Manage and protect Office 365 mobile apps with Microsoft Intune 5/25/2018 8:05 AM BRK3059 Manage and protect Office 365 mobile apps with Microsoft Intune Pragathi Balasubramanian and Joey Glocke Program Managers © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Protect users, apps, data, and devices Microsoft Consumer Channels and Central Marketing Group 5/25/2018 Protect users, apps, data, and devices Secure and protect against new threats Apps Data Maximum productivity experience Users Devices Employees Business partners Customers Comprehensive and integrated © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Enterprise Mobility + Security Apps Risk MICROSOFT INTUNE Make sure your devices are compliant and secure, while protecting data at the application level AZURE ACTIVE DIRECTORY Ensure only authorized users are granted access to personal data using risk-based conditional access MICROSOFT CLOUD APP SECURITY Gain deep visibility, strong controls and enhanced threat protection for data stored in cloud apps AZURE INFORMATION PROTECTION Classify, label, protect and audit data for persistent security throughout the complete data lifecycle MICROSOFT ADVANCED THREAT ANALYTICS Detect breaches before they cause damage by identifying abnormal behavior, known malicious attacks and security issues ! Device Access granted to data CONDITIONAL ACCESS Classify Label Audit Protect Location

Managing and protecting apps with Intune 5/25/2018 8:05 AM Managing and protecting apps with Intune © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Session Agenda Introduction to managing and protecting apps with Intune App lifecycle on corp-owned (MDM) devices Add Deploy Configure Protect Retire App lifecycle on BYOD (non-enrolled) devices © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Add apps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Add apps Web app iOS Windows Android Store VPP Line of business app 5/25/2018 8:05 AM Add apps iOS Windows Store VPP Line of business app Windows Store for business New: Office 365 Proplus Android Web app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo – Add app Andoird line-of-business app and iOS Store app 5/25/2018 8:05 AM Demo – Add app Andoird line-of-business app and iOS Store app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Add Android line of business app 5/25/2018 8:05 AM Add Android line of business app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Upload success © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Open newly added app 5/25/2018 8:05 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Assign apps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Assign apps Common assignment types: 5/25/2018 8:05 AM Assign apps Common assignment types: Available - Users install the app from the Company Portal app or website. Required - The app is installed on devices in the selected groups. Uninstall - The app is uninstalled from devices in the selected groups. Not Applicable - The app is not installed or shown in the Company Portal. New: Available with or without enrollment for BYOD non-enrolled devices Assign this app to groups of users whose devices are not enrolled with Intune. Windows store business apps are upcoming for w/o enrollment support New: User + device licensing VPP and Windows store for business apps support this © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo – Assign app Available with or without enrollment 5/25/2018 8:05 AM Demo – Assign app Available with or without enrollment User/Device licensing © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

iOS VPP license type assignments 5/25/2018 8:05 AM iOS VPP license type assignments © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Configure apps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Configure – MDM corp-owned 5/25/2018 8:05 AM Configure – MDM corp-owned First available as MDM feature, on iOS Send arbitrary configuration data to managed devices Apps build to accept this data Now available on Android Work Profile Both supported by Intune MDM Issues: Tied to platform Requires MDM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Configure – BYOD non-enrolled 5/25/2018 8:05 AM Configure – BYOD non-enrolled Part of the Intune SDK All applications that support Intune MAM-WE today can also take advantage of MAM Application Configuration Does not require device enrollment Like Application Protection Policies, MAM Application Configuration works regardless of device management state Works across platforms (iOS and Android) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM MAM App Config: Impact Partner applications now have the ability to create new configuration features, controlled by Intune New configuration features can be developed without relying on changes to the Intune service Can even be used for rapid prototyping Office applications are already building new features on this pipeline OneDrive, Outlook, Managed Browser © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Managed Browser What is it? Managed apps Personal apps Managed apps What is it? Native application for iOS and Android devices Available on the Apple App Store and Google Play Store (soon in China) Integrated with the Intune SDK Restrict features, sharing and downloads Personal apps

Managed Browser - Scenarios Main User Scenarios Supports Intune Application Protection Policies Admin can control cut/copy/paste, data transfer, etc Enables protected web browsing with Intune Utilizes native webview for iOS and Android Tabbed Browsing, bookmarks MyApps integration Support for single sign-on via myapps.Microsoft.com

New: Managed Browser Configuration Features 5/25/2018 8:05 AM New: Managed Browser Configuration Features URL Allow/Block List Pre-Configured Homepage Pre-Configured Bookmarks On-Prem access with the Azure AD Application Proxy Users who use the Managed Browser to navigate to internal URLs (http://internal/) are automatically redirected to an Application Proxy endpoint, if one is available for them © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

New: Managed Browser Configuration Features 5/25/2018 8:05 AM New: Managed Browser Configuration Features On-Prem access with the Azure AD Application Proxy © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo - Configure Joey 5/25/2018 8:05 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Protect apps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Protect – both MDM + non-enrolled 5/25/2018 8:05 AM Protect – both MDM + non-enrolled Works the same for MDM and non-enrolled devices: Intune SDK Two parts: App Protection Policies App Based CA © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

App Protection Policies 5/25/2018 8:05 AM App Protection Policies 19 SDK-enabled apps on iOS exclusive to Intune 16 SDK-enabled apps on Android exclusive to Intune Works the same on: Intune managed devices 3rd party MDM managed devices Unmanaged devices © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft 2016 5/25/2018 8:05 AM Customer evidence Nestlé, a leader in nutrition, health, and wellness is managing Office mobile apps with Intune. “The MAM features of Microsoft Intune will enable Nestlé employees to safely and securely access Office 365 from any device.” – Thomas Wildi, IT Strategy and Innovation, Nestlé © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM NEW: App Based CA Block O365 service access to apps that are not protected by the Intune SDK Supported for Exchange Online and SharePoint Online © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

NEW: Windows 10 support with Windows Information Protection 5/25/2018 8:05 AM NEW: Windows 10 support with Windows Information Protection © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo - Protect Joey 5/25/2018 8:05 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Retire apps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Retire – MDM corp-owned 5/25/2018 8:05 AM Retire – MDM corp-owned Device wipe Uninstall the app Monitor to check for uninstallation Delete the app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Device wipe © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Monitor app installation status 5/25/2018 8:05 AM Monitor app installation status © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Delete app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Retire – BYOD non-enrolled 5/25/2018 8:05 AM Retire – BYOD non-enrolled App selective wipe Monitor pending wipe © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

App selective wipe 5/25/2018 8:05 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM Recap © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

FastTrack for Microsoft 365 5/25/2018 8:05 AM FastTrack.microsoft.com FastTrack for Microsoft 365 Move to the cloud with confidence Faster Deployment Migrate email, content, and light up Microsoft 365 services Deploy and securely manage devices Enable your business and gain end-user adoption Delivered by Microsoft engineers as part of your subscription Tight integration with qualified partners for additional services Maximized ROI Higher Adoption © Microsoft Corporation. All rights reserved.

Our FastTrack Momentum 5/25/2018 8:05 AM Our FastTrack Momentum “We saw what Microsoft was putting into Intune and saw that it could do everything that we wanted ... and that it would grow with our future needs… … the other thing, and this is a huge part not to be diminished, was the magnitude of positive experience and support from the FastTrack Center.” Willem Bagchus Messaging and Collaboration Specialist, United Bank 40k+ 6.3 PB+ 6.8 M+ 189.5 Customers enabled Data migrated Seats migrated Customer satisfaction (NSAT) 800+ 51k+ 53% FastTrack Engineers worldwide Success plans Faster Time to Value © Microsoft Corporation. All rights reserved.

Training available from LinkedIn Learning on this sessions topic! BRK3059 Training available from LinkedIn Learning on this sessions topic! Microsoft Cloud Services: Administer Office 365 and Intune (https://aka.ms/365enterpriseintune) Experience premium Office 365 IT Admin training for free at Support.Office.com Brought to you by Microsoft in partnership with LinkedIn Learning. Free online training provides a ramp-up on the critical skills you need to deploy, manage, and support Office 365. Find our new training in the Office 365 Admin Center and online @ aka.ms/365Enterprise

Check out other great EMS sessions 5/25/2018 8:05 AM Deployment for EMS & Microsoft 365 Microsoft Cloud App Security Azure Information Protection Azure Active Directory Microsoft Advanced Threat Analytics Microsoft Intune Download the Ignite app Windows iOS Android © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Ignite 2017 Intune/ConfigMgr sessions 5/25/2018 8:05 AM *Locations are subject to change. Please check Ignite Scheduling Tool prior to session time Ignite 2017 Intune/ConfigMgr sessions Code Day Time Title BRK3057 Tuesday 9:00 AM - 10:15 AM Overview: Modern Windows 10 and Office ProPlus management with EMS BRK3075 10:45 AM - 12:00 PM Modernize deployment and servicing of Windows 10 and Office ProPlus with EMS BRK2015 Wednesday Mobile device and app management overview with Microsoft Intune BRK3009 4:00 PM - 5:15 PM System Center Configuration Manager overview and roadmap BRK3011 Thursday Manage and secure Android, iOS and MacOS devices and apps with Microsoft Intune BRK3076 Transition to cloud-based management of Windows 10 and Office ProPlus with EMS BRK3012 Secure access to Office365, SaaS and on-prem apps with Microsoft EMS BRK2079 12:30 PM - 1:45 PM Secure Windows 10 with Intune, Azure AD and System Center Configuration Manager BRK3119 2:15 PM - 3:30 PM Learn how to use Intune with the new admin console and Microsoft Graph API BRK3059 Friday 10:15 AM - 11:00 AM Manage and protect Office 365 mobile apps with Microsoft Intune BRK3010 Conduct a successful pilot deployment of Microsoft Intune © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session Tech Ready 15 5/25/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/25/2018 8:05 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.