySQL, Cosmos DB, and SQL.
Keep using the tools you love, with plugins for IntelliJ and Eclipse, integrations with a variety of DevOps tools like Maven, Gradle, Jenkins, and GitHub.
Get comprehensive protection across all your platforms and clouds
Protect your organization from threats across devices, identities, apps, data and clouds. Get unmatched visibility into your multiplatform environment that unifies Security Information and Event Management (SIEM) and Extended Detection and Response (XDR). Simplify your security stack with Azure Sentinel and Microsoft Defender.
Protect your business with a universal identity platform
The Azure Active Directory (Azure AD) enterprise identity service provides single sign-on and multi-factor authentication to help protect your users from 99.9 percent of cybersecurity attacks.
Gartner named Microsoft a leader in Magic Quadrant 2020 for Access Management
Single sign-on simplifies access to your apps from anywhere
Conditional Access and multi-factor authentication help protect and govern access
A single identity platform lets you engage with internal and external users more securely
Developer tools make it easy to integrate identity into your apps and services
Connect your workforce
Whether people are on-site or remote, give them seamless access to all their apps so they can stay productive from anywhere. Automate workflows for user lifecycle and provisioning. Save time and resources with self-service management.
Choose from thousands of SaaS apps
Simplify single sign-on. Azure AD supports thousands of pre-integrated software as a service (SaaS) applications.
Protect and govern access
Safeguard user credentials by enforcing strong authentication and conditional access policies. Efficiently manage your identities by ensuring that the right people have the right access to the right resources.
Engage with your customers and partners
Secure and manage customers and partners beyond your organizational boundaries, with one identity solution. Customize user journeys and simplify authentication with social identity and more.
Integrate identity into your apps
Accelerate adoption of your application in the enterprise by supporting single sign-on and user provisioning. Reduce sign-in friction and automate the creation, removal, and maintenance of user accounts.
The Nintex Platform is Easy-to-use, Powerful and Complete to manage, automate and optimize your processes.
Manage processes by discovering, mapping and sharing across process participants and owners.
This often leads to opportunities for process automation. Many processes involve the capture of information and our forms capability provides an ease-to-use, responsive design experience, often eliminating paper forms. With advanced workflow capabilities you can quickly design powerful applications using advanced logic and rules to eliminate manual work. Nintex RPA drives speed by automating those mundane, repetitive tasks. Since many processes involve the need to generate a document we have a DocGen offering to automatically create documents from both unstructured and structured data sources. With Nintex Sign powered by Adobe Sign you can easily integrate eSign into your signature-based workflows for total automation.
Once you have been managing and automating processes, imagine the amount of information available on how your business is operating. Leveraging Nintex Analytics you are able to get process intelligence allowing you to monitor, analyze and improve your business.
With the Nintex platform our customers and partners value our extensibility, using pre-built connecters as well as leveraging our Xtensions to build powerful bi-directional connectors to orchestrate processes across any systems in your organization.
Combining the power of Nintex with our customer success and vast partner network it is easy to see why our customers are so successful.
Microsoft Power BI is a unified self-service and enterprise business intelligence platform that combines an intuitive user experience with intelligent data visualizations to provide greater depth of data insight. Reports can be shared within Microsoft tools like Teams, SharePoint, PowerPoint, or within other productivity products.
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Securing your Kubernetes cluster_ a step-by-step guide to success !KatiaHIMEUR1
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
JMeter webinar - integration with InfluxDB and GrafanaRTTS
Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application.
In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics.
Length: 30 minutes
Session Overview
-------------------------------------------
During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana:
- What out-of-the-box solutions are available for real-time monitoring JMeter tests?
- What are the benefits of integrating InfluxDB and Grafana into the load testing stack?
- Which features are provided by Grafana?
- Demonstration of InfluxDB and Grafana using a practice web application
To view the webinar recording, go to:
https://www.rttsweb.com/jmeter-integration-webinar
Neuro-symbolic is not enough, we need neuro-*semantic*Frank van Harmelen
Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”.
All of this illustrated with link prediction over knowledge graphs, but the argument is general.
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
2. 2
Table of Contents
Enabling People-Centric IT ............................................................................................................................................... 3
Overview ................................................................................................................................................................................. 4
Empower Your Users ........................................................................................................................................................... 7
Overview ................................................................................................................................................................................. 8
Simplify BYOD Registration and Enrollment .............................................................................................................. 9
Enable Consistent Access to Corporate Resources ................................................................................................. 11
Enable Modern Work Styles with Microsoft VDI ..................................................................................................... 13
Automate How Users Connect to Internal Resources ........................................................................................... 15
Unify Your Environment ................................................................................................................................................... 17
Overview ............................................................................................................................................................................... 18
Extend and Manage Through the Cloud ................................................................................................................... 19
Simplify User-Centric Management Across Devices ............................................................................................. 20
Enable Comprehensive Settings Management Across Platforms .................................................................... 21
Define a Common Identity for Accessing Resources On-Premises and in the Cloud ............................... 23
Protect Your Data .............................................................................................................................................................. 25
Overview .............................................................................................................................................................................. 26
Selectively Wipe Devices ................................................................................................................................................. 27
Centralize with Policy-Based Access Control ........................................................................................................... 28
Enable Multifactor Authentication & Rights Management Services ............................................................... 31
Summary .............................................................................................................................................................................. 33
Appendix .............................................................................................................................................................................. 35
Some information relates to pre-released product which may be substantially modified before it’s commercially released.
Microsoft makes no warranties, express or implied, with respect to the information provided here.
3. 3
Enabling People-Centric IT
Using Microsoft®
Windows Server®
2012 R2, Microsoft®
System Center 2012 R2 Configuration Manager, and
Windows Intune™ to enable the consumerization of IT
without compromising compliance
4. 4
Overview
The proliferation of consumer devices and ubiquitous information access is driving
the enterprise away from a device-centric model centered on corporate-owned and
provisioned devices to a bring-your-own-device (BYOD) model in which employees use
their own devices to access corporate applications and data. When they’re working, people
expect consistent access to corporate tools and data regardless of the type of device
they’re using. They also want their corporate-issued technology and resources to look and
behave like their personal technology—always on and always available from any device,
from virtually anywhere.
Figure 1 Today’s challenges
The trend toward BYOD and with it the move toward the consumerization of IT presents
an opportunity for IT to help increase user productivity and satisfaction. At the same time,
it brings numerous management and security challenges to IT organizations, which must
see that enterprise infrastructure and corporate data are protected from malicious intent,
while ensuring that these resources can be accessed in compliance with corporate policies
regardless of device type or location.
An enterprise model that supports the use of consumer devices in the workplace and the
ability to work from virtually anywhere, anytime must move from a device-centric view of
IT management to one that’s people-centric.
Users expect to be able
to work in any location
and have access to all
their work resources.
The explosion of devices is
eroding the standards-based
approach to corporate IT.
Deploying and managing
applications across platforms
is difficult.
Users need to be productive
while maintaining compliance
and reducing risk.
Enabling People-Centric IT
5. 5
Figure 2 People-centric IT
Microsoft assists IT in supporting consumerization of IT, and in retaining effective
management, security, and compliance capabilities. The enterprise tools and technologies
that Microsoft provides can help with key enterprise tasks—for example, identifying
non-corporate devices, delivering applications and data to those devices with the best
possible user experience, and establishing and enforcing policies on devices, based on the
user’s role within the organization. Microsoft enterprise tools and technologies can help IT
maintain security across all device types, regardless of whether the devices are corporate or
personal assets, and establish security measures that protect their organization’s systems,
data, and network.
With the upcoming releases of Microsoft®
Windows Server®
2012 R2, Microsoft®
System
Center 2012 R2 Configuration Manager, and Windows Intune™, Microsoft builds on a
comprehensive, people-centric solution that empowers user productivity while supporting
the management needs of IT.
For enterprise users, Microsoft solutions empower users’ productivity and provide:
Simplified registration and enrollment for BYOD. Users can manage their devices as
well as install corporate apps through a consistent company portal.
Consistent access to company resources across devices. Users can use the device of
their choice to access corporate resources regardless of location.
Support for modern work styles with Microsoft Virtual Desktop Infrastructure.
Microsoft Virtual Desktop Infrastructure (VDI) enables IT to deliver a corporate desktop
and applications to employees that they can access from their personal and corporate
devices, from both internal and external locations, with the infrastructure running within
the corporate datacenter.
Automatic connection to internal resources when needed. Users can access
corporate resources automatically when support for single sign-on and other automatic
authentication mechanisms is enabled.
Empower users
Allow users to work on the devices
of their choice and provide consistent
access to corporate resources
Unify your environment
Deliver a unified application and
device management on-premises
and in the cloud.
Protect your data
Help protect corporate information
and manage risk.
Enabling People-Centric IT
6. 6
For IT professionals, Microsoft solutions unify the environment and provide:
Unified management of on-premises and cloud-based mobile devices. IT can extend
its System Center Configuration Manager infrastructure with Windows Intune to support
cloud management of mobile devices. This enables IT to publish corporate apps and
services across device types, regardless of whether they’re corporate-connected or
cloud-based.
Simplified, user-centric application management across devices. IT gains efficiency
with a single administration console, where policies can be applied across group and
device types.
Comprehensive settings management across platforms, including certificates,
virtual private networks (VPNs), and wireless network profiles. Policies can be applied
across various devices and operating systems to meet compliance requirements, and IT
can provision certificates, VPNs, and Wi-Fi profiles on personal devices within a single
administration console.
These solutions also help protect corporate data by providing:
The ability to protect corporate information by selectively wiping apps and data.
IT can access managed mobile devices to remove corporate data and applications in the
event that the device is lost, stolen, or retired from use.
Policy-based access control to corporate applications and data. IT can set policy-
based access control for compliance and data protection.
A common identity for accessing resources on-premises and in the cloud. IT can
better protect corporate information and mitigate risk by being able to restrict access to
corporate resources based on user, device, and location.
This guide provides an overview of the solutions Microsoft offers to help enterprises
transition from a device-centric to a people-centric, consumerized IT environment without
compromising compliance. It also provides details about how Microsoft solutions and
products can help IT organizations use a people-centric approach to client management.
Microsoft’s solution optimizes the application infrastructure, provides unified
management, and supports the latest security and access models.
Note: Features and supported platforms are subject to change until the final release
of the products mentioned in this guide. The information contained here represents
the current view of Microsoft Corporation on the issues discussed as of May 1, 2013. As
Microsoft must respond to changing market conditions, it should not be interpreted
to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the
accuracy of any information presented within this document.
Enabling People-Centric IT
7. 7
Empower Your Users
Enable people to use their chosen devices at work
and provide consistent access to corporate resources
8. 8
Overview
Today’s users want to access corporate applications and data from anywhere and from
any device (smartphones, tablets, and PCs), and they want a streamlined way to provision
a new device for corporate information access. Then, after their device is provisioned,
they want a consistent way to access corporate applications and data from their devices,
including a simplified sign-on process and easy access to tools virtually anytime, from
anywhere.
IT must find ways to accommodate the proliferation of consumer devices and support
access to corporate resources from locations outside the tightly controlled corporate
network setting. They need a management infrastructure that’s efficient, cost-effective, and
secure. Finally, it’s important to have enterprise management tools that make it easy to set
up and manage devices, and solutions that provide access to corporate applications and
data from locations within and outside the corporate network.
The following sections outline key capabilities and present sample business scenarios that
show how Microsoft empowers users by enabling people-centric IT.
Challenges
Users want to use the device of their choice and have
access to both their personal and work-related applications,
data, and resources.
Users want an easy way to be able to access their
corporate applications from anywhere.
IT departments want to empower users to work this way, but
they also need to control access to sensitive information
and remain in compliance with regulatory policies.
Solutions
Users can register their devices, which makes them known
to IT, who can then use device authentication as part of
providing access to corporate resources.
Users can enroll their devices, which provides them with
the company portal for consistent access to applications
and data, and to manage their devices.
IT can publish access to corporate resources with
conditional access based on the user’s identity, the device
they are using, and their location.
Empower Your Users
9. 9
Simplify Bring-Your-Own-Device
(BYOD) Registration and Enrollment
Until a few years ago, most IT organizations discouraged or explicitly prevented employees
from using personal devices for business-related data. It simply wasn’t necessary to
support users’ personal devices.
However, employees often have or want more up-to-date devices than what IT has
provided, leading people to demand that they be able to use their own technology at
work. This requires IT to support a growing number and wider range of device types in
their enterprise infrastructure, as well as frequent replacement of devices and regular
introductions of new technology. This drives the need for flexibility—IT must be able to
support and manage the current generation of devices as well as those two or three (or
more) generations out. And this support must extend not only to corporate assets, but also
to employee-owned devices.
Business Requirements
Scenario: Joan from finance just purchased a new smartphone for her personal use. At
first, she carries both her personal and corporate smartphones with her, but she quickly
finds that carrying two phones is inconvenient. She asks the IT department if she can give
back her corporate phone and access the corporate apps she needs through her personal
smartphone, which is newer and faster than her work smartphone.
Joan needs an easy way to configure her personal devices for use at work.
IT needs a way to support the use of employee-owned devices in the
workplace while retaining management control of the devices used to
access corporate resources.
The People-Centric IT Solution
In the past, the answer to this scenario would have been “No.” But because Joan’s company
has implemented Microsoft’s solution for BYOD scenarios, Joan is able to work on her
device, and IT retains the control they require to remain compliant with corporate policies.
Supporting BYOD in the workplace requires a simple way for users to register their
devices for use and ways to enable IT to manage those devices as part of the corporate
infrastructure. Workplace Join in Windows Server 2012 R2 enables users to register their
devices in Active Directory®
, and IT can require multi-factor authentication as part of
this process. Additionally, users can enroll their devices for management, which joins the
devices to Windows Intune and allows the installation of the company portal.
So, for example, when Joan registers her device, she makes it “known” to IT, and IT can then
configure conditional access policies that take into account not only Joan’s identity, but
also the device she’s using. After Joan enrolls her device, she can access her applications
Empower Your Users
10. 10
and manage her own device through the company portal that’s installed.
System Center 2012 R2 Configuration Manager and Windows Intune together gather
information about the user and device and allow IT to manage the device.
Windows Server 2012 R2
• Users can register their devices, which makes the device “known” to IT, which can then
use device authentication as part of providing access to corporate resources. Device
registration is a “give-and-get” scenario. The user “gives” by registering the device, and
in turn “gets” access to resources. From an IT perspective, after the device is registered,
it becomes an object in Active Directory and, as such, it can be used as a part of the
authentication and access policies.
• Registering a device enables single sign-on and access to corporate data through
Workplace Join. This enables IT, in return for knowing about the device, to provide
access to applications and data that otherwise wouldn’t be available.
System Center 2012 R2 Configuration Manager and Windows Intune
• An easy way for users to access all their corporate applications from one place is
by enrolling their devices for access to the company portal. This enrollment adds
the device into the unified device management solution and allows the installation
of the company portal. IT can populate the company portal with internal line-of-
business (LOB) applications, as well as with links to applications available in the public
application stores (Microsoft®
Windows®
Store, Windows Phone Store, Apple®
App
Store, and Google PlaySM
). From within the company portal, users can manage their
devices and perform actions, such as wiping a lost or replaced device.
Supporting Features
Features Description Product
Web Application
Proxy
Allows the publishing of corporate
resources, including support for
multi-factor authentication and the
enforcement of conditional access
polices when users connect to
resources.
Windows Server 2012 R2
Active Directory
Federation Services
(ADFS)
Supports the Workplace Join
communication path through the
Web Application Proxy and ADFS to
Active Directory.
Windows Server 2012 R2
Device
Management
Comprehensive management
services for devices based in the
cloud and on-premises, to enable
users to install offered applications
onto their devices.
System Center 2012 R2
Configuration Manager
and Windows Intune
Empower Your Users
11. 11
Conclusion
Microsoft is making it easier for organizations to allow people to use the devices they
choose by enabling those devices to be integrated into the security and management
models IT may already have in place.
Enable Consistent Access to
Corporate Resources
The prevalence, speed, and availability of affordable high-speed broadband and Wi-Fi
networks means that people can be mobile and still expect to get their work done. People
expect to access corporate resources in a consistent way across devices, and they expect
that the technology provided will be available on their schedule, from wherever they
happen to be. This work-from-anywhere paradigm requires IT to change the way people
access resources such as company tools, apps, data, and services.
Business Requirements
Scenario: Paul from Human Resources considers himself a savvy consumer of technology.
As an early adopter of new mobile technology as it becomes available in the market, Paul
now finds that his personal device has outpaced the device provided for him at work. Paul
wants to be able to use his personal, more flexible and powerful device from home to
review the résumés of applicants prior to their job interviews.
Paul needs an easy way to access corporate apps and data from any
device he chooses to use. IT needs an efficient way to provide Paul with
consistent access to corporate resources from his personal devices.
The People-Centric IT Solution
While the IT department at Paul’s company has previously forbidden the use of personal
devices, it’s recently implemented the people-centric IT solution from Microsoft, which
enables streamlined device management and provides access while protecting corporate
resources.
When a user enrolls a device for management, the company portal is installed on the
device. This company portal is consistent across devices, and it makes the latest corporate
applications available to users. Work Folders, new in Windows Server 2012 R2, enable users
to store the data they need for work in one place and make it easy for users to sync this
data across devices.
Empower Your Users
12. 12
System Center 2012 R2 Configuration Manager and Windows Intune
• Users can self-provision applications through a company portal that shows the
applications users have permissions to install. Users can view, install, and run
corporate applications across devices, including corporate-owned LOB applications,
Web applications, and links to IT-recommended applications available from public
application stores (Windows Store, Windows Phone Store, Apple App Store, and
Google Play).
• IT can specify which applications people can see in the company portal based on a
variety of means, such as a defined user role (for example, finance managers or group
managers) or groups within Active Directory.
• Using the company portal, people can view all their managed devices and take action,
such as selectively wiping corporate applications and data from their devices or
removing a device from the management system and corporate access.
Windows Server 2012 R2
• Using Work Folders, people can sync files stored in their Sync Share on a corporate
file server with their devices. This share can be integrated by IT with Dynamic Access
Control for automated classification and protection of documents based on their
content, and these changes are replicated to the user’s devices.
• IT controls access through Web Application Proxy, which publishes resources with
multi-factor authentication and conditional-access policies.
Supporting Features
Features Description Product
Company Portal A self-service portal that runs natively on
each device and that enables users to install
applications on their devices, as well as view
and remove their managed devices and set up
synchronization of their work data.
System Center 2012 R2
Configuration Manager and
Windows Intune
Work Folders A centralized location on a file server in the
corporate environment that’s configured to
allow the synchronization of files to user devices.
Work Folders can be published directly through a
reverse proxy or via the Web Application Proxy for
conditional access policy enforcement.
Windows Server 2012 R2
Web Application
Proxy
Allows the publishing of corporate resources,
including multi-factor authentication and the
enforcement of conditional access polices when
users connect to resources.
Windows Server 2012 R2
Empower Your Users
13. 13
Conclusion
Microsoft enables IT to make corporate resources available to people on the devices of
their choice from virtually anywhere, while enforcing security policies and retaining control
for corporate compliance.
Enable Modern Work Styles
with Microsoft Virtual Desktop
Infrastructure (VDI)
As the enterprise adapts to more personally owned devices, IT needs a way to offer
a consistent, managed enterprise desktop to employees. Microsoft Virtual Desktop
Infrastructure (VDI) enables IT to deliver a corporate desktop and applications to
employees that can be accessed from their personal or corporate devices, from both
internal and external locations. Centralized desktops and apps hosted in the datacenter
or cloud can be easily managed, and apps and data can be secured.
Business Requirements
Scenario: Adam is the desktop manager for his company’s IT department. In the past, PCs
were all corporate-owned and Adam deployed a standard desktop image to the machines
that included a standard set of policies and applications. As more people move to using
their own PCs, laptops, and tablets, often from non-corporate networks, Adam needs a way
to enforce the same security policies to protect data, while enabling access to applications
on devices that his company no longer directly manages.
IT needs a way deploy a standard desktop solution that can be housed
centrally in the datacenter. These virtual desktops will be accessed
from a variety of devices and locations, while preserving the protection
of the data, including limiting the ability to store the data on an
unmanaged device.
The People-Centric IT Solution
Windows Server 2012 R2 provides a virtual desktop infrastructure (VDI) that’s easy to
deploy and configure, and it delivers a rich user experience. The Microsoft solution
gives IT the freedom to choose personal and pooled virtual (VM)-based desktops, as
well as session-based desktops. It also offers IT several storage options, based on their
requirements.
Windows Server 2012 included significant enhancements to deploying and managing
a VDI environment, as well as for improving users’ experience with remote desktops.
Windows Server 2012 R2 continues to improve the options and user experience.
Empower Your Users
14. 14
Windows Server 2012 R2
• Windows Server 2012 provided a single console to deploy, configure, and manage
a VDI deployment. Windows Server 2012 R2 brings Session Shadowing to the
administration console, enabling helpdesk or IT staff to view and remotely control a
user’s session.
• Windows Server 2012 supported SMB 3 and Storage Spaces for VDI storage, providing
a high-performance storage alternative to expensive SAN storage. Windows Server
2012 R2 further expands on this by supporting online disk deduplication, which reduces
the amount of space on disk that’s consumed by personal VMs. It also provides support
for storage tiering, enabling IT to use a mix of solid state and spinning disks to create a
storage volume that automatically optimizes locations of data across the disks so that
the most accessed data blocks are on the highest-performing disks.
• Windows Server 2012 included several enhancements to the Remote Desktop Protocol
(RDP) that improve the performance of remote desktops over WAN connections. This
is accomplished by enhancing the appearance of RemoteApp programs so that they
behave graphically more like locally executed apps. There are also improvements to the
codecs and display handling. Disconnected sessions reconnect much faster than in the
past—reconnect times may be reduced from over 70 seconds to less than 10.
• RD Gateway includes support for pluggable authentication, so providers can write a
plug-in to support one-time password (OTP) or RSA SecureID authentication to the RD
Gateway.
Supporting Features
Feature Description Product
Session Shadow Allows administrators to view and remotely control active user
sessions on RD Session Host servers.
Windows Server
2012 R2
Deduplication
Storage
Enables storage volumes containing VHD files for a VDI
collection to automatically identify redundant blocks on the
storage and remove duplicate data to reduce the storage
consumed.
Windows Server
2012 R2
Storage Tiering Enables storage volumes that are a mix of multiple disks of
different speeds. The operating system automatically optimizes
the location of data in the volume so that the most frequently
accessed data is on the fastest disks.
Windows Server
2012 R2
RemoteApp Displays the correct thumbnail on the task bar instead of using
generic icons. Transparent sections of RemoteApp windows
render correctly.
Windows Server
2012 R2
Quick Reconnect Reconnects disconnected sessions much faster than in previous
versions.
Windows Server
2012 R2
Empower Your Users
15. 15
Codec and Display
Improvements
Delivers the best possible user experience under varying
network conditions, trading off resolution of experience with
bandwidth available.
Windows Server
2012 R2
Conclusion
Microsoft VDI enables IT to deliver desktops and apps to users on a range of devices. VDI
maintains storage and compute in the datacenter, so the integrity of the data is always
maintained and mitigates the risk of losing data on stolen or lost devices, while also
providing business continuity by making the desktop available from anywhere. Microsoft
VDI provides efficient management and a rich user experience at the best value for VDI.
Automate How Users Connect to
Internal Resources
Balancing the needs of the users, who want to access corporate resources from multiple
device types and locations, with IT’s need to protect corporate networks and data from
malicious intent makes the authentication of users complex. Users have difficulty keeping
track of multiple layers of credentials, and when those credentials vary depending on
location, device type, or application, each potentially with a different sign-on, it can
affect user productivity and result in less-secure access as users try to simplify sign-on
information themselves. Stymied by the difficult sign-on process, users may call the help
desk, which can increase overall support costs.
Business Requirements
Scenario: Mary works on-site as a project planner three days a week. When she’s on-site,
Mary signs on once to the corporate network, and then she can open any files she needs
without supplying any other password authentication, regardless of the location of those
files on the internal network. Twice a week, when Mary works from home on her laptop,
accessing the files she needs requires multiple layers of authentication. She must sign on to
the corporate network through a virtual private network (VPN) and then sign on again for
the corporate tools she uses. This multi-layer authentication creates a potentially unsecure
situation, because Mary has all her sign-on information written down on a sticky note next
to her computer.
Mary needs an easier way to sign on to corporate resources, and
IT needs a way to support this without compromising the security
of corporate resources.
The People-Centric IT Solution
Using a personal device shouldn’t change a person’s ability to access corporate resources,
but at the same time, IT must protect the security of corporate applications and data.
Empower Your Users
16. 16
Microsoft provides security features that help automate user access to resources in
four ways:
• DirectAccess provides an “always on” connection for domain-joined Windows clients.
• The Remote Access role in Windows Server provides traditional VPN connections from
user devices to corporate resources.
• The Web Application Proxy enables IT to publish access to corporate resources.
• A new feature in Windows Server 2012 R2 and Windows 8.1 provides the ability for
applications to trigger the VPN on the user’s behalf as they’re launched.
System Center 2012 R2 Configuration Manager and Windows Intune provide a way to
define which applications automatically trigger a VPN connection to a corporate resource
and deploy the configuration information. The Web Application Proxy enables IT to
publish access to corporate resources without a VPN connection, based on user, device,
location, and application.
System Center 2012 R2 Configuration Manager and Windows Intune
• IT can deploy the configuration details for applications and the Wi-Fi/VPN profiles to
the user’s devices.
Windows Server 2012 R2
• IT can tightly control access to corporate resources. The Web Application Proxy enables
IT security administrators to provide secure conditional access by selectively publishing
corporate resources to remote users using managed and unmanaged devices, based on
the user, device, location, and application.
Supporting Features
Feature Description Product
Web Application Proxy Allows the publishing of corporate resources,
including multi-factor authentication and the
enforcement of conditional access polices when
users connect to resources.
Windows Server 2012 R2
Support for VPN and
Wi-Fi profiles
Deploys the policies and configuration for VPN
or Wi-Fi profiles.
System Center 2012 R2
Configuration Manager and
Windows Intune
Conclusion
Microsoft provides the ability for corporate resources to be available to users on the
devices they use, removing the complexity of configuring the devices and enabling IT to
enforce who and which devices can access corporate resources.
Empower Your Users
18. 18
Overview
Moving from a device-centric to a people-centric enterprise presents a number of
challenges. One of the biggest challenges is how to effectively support and manage the
diversity of platforms and devices that can now potentially access corporate resources. IT
must be able to configure device settings based on a number of variables (including users,
groups, and device types) and device location (on-premises, in the cloud, or external). IT
administrators also need to protect corporate security and manage compliance policies.
Being able to manage both user- and corporate-owned devices within a single
management console can help busy IT administrators efficiently evaluate and manage
network activity, regardless of whether it originates on-premises, in the cloud, or remotely.
Devices can be managed in the world in which they live—from the cloud or from the
corporate network. Using a single interface enables IT to identify the devices accessing the
corporate network, and then configure and manage those devices consistently, regardless
of device type. A unified solution also provides a cohesive structure for setting policy,
delivering reporting capabilities that help IT to maintain corporate compliance.
As people work on a variety of devices and IT adopts a hybrid approach to delivering
applications and services (both on-premises and in the cloud), it becomes essential to have
a single identity that can be used for authentication. This single identity, which can be used
regardless of what resources a person is accessing and where he or she is accessing them
from, can make people more productive and provide a better overall experience.
The following sections outline key capabilities and present sample business scenarios that
show how Microsoft supports people-centric IT with a unified environment.
Challenges
Providing users with a common identity when they are
accessing resources that are located both on-premises in a
corporate environment, and in cloud-based platforms.
Managing multiple identities and keeping the information
in sync across environments is a drain on IT resources.
Solutions
Users have single-on experience when accessing all
resources, regardless of location.
Users and IT can use their common identity for access to
external resources through federation.
IT can consistently manage identities across on-premises
and cloud-based identity domains.
Unify Your Environment
19. 19
Extend Your Existing System Center
Configuration Manager Infrastructure
and Manage Mobile Devices Through
the Cloud
Many enterprises are moving their corporate resources to the cloud to save money and to
better provide their users with access to those resources from anywhere. As the enterprise
extends to the cloud, managing corporate assets can become fragmented, and it becomes
more difficult to set consistent policies across on-premises and cloud environments. A
move to the cloud may end up costing more, because managing the complexity of the new
enterprise model increases time spent on basic resource management tasks.
Business Requirements
Scenario: Matt is the IT administrator responsible for managing the assets that make up
the company’s on-premises System Center Configuration Manager infrastructure. Now
Matt has to also manage mobile devices like tablets and smartphones, and he’s finding
that in order to view all the physical and virtual assets he’s responsible for managing, he
must use multiple management tools. He’s worried that he’s losing track of devices.
IT needs an integrated tool to view and manage devices both on-premises
and in the cloud.
The People-Centric IT Solution
As corporate resources extend to the cloud, IT needs a cohesive way to view and manage
those resources as part of the entire corporate infrastructure. System Center 2012 R2
Configuration Manager and Windows Intune extend management functionality to include
support for managing physical and virtual assets from within a single management
console.
System Center 2012 R2 Configuration Manager and Windows Intune
• IT can manage devices that connect to corporate resources “in the world in which
they live” from a single management console by connecting their on-premises System
Center 2012 R2 Configuration Manager infrastructure with the cloud-based Windows
Intune service.
• From the management console, IT administrators get a comprehensive view that can
help them identify and inventory mobile, physical, and virtual assets. This helps them to
focus on what users need access to in order to be productive, rather than focusing on
the devices themselves.
Unify Your Environment
20. 20
Supporting Features
Feature Description Product
Unified Management
Infrastructure
Enables IT to view and manage PCs, mobile
devices, servers, and virtual machines—both
corporate-connected and cloud-based—
through a single console.
System Center 2012 R2
Configuration Manager and
Windows Intune
Conclusion
Microsoft provides a unified way for organizations to view and manage all the devices accessing
corporate resources, including Windows-based PCs, tablets, phones, and servers, Windows
Embedded devices, Macs®
, iOS®
and Android™ smartphones and tablets, as well as UNIX®
/
Linux®
servers. This integration means that organizations don’t need to learn or implement
different, segregated products.
Simplify User-Centric Management
Across Devices
As the types of devices being used to access corporate resources grows to include mobile
devices (such as smartphones and tablets) as well as PCs and laptops, managing devices
becomes more challenging.
Moving to people-centric IT increases the number of potential user and device combinations.
For example, a user could have multiple devices, some corporate-owned, some personally
owned. IT must be able to easily view the devices associated with a user and verify that those
devices have the appropriate software installed.
Business Requirements
Scenario: Ann accesses corporate resources from her PC at work, a corporate laptop when she
travels on business, and her own Microsoft®
Surface™ in the evening and on weekends. Using
System Center 2012 R2 Configuration Manager and Windows Intune, the IT department can
easily view the devices Ann is using. After Ann enrolls her devices for management, she wants to
install the software she needs to get her job done.
Ann needs to use a variety of devices to get her job done. IT needs a simple
way to manage across devices.
The People-Centric IT Solution
Integrating the management of the devices that make up the corporate infrastructure—
whether those devices are physical, virtual, or mobile—makes the move to people-centric IT
more efficient. Through System Center 2012 R2 Configuration Manager and Windows Intune,
Microsoft provides an integrated console that enables IT to manage all device types and
efficiently install software across device types.
Unify Your Environment
21. 21
System Center 2012 R2 Configuration Manager and Windows Intune
• IT can manage a range of devices, including Windows-based PCs, laptops, tablets, phones, and servers;
iOS phones and tablets; Macs; Android devices; and UNIX/Linux Servers.
Supporting Features
Feature Description Product
Unified Device
Management
Enables IT to inventory, apply policies,
and distribute software to a wide range
of devices across multiple platforms.
System Center 2012 R2 Configuration
Manager and Windows Intune
Conclusion
Microsoft is committed to helping reduce client management infrastructure costs and complexity. With
the integration between Configuration Manager and Windows Intune, we offer a single console that
integrates for both on-premises and in-the-cloud management. It consolidates client management and
security and offers in a unified single solution—giving a streamlined approach to managing devices and
applications as well as identifying and remediating threats and non-compliance.
Enable Comprehensive Settings Management
Across Platforms
As the number of device types allowed in the corporate environment grows, keeping track of the settings
possible for each device becomes crucial and more complex for IT, because the wrong settings could
create a security risk.
Business Requirements
Scenario: Ben in IT is responsible for extending enterprise support to employee-owned devices. A brief
survey of users reveals that not all devices are Windows-based and that some users want to use their
mobile devices as well as personal PCs and laptops for work tasks.
Ben doesn’t have the time to research the functionality supported by each type of device, but he still
needs to be sure that the devices are configured in a way that mitigates risk to corporate resources.
For example, he plans to require that all mobile devices accessing the corporate network have a PIN
associated with them.
IT needs a comprehensive management solution that extends support across all device
types, platforms, and users, and offers flexibility in configuring and inventorying
devices based on whether they’re corporate- or employee-owned.
Unify Your Environment
22. 22
The People-Centric IT Solution
Viewing all the devices accessing corporate resources is useful, but without the ability
to centralize configuration or management tasks for those devices, it can be difficult to
provision them for use in a way that makes it possible to enforce compliance policies.
System Center 2012 R2 Configuration Manager and Windows Intune provide a unified way
to configure devices, regardless of device type. Within System Configuration Manager, IT
can also generate reports about all devices that use corporate resources.
Because Ben’s organization is using System Center 2012 R2 Configuration Manager and
Windows Intune, he can manage settings for all device types from one management
console. To support corporate compliance, Ben can also generate reports that include all
devices. He can also make choices about how to deploy software and inventory devices
based on whether the devices are corporate- or employee-owned.
Figure 3 Unified management console for configuring devices
System Center 2012 R2 Configuration Manager
• IT can configure settings across different device types, including:
• Security and compliance settings, including passwords and PINs, encryption, and
wireless communication certificates.
• Applications, including email, store, browser, and content ratings.
• Applications can be deployed and inventoried on the devices.
• Reports can be generated that show the usage of software distribution points within
their infrastructure, and IT can establish content-distribution priorities, which can result
in more effective infrastructure and deployment planning.
Unify Your Environment
23. 23
Supporting Features
Feature Description Product
Device Management Policies Enables IT to define and deploy configuration
policies specific to each mobile device platform
to help meet compliance requirements.
System Center 2012 R2
Configuration Manager and
Windows Intune
Software Distribution Publishes or deploys applications to people’s
corporate or personal devices based on policy.
System Center 2012 R2
Configuration Manager and
Windows Intune
Distribution Point Usage
Reports and Management
Provides usage reports of software distribution
points across the infrastructure to help identify
under- or over-used resources and prioritize
package replication.
System Center 2012 R2
Configuration Manager
Conclusion
Together, System Center 2012 R2 Configuration Manager and Windows Intune provide organizations
with a holistic view of all devices accessing corporate resources, whether they’re PCs or mobile
devices, on-premises or in the cloud. IT can define security and compliance settings to help ensure
that devices accessing corporate resources meet corporate policies.
Define a Common Identity for Accessing
Resources On-Premises and in the Cloud
A paramount concern of any IT department is protecting the security of corporate resources. Every
time a user attempts to access data, it creates a potential security risk. Managing the risks associated
with how people work was simpler when they accessed corporate resources using only corporate-
owned and managed assets. Security becomes far more complex as enterprises move to a people-
centric model in which corporate resources can be accessed using either corporate- or employee-
owned devices of any type.
Business Requirements
Scenario: Phil is a security administrator for his organization. The number of devices that Phil
manages continues to grow. He wants a centralized way to provide a consistent authentication
process across device types, while continuing to make sure that the security of corporate assets
is maintained.
IT needs a way to define a common identity that users can use to access
resources on-premises, in the cloud, and outside the corporate network.
Unify Your Environment
24. 24
The People-Centric IT Solution
Microsoft recognizes the need to provide more secure access to sensitive corporate resources when
they’re consumed on BYO devices. Windows Server Active Directory and Windows AzureTM
Active
Directory provide functionality that enables IT security administrators to manage a person’s identity
regardless of whether the resources the person is accessing are on-premises, in the cloud, or from
external networks.
Phil’s organization has deployed Windows Server 2012 R2 and connected their Active Directory
to Windows Azure Active Directory, so Phil uses the services associated with these products to set
authentication options for access to resources on-premises and in the cloud, for users and devices
wherever they’re being used.
Windows Server 2012 R2
• With Active Directory, IT gains a single view of all user information, so they can efficiently manage
security settings for users, devices, groups, printers, applications, and other directory-enabled
objects (such as Workplace Join devices) from one secure, centralized location.
• Because authentication options can be set for the cloud, on-premises, or federated, IT can set up
a model where users can sign on once and then access their data and applications, regardless of
whether those resources reside in the cloud or on the corporate network.
Windows Azure Active Directory
• IT can use cloud-based identity, which serves as the central authentication endpoint for all users
and devices outside the corporate environment and cloud/hybrid applications.
• IT can use Windows Azure Active Directory for the authoritative authentication directory or can
check user validation and device verification through federated connections to other directories,
such as on-premises Windows Server Active Directory or other cloud-based identity repositories.
• Windows Azure Active Directory works fluidly with Windows Server Active Directory to easily
extend an organization’s Active Directory into the cloud.
Supporting Features
Feature Description Product
Windows Server Active
Directory Domain Services
Provides an identity directory used to authenticate
users and devices, and for the enforcement of
access policies and centralized configuration
policies.
Windows Server 2012 R2
Windows Azure Active
Directory
Delivers a modern, REST-based service that
provides identity management and access control
capabilities for cloud applications.
Windows Azure Active
Directory
Conclusion
As IT adopts a hybrid delivery model for applications and services across on-premises and in the public
cloud, Microsoft provides a way for IT to provide a single sign-on experience for users by providing a
common identity for accessing all their resources regardless of location or device being used.
Unify Your Environment
26. 26
Overview
Moving from device-centric to people-centric IT means moving from a world where the
devices accessing corporate tools and data are company-owned and provisioned to one
where devices are owned by users and contain applications and data not under corporate
control. This introduces new challenges for IT administrators, who must provide flexible
user models while making sure that corporate resources are protected from unauthorized
access. Users expect consistent access to corporate resources, yet that access can’t
compromise the security of the enterprise.
IT must deploy a solution that supports efficient and secure access to corporate resources
regardless of whether the user’s location is within or outside corporate control. To meet
compliance requirements, IT must also be able to gather reporting information for
regulatory and internal auditing purposes across the range of devices accessing the
corporate network.
The following sections outline key capabilities and present sample business scenarios that
show how Microsoft helps you protect your data in people-centric IT.
Challenges
As users bring their own devices in to use for work, they will
also want to access sensitive information and have access
to this information locally on the device.
A significant amount of corporate data can only be found
locally on user devices
IT needs to be able to secure, classify, and protect data
based on the content it contains, not just where it resides,
including maintaining regulatory compliance.
Solutions
Users can work on the device of their choice and be able to
access all their resources, regardless of location or device.
IT can enforce a set of central access and audit policies,
and be able to protect sensitive information based on the
content of the documents.
IT can centrally audit and report on information access.
Protect Your Data
27. 27
Selectively Wipe Devices
The portability of devices such as smartphones and tablets makes them attractive to
people wanting to get work done on the go, but there’s a risk associated with that
portability—the potential for devices to be lost or stolen. To protect corporate data, it’s
imperative that users and IT have ways to wipe devices remotely.
Along with the portability of mobile devices, frequent advances in mobile device
technology mean that people may change the devices they use to access corporate data
more rapidly than in the past, re-purposing their old devices for family use or selling them
back to wireless companies as they upgrade. When users discontinue using a device,
having an easy way to remove corporate resources (or at a minimum render the data
inaccessible) from those devices is essential in protecting the security of corporate tools
and data.
Business Requirements
Scenario: Lisa is a corporate recruiter traveling on business to college job fairs. While she’s
out of the office, the team she recruits for is interviewing a few job candidates. Feedback
on the candidates is recorded in the company’s proprietary interview feedback application,
and Lisa frequently checks the feedback from her smartphone. While at the job fair, Lisa
sets her smartphone down for a minute, and before she can reach for it again, it disappears
into the crowd.
Lisa needs to be able to quickly block access to corporate resources from
her stolen mobile device. In case she’s unable to wipe the device herself, IT
needs a way to wipe the device for her, thereby maintaining the security of
the company’s data and applications.
The People-Centric IT Solution
With System Center 2012 R2 Configuration Manager and Windows Intune, mobile devices
can be selectively wiped to protect corporate data and applications. These Microsoft
tools also provide a way for people to retire a device when they no longer use it to access
corporate resources.
Luckily for Lisa, she has her laptop with her. She opens the company portal installed on her
laptop, and she can view all the devices that she’s using to access corporate resources. Lisa
selects her smartphone, and then follows the steps to wipe the device. This removes all
proprietary corporate applications and (where possible) associated data from her device. In
all cases where the data was provisioned through the company portal, the data is rendered
inaccessible, and when the underlying platform supports it, the data is also removed.
Because the IT department at Lisa’s company also has the ability to manage the device, if
she were unable to wipe the device herself, she could contact IT to wipe the device from
the management console.
Protect Your Data
28. 28
System Center 2012 R2 Configuration and Windows Intune
• IT can selectively and remotely wipe a device, including removing applications and
data, management policies, and networking profiles.
• Users can selectively and remotely wipe corporate applications and data from
their devices.
• Users can also retire a device from management, which removes the device’s ability to
access corporate tools and data.
Supporting Features
Feature Description Product
Selective Wipe Removes corporate-related
applications, data, and
management policies from
the mobile device.
System Center 2012 R2
Configuration Manager and
Windows Intune
Conclusion
As people lose or upgrade their mobile devices, or if they no longer work for the
organization, it’s crucial to make sure that any corporate-related information, including
applications and data, are no longer available on their devices. With System Center 2012
R2 Configuration Manager and Windows Intune, corporate resources can be remotely
removed from the device by either the user or IT, while the personal data on the device is
left alone.
Centralize Corporate Information for
Compliance and Data Protection with
Policy-Based Access Control
With new models for how users access corporate resources, IT needs a new way to balance
access and sharing of corporate information with the ability to audit against internal and
regulatory requirements. The costs for meeting regulatory and compliance requirements
are rising at a time when IT budgets are facing new constraints, so implementing changes
to the infrastructure to enable people-centric IT must be cost-effective without sacrificing
security. A centralized information protection model for access control, coupled with
robust compliance reporting capabilities, supports a cost-effective transition to people-
centric IT.
Business Requirements
Scenario: Kelly is responsible for setting the security, access policies, and auditing for
compliance with corporate policy. Her role has expanded, and she now provides access
to sensitive corporate information on devices that users provide without compromising
network security or compliance requirements.
Protect Your Data
29. 29
Kelly needs an enterprise solution that centralizes corporate information
and allows her to define policies that both empower users and allow
her to remain in control of the information. Like most enterprises, Kelly
has responsibility for data stored in multiple locations, so she requires a
centralized solution for setting and enforcing policy, and for configuring
auditing policies for reporting.
The People-Centric IT Solution
Windows Server 2012 delivered a new solution, Dynamic Access Control, which allows IT
to configure content classification policies, along with dynamic conditional access policies
and actions based on the outcome of the classification process, such as automatically
encrypting documents using Rights Management Services.
With Windows Server 2012 R2, IT can now publish access to corporate resources using
the Web Application Proxy and enforce conditional access policies with multi-factor
authentication. IT can also enable users to sync their files to their devices using Work
Folders, and this includes integration with the Dynamic Access Control policies.
Figure 4 Managing Work Folders with Windows Server
Enabling users to get their work done while providing IT the control that helps them
protect information and remain compliant is an important solution as organizations adopt
BYOD as part of a people-centric model.
Protect Your Data
30. 30
Windows Server 2012 R2
• With the Web Application Proxy, IT administrators can selectively publish corporate
resources to remote users based on user, device, location, and application.
• IT can safeguard data when it’s distributed outside the corporate network by controlling
whether a user can open, modify, print, forward, or take other action with rights-
managed information. Active Directory Rights Management Service protects Microsoft
Office documents and Exchange email by identifying the rights that a user has to the file
and removing the option to perform actions outside those rights.
• IT can set central access policies and classify data to protect important information on
their file servers using Dynamic Access Control, which include the ability to automatically
encrypt documents with Rights Management.
• Using Dynamic Access Control audit functionality, IT can generate reports that show
which users have accessed classified information.
• Using Work Folders, users can synchronize files on corporate servers to their devices
anywhere through a sync service, and IT can apply Dynamic Access Control policies to
this data.
Supporting Features
Feature Description Product
Web Application Proxy Allows the publishing of corporate
resources, including support for
multi-factor authentication and the
enforcement of conditional access
polices when users connect to
resources.
Windows Server 2012 R2
Dynamic Access Control Provides the ability to classify and set
conditional policies for which users and
devices can access certain information,
and allows tasks such as automatically
encrypting with Rights Management.
Windows Server 2012
Windows Server 2012 R2
Work Folders Provides a centralized location on a file
server in the corporate environment
that’s configured to allow the
synchronization of files to user devices.
Work Folders can be published directly
through a reverse proxy or via the
Web Application Proxy for conditional
access policy enforcement.
Windows Server 2012 R2
Protect Your Data
31. 31
Conclusion
Windows Server 2012 R2 gives IT the ability to make sensitive corporate information
available to users, while retaining control over which users and devices can access the
information through the enforcement of conditional access policies.
Enable Multi-factor Authentication and
Rights Management Services
As the enterprise adapts to the proliferation of consumer devices attempting to access the
network, the security model must evolve to allow for consistent secure access to corporate
resources based on a combination of factors, including user, device type, and location.
With tools that enable IT security professionals to manage and federate user identities
and credentials across the organization and into the cloud, Microsoft makes it possible to
provide secure, always available access to the corporate network for users.
Business Requirements
Scenario: John is responsible for the security of the corporate network. In the past,
users were directly connected to the internal network while on site through domain
authentication. For users who needed remote access, it was required that they used
corporate-provided equipment configured with multi-layer authentication procedures.
Now that John’s company is allowing users to work on their own devices from virtually
anywhere, John must create a solution for user devices that enables remote access to
corporate applications and data via highly secure and always-on connections.
IT needs a way develop a multi-layer security solution that allows
remote access to corporate applications and data via secure connections
regardless of the device being used. The users this security model
supports want a consistent authentication process for accessing company
resources. The authentication process must also protect corporate data
from unauthorized access.
The People-Centric IT Solution
Windows Server 2012 R2 provides an information protection solution that includes multi-
factor authentication and data encryption. IT can grant access based on user, device, and
location, and selectively publish corporate resources to remote users, integrating with
multi-factor authentication at the back end and providing a single sign-on experience
for users.
Protect Your Data
32. 32
With the PhoneFactor acquisition (to be rebranded as Windows Azure Active
Authentication), Microsoft has integrated this service into the new Web Application Proxy
role, as well as making it available to Windows Server customers for integration with Active
Directory and other applications.
Windows Server 2012 R2
• IT can control access to company resources based on: the identity of the user, the
identity of the registered device, and the user’s network location (whether the user is
within the corporate boundary or not).
• With the Web Application Proxy, IT can selectively publish corporate resources to
remote users using managed and unmanaged devices.
• With multi-factor authentication integrated into the Web Application Proxy, IT can take
advantage of additional layers of authentication as users and devices connect to the
corporate environment.
Supporting Features
Feature Description Product
Multi-factor
Authentication
Through PhoneFactor (Windows Azure
Active Authentication), IT can apply
additional layers of authentication and
verification of users and devices.
Windows Server 2012 R2
Windows Azure Active
Authentication
Web Application
Proxy Active
Directory Federation
Services
Allows the publishing of corporate resources,
including multi-factor authentication and
the enforcement of conditional access
polices when users connect to resources.
Windows Server 2012 R2
Conclusion
Microsoft is providing IT with new ways to make corporate resources available on
devices that are outside of corporate management or control. IT can use the additional
layers of validation provided to help maintain security and to control access to sensitive
information.
Protect Your Data
34. 34
The consumerization of enterprise IT is an irreversible trend. Organizations that develop clear
goals and policies to accommodate a burgeoning number of personal devices, ubiquitous
information access, and the resulting flexible work styles can benefit from employees who are
more motivated and productive—while still retaining the efficient management and enterprise
security and governance required by IT departments. Microsoft supports and enables the
consumerization of IT and the associated flexible work styles—as part of people-centric IT.
That’s why Microsoft consistently advises customers and partners to look across the entire
consumerization stack—the user, device, applications, and data—to make sure proper policies
and technologies are in place at each level. Rights management, dynamic access control, and
auditing are just as important, if not more so, than the configuration policies for any particular
device.
With an intelligent infrastructure built on Microsoft technologies, organizations can provide easy
access to applications and data so that users can remain productive. With the Microsoft tools,
IT administrators can implement technologies and procedures to manage disparate devices.
Microsoft tools help to protect the organization’s systems, data, and network.
Embracing and managing consumerization goes beyond simply allowing people to choose which
devices they want to use. The people-centric IT solution addresses the following IT requirements:
• Devices must be easily integrated into the corporate infrastructure.
• Devices must be configured to become and remain compliant with corporate access and
security policies as long as they’re used for work.
• Users must be able to access the applications and data they need to be productive in a
consistent way.
• Corporate applications and data must be protected and accessed only by compliant devices.
• Corporate information must be removed from devices when they’re lost, stolen or replaced.
Together, Windows Server 2012 R2, System Center 2012 R2 Configuration Manager, and Windows
Intune help organizations address the consumerization of IT. With the upcoming releases of these
products, organizations can empower their users, unify their environment, and protect their data,
ultimately helping to embrace consumerization and a people-centric IT model, while maintaining
corporate compliance.
Summary
35. 35
Appendix: Summary of Features
Solution Feature Products
Empower Users
Simplify BYOD Registration and
Enrollment
Web Application Proxy
Active Directory Federation Services
(ADFS)
Device Management
Windows Server 2012 R2
System Center 2012 R2
Configuration Manager and
Windows Intune
Enable Consistent Access to
Corporate Resources
Work Folders
Web Application Proxy
Company Portal
Windows Server 2012 R2
System Center 2012 R2
Configuration Manager and
Windows Intune
Enable Modern Work Styles
with Microsoft Virtual Desktop
Infrastructure (VDI)
Session Shadow
Deduplication Storage
Storage Tiering
RemoteApp
Quick Reconnect
Codec and Display Improvements
Windows Server 2012 R2
Automate How Users Connect to
Internal Resources
Web Application Proxy
Support for VPN and Wi-Fi Profiles
Windows Server 2012 R2
System Center 2012 R2
Configuration Manager and
Windows Intune
Unify Your Environment
Extend Your Existing System Center
Configuration Manager Infrastructure
and Manage Mobile Devices through
the Cloud
Unified Management Infrastructure System Center 2012 R2
Configuration Manager and
Windows Intune
Simplify User-Centric Management
Across Devices
Unified Device Management System Center 2012 R2
Configuration Manager and
Windows Intune
Enable Comprehensive Settings
Management Across Platforms
Device Management Policies
Software Distribution
Distribution Point Usage Reports and
Management
System Center 2012 R2
Configuration Manager and
Windows Intune
System Center 2012 R2
Configuration Manager
Summary
36. 36
Define a Common Identity for
Accessing Resources On-Premises and
in the Cloud
Windows Server Active Directory
Domain Services
Windows Azure Active Directory
Windows Server 2012 R2
Windows Azure Active Directory
Solution Feature Products
Protect Your Data
Selectively Wipe Devices Selective Wipe System Center 2012 R2
Configuration Manager and
Windows Intune
Centralize Corporate Information for
Compliance and Data Protection with
Policy-based Access Control
Web Application Proxy
Work Folders
Dynamic Access Control
Windows Server 2012 R2
Windows Server 2012
Windows Server 2012 R2
Enable Multi-factor Authentication
and Rights Management Services
Multifactor Authentication
Web Application Proxy Active
Directory Federation Services
Windows Server 2012 R2
Windows Azure Active
Authentication
Windows Server 2012 R2
Summary