Transcript Session Objectives: • • • Session Agenda: • • • • • Questions you should ask yourself • Intune standalone (cloud only) Intune web console ConfigMgr integrated with Intune (hybrid) No existing.

Session Objectives:
•
•
•
Session Agenda:
•
•
•
•
•
Questions you should ask yourself
•
Intune standalone (cloud only)
Intune web console
ConfigMgr integrated with Intune (hybrid)
No existing Configuration Manager
deployment
Simplified policy control
PC+MDM: 4K users, 6K PCs, and 7K
devices
MDM Only: 25k users and 50k mobile
devices
Simple web-based administration
console
ConfigMgr console
System Center
ConfigMgr
Microsoft Intune
Microsoft Intune
Mobile devices and PCs
Cloud-based Management
Microsoft Intune
Domain joined PCs Mobile devices
System Center 2012 R2
Configuration Manager with
Microsoft Intune
Build on existing Configuration Manager
deployment
Full PC management (OS Deployment,
Endpoint Protection, application delivery
control, rich reporting)
Deep policy control requirements
Scale to 100,000 devices
Extensible administration tools (RBA,
PowerShell, SQL Reporting Services)
Intune: Simple web-based Administration Console
and a richer experience for Information Workers
SCCM Administration Console and a richer
experience for Information Workers
Questions you should ask yourself
•
•
•
•
•
Questions you should ask yourself
•
•
•
•
•
Consider doing in advance:
•
•
•
•
Scenario:
Why ADFS and Syncing Users
•
•
Possible options
•
•
DEMO
Important to know
•
•
•
•
What can we deploy?
•
•
•
•
Manage mobile productivity without compromising compliance
Manage Mobile
Productivity and
Protect Data
with Office
Manage mobile productivity and protect data with Office Mobile
apps for iOS and Android
Conditional Access
Policy to Email and
Documents
Provide access to Exchange and OneDrive for Business resources
only to managed devices
Enroll and Manage
Corporate-owned
Devices
Enable IT to bulk enroll corporate-owned task-worker devices
Manage policy for existing iOS line of business apps (so called
“app wrapping”)
Managed browser and PDF/Audio/Video viewers
Deny access if a device falls out of compliance
Support for Apple Configurator
Personal
Corporate
Release Timeline
This roadmap contains details on three upcoming milestones. Dates are subject to change.
Intune standalone updates
Intune standalone updates
Intune standalone updates
Availability of next version
of Configuration Manager
Hybrid parity feature
updates
• Configure EAS email only if device is managed (Exchange on-prem and Office 365)
Conditional Access Policy
• Configure MOWA email only if device is managed
• Configure documents only if device is managed
• Restrict access if device falls out of compliance policy
• Deployment of free store apps for iOS
• Convenient access to internal corporate resources via per-app VPN configurations for iOS
• Required app install/uninstall
Managed Mobile Apps
• Managed Office mobile apps – Word, Excel, PowerPoint
• App wrapper for existing iOS and Android line-of-business apps
• App SDK for iOS and Android
• Support for Apple Volume Purchase Program (VPP)
• Remote pin reset
Protected Data
• MFA at enrollment
• Managed browser, PDF viewer, AV player, Image viewer
• Selective wipe of managed apps and data
• Service account enrollment
Bulk Enrollment
• Support for Apple Configurator
• Support for Apple Device Enrollment Program (DEP)
• Device lockdown via Supervised iOS devices, Kiosk mode for Android, WP8.1 Assigned Access
Configuration Policies
• Policies and apps targeted to devices
• Application install allow/deny list
• Device lockdown URL allow/deny (via Managed browser)
Terms of Use
• Customizable terms of use
http://channel9.msdn.com/Events/TechEd
www.microsoft.com/learning
http://microsoft.com/technet
http://developer.microsoft.com
http://aka.ms/enterprise
mobilitysuite
http://aka.ms/microsoftintune
http://aka.ms/configmgr
http://aka.ms/hi
http://aka.ms/aip
http://aka.ms/virtualdesktop
http://aka.ms/teched-eu