Define a mobile management strategy that fits the needs of your organization. Apply flexible mobile device and app management controls that let employees work with the devices and apps they choose while protecting your company information.

1. Microsoft Intune
Mobile device and application
management from the cloud

2. MDM Deployment Options
Overview
Mobile Application Management
(MAM)
Summary
Agenda

3. Mobile Application
Management (MAM)
PC managementMobile Device
Management (MDM)
ITUser
Microsoft Intune
Intune helps organizations provide their employees with access to corporate
applications, data, and resources from virtually anywhere on almost any
device, while helping to keep corporate information secure.

4. Information
protection
Identity-driven
security
Managed mobile
productivity
Identity and access
management
Azure Information
Protection Premium P2
Intelligent classification and
encryption for files shared
inside and outside your
organization
(includes all capabilities in P1)
Azure Information
Protection Premium P1
Encryption for all files and
storage locations
Cloud-based file tracking
Microsoft Cloud
App Security
Enterprise-grade visibility,
control, and protection for
your cloud applications
Microsoft Advanced
Threat Analytics
Protection from advanced
targeted attacks leveraging
user and entity behavioral
analytics
Microsoft Intune
Mobile device and app
management to protect
corporate apps and data on
any device
Azure Active Directory
Premium P2
Identity and access
management with advanced
protection for users and
privileged identities
(includes all capabilities in P1)
Azure Active Directory
Premium P1
Secure single sign-on to
cloud and on-premises apps
MFA, conditional access, and
advanced security reporting
EMS
E3
EMS
E5

5. MDM Deployment Options

6. Mobile devices and PCs Mobile devices
System Center
Configuration
Manager
Domain joined PCs
Configuration Manager integrated with Intune (hybrid)Intune standalone (cloud only)
IT IT
Intune web console Configuration Manager console

7. Mobile devices and PCs
Intune standalone (cloud only)
IT
Intune web console
Manage and Protect
• No existing infrastructure necessary
• No existing Configuration Manager
deployment required
• Simplified policy control
• Simple web-based administration console
• Faster cadence of updates
• Always up-to-date
Devices Supported
• Windows PCs (x86/64)
• Windows RT
• iOS
• Android
• OS X

8. Mobile devices
System Center
Configuration
Manager
Domain joined PCs
Configuration Manager integrated with Intune (hybrid)
IT
Configuration Manager console
System Center Configuration Manager
with Microsoft Intune
• Build on existing Configuration Manager
deployment
• Full PC management (OS deployment, endpoint
protection, application delivery control, custom
reporting)
• Deep policy control requirements
• Greater scalability
• Extensible administration tools (RBA, PowerShell,
SQL reporting services)
• Windows RT
• iOS
• Android
Devices Supported
• Windows PCs
(x86/64)
• Windows to Go
• Windows Server
• Linux
• OS X

9. Category Feature Microsoft Intune
(cloud only)
Intune + ConfigMgr
(hybrid)
Device
configuration
Inventory mobile devices that access corporate applications ● ●
Remote factory reset (full device wipe) ● ●
Mobile device configuration settings (PIN length, PIN required, lock time, etc.) ● ●
Self-service password reset (Office 365 cloud only users) ● ●
Office365
Provides reporting on devices that do not meet IT policy ● ●
Group-based policies and reporting (ability to use groups for targeted device configuration) ● ●
Root and jailbreak detection ● ●
Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective wipe) ● ●
Prevent access to corporate email and documents based upon device enrollment and compliance policies ● ●
Premium
mobiledevice&
appmanagement
Self-service Company Portal for users to enroll their own devices and install corporate apps ● ●
App deployment (Windows Phone, iOS, Android) ● ●
Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles ● ●
Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application management) ● ●
Secure content viewing via Managed Browser, PDF Viewer, Image Viewer, and AV Player apps for Intune ● ●
Remote device lock via self-service Company Portal and via admin console ● ●
PC
management
Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) ● ●
PC software management ● ●
Comprehensive PC management (e.g. Group Policy, login scripts, BitLocker management, virtual desktop and
power management, custom reporting, etc.) ●
Windows Server/Linux/UNIX/Mac OS X support ●
OS deployment and imaging ●

11. Consistent experience across Windows,
Android, and iOS
Discover and install corporate apps
Manage devices and data
Ability to contact IT
Customizable terms and conditions

12. Mobile Application
Management (MAM)

13. Maximize mobile productivity and protect corporate resources
with Office mobile apps – including multi-identity support
Extend these capabilities to your existing line-of-business
apps using the Intune App Wrapping Tool
Enable secure viewing of content using the Managed Browser,
PDF Viewer, AV Player, and Image Viewer apps
Managed apps
Personal appsPersonal apps
Managed apps
ITUser
Corporate
data
Personal
data
Multi-identity policy

14. Personal apps
Managed apps
Maximize productivity while preventing leakage of company
data by restricting actions such as copy, cut, paste, and save
as between Intune-managed apps and unmanaged apps
User

15. Conditional
access policies
IP Range
Device State
Advanced
Windows 10
options
User Group
User
On-premises
Cloud
Corporate
apps

16. Bulk Enrollments

17. Device Enrollment
Manager (DEM)
account
Apple
Configurator
Apple Device
Enrollment Program
(DEP)
Windows AutoPilot
Windows 10
provisioning profile

18. Enrolls devices
on behalf
of users
Apply policies
ITDevice
Enrollment
Manager
Distributes
to users Restaurant School Retail Store

19. Export device enrollment
profile from Intune
Configure iOS
devices with the
Apple Configurator
iOS devices will
automatically enroll on
first power on
Import to Apple
Configurator
ITUser

20. User IT

21. Summary
Deployment
flexibility
Modern
architecture
Enable
enterprise mobility with
EMS

22. Enroll
• Provide a self-service Company
Portal for users to enroll devices
• Deliver custom terms and
conditions at enrollment
• Bulk enroll devices using Apple
Configurator or service account
• Restrict access to Exchange
email if a device is not enrolled
Retire
• Revoke access to corporate
resources
• Perform selective wipe
• Audit lost and stolen devices
Provision
• Deploy certificates, email, VPN,
and WiFi profiles
• Deploy device security policy
settings
• Install mandatory apps
• Deploy app restriction policies
• Deploy data protection policies
Manage and Protect
• Restrict access to corporate
resources if policies are violated
(e.g., jailbroken device)
• Protect corporate data by
restricting actions such as copy, cut,
paste, and save as between Intune-
managed apps and personal apps
• Report on device and app
compliance
User IT

23. ▪ Sign up for a free trial.
▪ Request an enterprise mobility proof-of-
concept from your account team or partner
▪ Find a partner with competency in devices,
deployment, identity, and access
▪ Take advantage of your Software Assurance
Planning Services benefits
▪ Learn more about our enterprise mobility products
and solutions:
▪ Enterprise Mobility Suite:
aka.ms/EnterpriseMobilitySuite
▪ Mobile device and application management
▪ Microsoft Intune:
aka.ms/MicrosoftIntune
▪ System Center Configuration Manager

24. ‫جزيال‬ ‫شكرا‬
THANK YOU
☺