Deploying and Managing Mobile Devices in the Enterprise

Introduction Name Company affiliation Title / function Job responsibility Mobile solutions experience Expectations for the course

Course Materials Name card Student workbook Student Materials compact disc Course evaluation

Prerequisites Microsoft® Exchange Server messaging systems Microsoft Office applications such as Microsoft Office Excel® and Microsoft Office Word Microsoft Office Outlook® functionality A general understanding of messaging issues

Course Outline Module 1: Microsoft Enterprise Mobility Framework Module 2: Windows Mobile 5 Platform Module 3: Microsoft Mobility Solutions

Demonstration: Using Virtual PC Virtual PC computers can communicate with each other and with the host, but not with other computers outside of the virtual environment In this demonstration, you will learn how to: Virtual PC computers can communicate with each other and with the host, but not with other computers outside of the virtual environment In this demonstration, you will learn how to: Open Virtual PC Start Virtual PC Log on to Virtual PC Switch between full-screen and window mode Recognize the difference between the virtual computers used in the practices for this course Close Virtual PC Open Virtual PC Start Virtual PC Log on to Virtual PC Switch between full-screen and window mode Recognize the difference between the virtual computers used in the practices for this course Close Virtual PC

Lab Virtual PC Environment

Additional Resources Microsoft Windows Mobile home page at Windows Mobile 5.0 Messaging & Security Feature Pack at Microsoft Exchange Server Web site at Microsoft Office for Windows Mobile home page at fice.mspx Microsoft Mobile Developer Center at

Module 1: Microsoft Enterprise Mobility Framework

Overview Introducing the Microsoft Enterprise Mobility Framework

Lesson: Introducing the Microsoft Mobility Framework The Microsoft Mobility Framework Microsoft Windows Mobile 5 Microsoft Office Mobile Microsoft Exchange Server 2003 Mobility Features Outlook 2003 and Outlook Web Access Mobility Features Microsoft SQL Server 2005 Mobile Edition Other Microsoft Mobility Solutions

The Microsoft Mobility Framework MSFP Windows Mobile 5.0 Exchange Server 2003 SP 2 Windows 2003 Active Directory Messaging and Security Feature Pack Direct Push ActiveSync Data Compression Task synchronization Security Policies Local wipe Remote wipe Cert Auth GAL Lookup S/MIME Windows Mobile 5.0 More Developer opportunities More Mobile Operator opportunities More OEM opportunities Applications bundled with platform Exchange Server 2003 SP2 Direct Push ActiveSync Data Compression Task synchronization Security Policies Remote wipe GAL Lookup S/MIME Certificate Authorization

Microsoft Windows Mobile 5.0 Windows Mobile 5.0  Send and receive and browse the Internet from any location  Work with mobile versions of popular Microsoft Office applications  Use hundreds of third-party applications designed for interoperability with Windows Mobile Messaging and Security Feature Pack (MSFP)

Microsoft Office Mobile Microsoft Excel ® Mobile Microsoft PowerPoint ® Mobile Microsoft Word Mobile Microsoft Office Communicator 2005 and Communicator Mobile

Outlook 2003 and Outlook Web Access Mobility Features Outlook 2003 mobility features  Network traffic optimization  Data compression  Cached Exchange Mode Outlook Web Access mobility improvements  Bandwidth reduction  User interface redesign  Improved user performance  Gzip compression

Microsoft Exchange Server 2003 Mobility Features Optimization for low-bandwidth and offline situations Unified access to corporate personal information manager (PIM) data from the Internet and intranet on a broad range of devices Built-in support for Windows Mobile–based devices, browser-equipped mobile phones, and ActiveSync- enabled devices

Microsoft SQL Server 2005 Mobile Edition Familiar database platform for rapid development Compact yet capable relational database Flexible data access

Other Microsoft Mobility Solutions Microsoft Dynamics CRM 3.0 Microsoft MSN Mobile Microsoft MapPoint Location Server and Web Service Microsoft.NET Compact Framework

Review Introducing the Microsoft Enterprise Mobility Framework

Module 2: Windows Mobile 5 Platform

Overview Microsoft Windows Mobile 5.0 Overview Messaging and Security Feature Pack

Lesson: Windows Mobile 5.0 Overview Windows Mobile 5.0: Improved Productivity Windows Mobile 5.0: Integrated Multimedia Experience Windows Mobile 5.0: Ease of Development Windows Mobile 5.0: Security Windows Mobile 5.0: Deployment Windows Mobile 5.0: Troubleshooting

Windows Mobile 5.0: Improved Productivity Faster access to , desktop, and server information A richer experience with updated Microsoft Office Mobile software Innovative deployment capabilities and security technologies that facilitate management of Windows Mobile–powered devices

Windows Mobile 5.0: Integrated Multimedia Experience Windows Media Player 10 Support for a wide range of business models Support for multiple DRM platforms More pluggable codec technologies Video display improvements

Windows Mobile 5.0: Ease of Development Powerful platform capabilities Reduced development time and costs Increased market opportunities Access to comprehensive developer resources and support

Windows Mobile 5.0: Security Windows Mobile-based Pocket PCs and Smartphones, offer a wide range of security options to protect both sensitive data and networks The Windows Mobile platform itself also offers stronger security protections A wide range of third-party security software and peripheral products are also available

Lab 2A: Windows Mobile 5.0 Guided Tour Exercise 1: Navigating Windows Mobile 5.0 Exercise 2: Using a Windows Mobile 5.0 Device to Take Notes Exercise 3: Configuring a Windows Mobile 5.0 Device to Communicate Using TCP/IP

Windows Mobile 5.0: Deployment Deploying Windows Mobile 5 in an enterprise involves the following high-level steps: 1. Understand the Windows Mobile device security model 2. Package and deploy applications 3. Deliver applications to end users 4. Sign applications 5. Troubleshoot application installation and execution

Windows Mobile 5.0: Troubleshooting Troubleshooting application execution  Sign required binary files  Ensure correct security policy setting  Ensure that binary files are not on revocation list  Add a matching root certificate Troubleshooting application installation  Sign required.cab files  Ensure correct security policy setting  Ensure that.cab files are not on revocation list  Add a matching root certificate

Lesson: Messaging and Security Feature Pack Enhanced Outlook Mobile Experience Scalable, Cost-Effective Mobile Solutions Support for S/MIME Messaging Securing Devices Using Policies Securing Devices Using Certificate-Based Authentication Using the Local Wipe Feature Using the Remote Wipe Feature

Enhanced Outlook Mobile Experience Using Outlook 2003 with RPC/HTTP Exchange Back-End Server RPC/HTTP Microsoft Exchange 2003 Using Outlook Web Access HTTP Exchange Front-End Server Exchange Back-End Server Microsoft Exchange 2003

Scalable, Cost-Effective Mobile Solutions Windows Mobile 5.0 and MSFP offer scalability through: Ability to utilize existing Exchange 2003 investments Outlook Mobile data compression Broad device choice

Support for S/MIME Messaging Is a standard for secure messages that uses a Public Key Infrastructure to share keys Offers sender authentication using digital signatures and can be encrypted to protect privacy Interoperates well with any standard-compliant client

Securing Devices Using Policies Remotely manage and enforce corporate IT policies  Enforce PIN password standards  Lock device automatically after certain period of inactivity  Wipe memory of device after a specified number of failed logon attempts  Send provision request for policy settings to devices Options for enforcing the security policies  Only devices that have policies can synchronize  Older devices or devices that do not fully support policies can synchronize  Implement exemption list for specific users

Using the Local Wipe Feature Local wipe  Device automatically resets local memory to clean state after X number of unsuccessful PIN or password entries  Can be coupled with other security policies and features to mitigate the risk of data misuse on lost or stolen devices

Using the Remote Wipe Feature 1. Administrator sends a remote erase order to specific device 2. Server sends an erase order the next time the device connects to Exchange 3. Device acknowledges that the command was received 4. Device wipes data the next time it receives the command

Securing Devices Using Certificate-Based Authentication Admin uploads XML to Active Directory that sets CA Name and other client enroll configurations 1 Upon cradling, Desktop ActiveSync connects to Active Directory, fetches the XML and pushes it down to the device 2 Device attempts sync but does not have a certificate Sync calls enroll API to get certificate Device syncs with new certificate 3 4 5

Lab 2B: Using Windows Mobile 5.0 Messaging Features Exercise 1: Configuring a Windows Mobile 5.0 Device for ActiveSync Exercise 2: Using the Messaging Features of Windows Mobile 5.0 and Messaging and Security Feature Pack Exercise 3: Assigning a Picture to a Contact on the Mobile Device Exercise 4: Using GAL Lookup to Locate People in the Global Address List

Review Microsoft Windows Mobile 5 Overview Messaging and Security Feature Pack