Pat Fetty – Principal PM Manager Securing your mobile assets with Microsoft Intune WIN33 1

Protect your data Enable your users Unify Your Environment DevicesAppsData Help organizations enable their users to be productive on the devices they love while helping ensure corporate assets are secure

SharePoint Server Exchange Server CORPORATE NETWORK Mobile devices PCs Browsers INTERNET DMZ Active Directory Policies Filter EAS Filter web access Filter or block mobile app access Block unmanaged devices Prevent downloads Force multi-factor authentication Require domain joined Force traffic via proxy/VPN

SharePoint Server Exchange Server CORPORATE NETWORK Mobile devices PCs Browsers INTERNETDMZ Active Directory The perimeter can not help protect data Challenge Solution Access control and data containment integrated natively in the apps, devices, and the cloud.

Native Mail Managed Browser LoB SharePoint Exchange CORPORATE NETWORK DMZ AD Azure ADAccess Control, MFA, SSO IntuneDevice policy, data containment Azure RMSFile level protection & policy Enterprise Mobility Suite Data Protection Layers

Containers 1.Depend on specific DMZ infrastructure 2.Work on premise only SharePoint Server Exchange Server CORPORATE NETWORK DMZ Active Directory SDK/wrapper, helper apps Managed browser, viewers Mobile application management Custom app Custom file app Custom collab app Native device MDM

SDK/wrapper, helper apps Managed browser, viewers Managed Office productivity SharePoint Server Exchange Server CORPORATE NETWORK DMZ Active Directory

The more IT control, the more “as appropriate” access for employees Unknown DevicePersonal DeviceManaged DeviceShared Device Example Kiosk at a hotelPersonal iPad or home PCCompany provided phoneMobile retail point of sale tablet Type of user Information Worker Task Worker What can you access Employees can access corporate data only within a protected browser session Employees can use mobile productivity apps controlled by IT to prevent leakage Employees can access all mobile apps, access the corporate network, and sync corporate documents Employees use the specific shared apps needed for their tasks What you can’t access Employees can’t download anything Employees can’t access the corporate network, sync data, use private apps Employees get full access per IT policy Anything else What’s managed Browser sessionMobile productivity apps and a managed browser All mobile devices or PC plus all the apps A locked down device with specific apps Key features Web CA Web session protection MFA Desktop and MAM CA MAM Service, RMS, ARA, MFA Device CA MDM + MAM RMS, ARA, MFA Win 10 provision profile DEP/Configurator Kiosk Mode New

Intune Device Management Office 365 Productivity Azure AD Identity and Access

Intune Config Mgr (on-premise) Deployment choices

Cloud-hosted corporate data protection Best end-user experience for mobile productivity World-class engineering and security with a single support system and 3 rd -party ecosystem Complete solution for application and device management, access, identity, productivity, and data protection

Continue your Ignite learning path Visit Microsoft Virtual Academy for free online training visit Visit Channel 9 to access a wide range of Microsoft training and event recordings Head to the TechNet Eval Centre to download trials of the latest Microsoft products

Microsoft Confidential - Shared under NDA

Continue your Ignite learning path Visit Microsoft Virtual Academy for free online training visit Visit Channel 9 to access a wide range of Microsoft training and event recordings Head to the TechNet Eval Centre to download trials of the latest Microsoft products