2. Introducing Windows Intune
James Lockyer
Microsoft

3. PC Management Challenges Today
Unmanaged PCs
Organisational Constraints
Non-domain joined PCs
Field employees
Limited Resources and Budget
Highly Distributed Office
Contract Employees
Mergers & Acquisitions
Fragmented Solutions
No Existing
Solution
There are a wide number of scenarios across businesses of all sizes where Windows Intune can help.
For smaller customers with no or very light PC Management, Windows Intune is an ideal fit. It offers comprehensive PC Management and Security all in one tool. Equally, businesses that are using multiple tools to protect and manage their PCs may find that Windows Intune saves them time and money.
For business that have an on-premises management solution today, there may be pockets of unmanaged PC’s that are hard to reach with their existing solution because of new workforce trends that have added complexity to traditional management. Some examples include:
Non-domain joined PCs: Non-corporate PC’s being used to access corporate or documents
Field employees: Full-time employees that roam site to site with sparse connectivity to corporate network. For example, a 100,000 seat business may have 5,000 sales personnel who are constantly on the road or may not be domain joined.
Contract employees: Short-term employees using corporate PCs, but infrequently or never connect to corporate network
Mergers & Acquisitions: Companies may not have the ability to integrate management tools as quickly as necessary because of a number of limitations: resources, time, or even geographic constraints.
Windows Intune can also be used to help standardize management and protection across the entire PC environment of a business. A business may choose to adopt Windows Intune for their entire organization because they have:
Limited Resources & Budget which are barriers to the purchase, deployment, and maintenance of an on-premises infrastructure.
A Highly Distributed Workforce with a large number of geographically dispersed offices and workers that make management using a corporate-based infrastructure challenging.
Using a fragmented solution comprised of a number of different tools for updates, inventorying, and security. For example, a business using WSUS for updates, Excel for inventory tracking, and another 3rd party AV software.
Or have no existing solution in place

4. All-In-One PC Management Solution
Online Management & Protection
Hosted by Microsoft
Download from Microsoft

5. Windows Intune Enables
Windows 7 Enterprise
MDOP
Anti-Malware Solution
Hard Drive Encryption
Application Virtualisation
Security Update Management
USB Device Encryption and Control
Manage Application Incompatibility
Proactive PC Monitoring
Application
Restriction
PC Recovery Toolset
Group Policy
Windows Troubleshooting Platform
Application and OS Error Monitoring
Remote Assistance Requests
Enhanced Search Capabilities
Group Policy Auditing
Inventory Asset Management
Automation of Problem Description
Hard Drive Encryption Management
Benefits
Technology
Windows Intune:
Malware and Security Management - Help safeguard your PCs from the latest threats with centralized endpoint protection built on the award-winning Microsoft Malware Protection Engine and using the same trusted technologies as Microsoft Forefront Endpoint Protection and Security Essentials.
Centrally manage the deployment of Microsoft updates and service packs that you choose to all your PCs from the Windows Intune console.
Proactively monitor PCs - Receive alerts on updates and threats so that you can proactively identify and resolve problems with your PCs—before they impact users and your business.
Provide remote assistance - Resolve PC issues, regardless of where you or your users are located, with remote assistance.
Set security policies - Centrally manage update, firewall, and malware protection settings across all of your PCs, even on remote machines outside the corporate network.
Track hardware and software inventory - Track hardware and software assets used in your business to efficiently manage your assets, licenses, and compliance.
Support Tool Integration - Managed Services Providers (MSP) can use Windows Intune™ in conjunction with a professional services automation (PSA) tool such as the Autotask platform and ConnectWise to create a seamless and efficient workflow.
ConnectWise helps MSPs manage all aspects of their customer relationships from within a single, unified system, combining sales force automation, customer relationship management (CRM), service request and ticket tracking, contract and billing arrangement management, and extensive reporting
Autotask is a web-based, fully hosted PSA software platform that helps MSPs centrally manage their customer relationships. The platform can be used to automate the internal business processes for several geographically dispersed MSPs. Autotask can also provide MSPs with performance reporting, process automation for sales revenue and quotes, project and service delivery management, and billing. Note – Autotask requires a fee for integration with 2AT - 2AT can convert messages into Autotask tickets.
Windows 7 Enterprise
Hard Drive Encryption - BitLocker Drive Encryption helps protect sensitive data from being accessed by unauthorized users who come into possession of lost, stolen, or improperly decommissioned computers.
USB Drive Encryption - BitLocker to Go extends BitLocker data protection to USB storage devices, enabling them to be restricted with a passphrase. In addition to having control over passphrase length and complexity, IT administrators can set a policy that requires users to apply BitLocker protection to removable drives before being able to write to them. BitLocker to Go also gives administrators control over how removable storage devices can be utilized within their environment and the strength of protection that they require. Administrators can require data protection for any removable storage device upon which users want to write data, while still allowing unprotected storage devices to be utilized in a read-only mode.
Application Restriction - Windows 7 offers new application control policies with AppLocker, a flexible, easy-to-use mechanism that enables IT professionals to specify exactly what is allowed to run on user desktops. AppLocker restricts unauthorized software while allowing applications, installation programs, and scripts that users need.
Windows Troubleshooting Platform - It can be frustrating for users to try to solve their problems, but it can be expensive for corporations to maintain a fully staffed support center. To compound the problem, many support calls involve routine, recurring issues.
Windows® 7 takes steps to address both of these problems with the Windows Troubleshooting Platform, which allows users to solve many common problems on their own and improves Help desk efficiency by allowing IT administrators to extend the platform to solve routine issues that are specific to their environment
Enhanced Search Capabilities - Windows 7 enables users to search remote document repositories, SharePoint sites, and Web applications as easily as they search their desktops—through the familiar Windows interface. Windows 7 federated search uses an existing public standard called OpenSearch. Users can select which sites they want to search from, or IT can populate a list for the user. Federated search results are presented in Windows explorer much like local files, with rich views, file details, and previews.
Automation of Problem Description - The Problem Steps Recorder tool is a simple screen capture utility that grabs screenshots whenever a mouse move or click is made and documents all the data into a zipped MHTML report page that can be sent off directly to the help desk. Every step of the user’s actions is logged complete with a screenshot with the item highlighted, and it even allows the user to provide commentary on specific details.
MDOP
Application Virtualisation - Microsoft Application Virtualization (App-V) transforms applications into centrally managed services that are never installed and don’t conflict with other applications. With App-V users simply click to launch applications that are available, anytime. They don’t have to wait for applications to install and reboot to start using new applications. Updates are a breeze! With App-V it’s easy for IT to transform traditional applications into centrally managed, virtual applications. You can use powerful, but simple tools to create virtual applications. Create standard MSI-based packages that are ready to deploy with existing infrastructure, or take advantage of built-in deployment and management.
Manage application incompatibility – Microsoft Enterprise Desktop Virtualisation (MED-V) removes the barriers to Windows upgrades by resolving application incompatibility with Windows 7 and delivering applications in a Windows XP-based application compatibility workspace. Upgrades can proceed on schedule, and users can take advantage of the power of Windows 7 right away without losing access to applications they need while IT departments can remediate incompatible applications. MED-V enables users to seamlessly start the legacy applications right from the Windows Start. Applications appear and operate as if they were installed on the desktop. They can even be pinned to the Windows 7 taskbar! In MED-V 2.0 legacy applications share seamless access to users’ documents and network-available printers, and even USB devices such as flash storage or Smartcard readers.
PC Recovery Toolset - Microsoft Diagnostics and Recovery Toolset helps IT teams make PCs safer to use, keeps employees productive, and enables desktops that are easier and less expensive to manage. Administrators can easily recover PCs that have become unusable, rapidly diagnose probable causes of issues, and quickly repair unbootable or locked-out systems, all faster than the average time it takes to reimage the machine. When necessary, you can also quickly restore critical lost files
Application and OS Error Monitoring - Microsoft System Center Desktop Error Monitoring captures all application and operating system failures in a central location in your enterprise, enabling IT teams to track, monitor, and proactively respond to user problems. By managing these failures through a scalable, low-cost deployment solution, IT teams can make desktops more stable and reduce the cost of Windows desktop ownership
Group Policy Auditing - Microsoft Advanced Group Policy Management (AGPM), a core component of the Microsoft Desktop Optimization Pack for Software Assurance, makes it easier for IT organizations to keep enterprise-wide desktop configurations up to date, enabling greater control, less downtime, and reduced total cost of ownership (TCO). AGPM makes it easier to securely manage Group Policy throughout your organization and control the change process around GPOs.
Hard Drive Encryption Management - Microsoft BitLocker Administration and Monitoring, soon to be part of the Microsoft Desktop Optimization Pac, enhances BitLocker by simplifying deployment and key recovery, centralizing provisioning, monitoring and reporting of encryption status for fixed and removable drives, and minimizing support costs.

6. IT Admin View

7. End User View

8. Summary

9. © 2008 Microsoft Corporation. All rights reserved
© 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.