Microsoft Intune MAM without Device Enrollment TechReady 18 9/18/2018 Microsoft Intune MAM without Device Enrollment Enabling users to be productive is critical for organization to stay competitive in the modern world, but organizations also need to ensure that their corporate data is protected while their employees are on-the-go. © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Multiple layers of protection User IT Identify and authorize user Enterprise Mobility Suite Active Directory Premium Apply device policies Apply application policies Rights Management Apply content policies

Mobile App Management without MDM 9/18/2018 Mobile App Management without MDM MAM policies Corporate apps Enable familiar Office experiences for employees and contractors without the need for device enrollment. Multi-identity support allows the user to access both personal and work accounts using the same Office mobile apps on iOS and Android MDM – optional (Intune or 3rd-party) Provide comprehensive protection through app encryption at rest, app access control, and prevent data leakage for Office mobile and other apps on unmanaged devices or devices managed by a third- party MDM. Personal apps MDM policies © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Mobile Application Management Policies IT Personal apps Managed apps Enforce corporate data access requirements Prevent data leakage on the device Enforce encryption of app data at rest App-level selective wipe

9/18/2018 1 . Enrollment Workflow 1 User installs an app from the Apple App Store or Google Play Office 365 2 User logs in with Office 365 credentials Azure AD 3 Azure AD verifies that the app and user are allowed to access Office 365 4 Intune applies MAM policies to the managed apps 5 Access to Office 365 is granted User 6 User continues to use the app as per usual © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Available Now on Android MAM enabled Apps Available Now on iOS Available Now on Android Microsoft apps, such as Office, Dynamics CRM, Power BI, and more Partners that integrated their apps with Intune App SDK Coming Soon: https://www.microsoft.com/en-us/server-cloud/products/microsoft-intune/partners.aspx

New Launch Experience Microsoft Ignite 2015 9/18/2018 2:58 AM © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Admin & User Experience

Wipe corporate-only data from old devices IT Personal apps Managed apps Perform selective wipe with time-based controls Remove managed app data Keep personal apps and data intact

Tips, Tricks, Documentation & Resources Users targeted by Conditional Access need to enroll their devices Don’t target “All users”, target specific security group instead Exchange ActiveSync ABQ rules need to be configured to block native email clients Make sure to allow “Outlook” Android devices require the Company Portal app to be installed, but not enrolled A single PIN is shared across all apps Azure portal (https://portal.azure.com) Navigate to Browse -> Intune Launch blog post: http://blogs.technet.com/b/microsoftintune/archive/2015/11/17/enhancing-managed-mobile- productivity.aspx TechNet documentation: https://technet.microsoft.com/en-us/library/mt627825.aspx

© 2014 Microsoft Corporation. All rights reserved © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.