Download presentation
Presentation is loading. Please wait.
Published byみさき いなおか Modified over 6 years ago
1
Microsoft 365 powered device Services Offering Guide Version 1
Microsoft 365 powered device Services Offering Guide Version 1.0, March 2018
2
Microsoft 365 Powered device Services
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus Device as a service Secure infrastructure Management 1 2 3
3
Microsoft 365 Powered device services Disclaimer
9/20/2018 3:30 PM Microsoft 365 Powered device services Disclaimer This Services Offering Guide provides just examples of the managed service offers. Setting up these managed services will require time and monetary investment. © Microsoft Corporation. All rights reserved.
4
Microsoft 365 Powered device Services
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus Device as a service Secure infrastructure Management 1 2 3
5
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus
Update Management as a Service Adoption & Change Management (ACM) Lets talk about what are the different service offerings that can be part of windows and office 365 proplus get current and stay current service Update management as a service Adoption and change management as a service (ACM) Both the services can be wither offered as individual services or in combination but strong recommendation is that it should be offered as a combination
6
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus
Update Management as a Service Adoption & Change Management (ACM) Lets talk about what are the different service offerings that can be part of windows and office 365 proplus get current and stay current service Update management as a service Adoption and change management as a service (ACM) Both the services can be wither offered as individual services or in combination but strong recommendation is that it should be offered as a combination
7
Update Management as a service
LEVERAGE Windows as a service: Windows 10 introduces a new way to build, deploy and service Windows Office ProPlus & Windows 10 aligned update cadence Windows 10 and Office ProPlus now have semi annual updates Office ProPlus & Windows 10, 18 month support period Windows 10 and Office ProPlus semi annual updates have 18 month support cycle OFFER CAN INCLUDE PROJECT SERVICES Servicing strategy Migrate to Windows 10 and Office 365 ProPlus TOOLS Co-Management capabilities of Intune and SCCM configuration managers Windows Analytics: Update Compliance Windows Analytics: Upgrade Readiness MANAGED SERVICES Updating Windows 10 and Office 365 ProPlus Windows 10 & Office ProPlus update planning and design Windows 10 & Office ProPlus update deployment Windows 10 & Office ProPlus update management monitoring and reporting Service desk or Helpdesk The Windows 10 operating system introduces a new way to build, deploy, and service Windows: Windows as a service. Microsoft has reimagined each part of the process, to simplify the lives of IT pros and maintain a consistent Windows 10 experience for its customers. These improvements focus on maximizing customer involvement in Windows development, simplifying the deployment and servicing of Windows client computers, and levelling out the resources needed to deploy and maintain Windows over time. The following are examples of the servicing tools available to manage Windows as a service updates: Windows Update Windows Update for Business Windows Server Update Services (WSUS) System Center Configuration Manager Detailed information regarding Windows-as-a-Service can be found here: Overview of Windows as a service (Windows 10) - Some of the servicing strategy for update management as a service could include Migrate to Windows 10 and Office 365 ProPlus As Migration is onetime job and is a project based service we will not talk about it in this session as this session is focused on servicing components that can be used as on going services or managed services like Windows 10 & Office 365 ProPlus update planning and design Windows 10 & Office 365 ProPlus update deployment Windows 10 & Office 365 ProPlus update management monitoring and reporting We will also talk about which tool like windows Analytics can be used to offer these services
8
9/20/2018 3:30 PM Update Management Windows 10 & Office 365 ProPlus update planning and design Update Planning and Design offer could include 1 5 Agree on timeframe of the deployment Identifying Insider preview and Pilot users Assessment of current environment for existing built of Windows 10 and Office ProPlus Identifying Computer groups for broader deployment Remediation planning for applications that are at risk and might have deployment issues Identifying which version of Windows and Office 365 ProPlus to be deployed (N or N-1 version) Identifying support requirements for Pilot users and Broad deployment Identifying Applications that are business critical, at risk or with known issues and needs testing with the version of Windows and Office 365 ProPlus being deployed 2 6 7 3 Lets double click on the different service strategies one by one starting with windows 10 and office 365 proplus update planning and design The steps mentioned above are few critical steps that should be part of update planning and design offer some of the steps mentioned are self explanatory but lets talk about them Agree on timeframe of the deployment : ( this is crucial as windows and office 365 proplus will have a new feature release after 6 months (march and sept) the time frame of the deployment should not overshoot 2 versions and should be done before the next feature release. Best way to do this is to show the customer on a whiteboard the time when the update will start and when it will be complete and how long the selected version of windows and office will be supported Assessment of current infrastructure for existing built of Windows 10 and Office ProPlus assess what built of windows 10 and office 365 proplus is running in customers environment. Identifying which version of Windows and Office 365 ProPlus to be deployed (N or N-1 version) Again a very important step as It will define the support timeframe of the version selected and time frame of the update deployment Identifying Applications that are business critical, at risk or with known issues and needs testing with the version of Windows and Office 365 ProPlus being deployed this is very critical step and needs to be executed with customers Identifying Insider preview and Pilot users Identifying Computer groups for broader deployment Remediation planning for applications that are at risk and might have deployment issues identify the potential remediation steps for application that are business critical and at risk as this can delay the update process significantly if not done properly Identifying support requirements for Pilot users and Broad deployment 8 4 N is the current version of Windows and Office ProPlus and N-1 is one version older than the current version © Microsoft Corporation. All rights reserved.
9
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus update or upgrade planning and design Example of tools Windows Analytics- Update Compliance Windows Analytics- Upgrade Readiness 2 Assessment of current environment for existing built of Windows 10 and Office 365 ProPlus In this subsequent slides we are showcasing the capability of the Example of tools “windows analytics” to show some of the points mentioned in previous slide for example: 2. Assessment of current infrastructure for existing built of Windows 10 and Office 365 ProPlus this can be achieved via windows analytics update compliance to see the built versions of windows 10 and windows analytics upgrade readiness for the built version of office 365 proplus running in the environment. To get the list of office 365 proplus built versions you need to click on Total applications link in upgrade readiness and then filter on Microsoft office 365 proplus by selecting it under the “APPNAME” on right hand side © Microsoft Corporation. All rights reserved.
10
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus update or upgrade planning and design Example of tools Windows Analytics-Upgrade Readiness 4 Identifying Applications that are business critical, at risk or with known issues and needs testing with the version of Windows and Office 365 ProPlus being deployed Identifying Applications that are business critical, at risk or with known issues and needs testing with the version of Windows and Office 365 ProPlus being deployed : This can be achieved via windows analytics upgrade readiness © Microsoft Corporation. All rights reserved.
11
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus update or upgrade planning and design Example of tools Windows Analytics-Upgrade Readiness 6 Identifying Computer groups for broader deployment Identifying Computer groups for broader deployment : similarly this can be achieved via windows analytics upgrade readiness © Microsoft Corporation. All rights reserved.
12
Update Management Windows 10 & Office 365 ProPlus update deployment
9/20/2018 3:30 PM Update Management Windows 10 & Office 365 ProPlus update deployment Update deployment offer could include Pilot deployment 1 3 Collect Key Information Drive Deployment Apps and driver(s) compatibility details Deploy updates to pilot machines/users one- by-one App usage and support information Establish a process Validate applications, devices and drivers Identified in planning stage to ensure compatibility with the Selected version of Windows 10 and Office 365 ProPlus Remediate the compatibility issues with fix already available Identify and remediate issues during deployment Identify and document the compatibility issues which require 3rd party testing Provide technical support for pilot users (Onsite or Remote) Test and Fix issues to enable pilot deployment Schedule during off hours Communication to the identified pilot users 2 In this slide we will go through the service strategy of windows 10 and office 365 proplus update deployment which should offer deployment of updates in 2 phases: Pilot and Broad deployment Broad deployment will be covered in next slide Pilot deployment Collect Key Information Apps and driver(s) compatibility details App usage and support information Establish a process Remediate the compatibility issues with fix already available Identify and document the compatibility issues which require 3rd party testing Test and Fix issues to enable broader deployment Schedule during off hours Communication to the identified pilot users Drive Deployment Deploy updates to pilot machines/users one-by-one Validate applications, devices and drivers Identified in planning stage to ensure compatibility with the Selected version of Windows 10 and Office ProPlus Identify and remediate issues during deployment Provide technical support for pilot users(Onsite or Remote) All the points mention above for pilot phase are self explanatory and focus on fixing / validating issues related to apps and drivers and unblocking issues that can enable deployment across orgnization Broad Communication to the users Deliver end user training (Optional) Provide technical support for all users(Remote) Deploy updates to different computer groups in phases Schedule during off hours Identify and fix issues during deployment Configure new features (Optional) For broad deployment its all about implementing the learnings and enable deployment across organization © Microsoft Corporation. All rights reserved.
13
Update Management Windows 10 & Office 365 ProPlus update deployment
9/20/2018 3:30 PM Update Management Windows 10 & Office 365 ProPlus update deployment Update deployment offer could include Broad deployment 1 Establish a process Test and Fix issues to enable broader deployment Communication to the users Deliver end user training (Optional) Drive Deployment Deploy updates to different computer groups Identify and fix issues during deployment 2 Broad deployment Establish a process Test and Fix issues to enable broader deployment Communication to the users Deliver end user training (Optional) Drive Deployment Deploy updates to different computer groups Identify and fix issues during deployment For broad deployment its all about implementing the learnings and enable deployment across organization © Microsoft Corporation. All rights reserved.
14
Windows 10 & Office 365 ProPlus update deployment Example of tools
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus update deployment Example of tools Windows Analytics-Upgrade Readiness Pilot deployment 2 Establish a process Remediate the compatibility issues with fix already available Identify and document the compatibility issues which require 3rd party testing Test and Fix issues to enable pilot deployment This slides showcases the Example of tools that can assist in pilot phases “Establish a process” in pilot phase like : Remediate the compatibility issues with fix already available can be achieved via windows analytics upgrade readiness under review applications with known issues © Microsoft Corporation. All rights reserved.
15
Windows 10 & Office 365 ProPlus update deployment Example of tools
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus update deployment Example of tools Windows Analytics-Upgrade Readiness Pilot deployment 2 Establish a process Remediate the compatibility issues with fix already available Identify and document the compatibility issues which require 3rd party testing Test and Fix issues to enable pilot deployment Similarly Identify and document the compatibility issues which require 3rd party testing can also be achieved via windows analytics upgrade readiness under “Review low-risks apps and drivers” section and clicking on apps with isv support statement © Microsoft Corporation. All rights reserved.
16
Windows 10 & Office 365 ProPlus update deployment Example of tools
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus update deployment Example of tools Windows Analytics-Upgrade Readiness Pilot deployment 2 Establish a process Remediate the compatibility issues with fix already available Identify and document the compatibility issues which require 3rd party testing Test and Fix issues to enable pilot deployment This is really an important point and can be achieved via windows analytics upgrade readiness under “Prioritize app and driver testing” section and you will see what apps and drivers needs attention to unblock border deployment © Microsoft Corporation. All rights reserved.
17
9/20/2018 3:30 PM Update Management Windows 10 & Office 365 ProPlus update management Monitoring and reporting Update Management Monitoring and reporting offer could include 1 6 Monitor Update progress Reporting on Windows Defender AV status Insights into Devices that need attention regarding the update process Identifying Remediation activities like Updating the devices that are missing security update Reporting Quality update status Updating the devices that are missing Feature update Reporting Feature update status Identifying the reason of missing updates Reporting Security update status 2 7 3 4 In this slide we will talk about the servicing strategy of Windows 10 & Office 365 ProPlus update management Monitoring and reporting and what are the different components that it can offer like Monitor Update progress Insights into Devices that need attention regarding the update process Reporting Quality update status Reporting Feature update status Reporting Security update status Reporting on Windows Defender AV status Identifying Remediation activities like Updating the devices that are missing security update Updating the devices that are missing Feature update Identifying the reason of missing updates 5 © Microsoft Corporation. All rights reserved.
18
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus Update Management and Reporting Example of tools Windows Analytics- Upgrade Readiness 1 Monitor Update progress In this slide we are showcasing the capability of the Example of tools “windows analytics” and which can provide information to execute some tasks 1. Monitor Update progress : this can be done via “windows analytics upgrade readiness” in update progress section © Microsoft Corporation. All rights reserved.
19
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus Update Management and Reporting Example of tools Windows Analytics-Update Compliance 3 Reporting Quality update status 3. Reporting Quality update status : this can be done via “windows analytics update compliance” in overall quality update section © Microsoft Corporation. All rights reserved.
20
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus Update Management and Reporting Example of tools Windows Analytics-Update Compliance 4 Reporting Feature update status 4. Reporting Feature update status : this can be done via “windows analytics upgrade readiness” in Overall feature update status section © Microsoft Corporation. All rights reserved.
21
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus Update Management and Reporting Example of tools Windows Analytics-Update Compliance 5 Reporting Security update status 5. Reporting Security update status : this can be done via “windows analytics upgrade readiness” in Latest security update status section © Microsoft Corporation. All rights reserved.
22
9/20/2018 3:30 PM Windows 10 & Office 365 ProPlus Update Management and Reporting Example of tools Windows Analytics-Update Compliance 6 Reporting Security update status 6. Reporting Security update status : this can be done via “windows analytics upgrade compliance” in Protection status © Microsoft Corporation. All rights reserved.
23
Update Management Service desk or Helpdesk
9/20/2018 3:30 PM Update Management Service desk or Helpdesk Service desk or Helpdesk may offer 24/7 or in block of hours Support during the update Support after the update 1 3 Remote support Remote and/or Onsite support Pilot users All users Broad deployment Onsite support 2 © Microsoft Corporation. All rights reserved.
24
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus
Update Management as a Service Adoption & Change Management (ACM) Now Lets talk about Adoption and change management as a service (ACM) As mentioned before Both the services can be wither offered as individual services or in combination but strong recommendation is that it should be offered as a combination
25
Adoption and Change Management (ACM) as a service
LEVERAGE Change Management Framework Adoption and Change Management webinar Adoption and Change Management Webinar PPT OFFER CAN INCLUDE Servicing strategy Scenario and Persona Identification Stakeholder Engagement Stakeholder & End user communications End user training on Windows 10 and Office 365 ProPlus feature updates Measuring impact of adoption activities and reinforcing ACM is an integral part of rolling windows10 and office proplus feature updates because of semi annual update cycle we need to make sure end user communications, training needs and testing scenarios are in place for this recurring process if we miss on ny of these aspects it can impact business productivity. In this slide we have few links that talk about ACM framework in detail partners should leverage this and or if they have a ACM practice see how well it matches and pick up components that missing or require changes.
26
Microsoft 365 Powered device Services
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus Device as a service Secure infrastructure Management 1 2 3
27
Device as a service LEVERAGE Modern IT management Autopilot OFFER CAN INCLUDE MANAGED SERVICES Device lifecycle management Device procurement Choose your own Device (CYOD) Parts replacement Accidental damage Device retirement TOOLS Windows Analytics- Device Health Device as a service is not a new concept it has been there for quite some time but has been majorly focused on Device lifecycle management with some partners offering OS management as part of it which is great and gives comfort to the customers and there are many 3rd party tools available to do Device lifecycle management However getting insights into what device drivers are causing errors and what is the remediation available as per the telemetry collected in the wild really gives partners an edge to focus on Device management and servicing related to device drivers and which drivers to fix to unblock border deployment of windows 10 and office proplus update MANAGED SERVICES Firmware and Device driver Management Device Reliability Monitoring and reporting
28
Device as a service Device management and servicing
9/20/2018 3:30 PM Device as a service Device management and servicing Firmware and Device Driver Management offer could include 1 5 Insights into firmware security updates for computers Providing service desk or helpdesk support for devices Monitoring device drivers causing errors Identifying remediation activities like Monitoring devices drivers causing operating system crashes Fix device driver related issues Identifying reason of frequently crashing devices Monitoring frequently crashing devices 6 2 3 In this slide there is list of activities that should be part of Device reliability and reporting services. Covering not only just the firmware updates but also looking at drivers which are causing OS crash, and drivers which are causing errors, were not installed etc. and if a device is crashing frequently what is the reason for that is it device driver or some application etc. With the insights available partners can plan a list of remediation activities to fix device related issues 4 © Microsoft Corporation. All rights reserved.
29
Device as a service Example of tools
9/20/2018 3:30 PM Device as a service Example of tools Windows Analytics- Upgrade Readiness 1 Insights into firmware security updates for computers In this slide we are showcasing the tool “Windows analytics- device health and upgrade readiness” that can be used to offer Device maintenance and reporting services Insights into firmware security updates for computers : this insight is available via “windows analytics- upgrade readiness” in Firmware security update status © Microsoft Corporation. All rights reserved.
30
Device as a service Example of tools
9/20/2018 3:30 PM Device as a service Example of tools Windows Analytics-Device Health 2 Monitoring device drivers causing errors 2. Monitoring device drivers causing errors : is available via “windows analytics-device health” in Drivers with errors section © Microsoft Corporation. All rights reserved.
31
Device as a service Example of tools
9/20/2018 3:30 PM Device as a service Example of tools Windows Analytics-Device Health 3 Monitoring devices drivers causing operating system crashes 3. Monitoring devices drivers causing operating system crashes : this insight is available via ““windows analytics-device health” in Devices crashed by driver section © Microsoft Corporation. All rights reserved.
32
Device as a service Example of tools
9/20/2018 3:30 PM Device as a service Example of tools Windows Analytics-Device Health 4 Monitoring frequently crashing devices 4. Monitoring frequently crashing devices : is available via “windows analytics-device health” in Drivers with frequently crashing devices section © Microsoft Corporation. All rights reserved.
33
Microsoft 365 Powered device Services
Modern deployment and Always up-to-date on Windows 10 & Office 365 ProPlus Device as a service Secure infrastructure Management 1 2 3
34
Secure infrastructure Management
Enterprise-level Identity Protection Identity Management Protecting Credentials Control and Protect Information Proactive attack detection and prevention Proactive attack prevention Reactive attack detection
35
Secure infrastructure Management
Enterprise-level Identity Protection Identity Management Protecting Credentials Control and Protect Information Proactive attack detection and prevention Proactive attack prevention Reactive attack detection
36
Identity Management as a service
LEVERAGE Azure AD (AAD) Conditional Access OFFER CAN INCLUDE PROJECT SERVICES AAD deployment Migration from AD to AAD TOOLS AAD Admin Center MANAGED SERVICES Managing Identities Moves / Adds / Changes Groups / Roles Managing Conditional Access Policies / Locations / Controls / What-if
37
Identity Management Managing Identities
9/20/2018 3:30 PM Identity Management Managing Identities Managing Identities offer could include 1 2 User Management Managing groups Adding new users Group Creation/Deletion Managing user profiles Managing groups ownership and membership Assigning admin roles Managing group settings Deleting users Restoring deleted user © Microsoft Corporation. All rights reserved.
38
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 1 User Management Adding new users Managing user profiles Assigning admin roles Deleting users Restoring deleted user Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
39
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 1 User Management Adding new users Managing user profiles Assigning admin roles Deleting users Restoring deleted user Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
40
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 1 User Management Adding new users Managing user profiles Assigning admin roles Deleting users Restoring deleted user Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
41
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 1 User Management Adding new users Managing user profiles Assigning admin roles Deleting users Restoring deleted user Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
42
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 2 Managing groups Group Creation/Deletion Managing groups ownership and membership Managing group settings Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
43
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 2 Managing groups Group Creation/Deletion Managing groups ownership and membership Managing group settings Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
44
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 2 Managing groups Group Creation/Deletion Managing groups ownership and membership Managing group settings Managing Users and Groups in AAD Portal NOTE: partner can also consider use of 3rd Party Tools (aka “Control Panels”), for example: Splunk ServiceNow IBM Radar HP ArcSight © Microsoft Corporation. All rights reserved.
45
Identity Management Managing Conditional Access
9/20/2018 3:30 PM Identity Management Managing Conditional Access Managing Conditional Access offer could include 1 Managing policies Managing locations Managing controls Standard controls Custom controls Modeling what-if scenarios 2 3 4 © Microsoft Corporation. All rights reserved.
46
Managing Conditional Access Example of tools
9/20/2018 3:30 PM Managing Conditional Access Example of tools AAD Admin Center 1 Managing policies © Microsoft Corporation. All rights reserved.
47
Managing Conditional Access Example of tools
9/20/2018 3:30 PM Managing Conditional Access Example of tools AAD Admin Center 2 Managing locations © Microsoft Corporation. All rights reserved.
48
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 3 Managing controls Standard controls Custom controls © Microsoft Corporation. All rights reserved.
49
Managing Identities Example of tools
9/20/2018 3:30 PM Managing Identities Example of tools AAD Admin Center 3 Managing controls Standard controls Custom controls © Microsoft Corporation. All rights reserved.
50
Managing Conditional Access Example of tools
9/20/2018 3:30 PM Managing Conditional Access Example of tools AAD Admin Center 4 Modeling what-if scenarios © Microsoft Corporation. All rights reserved.
51
Protecting Credentials as a service
LEVERAGE Azure AD (AAD) Windows Hello Intune (or SCCM) Credential Guard AAD Identity Protection AAD Privileged Identity Management Windows Analytics Login health (coming soon!) OFFER CAN INCLUDE PROJECT SERVICES Windows Hello for Business deployment Use of PIN Use of device built-in biometrics Use of companion devices (Bluetooth pairing) for DL and MFU Credential Guard deployment TOOLS AAD Admin Center AAD reporting Intune or SCCM for managing HfB policies AAD Identity Protection AAD Privileged Identity Management Windows Analytics login health (coming soon!) MANAGED SERVICES Managing and Monitoring Credentials and Sign-ins Hello for Business policies & settings PINs Biometrics, Dynamic Lock and Multi Factor Unlock Sign-in & Login health monitoring Windows Hello for Business us/windows/security/identity-protection/hello-for- business/hello-identity-verification us/windows/security/identity-protection/hello-for- business/hello-biometrics-in-enterprise us/windows/security/identity-protection/hello-for- business/hello-manage-in-organization us/windows/security/identity-protection/hello-for- business/hello-features#dynamic-lock us/windows/security/identity-protection/hello-for- business/hello-features#multifactor-unlock Protect derived domain credentials with Windows Defender Credential Guard us/windows/security/identity-protection/credential- guard/credential-guard
52
9/20/2018 3:30 PM Protecting Credentials Managing and Monitoring Credentials and Sign-Ins Managing and Monitoring Credentials and Sign-Ins offer could include 1 Managing Hello for Business policies & settings Creating and managing PINs Creating and managing biometrics Managing Dynamic Lock and Multi Factor Unlock Sign-in & Login health monitoring 2 3 4 5 © Microsoft Corporation. All rights reserved.
53
Managing and Monitoring Credentials and Sign-Ins Example of tools
9/20/2018 3:30 PM Managing and Monitoring Credentials and Sign-Ins Example of tools AD GP or MDM policies 1 Managing Hello for Business policies & settings © Microsoft Corporation. All rights reserved.
54
Managing and Monitoring Credentials and Sign-Ins Example of tools
9/20/2018 3:30 PM Managing and Monitoring Credentials and Sign-Ins Example of tools Training and support desk 2 Creating and managing PINs © Microsoft Corporation. All rights reserved.
55
Managing and Monitoring Credentials and Sign-Ins Example of tools
9/20/2018 3:30 PM Managing and Monitoring Credentials and Sign-Ins Example of tools AAD Admin Center & AAD Identity Protection 5 Sign-in & Login health monitoring Windows Analytics Login Health in Windows Analytics Coming Soon! © Microsoft Corporation. All rights reserved.
56
Secure infrastructure Management
Enterprise-level Identity Protection Identity Management Protecting Credentials Control and Protect Information Proactive attack detection and prevention Proactive attack prevention Reactive attack detection
57
Control and Protect Information as a service
LEVERAGE Windows Information Protection Azure Information protection OFFER CAN INCLUDE PROJECT SERVICES AIP deployment Classification and Labels definition Policies definition Deployment of AIP client Deployment of AIP scanner TOOLS Azure RMS Azure Portal Intune (or SCCM) AppLocker WIP deployment Allowed apps definition Policies definition MANAGED SERVICES Information Protection management, monitoring and end user support Management of Classification, Labels, Policies and allowed apps Monitoring for business insight analysis, for abuse, and performing forensic analysis End user support (training, helpdesk) AIP: protection/understand-explore/what-is-information- protection protection/deploy-use/configure-policy protection/deploy-use/help-users protection/deploy-use/log-analyze-usage WIP: us/windows/security/information- protection/windows-information-protection/protect- enterprise-data-using-wip us/windows/security/information- protection/windows-information- protection/overview-create-wip-policy AIP & WIP together: Mobility/How-does-AIP-and-WIP-working-together AppLocker: us/windows/security/threat- protection/applocker/applocker-overview
58
9/20/2018 3:30 PM Control and Protect Information Information Protection management, monitoring and end user support Information Protection management, monitoring and end user support offer could include 1 3 Management End user support Classification Training Labels Support helpdesk Policies Allowed apps Monitoring Business insight analysis Monitoring for abuse Performing forensic analysis 2 © Microsoft Corporation. All rights reserved.
59
9/20/2018 3:30 PM Information Protection management, monitoring and end user support Example of tools Azure Portal 1 Management Classification Labels Policies Allowed apps © Microsoft Corporation. All rights reserved.
60
9/20/2018 3:30 PM Information Protection management, monitoring and end user support Example of tools Intune 1 Management Classification Labels Policies Allowed apps © Microsoft Corporation. All rights reserved.
61
9/20/2018 3:30 PM Information Protection management, monitoring and end user support Example of tools Azure RMS logs in Power BI 2 Monitoring Business insight analysis Monitoring for abuse Performing forensic analysis © Microsoft Corporation. All rights reserved.
62
9/20/2018 3:30 PM Information Protection management, monitoring and end user support Example of tools Azure RMS logs in Power BI 2 Monitoring Business insight analysis Monitoring for abuse Performing forensic analysis © Microsoft Corporation. All rights reserved.
63
Secure infrastructure Management
Enterprise-level Identity Protection Identity Management Protecting Credentials Control and Protect Information Proactive attack detection and prevention Proactive attack prevention Reactive attack detection
64
Proactive attack prevention as a service
LEVERAGE Windows Defender Security Center Windows Defender ATP Windows Defender AV Windows Defender Security Center app OFFER CAN INCLUDE TOOLS Windows Defender Security Center (“Windows Defender ATP portal”), Security analytics dashboard Windows Defender Security Center (“Windows Defender ATP portal”), Security operations dashboard Various methods for Windows Defender Antivirus Group Policies for Windows Defender Security Center app MANAGED SERVICES Security posture of an organization Organization’s devices security score Security coverage Improvement opportunities Trending over time Providing management and operations to Windows Defender ATP Providing management and operations to Windows Defender Antivirus Providing management and support to Windows Defender Security Center app
65
9/20/2018 3:30 PM Proactive attack prevention Security posture of devices in an organization Security posture of devices in an organization offer could include 1 3 Organization’s devices security score Improvement opportunities Visibility into the organization’s devices security posture, insights into the overall organizational security score Providing guided recommendations to improve the security Trending over time Security coverage Assessment of the scope of incidents and root causes Assess organizational security score including trends over time 4 2 © Microsoft Corporation. All rights reserved.
66
9/20/2018 3:30 PM Proactive attack prevention Providing management and operations to Windows Defender ATP Providing management and operations to Windows Defender ATP offer could include 1 Reporting and investigation on Machines at Risk Reporting and investigation on Users at Risk Sensor health 2 3 © Microsoft Corporation. All rights reserved.
67
9/20/2018 3:30 PM Proactive attack prevention Providing management and operations to Windows Defender Antivirus Providing management and operations to Windows Defender Antivirus offer could include 1 Managing product & protection updates Reporting on protection & malware categories 2 © Microsoft Corporation. All rights reserved.
68
9/20/2018 3:30 PM Proactive attack prevention Providing management and support to Windows Defender Security Center app Providing management and support to Windows Defender Security Center app offer could include 1 Configuration / management Support operations 2 © Microsoft Corporation. All rights reserved.
69
Reactive attack detection and response as a service
LEVERAGE Windows Defender ATP Windows Defender Security Center AAD Identity Protection OFFER CAN INCLUDE TOOLS Windows Defender Security Center (Windows Defender ATP portal), Security operations dashboard AAD Identity Protection MANAGED SERVICES Incident investigation and response Investigation of suspicious incidents Response to contain the attack Exploration of historical data Investigation of forensic evidence Reporting / notifications Identity incident investigation and response Investigation and response to potential vulnerabilities Investigation and response to automated actions to detected suspicious actions
70
9/20/2018 3:30 PM Reactive attack detection and response Incident investigation and response Incident investigation and response offer could include 1 Investigation of suspicious incidents and take appropriate action to resolve them Response to contain the attack and prevent reoccurrence Exploration of historical data across endpoints. Investigation of forensic evidence across your endpoints to uncover scope of breach. Reporting / notifications to users and their organization about discovered and resolved incidents 2 3 4 5 © Microsoft Corporation. All rights reserved.
71
Reactive attack detection Identity incident investigation and response
9/20/2018 3:30 PM Reactive attack detection Identity incident investigation and response Identity incident investigation and response offer could include 1 Investigation and response to potential vulnerabilities affecting organization’s identities Investigation and response to automated actions to detected suspicious actions that are related to organization’s identities 2 © Microsoft Corporation. All rights reserved.
72
Resources
73
Microsoft 365 powered device Resources
Partner website: aka.ms/M365PoweredDevice Partner playbook: aka.ms/M365PoweredDevicePlaybook Partner video trainings: aka.ms/PoweredDeviceTrainingVideos
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.