System Center User Group Denmark, April 2015

Protecting Company Data using the Enterprise Mobility Suite

Key TakeawaysWhy is mobile management important?

What is EMS and why do you need it?

How do we get started with EMS?

© EG A/S 2

Ronni PedersenMicrosoft MVP: Enterprise Client Management

Senior Infrastructure Architect

Founder: System Center User Group Denmark

Microsoft Certified Trainer

Microsoft TechNet Moderator

Twitter: https://twitter.com/ronnipedersen

Blog: http://www.ronnipedersen.com/

Mail: Ronni.Pedersen@eg.dk

© EG A/S 3

WARNING !!!!This is not technical training so please join the discussion

This is a User Group, not a class room

Enterprise Mobility Suite

• SCCM is undisputed winner

of PC Mgmt w/ >70% share

• You need to look into a MDM

solution today

• I believe Microsoft is the

long-term winner

Growth is all in Mobile Devices

349 315 296 294 293 292

725

1,0101,131

1,2831,434

1,579162

231

270

308

340

368

0

500

1,000

1,500

2,000

2,500

1 2 3 4 5 6

Series3 Series2

Series1

Devices Shipments (MM)

Source: IDC

LicensingMicrosoft Intune (Standalone)

Enterprise Mobility SuiteMicrosoft IntuneAzure Active Directory PremiumAzure Rights Management

Enterprise Cloud SuiteEnterprise Mobility SuiteOffice 365 Enterprise E3Windows Software Assurance (Per User)

http://www.microsoft.com/licensing/about-licensing/briefs/enterprise-cloud-suite.aspx

© EG A/S 7

Enterprise Mobility SuiteMicrosoft Intune

Mobile and Device Management

Azure Active Directory PremiumHybrid Identity Management

Azure Rights ManagementInformation Protection

© EG A/S 8

User Group DiscussionWhy do we need to manage our mobile devices?

Getting Started with IntuneSetting up the environment

Process Overview

Prepare

• Create Accounts for cloud services

• Create Subscriptions

Deploy

• Add Public DNS

• Configure AD Users with Public Domain UPNs

• Deploy and Configure Azure AD Sync

Configure

• Configure Configuration Manager for Mobile Device Management

• Configure Device Enrolment

© EG A/S 11

Create accounts for the cloudStart by creating dedicated admin accounts:

Microsoft account: https://signup.live.com/

Apple ID: https://appleid.apple.com/account

Google account: https://accounts.google.com/Signup

© EG A/S 12

Create the trial subscriptionsMicrosoft Office 365:http://aka.ms/ITcampO365Trial

Microsoft Intune:http://aka.ms/tryintune

Microsoft Azure Active Directory (AD) Premium:http://azure.microsoft.com/en-us/pricing/free-trial

Azure Rights Management:https://manage.windowsazure.com

© EG A/S 13

Single management console for IT admins

© EG A/S 14

DEMOConfiguring Microsoft Intune

User Group DiscussionMicrosoft Intune Standalone or Hybrid with SCCM?

Device Enrolment

ITUser

Devicesenrolled

Apply policies

Company Portal

Recommended apps for user’s devices

ITUser

Mobile Device – Personal vs Corporate

App Management

By default, user-enrolled devices are “Personal”

Complete inventory of all Apps on the device only when set to Corporate

Only the admin can specify corporate-owned devices !

Personal

vs.

Corporate Owned

Devices

DEMODevice Enrollment and Inventory

User Group DiscussionWhy would our users enrol their devices?

What's the benefit?

Conditional Access

Conditional access for Office 365

7

5

4

2

1

3

6

Intuitive end-user experience

To access your Contoso e-mail and other company resources, this device needs to be enrolled with Contoso. Part of this process includes installing the Company Portal. Click first link below to begin this process.

Step 1Enroll your device.

Step 2Once you’ve enrolled your device, click here to Activate your enrollment.

DEMOConditional Access

Mobile Application Management

Mobile Application Management

© EG A/S 28

Personal apps

Mobile Application Management

© EG A/S 29

DEMOMobile Application Management

Questions

© EG A/S 31

© EG A/S 32