1. New modern management features for IT pros
9/11/ :17 AM
BRK3073
New modern management features for IT pros
Tanvir Ahmed
Program Manager
@mdm_tanvir
Mamta Kumar
Senior Program Manager
@ZuprMamtaKumar
Jeremy Moskowitz
Microsoft MVP
@jeremymoskowitz
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. The Classic Workplace The Digital Transformation The Modern Workplace
9/11/ :17 AM
The Digital
Transformation
The Modern
Workplace
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Characteristics of Traditional PC Management
9/11/ :17 AM
Characteristics of Traditional PC Management
Classic Workplace
On-Premises
Infrastructure
High Control with
ConfigMgr and GPOs
Business-owned
Devices
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Characteristics of Mobile Device Management
9/11/ :17 AM
Characteristics of Mobile Device Management
Modern Workplace
Cloud Services
Simpler IT Process
Business-owned & BYOD
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. The Promises of Modern Management
9/11/ :17 AM
The Promises of Modern Management
MODERN
WORKPLACE
  CLOUD IT 
LOWER TCO
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. What do you get from MMAT?
9/11/ :17 AM
What do you get from MMAT?
Win10
MMAT GP Report
IT admin
Win7
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Download MMAT from http://aka.ms/mmat

8. Paths to Modern Management
9/11/ :17 AM
Paths to Modern Management
A new organization starting with modern workplace
Cloud-first
Many workloads need to be modernized at the same time
Big Switch Transition
Doesn't address the needs of the full organization
Group by Group Transition
Iteratively move workloads to modern
Iterative (Co-management)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Co-management Configuration Manager and Intune
9/11/ :17 AM
Co-management Configuration Manager and Intune
Intune & Azure
Active Directory
ConfigMgr
Software Distribution
Patching
Device Compliance
On-premises
Cloud
Modern Management
Modern Management
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Meet some folks from Contoso
9/11/ :17 AM
Meet some folks from Contoso
IT admin at Contoso
Information worker at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. As an IT admin, I need to… SECURE CORPORATE ASSETS
9/11/ :17 AM
As an IT admin, I need to…
MAKE USERS PRODUCTIVE
Office Pro Plus Deployment
Delivery Optimization
SECURE CORPORATE ASSETS
Security Policies & Configuration
BitLocker Management
Security Baselines
IT Admin at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. 9/11/ :17 AM
With every release, MDM helps me meet my organization’s security needs!
IT Admin at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Inbox management updates
9/11/ :17 AM
Inbox management updates
Creators Update (1703)
Fall Creators Update (1710)
BitLocker management
Firewall configuration
Office Pro Plus deployment and configuration
Interactive logon policies
Selected Group Policy settings
User account control
Win32 app settings configuration
Windows remote management
With every release, MDM helps me meet my organization’s security needs!
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. BitLocker Management Demo
9/11/ :17 AM
BitLocker Management Demo
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. A closer look at BitLocker Management
9/11/ :17 AM
A closer look at BitLocker Management
In MDM Console, IT Admin can view Encryption Compliance for entire org
IT Admin can see status report that device is encrypted
Go to MDM Console
Enforce Disk Encryption for MDM enrolled devices
What happens if you need your BitLocker Recovery key?
Device Encryption status is sent to MDM
BitLocker Recovery key is sent to AAD
Call Help Desk, get Recovery key
Device starts encryption. User can continue working on device OR
Encrypt
Access device, and start working again
On 2nd device, go to AAD portal, get Recovery key
Employee receives notification to start encryption
Device completes encryption.
With every release, MDM helps me meet my organization’s security needs!
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. When I move to MDM, I want to continue using Security Baselines.
9/11/ :17 AM
When I move to MDM, I want to continue using Security Baselines.
IT Admin at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Windows Security Baselines
9/11/ :17 AM
Windows Security Baselines
MDM Admin Portal
Security Baselines in Windows
RS3 Security Baselines
RS4 Security Baselines
Basic UX Support with no customization
Enabled
MDM
Security Baselines
MDM Admin Portal
Security Baselines in Windows
Internet Explorer
Browser
Advanced UX Support with Customization
66 settings available. Enable a category to configure settings
SmartScreen
Search
Enabled
MDM Admin Portal
Security Baselines in Windows – Internet Explorer
Internet Explorer – Computer (32 settings)
Internet Zone Allow Scriptlets
Allow Enterprise Mode Site List
Turn On Enhanced Protected Mode
Enabled
Allow font downloads
MDM
gets
Baselines
Customer
gets
Baselines
When I move to MDM I want to continue using Security Baselines
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. I can easily deploy Office 365 Pro Plus to my organization using MDM.
9/11/ :17 AM
I can easily deploy Office 365 Pro Plus to my organization using MDM.
IT Admin at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Office 365 ProPlus
Office 365 ProPlus all apps

23. 9/11/ :17 AM
MDM helps me deploy apps and keep my devices up to date with less bandwidth.
IT Admin at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Windows Update + DO Services
9/11/ :17 AM
Total Bandwidth Usage Reduced
Content Servers / WSUS Cache
Windows Update + DO Services
MDM helps me deploy apps and keep my devices up to date with less bandwidth.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. As an information worker, I want to…
9/11/ :17 AM
As an information worker, I want to…
EASILY SET UP MY DEVICE
Deep linking support
Enrollment status pages
TRUST THROUGH TRANSPARENCY
MDM Info Page
Enhanced Diagnostics Report
WORK FROM ANYWHERE
Dynamic Management
Mobile Application Management
Information worker at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Information worker at Contoso
9/11/ :17 AM
Setting up my device was easy. I just clicked a link from my and entered my password!
Information worker at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. New deep links allow enrolling with fewer clicks
9/11/ :17 AM
New deep links allow enrolling with fewer clicks
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. 09/25/2017

29. Setting up your device for work
Applying security policies (1 of 3)
Encrypting hard drive to keep your data safe
Applying security policies (2 of 3)
Installing security certificates
Applying security policies (3 of 3)
Configuring Windows Defender
Security setup complete
Adding network connections (2 of 3)
Configuring VPN for remote access
Adding network connections (3 of 3)
Adding Contoso network connections
Adding network connections (1 of 3)
Adding Contoso WiFi network
Adding network connections
Waiting for previous step to complete
Network setup complete
Installing applications
Waiting for previous step to complete
Installing applications (1 of 3)
Installing Expenses
Installing applications (3 of 3)
Installing Dynamics 365
Installing applications (2 of 3)
Installing Office 2016
Application installation complete
Leave everything to us. (Don’t turn off this device.)

30. Excel 2016
PowerPoint
2016

31. I can use my device for work no matter where I go!
9/11/ :17 AM
I can use my device for work no matter where I go!
Information worker at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. MDM policies adapt to your environment
9/11/ :17 AM
MDM policies adapt to your environment
Dynamic Management allows IT admins to apply policies dynamically based on:
Time
Location
Network
NO PARKING
TOP SECRET
WiFi
Camera
Java
WiFi
Camera
WiFi
Camera
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. MDM policies adapt to your environment
9/11/ :17 AM
MDM policies adapt to your environment
Dynamic Management allows IT admins to apply policies dynamically based on:
Time
Location
Network
WiFi
Camera
Java
WiFi
Camera
WiFi
Camera
TOP SECRET
NO PARKING
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

34. Full productivity doesn’t mean full management
9/11/ :17 AM
Full productivity doesn’t mean full management
Mobile Application Management (MAM) is the management solution for personal (BYOD) devices.
Supported on Desktop and Mobile
Integrated with Azure AD
WiFi
Camera
Employees can use their work and personal accounts with the same app
Corporate identity and data can be removed without affecting users’ apps or personal data.
Uses WIP to secure corporate data on personal devices
Consistent admin and user experience with Intune MAM for iOS/Android
Secure, integrates with Azure ID and delivers great user experience
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Information worker at Contoso
9/11/ :17 AM
My organization is fully transparent with what they are managing on my device.
Information worker at Contoso
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. Find out what is being managed in Settings

37. Diagnosing issues is a breeze with the new diagnostics report
C:\Users\Public\Do
file:///C:/Users/Public/Documents/MDMDiagnostics.html

38. MDM ISV Engagement & Support
Microsoft Ignite 2015
9/11/ :17 AM
MDM ISV Engagement & Support
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

39. Microsoft 365 Microsoft 365 powered device Unlocks creativity
Microsoft Inspire
9/11/ :17 AM
Microsoft 365
Unlocks creativity
Built for teamwork
Integrated for simplicity
Intelligent security
Microsoft 365 powered device
The best way to experience Microsoft 365
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

40. Microsoft 365 powered device
Microsoft Inspire
9/11/ :17 AM
Microsoft 365 powered device
Easy to deploy and manage
Always up to date
Proactive insights
Intelligent security, built-in
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. 9/11/ :17 AM
Session resources
Windows 10 CSP reference docs:
What’s new in Windows 10 for MDM:
Microsoft Security Compliance Toolkit:
1703 Security Baselines (DRAFT):
Transitioning to modern management:
Why GP Is Not Dead Manifesto:
Transition all GP / GPPrefs to MDM:
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

42. Please evaluate this session
Tech Ready 15
9/11/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.