20
Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune Andrew Kosmadakis PCIT315

TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Embed Size (px)

DESCRIPTION

TechEd NZ 2014 - PCIT315 - Andrew Kosmadakis Come hear about the latest in enterprise mobility management using Windows Intune and System Center 2012 R2 Configuration Manager. See the newest Windows Intune enhancements for managing Windows Phone, iOS and Android systems in action and learn about the newest features in Configuration Manager. We’ll demonstrate how Configuration Manager and Windows Intune work together to offer a single, seamless cross platform device management solution.

Citation preview

Page 1: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Andrew KosmadakisPCIT315

Page 2: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Desktop Virtualization

Access & informatio

n protection

Hybrididentity

Mobile device & application

management

PCIT/Enterprise Mobility

Page 3: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Today’s challenges

User Devices Apps Data IT

Page 4: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Mobile Device Management

Unify your environment

On-premises and cloud-based management of devices within a single console.

Simplified, user-centric application management across devices

Comprehensive settings management across platforms, including certificates, VPNs, and wireless network profiles

Enable users

Access to company resources consistently across devices

Simplified registration and enrollment of devices

Synchronized corporate data

Protect your data

Protect corporate information by selectively wiping apps and data from retired/lost devices

A common identity for accessing resources on-premises and in the cloud

Identify which mobile devices have been compromised

Page 5: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Configuration Manager MDM FeaturesFeatures• Over the air device enrollment• Self service portal for end users• User-targeted available application deployment (device agnostic)• User and device settings management• Device inventory• Compliance Settings• Corporate Resource Access

Page 6: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Enrolling Devices

6

Windows Intune Connector

Azure AD Sync &Authentication

Page 7: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Windows Intune Connector Requirements

CertificatesSymantec Code Signing CertificateWindows Code Signing Certificate Apple Push APN Certificate

SubscriptionsWindows IntuneWindows Dev CenterApple ID Others

Windows Sideloading KeysCompany Branding (Optional)

Page 8: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Demo

Windows Intune Connector

Page 9: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Applications

Native appsWindows (Modern Apps)Windows Phone iOSAndroid

Deep Linked appsWindows StoreApp Store Google Play

Page 10: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Native Applications

*Only mobile platform application examples are shown.

Platform Type*

Windows 8.x and Windows RT

.appx

.appxbundle

Windows Phone 8 .xap

Windows Phone 8.1 .xap

.appx

.appxbundleiOS .ipa

.plist (manifest file)Android .apk

Page 11: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Demo

Application Deployment

Page 12: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Mobile Device Settings in ConfigMgr 2012 R2Category Win 8.1 PC &

RTWP8.1 (New!)

iOS Android

VPN

Wi-Fi

Certificates

Email

Password

Device restrictions

Store access

Browsers

Content Rating

Cloud Synch

Encryption

Security

Roaming

Windows Server Work Folders

* Note: Table applicable to direct MDM and not EAS

Page 13: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Configuration Manager Extensions for Windows Intune• Rapid delivery of Configuration Manager features to support

new Mobile Device Management features through Windows Intune

• Updates are automatically downloaded to Central Administration Site (CAS) and optionally enabled through admin console.

Admin is notified that an

extension is available

when console is launched

Admin goes to

Extensions for

Intune in console,

and enables the extension

Extension is activated in ConfigMgr• (Extension

enables on all site system, then console updates are avail)

Admin restarts console,

and console is updated with the

extension

Admin uses feature

delivered by the

extension

Admin may wish to

disable the extension

Page 14: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Desktop Virtualization

Access & informatio

n protection

Hybrididentity

Mobile device & application

management

PCIT/Enterprise Mobility

Page 15: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Enterprise Mobility SuiteHybrid Identity Management(via Azure Active Directory Premium)

• Group management• Self Service Password Reset• Security audit reports• Multi-Factor Authentication – On and

Off Premise• Single Sign On• SaaS Applications• Custom Branding

Mobile Device and Application Management

• Simple Enrollment• Device Compliance• Application Deployment• Consistent User Experience• Single Console Management

Access and Information Protection• Azure Rights Management• Single Identity Management• Secure Access to Work Data

Virtual Desktop• RemoteApp• Remote Desktop Services – Host

Session• Remote Desktop Services – VDI• Platform Agnostic • Offers Security Flexibility

Page 16: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Mobile Device Management Summary

Enable Protect

Unify

Page 17: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Related content

Last day and session…..Go to Channel 9 on MSDN – Look for TechEd New Zealand

Find Me Later At The Hub……

Page 18: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Resources

TechNet & MSDN FlashSubscribe to our fortnightly newsletter

http://aka.ms/technetnz http://aka.ms/msdnnz

TechNet Virtual LabsFree Virtual Hands-on Labs

http://aka.ms/ch9nz

Microsoft Virtual AcademyFree Online Learning

http://aka.ms/mva http://aka.ms/technetlabs

Sessions on Demand

Page 19: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

Complete your session evaluation now and win!

Page 20: TechEd NZ 2014: Enterprise Management with Microsoft System Center Configuration Manager and Windows Intune

© 2014 Microsoft Corporation. All rights reserved.Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.