3. Traditional Management – landscape of yesterday
Active Directory
Group Policy
System Center
Configuration Manager
4. Modern Management – the new landscape
Azure Active
Directory
Office 365
Microsoft
Intune
Windows
Analytics
Windows Store
for Business
Azure
Information
Protection
6. Modern Management use case
• Your users are the center of the Universe
• Secure your corporate data and identities
• Secure the device
• Deploy only profiles to devices when it makes sense
• Use self-service
13. What is new
• New CSP settings
• CleanPC
• Bitlocker
• Dynamic Management
• Office 365
• Enterprise AppV Management
• Windows Licensing
• Change Product Key
• The first ever – Microsoft Security Baseline for MDM
15. What is new
• New easy troubleshooting
• New CSP settings
• Firewall
• Windows Defender Application Guard
• Local Security Policy
• Windows Defender Security Center
16. Windows Autopilot in the future
• Self-service deployment for Active Directory domain-joined devices
• Enhanced personalization for self-service deployment
• Windows AutoPilot Reset
17. Login from
everywhere
Anywhere-
access to Office
documents
Manage and
secure any
device
Monitor
everywhere
Get apps
Everywhere
Office
everywhere,
encryption
everywhere
Microsoft Cloud & Client Management
How safe do you think your information is?
About the presenter:
Please do not hesitate to ask questions during the presentation, we will have a Q&A at the end of the presentation but I prefer a open dialog and see where it will take us
About me:
Microsoft MVP - Enterprise Mobility, Solution Architect, Technical Lead Microsoft Enterprise Mobility Suite (EMS) and Microsoft Partner Technology Solutions Professional (P-TSP)
Co-Owner of Everything Windows User Group Denmark
Find me:
E-mail: per.larsen@atea.dk
Phone: +45 3078 1828
Follow me:
Twitter: https://twitter.com/perlarsen1975/
LinkedIn: https://www.linkedin.com/in/perlarsen1975/
Blog: https://osddeployment.dk
Join me:
Everything User Group Denmark: http://ewug.dk
System Center Configuration Manager – is still a tool that is needed for a total management scenario, and it will be the tool to use for at least the next decade.
Lower TCO
Secure mobility
The new cloud way
Windows 10: IT wants to manage PCs like phones
http://computerworld.com/article/3200273/microsoft-windows/windows-10-it-wants-to-manage-pcs-like-phones.html
Survey by analysts CCS Insight
83% Within 3 years
44% Within 1 years
Windows 10 is born for Modern Management
Windows 10 med Modern Device Management
Your users are the center of the universe –
- IT department does not need to image or reimage devices - the user can just reset the device and re-enroll with there corporate identity
Secure your corporate data and identities
- We can help secure corporate data on any device, and secure identities from threats
Secure the device
- We can secure devices with encryption, use Device Guard to ensure that the devices is only running trusted applications
- Helps enterprise customers to detect, investigate, and respond to advanced and targeted attacks.
- Windows Update for Business
Deploy only profiles to devices when it makes sense
- Deploy profiles to configure Windows and applications
Use self-service
- Use company portal as a end-user self-service portal for application, and app portal for SSO with 2800+ applicatiions
- AutoPilot to get the device inside the coporate domain
Do you image your devices???
No more:
Installing Windows with DVD, USB or PXE
Updating Windows from WSUS or ConfigMgr
No more reimaging Windows devices
No more calling ServiceDesk for help
Microsoft Azure Active Directory
Microsoft Azure Active Directory
How to use Windows Autopilot from Microsoft Windows Store for Business(WSfB)
https://osddeployment.dk/2017/07/20/how-to-use-windows-autopilot-from-microsoft-windows-store-for-businesswsfb/
What's new in Windows 10, version 1703
https://docs.microsoft.com/en-us/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#a-href-idwhatsnew10awhats-new-in-windows-10-version-1703
Security baseline for Windows 10 “Creators Update” (v1703) – FINAL
https://blogs.technet.microsoft.com/secguide/2017/08/30/security-baseline-for-windows-10-creators-update-v1703-final/
What's new in Windows 10, version 1709
https://docs.microsoft.com/en-us/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#a-href-idwhatsnew1709awhats-new-in-windows-10-version-1709
How to setup local security policy with Intune on Windows 10 1709 with Graph API
https://osddeployment.dk/2017/09/16/how-to-setup-local-security-policy-with-intune-on-windows-10-1709-with-graph-api/
How to configure and customize Windows Defender Security Center with Intune
https://osddeployment.dk/2017/09/03/how-to-configure-and-customize-windows-defender-security-center-with-intune/
New capabilities to Windows AutoPilot that will be added in the Windows 10 Fall Creators Update release later this year include:
Self-service deployment for Active Directory domain-joined devices – Windows AutoPilot Deployment will enable self-service deployment capabilities to get new Windows 10 devices into an Active Directory domain-joined state along with Microsoft Intune enrollment.
Enhanced personalization for self-service deployment – Windows AutoPilot will offer the ability to pre-assign a new Windows 10 device to a specific user in your organization and deliver a highly-personalized OOBE.
Windows AutoPilot Reset – A new reset capability In Windows AutoPilot will enable organizations to easily reset their configured devices while still maintaining MDM enrollment and the Azure AD join state, and automatically get the device back into a business-ready state.
Lower TCO
Secure mobility
The new cloud way
Windows 10: IT wants to manage PCs like phones
http://computerworld.com/article/3200273/microsoft-windows/windows-10-it-wants-to-manage-pcs-like-phones.html
Survey by analysts CCS Insight
83% Within 3 years
44% Within 1 years