Windows Intune Cloud Based Management Speaker: Neil Phillips 13th August 2014

Who am I? Neil Phillips MSV Consultancy Technical Consultant / MCT System Center 2012 R2, Office 365, Private Cloud web - msvconsultancy.co.uk - fb.com/MSVConsultancy

Today’s challenges Users - expect to be able to work in any location Devices – it’s not just a Microsoft world (Apple, Android etc.) Applications – deploying and managing applications across platforms Data – needs to be protected, maintaining compliance and reducing risk

User-centric IT Enable end users – Allow them to work on the device of their choice and still have access to corporate resources Unify your environment – Deliver a unified approach to application and device management Protecting data – protect corporate information and manage risk

What is Intune? Cloud-based device management platform Provides:- Simplified Policy Control Software Management Application Management Health Monitoring Remote Access Solution Subscription based model (per user) Each user licence covers up to 5 devices Windows Intune - £3.90 per user / month Windows Intune with Windows Software Assurance - £7.20 per user / month

Intune vs. SCCM SCCM 2012 R2* w/ Intune Build on existing SCCM infrastructure Full PC management (OS deployment, Endpoint Protection, Application delivery control, rich reporting) Scales to 100,000+ clients Administration tools (PowerShell, SSRS etc) Role Based Access Control * - Minimum version is SCCM 2012 SP1 Standalone Windows Intune No existing Configuration Manager deployment Simplified Policy Control Less than 20,000 devices (hard-cap per subscription) Simple Web-based administrative console

Windows Intune – Standalone service IT Windows PCs (x86/64, Intel SoC), Windows 8 RT Windows Phone 8 iOS, Android Web-based Admin Console

Windows Intune – System Center 2012 R2 Configuration Manager Integrated IT Mac OS X Windows PCs (x86/64, Intel SoC), Windows to Go Windows Embedded Windows 8 RT Windows 8.1 Windows Phone 8 iOS, Android SCCM Admin Console Microsoft System Center 2012 R2 Configuration Manager

Integration points of SCCM and Windows Intune Intune provides cloud based infrastructure to manage (and distribute software to) mobile devices All administrative tasks are performed through the SCCM console One way street – once connector is configured it cannot be undone!

Integration points of SCCM and Windows Intune

What makes Intune good? Manage anywhere there is an internet connection Centralised management for critical PC ‘house-keeping’ tasks Eliminates need for some third-party tools (e.g. Easy Assist) Simplified policies compared to Group Policy No hardware infrastructure requirement No Active Directory requirement No VPN requirement BranchCache Improvements automatically implemented

What makes Intune bad? Intune use only (officially) supported on business SKUs (Business, Professional, Enterprise etc.) No integration with Active Directory* Some administrators may need additional granularity for policies Workflow for updating client settings can be clunky Silverlight based * - ADFS / DirSync can be used to push user accounts up into Azure AD for SSO experience

Manage and Secure PCs and Devices Anywhere Simple web-based Administration Console Latest Release Help protect PCs from malware Manage updates Distribute software – 20GB Azure Storage included! Proactive Monitoring and Alerts Provide remote assistance Inventory hardware and software Monitor and track licences Set security policies Mobile Device Management

Corporate data protection Over-the-air enrollment of devices for management Mobile application management Settings Management Mobile device inventory Direct management (Windows RT, Windows Phone 8, iOS) EAS based management Integration with Exchange Server Either on-premises or Office 365 hosted

Mobile Device Management Cont. Management FeatureWindows RTWindows Phone 8 iOSAndroid Over-the-air Enrollment √√√X Inventory √√√√ Settings Management √√√√ Software Distribution √√√√ Remote Wipe X√√√

Software Distribution Summary

Consistent End User Experience Native Windows app package (.appx) Available in the Windows Store Windows Phone 8 Company Portal Native Windows Phone 8 app (.xap) Needs to be sideloaded Windows RT Company Portal iOS/Android Company Portal iOS/Android Company Portal

Demo – Deploying Office 365 Click-to- Run using Intune

Deploying Office 365 Click-to-Run using Intune Tools you’ll need:- Office Deployment Tool for Click-to-Run Configuration.xml Intune Administrator Account Caveats:- There is a 30 minute time limit on the installation via Intune 5GB free space is required

Deploying Office 365 Click-to-Run using Intune Download Office Deployment Tool for Click-to-Run

Deploying Office 365 Click-to-Run using Intune Once extracted, customise Configuration.xml In this example, Display Level is set to “None” for silent install

Deploying Office 365 Click-to-Run using Intune Sign into Windows Intune with Administrator account

Deploying Office 365 Click-to-Run using Intune Click on Software Node -> Add Software

Deploying Office 365 Click-to-Run using Intune Run through Add Software Wizard

Deploying Office 365 Click-to-Run using Intune Choose Software Installer Windows Installer (*.exe, *.msi) Browse to Setup.exe Tick Include additional files and subfolders from the same folder

Deploying Office 365 Click-to-Run using Intune Fill in pertinent information about the software package Try to be as descriptive as possible

Deploying Office 365 Click-to-Run using Intune Specify detection rules for software Detection rules similar to SCCM 2012 in nature

Deploying Office 365 Click-to-Run using Intune Add “/configure configuration.xml” to the command line argument

Deploying Office 365 Click-to-Run using Intune Customise installation return codes if required

Deploying Office 365 Click-to-Run using Intune Once Summary information has been checked – Upload!

Deploying Office 365 Click-to-Run using Intune We have now uploaded the required files

Deploying Office 365 Click-to-Run using Intune Find the newly uploaded software under Managed Software Click ‘Manage Deployment’

Deploying Office 365 Click-to-Run using Intune Select a Group you want the software deployed to

Deploying Office 365 Click-to-Run using Intune Choose Deployment Type and Deadline for installation

Deploying Office 365 Click-to-Run using Intune ….Wait

Deploying Office 365 Click-to-Run using Intune Intune will eventually show “Downloading updates” with a percentage

Deploying Office 365 Click-to-Run using Intune Once downloaded, Office will be silently installed (remember the configuration.xml file)

Deploying Office 365 Click-to-Run using Intune Think of the possibilities! Example – Lync client deployment (as this is a Unified Comms group, right? ) NB - If you target your application per user, it can be made available through Company Portal (similar to Software Center in SCCM 2012)

Pricing and Licencing Windows Intune with Windows Software Assurance (SA) Windows IntuneWindows Intune Add-on for System Center Configuration Manager What’s included Windows Intune service Microsoft System Center Configuration Manager Microsoft System Center Endpoint Protection Software Assurance for Windows Desktop OS Windows Intune service Microsoft System Center Configuration Manager Microsoft System Center Endpoint Protection Windows Intune service Available through MOSP EA/EAS MOSP EA/EAS EES Monthly pricing (GBP)£7.20/user£3.90/user~£2.50/user (EA/EAS) ~£1.25/user (EES)

bit.ly/1oD1ZCW Free 30 day trial Extend it to 90 days by calling customer services Windows Intune – Free Trial bit.ly/1r0rO7L

What’s coming next with Intune? Intune is updated roughly every quarter Currently rolling out update for Windows Phone 8.1 and Samsung KNOX support Q3/Q4 we will see far more features, including:- Bulk Enrolment for mobile devices (iOS and Android, no Windows Phone) Conditional Access Policy (Application install allow/deny list, Access only if device is managed etc.) Managed Office Mobile Apps Support for Apple Configurator! (Apple’s management app, iOS updates, app sync etc)

Any Questions?