My slide deck from the MWS summit. Device security and management with tools like EMS, Intune, Azure Active Directory and Office 365 http://mwssummit.com/agenda/windows-10-summit-agenda/

1. Olav Tvedt
MVP Cloud & Server installation and servicing
@olavtwitt
olavtvedt.blogspot.com

2. olavtwitt
Chief Consultant Blogs:
olavtvedt.blogspot.com
blogs.technet.com/technetnorge
MVP – CSIS
Cloud & Server
Installation and Servicing
• The Third Blues Brother
Olav Tvedt

3. • Past, Present And The Future
• Management
• User Benefits
@olavtwitt
Agenda

5. 5

6. Tools For
Business

7. Tools For
Productivity

8. 52% of information workers
across 17 countries report
using three or more devices
for work*
>80% of employees admit to
using non-approved software-
as-a-service (SaaS) applications
in their jobs***
90% of enterprises will have
two or more mobile operating
systems to support in 2017**
Mobility is the new normal
52% 90% >80%
* Forrester Research: “BT Futures Report: Info workers will erase boundary between enterprise & consumer technologies,” Feb. 21, 2013
** Gartner Source: Press Release, Oct. 25, 2012, http://www.gartner.com/newsroom/id/2213115
*** http://www.computing.co.uk/ctg/news/2321750/more-than-80-per-cent-of-employees-use-non-approved-saas-apps-report

9. Goal Is Too
Attract,
Enable And
Motivate
But Still
Remain
Control

10. • Identity And Access
• Device Management
• Application Management
• Content Management
@olavtwitt
Key Points

11. Olav Tvedt
@olavtwitt
olavtvedt.blogspot.com

12. Identity And Access
Microsoft apps
Non-MS
cloud-based apps
Active Directory
Active Directory
Microsoft
Account
(Personal)
Other
Accounts
(Personal)
Capabilities
• Single Sign on Identity
• Multifactor
Authentication
• High Value Asset
Protection
• Single Console
Device Management
PERIMETER
Other
Directories
Custom
LOB apps
ISV/CSV
apps
PCs and devices

13. Azure Active Directory
Self-service Single
sign on
•••••••••••
Username
Simple
connection
Cloud
SaaS
Azure
Office 365Intune
Other
Directories
Windows Server
Active Directory
On-premises Microsoft Azure Active Directory

14. Monitoring
Users Activity

15. https://remote.modern.ie/

16. Azure Side
New Installation Experience
Existing PC Experience
Forgotten Password
#olavtwitt

17. Olav Tvedt
@olavtwitt
olavtvedt.blogspot.com

18. Device & Application Management
Capabilities
• Hybrid Identity
• Single Console
Device Management
• Deploy and
manage apps
• Deploy and
manage devices
Active Directory
Identity
Microsoft
Intune Azure AD
Enterprise
Certificate Services
System Center 2012 R2
Configuration Manager
CLOUD PERIMETER
Microsoft
Azure

19. Unified device management
Application
management
Comprehensive
Windows, Linux, and
Mac management
Mobile device
management
User IT
SystemCenter
ConfigurationManager

20. Installing The Agent
Configuring InTune
Policies
#olavtwitt

21. Olav Tvedt
@olavtwitt
olavtvedt.blogspot.com

22. Content management
Capabilities
• Hybrid Identity / SSO
• Multifactor
Authentication
• High Value Asset
Protection
• Single Console Device
Management
Active Directory
Identity
Azure Rights
Management System
Microsoft
Intune
Trusted Platform Module
Encryption File System
Encrypting Hard Drives
Azure AD
Premium
Enterprise
Certificate Services
Securing the Boot
UEFI
TPM
Trusted Boot
Measured Boot
Securing the Code and Core
Security Development Lifecycle (SDL)
Address space layout
randomization (ASLR)
Data Execution Prevention (DEP)
System Center 2012 R2
Configuration Manager
CLOUD PERIMETER
Microsoft
Azure

23. Email profile management
Corporate email server
ITUser
Deploy email profile on enrollment
• Configure account settings and security restrictions
• Enable certificate authentication
• Synchronize email, task, contacts, and calendar
• Support for iOS, Samsung KNOX, and Windows Phone
Any email service supported by Exchange ActiveSync
Microsoft Intune

24. Conditional access to email
Policy
verification
•••••••••
Username
Microsoft Intune
Required settings
defined by IT admin:
Enrolled device
Encrypted device
Passcode set
Admin console
Not jailbroken/rooted
IT
ITUser

25. Conditional access to email
Policy
verification
•••••••••
Username
Microsoft Intune
Required settings
defined by IT admin:
Enrolled device
Encrypted device
Passcode set
Admin console
Not jailbroken/rooted
IT
ITUser

26. Mobile data protection
Protect corporate data
accessed from devices
On-premises
Protect corporate data
cached on devices
User IT

27. Installing The Agent
Configuring InTune
Policies
#olavtwitt

28. Goal Is Too
Attract,
Enable And
Motivate
But Still
Remain
Control

29. • Patch Management
• Application
• Configuration
• Windows Firewall Settings
• Custom Configuration
• General Configuration
• SCEP Certificate Profile
• Trusted Certificate Profile
• VPN Profile
• Email Profile (Phones)
• Wi-Fi Import
• Self Service Portal
• Password reset
• Device Management
User Benefits

30. Thank you to the exhibitors!
Make sure to visit
the booths