1. 9/20/2018 1:36 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Unified Endpoint Management (UEM) with Microsoft Intune
9/20/2018 1:36 AM
BRK2090
Unified Endpoint Management (UEM) with Microsoft Intune
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. The mobile productivity challenge
User expectations
IT challenges
Collaborate and
share with partners
Secure access to company resources
Easy access to familiar apps
Protect company data and resources
Work easily from anywhere on any device
Do more with limited resources
How to empower users to be productive, while protecting the massive amounts of data flowing through your mobile ecosystem?

4. Unified Endpoint Management with Intune/EMS
Productivity
Enable a mobile experience that works the way employees want it to.
Data Protection
Ensure that the right data protection is applied to the right scenarios.
Device choice
Easy access to resources
Self-service options
Familiar Office apps
User, device, app,
file control
Conditional access
Data protection after access
Management
Tools and services that empower IT pros to do strategically more with less.
24/7
Unified management
Cloud-based scalability and reliability
Deployment support

5. Productivity
Protection
Management

6. In a complex device landscape, you need choices.
Microsoft Intune gives you the flexibility and control to secure your data on any device—even those you don’t manage. u b l i c k i o p s k m a r y p r i t i o n o m p a n i o m a w c n o r o r n f s h a r e d i e k r o n t r a c c t o r
Company-Managed
Employee-Managed
3rd-Party-Managed
Secure your data on any device with Intune
Mobile Device Management (MDM)
Mobile Application Management (MAM)
Enroll devices for
Provision settings,
Report & measure
Remove corporate
Publish mobile
Configure and
Report app
Secure & remove corporate
management
certs, profiles
device compliance
data from devices
apps to users
update apps
inventory & usage
data within mobile apps
Microsoft Intune
Microsoft Intune
Learn more at microsoft.com/intune

7. Demo

8. Streamline access to Office 365 and other resources
On-premises
applications
Microsoft Azure
All cloud applications
Users can sign in once for secure access to all corporate resources, on-premises and in the cloud, from any device.
This includes Office Mobile apps as well as pre-integrated support for Salesforce, Concur, Workday, and thousands of other popular SaaS apps.
SINGLE SIGN- ON TO ALL APPS

9. More productivity, less calls to helpdesk
Windows Server Management Marketing
9/20/2018
More productivity, less calls to helpdesk
Self-service capabilities include:
Enroll/un-enroll device
Reset password or PIN
Download apps required by organization
Join and manage groups
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Demo

11. Productivity
Protection
Management

12. Control access and protect data
Protect after access
Ensure the right people have access to apps and files under the right circumstances.
Ensure that people do the right thing with files after they are accessed.

13. Control access to data based on real-time context
9/20/2018 1:36 AM
Control access to data based on real-time context
Microsoft Azure
Actions
Conditions
Parameter Examples
Location
Trusted/Untrusted IP
Device state
Managed/Unmanaged
User
All or user group
Risk
Suspicious activity
Allow
Enforce MFA
Enroll device
Limited access
Block access
Wipe device
On-premises
applications
Risk (Low, Medium, High)
Define policies that provide contextual controls at the user, location, device, and app levels.
Policies adapt to real time conditions based on monitoring of perceived risks.
Risks are calculated based on advanced Microsoft machine learning.
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Control what happens after the data is accessed
Our app protection policies allow you to control what happens to docs and data after they’ve been accessed.
App encryption at rest
App access control – PIN or credentials
Save as/copy/paste restrictions
App-level selective wipe
Managed web browsing
Apply policies for Windows 10 Information Protection for even greater control
Secure viewing of PDFs, images, videos
Restrict features, sharing, downloads

15. Demo

16. Productivity
Protection
Management

17. Mobile productivity management made easier
Traditional Windows management
Run separate mobile solutions
Maintain complex infrastructure
Do more with less
Unified endpoint management
Unified admin console
Graph
API
Cloud scalable and flexible
Support
included

18. Modern IT Simpler management More secure Lower TCO Better experience
Microsoft Inspire
“Text…”
Simpler management
More secure
Lower TCO
Better experience
Modern IT
Multiple Devices
User and Business Owned
Cloud Managed & SaaS Apps
Automated
Proactive
Self-Service

19. Users Apps
9/20/2018 1:36 AM
Simplify Windows 10 and Office 365 ProPlus management and lower TCO with EMS
Simplified management & security
Embrace cloud-based management and transition at your pace while staying in control.
Always up to date
Deliver the latest features and security.
Cloud updates mean you don’t need to have on-premises update servers.
Microsoft 365
EMS
Agentless
Unified identity, device & app
management
Office 365
ProPlus
management
Integrated
data protection
Control what updates are deployed, to whom and when.
Self-service deployment
Make any new PC enterprise-ready via a simple self-service experience.
Proactive insights
Get ongoing proactive insights to diagnose and fix issues before they happen.
Windows 10
Sign in with contoso.microsoft.com
Contoso Sign in
Corp. Username
Password
Certificate
Automatically configure devices when your users login with their company credentials.
Use cloud intelligence to upgrade Windows 10 and Office 365 ProPlus with confidence.
Next
Microsoft Intune Learn more at microsoft.com/intune
Enterprise Mobility + Security
Learn more at microsoft.com/ems
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Demo

21. Paths to Modern Management
9/20/2018 1:36 AM
Paths to Modern Management
A new organization starting with modern workplace
Cloud-first
Many workloads need to be modernized at the same time
Big Switch Transition
Doesn't address the needs of the full organization
Group by Group Transition
Iteratively move workloads to modern
Iterative (“Co-management”)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Co-management with ConfigMgr and Intune
Microsoft Inspire
Co-management with ConfigMgr and Intune
“Text…”
AD + ConfigrMgr
Patching
Software Distribution
Conditional Access
Software
Distribution
EMS (Intune & Azure AD)
On-premises
Cloud
Traditional Management
Modern Management

23. Demo

24. One console. One set of APIs. Limitless possibilities.
Microsoft Consumer Channels and Central Marketing Group
9/20/2018
One console. One set of APIs. Limitless possibilities.
Intune offers you more flexibility than ever before to manage and secure your enterprise.
New Intune on Azure
Microsoft Graph API
Windows PowerShell
Users
Devices
PS C: \> Manage and automate Intune, Azure AD, Office 365 and other Microsoft services with PowerShell, Python, and more.
Intune
Group/User Management
Manage apps
Legal
Marketing
Carlos Antunes
Configure devices
Set device compliance
Conditional access
Devices & Groups
Manage users
Enroll devices
Access control
Hao Nguy
Lucia Slobodova
Livia Sousa
Margie Foley
Wilbur Gall
REST API
Enterprise Mobility + Security
Automate management workflows with
other business and IT systems
Partners & resellers can integrate with Intune for their specific offerings
Apps
Data
Manage Intune from the modern portal
Manage EMS workflows alongside Intune
Built to meet the evolving needs of your enterprise
Redesigned architecture for scalability, resiliency, global availability, and security
FastTrack and 24/7 support included with every subscription
Delivered from the cloud and always up-to-date
Connect to PowerBI and other reporting platforms
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Demo

26. Right Intune for Any Organization & User
9/20/2018 1:36 AM
Right Intune for Any Organization & User
Enterprise
Small Business
School
Knowledge Workers
Firstline Workers
SMB Employee
Teachers / Students
Productive on company-owned and personal devices
Productive on shared/Kiosk devices
Productive personal devices
Simplified admin experience in
Productive on lab or school devices Grouped based on classes/labs/carts Customized console, policies for EDU
Intune for Education in Microsoft 365 Education
Intune in Microsoft 365 Enterprise
Intune in Microsoft 365 F1
Microsoft 365 Business
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Intune for Education
Intune console with a simplified, customized Education IT Pro experience
Simple enrollment Bring devices under management simply by Azure AD joining
Easy deployment Full IT service or delegate with USB setup key
Zero touch management Apps and settings applied to each enrolled device by default
Easier shared device management Each user can get different settings/apps if required
Designed for education Easy to use for common school scenarios and settings
Scales to your environment Easy for part-time IT staff yet integrates with ConfigMgr
Easy to buy Purchase per-device or per-user 27

28. World class services and support included
Microsoft Consumer Channels and Central Marketing Group
9/20/2018
World class services and support included
FastTrack
FastTrack provides you with access to a team of engineers dedicated to helping you plan and execute your deployment.
Global Support
Our 24/7 support ensures you have the support you need day to day.
Envision
Define your vision for a successful rollout with free trials and proven success plans.
Deploy
Move to EMS smoothly with web self-service, expert advice and user onboarding guidance.
Ongoing success
Achieve a greater value of EMS services with new features released monthly
All included with your EMS subscription
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Microsoft Enterprise Mobility + Security
Apps
Risk
MICROSOFT INTUNE
Make sure your devices are compliant and secure, while protecting data at the application level
AZURE ACTIVE DIRECTORY
Ensure only authorized users are granted access to personal data using risk-based conditional access
MICROSOFT CLOUD APP SECURITY
Gain deep visibility, strong controls and enhanced threat protection for data stored in cloud apps
AZURE INFORMATION PROTECTION
Classify, label, protect and audit data for persistent security throughout the complete data lifecycle
MICROSOFT ADVANCED THREAT ANALYTICS
Detect breaches before they cause damage by identifying abnormal behavior, known malicious attacks and security issues !
Device
Access granted to data
CONDITIONAL
ACCESS
Classify
Label
Audit
Protect
Location

30. Microsoft Enterprise Mobility + Security
Technology
Benefit E3 E5
Azure Active Directory Premium P1
Secure single sign-on to cloud and on-premises app MFA, conditional access, and advanced security reporting ●
Azure Active Directory Premium P2
Identity and access management with advanced protection for users and privileged identities
Microsoft Intune & ConfigMgr
Mobile device, app, and PC management to protect company apps and data
Azure Information Protection P1
Encryption for all files and storage locations
Cloud-based file tracking
Azure Information Protection P2
Intelligent classification and encryption for files shared inside and outside your organization
Microsoft Cloud App Security
Enterprise-grade visibility, control, and protection for your cloud applications
Microsoft Advanced Threat Analytics
Protection from advanced targeted attacks leveraging user and entity behavioral analytics
Identity and access management
Unified Endpoint Management
Information
protection
Threat protection

31. Microsoft EMS Momentum
Microsoft Inspire
Microsoft EMS Momentum
“Text…”
Enterprise Mobility installed base increased to over 50 million / 55k customers
Enterprise Mobility customers grew 57% Y/Y
Key points to land
• Momentum is already incredible

32. Microsoft 365 An intelligent, modern workplace.
Microsoft Envision 2016
9/20/2018 1:36 AM
Microsoft 365
An intelligent, modern workplace.
Office 365
Windows 10 Enterprise
Enterprise Mobility + Security
Learn more at microsoft.com/ems
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.