9/20/2018 1:36 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Unified Endpoint Management (UEM) with Microsoft Intune 9/20/2018 1:36 AM BRK2090 Unified Endpoint Management (UEM) with Microsoft Intune © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

The mobile productivity challenge User expectations IT challenges Collaborate and share with partners Secure access to company resources Easy access to familiar apps Protect company data and resources Work easily from anywhere on any device Do more with limited resources How to empower users to be productive, while protecting the massive amounts of data flowing through your mobile ecosystem?

Unified Endpoint Management with Intune/EMS Productivity Enable a mobile experience that works the way employees want it to. Data Protection Ensure that the right data protection is applied to the right scenarios. Device choice Easy access to resources Self-service options Familiar Office apps User, device, app, file control Conditional access Data protection after access Management Tools and services that empower IT pros to do strategically more with less. 24/7 Unified management Cloud-based scalability and reliability Deployment support

Productivity Protection Management

In a complex device landscape, you need choices. Microsoft Intune gives you the flexibility and control to secure your data on any device—even those you don’t manage. u b l i c k i o p s k m a r y p r i t i o n o m p a n i o m a w c n o r o r n f s h a r e d i e k r o n t r a c c t o r Company-Managed Employee-Managed 3rd-Party-Managed Secure your data on any device with Intune Mobile Device Management (MDM) Mobile Application Management (MAM) Enroll devices for Provision settings, Report & measure Remove corporate Publish mobile Configure and Report app Secure & remove corporate management certs, profiles device compliance data from devices apps to users update apps inventory & usage data within mobile apps Microsoft Intune Microsoft Intune Learn more at microsoft.com/intune

Demo

Streamline access to Office 365 and other resources On-premises applications Microsoft Azure All cloud applications Users can sign in once for secure access to all corporate resources, on-premises and in the cloud, from any device. This includes Office Mobile apps as well as pre-integrated support for Salesforce, Concur, Workday, and thousands of other popular SaaS apps. SINGLE SIGN- ON TO ALL APPS

More productivity, less calls to helpdesk Windows Server Management Marketing 9/20/2018 More productivity, less calls to helpdesk Self-service capabilities include: Enroll/un-enroll device Reset password or PIN Download apps required by organization Join and manage groups © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo

Productivity Protection Management

Control access and protect data Protect after access Ensure the right people have access to apps and files under the right circumstances. Ensure that people do the right thing with files after they are accessed.

Control access to data based on real-time context 9/20/2018 1:36 AM Control access to data based on real-time context Microsoft Azure Actions Conditions Parameter Examples Location Trusted/Untrusted IP Device state Managed/Unmanaged User All or user group Risk Suspicious activity Allow Enforce MFA Enroll device Limited access Block access Wipe device On-premises applications Risk (Low, Medium, High) Define policies that provide contextual controls at the user, location, device, and app levels. Policies adapt to real time conditions based on monitoring of perceived risks. Risks are calculated based on advanced Microsoft machine learning. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Control what happens after the data is accessed Our app protection policies allow you to control what happens to docs and data after they’ve been accessed. App encryption at rest App access control – PIN or credentials Save as/copy/paste restrictions App-level selective wipe Managed web browsing Apply policies for Windows 10 Information Protection for even greater control Secure viewing of PDFs, images, videos Restrict features, sharing, downloads

Demo

Productivity Protection Management

Mobile productivity management made easier Traditional Windows management Run separate mobile solutions Maintain complex infrastructure Do more with less Unified endpoint management Unified admin console Graph API Cloud scalable and flexible Support included

Modern IT Simpler management More secure Lower TCO Better experience Microsoft Inspire “Text…” Simpler management More secure Lower TCO Better experience Modern IT Multiple Devices User and Business Owned Cloud Managed & SaaS Apps Automated Proactive Self-Service

Users Apps 9/20/2018 1:36 AM Simplify Windows 10 and Office 365 ProPlus management and lower TCO with EMS Simplified management & security Embrace cloud-based management and transition at your pace while staying in control. Always up to date Deliver the latest features and security. Cloud updates mean you don’t need to have on-premises update servers. Microsoft 365 EMS Agentless Unified identity, device & app management Office 365 ProPlus management Integrated data protection Control what updates are deployed, to whom and when. Self-service deployment Make any new PC enterprise-ready via a simple self-service experience. Proactive insights Get ongoing proactive insights to diagnose and fix issues before they happen. Windows 10 Sign in with contoso.microsoft.com Contoso Sign in Corp. Username Password Certificate email@contoso.com Automatically configure devices when your users login with their company credentials. Use cloud intelligence to upgrade Windows 10 and Office 365 ProPlus with confidence. Next Microsoft Intune Learn more at microsoft.com/intune Enterprise Mobility + Security Learn more at microsoft.com/ems © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo

Paths to Modern Management 9/20/2018 1:36 AM Paths to Modern Management A new organization starting with modern workplace Cloud-first Many workloads need to be modernized at the same time Big Switch Transition Doesn't address the needs of the full organization Group by Group Transition Iteratively move workloads to modern Iterative (“Co-management”) © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Co-management with ConfigMgr and Intune Microsoft Inspire Co-management with ConfigMgr and Intune “Text…” AD + ConfigrMgr Patching Software Distribution Conditional Access Software Distribution EMS (Intune & Azure AD) On-premises Cloud Traditional Management Modern Management

Demo

One console. One set of APIs. Limitless possibilities. Microsoft Consumer Channels and Central Marketing Group 9/20/2018 One console. One set of APIs. Limitless possibilities. Intune offers you more flexibility than ever before to manage and secure your enterprise. New Intune on Azure Microsoft Graph API https://ms.portal.azure.com/ Windows PowerShell Users Devices PS C: \> Manage and automate Intune, Azure AD, Office 365 and other Microsoft services with PowerShell, Python, and more. Intune Group/User Management Manage apps Legal Marketing Carlos Antunes Configure devices Set device compliance Conditional access Devices & Groups Manage users Enroll devices Access control Hao Nguy Lucia Slobodova Livia Sousa Margie Foley Wilbur Gall REST API Enterprise Mobility + Security Automate management workflows with other business and IT systems Partners & resellers can integrate with Intune for their specific offerings Apps Data Manage Intune from the modern portal Manage EMS workflows alongside Intune Built to meet the evolving needs of your enterprise Redesigned architecture for scalability, resiliency, global availability, and security FastTrack and 24/7 support included with every subscription Delivered from the cloud and always up-to-date Connect to PowerBI and other reporting platforms © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo

Right Intune for Any Organization & User 9/20/2018 1:36 AM Right Intune for Any Organization & User Enterprise Small Business School Knowledge Workers Firstline Workers SMB Employee Teachers / Students Productive on company-owned and personal devices Productive on shared/Kiosk devices Productive personal devices Simplified admin experience in Productive on lab or school devices Grouped based on classes/labs/carts Customized console, policies for EDU Intune for Education in Microsoft 365 Education Intune in Microsoft 365 Enterprise Intune in Microsoft 365 F1 Microsoft 365 Business © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Intune for Education Intune console with a simplified, customized Education IT Pro experience Simple enrollment Bring devices under management simply by Azure AD joining Easy deployment Full IT service or delegate with USB setup key Zero touch management Apps and settings applied to each enrolled device by default Easier shared device management Each user can get different settings/apps if required Designed for education Easy to use for common school scenarios and settings Scales to your environment Easy for part-time IT staff yet integrates with ConfigMgr Easy to buy Purchase per-device or per-user 27

World class services and support included Microsoft Consumer Channels and Central Marketing Group 9/20/2018 World class services and support included FastTrack FastTrack provides you with access to a team of engineers dedicated to helping you plan and execute your deployment. Global Support Our 24/7 support ensures you have the support you need day to day. Envision Define your vision for a successful rollout with free trials and proven success plans. Deploy Move to EMS smoothly with web self-service, expert advice and user onboarding guidance. Ongoing success Achieve a greater value of EMS services with new features released monthly All included with your EMS subscription © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Enterprise Mobility + Security Apps Risk MICROSOFT INTUNE Make sure your devices are compliant and secure, while protecting data at the application level AZURE ACTIVE DIRECTORY Ensure only authorized users are granted access to personal data using risk-based conditional access MICROSOFT CLOUD APP SECURITY Gain deep visibility, strong controls and enhanced threat protection for data stored in cloud apps AZURE INFORMATION PROTECTION Classify, label, protect and audit data for persistent security throughout the complete data lifecycle MICROSOFT ADVANCED THREAT ANALYTICS Detect breaches before they cause damage by identifying abnormal behavior, known malicious attacks and security issues ! Device Access granted to data CONDITIONAL ACCESS Classify Label Audit Protect Location

Microsoft Enterprise Mobility + Security Technology Benefit E3 E5 Azure Active Directory Premium P1 Secure single sign-on to cloud and on-premises app MFA, conditional access, and advanced security reporting ● Azure Active Directory Premium P2 Identity and access management with advanced protection for users and privileged identities Microsoft Intune & ConfigMgr Mobile device, app, and PC management to protect company apps and data Azure Information Protection P1 Encryption for all files and storage locations Cloud-based file tracking Azure Information Protection P2 Intelligent classification and encryption for files shared inside and outside your organization Microsoft Cloud App Security Enterprise-grade visibility, control, and protection for your cloud applications Microsoft Advanced Threat Analytics Protection from advanced targeted attacks leveraging user and entity behavioral analytics Identity and access management Unified Endpoint Management Information protection Threat protection

Microsoft EMS Momentum Microsoft Inspire Microsoft EMS Momentum “Text…” Enterprise Mobility installed base increased to over 50 million / 55k customers Enterprise Mobility customers grew 57% Y/Y Key points to land • Momentum is already incredible

Microsoft 365 An intelligent, modern workplace. Microsoft Envision 2016 9/20/2018 1:36 AM Microsoft 365 An intelligent, modern workplace. Office 365 Windows 10 Enterprise Enterprise Mobility + Security Learn more at microsoft.com/ems © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.