1. Mobile device and app management with Microsoft Intune
BRK2015
Mobile device and app management with Microsoft Intune
Terrell Cox,
Partner GPM, Microsoft Intune
Dilip Radhakrishnan,
Principal PM Manager, Microsoft Intune
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Agenda Intune’s role in Microsoft 365 & Market momentum
6/17/2018 4:31 PM
Agenda
Intune’s role in Microsoft 365 & Market momentum
Advancements in Unified Endpoint Management (UEM)
What’s new in Intune?
Securing O365 with Intune & EMS – A customer perspective
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Microsoft 365
A complete, intelligent solution to empower employees to be creative and work together, securely.
Office Windows 10 + Enterprise Mobility + Security

4. 6/17/2018 4:31 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Customers Front and Center
6/17/2018 4:31 PM
Customers Front and Center
Usage over sales
Multiple programs to help customers deploy (Partners, FastTrack, CAT, etc.)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Microsoft EMS Momentum
Microsoft Inspire
Microsoft EMS Momentum
“Text…”
Enterprise Mobility installed base increased to over 50 million / 55k customers
Enterprise Mobility customers grew 57% Y/Y
Key points to land
• Momentum is already incredible

7. Right Intune for Any Organization
6/17/2018 4:31 PM
Right Intune for Any Organization
Intune for Enterprises
Intune for Education
Intune for SMBs
Public preview
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Intune for Education
Intune service with a customized IT Pro experience targeting Educators
Simple enrollment
Bring devices under management simply by Azure AD joining
Easy deployment
Full IT service or delegate with USB setup key
Zero touch management
Apps and settings applied to each enrolled device by default
Easier shared device management
Each user can get different settings/apps if required
Designed for education
Easy to use for common school scenarios and settings
Scales to your environment
Easy for part-time IT staff yet integrates with SCCM
Easy to buy
Purchase per-device or per-user
Pre-release simulated screenshot shown, final experience may differ
MICROSOFT CONFIDENTIAL for Microsoft Education partners only 8

9. Mobile Device and App Gateway
6/17/2018 4:31 PM
Intune on Azure
Key Benefits:
New administrative console optimized for cross EMS (Azure AD Premium + Intune) workflows, including conditional access and role-based access control
Allows for easy integration and task automation with other IT systems and Microsoft services by offering complete API support through Microsoft Graph
New service platform runs on any browser, on any device with increased scalability and deeper reporting capabilities
Graph API
Admin
Console
(Ibiza)
Mobile Device and App Gateway
Micro-services
Azure Storage
Intune (on Azure)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Demo- Intune on Azure Terrell Cox 6/17/2018 4:31 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Advancements in Unified Endpoint Management (UEM)
6/17/2018 4:31 PM
Advancements in Unified Endpoint Management (UEM)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Simplify Windows 10 management and lower TCO with EMS
Users Apps
6/17/2018 4:31 PM
Simplify Windows 10 management and lower TCO with EMS
Simplified management & security
Embrace cloud-based management and transition at your pace while staying in control.
Always up to date
Deliver the latest features and security.
Cloud updates mean you don’t need to have on-premise update servers.
Microsoft 365
EMS
Agentless
Unified identity, device and O365 ProPlus mgmt.
Office 365
ProPlus MGMT
Integrated
data protection
Control what updates are deployed, to whom and when.
Self-service deployment
Make any new PC enterprise-ready via a simple self-service experience.
Proactive insights
Get ongoing proactive insights to diagnose and fix issues before they happen.
Windows 10
Sign in with contoso.microsoft.com
Contoso Sign in
Corp. Username
Password
Certificate
Automatically configure devices when your users login with their company credentials.
Use cloud intelligence to upgrade Windows 10 and Office 365 ProPlus with confidence.
Next
Microsoft Intune Learn more at microsoft.com/intune
Enterprise Mobility + Security
Learn more at microsoft.com/ems
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Paths to Modern Management
6/17/2018 4:31 PM
Paths to Modern Management
A new organization starting with modern workplace
Cloud-first
Many workloads need to be modernized at the same time
Big Switch Transition
Doesn't address the needs of the full organization
Group by Group Transition
Iteratively move workloads to modern
Iterative (“Co-management”)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Modern is not “all or nothing”
6/17/2018 4:31 PM
Co-Management
A practical way to migrate over time
Modern is not “all or nothing”
Minimize risk
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Mac device management options
6/17/2018 4:31 PM
Mac device management options
+ EMS
Intune Managed
Jamf Managed, Intune Compliant
Basic platform MDM management. Ideal for:
Corp owned
Deploying certs, pw configuration, apps
Limiting access to compliant Macs
Protection with device wipe, encryption
Advanced MDM management. Ideal for:
Zero-touch deployments
Extensive inventory
Depth security controls
Self Service app catalog
Limiting access to compliant Macs
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. EMS + Jamf partnership Customer value prop
Allows Jamf managed Macs to be evaluated for compliance by Intune to secure access to corporate resources
Jamf sends device inventory to Intune
Intune evaluates compliance to block unmanaged or non compliant Macs

17. EMS + Jamf Intune device compliance for Jamf managed Macs
Available later this year
Contact your Intune rep
1. Mac is managed by Jamf Pro
3. Jamf sends macOS device inventory to Intune
7. Allow access from compliant devices
Intune
Azure AD
8. Block access from noncompliant devices
2. Mac is registered with Intune
Microsoft EMS
4. Intune evaluates compliance
5. Generates compliance report
6. Azure AD enforces Conditional Access
9. User-friendly remediation experience provided by Intune and Jamf

18. Demo- Intune + Jamf Dean Hager CEO Jamf 6/17/2018 4:31 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. iOS device management options
6/17/2018 4:31 PM
iOS device management options
Non-managed
Data protection at the app level. Ideal for:
BYOD without full device management
App data protection
Managed
Conventional MDM management. Ideal for:
Device configuration, VPP, SSO, ASM
Userless, Kiosk or Classroom devices
Devices that need to be supervised
Enrollment via DEP or Company Portal
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. What’s New for iOS – Available Now
6/17/2018 4:31 PM
What’s New for iOS – Available Now
Device Configuration
Domains
Home Screen layout (supervised)
Autonomous single app mode (supervised)
Lock screen message (shared device, supervised)
AirPrint
Web content filter (supervised)
Wi-Fi whitelisting (10.3 +, supervised)
OS Updates
Manage iOS updates ( supervised)
Enrollment
ASM for Classroom app & Shared iPad
Out-of-band DEP registration with Apple Configurator
Now requires supervision and enrollment
Resource Access
Citrix VPN
S/MiME encryption
App Protection Policies (MAM)
File App
Drag and drop
Data Protection
Lost mode commands (supervised)
EDU: remote user logout & cache deletion (Shared iPad)
Content & Inventory
iBooks – App Store, no custom books
Multiple users for Shared iPad
Device name change (supervised)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Android device management options
6/17/2018 4:31 PM
Android device management options
Several options available depending on requirements and device capabilities
Non-managed
Legacy Android
Samsung KNOX
Work profile
Data protection at the app level only. Ideal for:
Cases where device cannot be managed
Older devices that do not support work profile
Conventional MDM management
Supports Android 4.4 and above
Basic MDM policies
Unknown sources
Legacy Android plus additional capabilities:
Kiosk lockdown
App allow/deny
Silent app and cert install
BYOD use case recommended by Google.
Work/personal separation
App config
Robust app deployment
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Android Management in Intune
Era
Management mode
Scenario
Intune supports
IT manages
Use case
Device version support
Legacy
Device Admin (optionally, w/ KNOX)
Basic device management
Yes
Entire device
Older devices, non Google-services regions, kiosk (KNOX)
4.4+
Android enterprise
Profile owner
Work profile (BYOD)
Only work profile
BYOD or corp-owned, “lightly” managed modern devices 6+
Device Owner
Work managed (corp owned)
Roadmap
Corp owned, fully managed with modern devices
Single-use (kiosk)
Soon!
Heavily locked down, userless, task-oriented
Intune
Intune APP
App-level DLP
Just apps and corporate data within those apps. Enlighted store apps and LOB SDK apps.
Non-enrolled, no MDM
Or, in combination with any of the above
Android enterprise support info
Google's official support statement
List of Google featured devices

23. What’s new in Intune? 6/17/2018 4:31 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Customer focused engineering
New OS
updates
Deployment/Sales blockers
Support issues
Monthly Intune sprint backlog
GA of the new Intune on Azure console (604 votes on UserVoice)
Conditional Access integration between Intune & AAD.
RBAC additions for Intune for manageability improvements
Bitlocker management (543 votes on UserVoice)
Shared iPads for iOS classroom support (Edu customers)
Support for Mac conditional access (Public preview)
Support for MAM conditional access (Public preview)
New company portal/workplace join support for Mac
June 2017
Aug 2017
July 2017
Sept 2017
Android 0 Support
iOS 11 Support
Mobile Threat Protection – Integration with Zimperium
Tools for Intune hybrid to standalone migration
Intune Data Warehouse Preview
Mobile Threat Protection – SandBlast Mobile
Office 365 ProPlus & Intune

25. Mobile data protection – Top customer requests
Conditional access
We need a ‘Grace period’ for remediating certain types of non compliance states.
Restrict access to services only from Intune MAM enabled applications
Expand the list of supported OS platforms to include Mac OS.
Restrict access to services based on the location of user.
Restrict access to services to only certain times
Mobile Threat Protection
We need better assessment and control of mobile threats on iOS & Android
Geo fencing
Track and ensure my critical IT assets are within a specified “fence”.

26. Demo- New features in Data Protection
6/17/2018 4:31 PM
Demo- New features in Data Protection
Dilip Radhakrishnan
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Geo fencing
Initial feature scope: Theft prevention using Compliance policies and Geo-fencing rules on Android devices.
Solution:
Device gets temporarily locked out on removal from a known location.
Admin & security teams get notified.
Only the admin can unlock the stolen device using a secret passcode.
Timeline – Public preview in Q4 2017

28. Configuring known WIFI networks
Microsoft Intune > Device compliance – Locations > Create location
Device compliance – Locations
Microsoft Intune
Create location
Description
Create
Network 28
* Name
* Location type
Network 
Create location
Delete
Search (Ctrl+/)
Locations are a global resource. Locations cannot be deleted if they are applied to one or more policies.
Overview
Filter by name
All locations 
NAME
LOCATION TYPE
# POLICIES
Building 1
Coordinates 5
. . .
East Campus
Network 1
Network
Building 2 12
Network 2
West Campus 4
Building 3 17
Building 4 3
Network 3 6
Building 5
North Campus
Network 4 9
South Campus
MANAGE
Policies
* IP version
IPv4 
Notifications
* IPv4 range
/24
Locations
IPv4 DNS
dns1.microsoft.com
dns2.microsoft.com
dns3.microsoft.com
Device compliance
MONITOR
Settings compliance
Policy compliance
IPv4 Gateway
Compliance policy settings
SETUP
Mobile Threat Defense

29. Configuring known Geo-locations
Microsoft Intune > Device compliance – Locations
Device compliance – Locations
Microsoft Intune
Create location
Description
Create
Building 40
* Name
* Location type
Coordinates 
Create location
Delete
Search (Ctrl+/)
Locations are a global resource. Locations cannot be deleted if they are applied to one or more policies.
Overview
Filter by name
Location type: Coordinates 
NAME
LOCATION TYPE
# POLICIES
Building 1
Coordinates 4
. . .
Building 2 8
Building 3 2
Building 4 5
Building 5
Building 6 17
Building 7 12
Building 8 1
Building 9
Building 10 9
Building 11 3
Building 12
Building 13
MANAGE
Policies
Lookup the latitude and longitude for the
address
Lookup
Notifications
* Latitude
Locations
* Longitude
Device compliance
MONITOR
* Radius (meters)
100
Settings compliance
Policy compliance
Compliance policy settings
SETUP
Mobile Threat Defense

30. Configuring known Geo-locations (using maps)
Microsoft Intune > Device compliance – Locations > Create location
Lookup address
Microsoft Intune
Description
Save

31. Configuring location requirements in a compliance policy
Microsoft Intune > Device compliance – Policies > Create policy > Locations > Network 2
Create policy
Locations
Network 2
Description OK
* Name
Add location
Map coordinates
Name
Network 2
Location type
Network
IP version
IPV4
IPv4 range
/24
IPv4 DNS
dns1.microsoft.com
dns2.microsoft.com
dns3.microsoft.com
IPv4 Gateway
Lock device when not on the network
Description
* Platform
Lock Android kiosk devices when not on the network
Android
Create
To add a location to this policy, click Add. To create a new location, go to the Device
Compliance workload and select “Locations”.
A device is considered noncompliant when none of the locations specified below are met. 
Search locations
1 configured
Settings
NAME
LOCATION TYPE
Network 2
Network
. . .
Building 5
Coordinates
Configure
Locations
1 configured
Actions for noncompliance OK OK

32. Configuring “device lock out” as a noncompliance action
Microsoft Intune > Device compliance – Policies > Create policy > Actions for noncompliance > Add action
Create policy
Actions for noncompliance
Android compliance policy
Add action
Description
Add
Lock device (local action)
Action
Custom passcode
Android compliance policy
* Name
Add action
Lock device when not on the network
Description
* Platform
Lock Android kiosk devices when not on the network
Android
Create
Specify the device lock out passcode
ACTION
SCHEDULE
MESSAGE TEMPLATE
Mark device noncompliant
Immediately
. . . 
Not selected
Custom passcode
Password
Not configured
Require
Passcode
Specify passcode 
Hours 
Schedule
Number of sign-in failures before wiping device
1 configured
Settings
Enter a number (4-11)
Configured
Locations
1 configured
Actions for noncompliance OK OK

33. What’s new in Intune MAM
Top Customer requests
We like the Intune MAM solution on iOS and Android. But what about Windows?
I would like to deploy, secure and configure LOB apps without MDM
We would like to have enhanced reporting for Intune MAM to be able to troubleshoot issues

34. Demo- New features in Intune MAM
6/17/2018 4:31 PM
Demo- New features in Intune MAM
Dilip Radhakrishnan
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. What’s new in Intune infrastructure?
6/17/2018 4:31 PM
What’s new in Intune infrastructure?
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. What’s new in Intune infrastructure
Top Customer requests
How can I query the Intune service and integrate it with my custom IT reports and workflows?
I would like to track all configuration changes in environment?
How do I troubleshoot MDM/MAM issues?

37. Demo- New Intune infrastructure features
6/17/2018 4:31 PM
Demo- New Intune infrastructure features
Dilip Radhakrishnan
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

38. What’s new in on premise access control
Top Customer request
We are implementing a digital transformation strategy and will be moving to cloud services like O365 but we will be in a hybrid mode for the next 2 years.
Outlook app for iOS/Android works great for O365 but how do I get same CA/MAM features with on premise Exchange servers?
How do I implement Conditional access/MAM for on premise LOB apps?

39. CA/MAM Support in Outlook
TAP Program is now open for CA/MAM support in Outlook app with on premise 2013/2016 Exchange servers
Requirements:
Customer has a Exchange hybrid setup with AAD directory synchronization
Exchange 2013 CU17+ or Exchange 2016 CU5+
Exchange 2010 is not supported
Basic Architecture
On-premises mailbox data is synchronized into Office 365 native cloud as part of the tenancy
It’s a secure as Office 365 native mailbox
We sync 4 weeks of mail, all contacts and calendar items and OOF settings
Data in EXO is encrypted at rest and all external communication is secure
Service Encryption with Customer Key is supported
Stateless Protocol Translator (Azure)
Outlook Device API
Outlook for iOS/Android
Synchronized Mailbox
REST
Contoso Tenant AD
ADFS
Azure AD
MRS
Microsoft Cloud
Exchange Online
EAS
Exchange
AT = direct access token
RT = refresh token
On-premises

40. Protected web browsing to internal LOB apps
Users in managed browser can type an internal URL while remote, and be directed to the correct externally accessible endpoint.
User launches Intune
Managed Browser (MB)
MB retrieves App Protection policy
Microsoft Azure
Active Directory
Managed Browser retrieves URL
mapping for user from Azure AD
Azure or 3rd Party IaaS
connector
User accesses
MB maps internal
to external URL
App Proxy routes the
request to on-premises app
Connections are protected with Azure AD (conditional access, MFA, etc.) 1 2 3 4
Microsoft Intune 5 6
Flow assumes you have configured Intune and the Application Proxy, and have published internal apps using the Application Proxy.

41. Intune + Citrix Netscaler
Gateway Services
(NetScaler)
DMZ
Encrypted micro-VPN
SharePoint
LOB Apps
Intranet
Single-Sign-On secure access for all managed apps
Secure access to on premise corporate resources
Intune Managed Browser
Intune managed LOB apps
Enables Intune Managed Browser to securely access on-premises intranet resources
Enables Intune enabled Line of Business apps to securely access on-premises resources

42. Securing O365 with Intune - Nestle
6/17/2018 4:31 PM
Securing O365 with Intune - Nestle
Clifford Kennedy
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

43. Partnering for success
…Microsoft, we are blocked!
Working group
Customer focused partnership

44. Unblocking Office 365 at Nestlé
Mobile
Desktop
Browser
Set limited Browser experience on unmanaged devices
Require Managed App (MAM)
Require Domain Joined for Rich Office Client experience

45. Ignite 2017 Intune/ConfigMgr sessions
6/17/2018 4:31 PM
*Locations are subject to change. Please check Ignite Scheduling Tool prior to session time
Ignite 2017 Intune/ConfigMgr sessions
Code
Day
Time
Title
BRK3057
Tuesday
9:00 AM - 10:15 AM
Overview: Modern Windows 10 and Office ProPlus management with EMS
BRK3075
10:45 AM - 12:00 PM
Modernize deployment and servicing of Windows 10 and Office ProPlus with EMS
BRK2015
Wednesday
Mobile device and app management overview with Microsoft Intune
BRK3009
4:00 PM - 5:15 PM
System Center Configuration Manager overview and roadmap
BRK3011
Thursday
Manage and secure Android, iOS and MacOS devices and apps with Microsoft Intune
BRK3076
Transition to cloud-based management of Windows 10 and Office ProPlus with EMS
BRK3012
Secure access to Office365, SaaS and on-prem apps with Microsoft EMS
BRK2079
12:30 PM - 1:45 PM
Secure Windows 10 with Intune, Azure AD and System Center Configuration Manager
BRK3119
2:15 PM - 3:30 PM
Learn how to use Intune with the new admin console and Microsoft Graph API
BRK3059
Friday
10:15 AM - 11:00 AM
Manage and protect Office 365 mobile apps with Microsoft Intune
BRK3010
Conduct a successful pilot deployment of Microsoft Intune
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

46. FastTrack for Microsoft 365
6/17/2018 4:31 PM
FastTrack.microsoft.com
FastTrack for Microsoft 365
Move to the cloud with confidence
Faster Deployment
Migrate , content, and light up Microsoft 365 services
Deploy and securely manage devices
Enable your business and gain end-user adoption
Delivered by Microsoft engineers as part of your subscription
Tight integration with qualified partners for additional services
Maximized ROI
Higher Adoption
© Microsoft Corporation. All rights reserved.

47. Check out other great EMS sessions
6/17/2018 4:31 PM
Deployment for EMS & Microsoft 365
Microsoft Cloud App Security
Azure Information Protection
Azure Active Directory
Microsoft Advanced Threat Analytics
Microsoft Intune
Download the Ignite app
Windows
iOS
Android
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

48. Please evaluate this session
Tech Ready 15
6/17/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

49. 6/17/2018 4:31 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

50. Office and 3rd party ISVs securing Office apps using Intune Graph APIs
6/17/2018 4:31 PM
APP policies
3rd Party MDM
OneDrive Data protection console in O365
3rd party MDM ISV integration with Intune Graph APIs
APP policies
3rd party MDM
MDM policies
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

51. Intune Managed Extension
6/17/2018 4:31 PM
Intune Managed Extension
A light weight agent to supplement Intune MDM
Deploys, executes and monitors PowerShell scripts
Helps address gaps in Win10 MDM platform
Upload Powershell Script
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

52. Intune Managed Extension
6/17/2018 4:31 PM
Intune Managed Extension
Deploy
Monitor
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.