1. Microsoft Virtual Academy
Free, online, technical courses
Take a free online course.

2. BYOD: The Challenges and How to Solve Them Tommy Patterson Sr
BYOD: The Challenges and How to Solve Them Tommy Patterson Sr. Technical Evangelist Microsoft Corporation
Simon May Sr. Technical Evangelist Microsoft Corporation
Microsoft Virtual Academy

3. Today’s challenges Users Devices Apps Data
Users expect to be able to work in any location and have access to all their work resources.
The explosion of devices has eradicated the standards- based approach to corporate IT.
Deploying and managing apps across personal and organization-owned devices is difficult.
Enabling users to be productive while maintaining compliance and reducing risk.

4. Mobility has changed how we work
Anywhere, anytime productivity expectations
Multiple devices for every user; mobile apps
Savvy users and customers
Data Protection and device management challenges
Mobility has changed how we work

5. Management. Access. Protection.
People-centric IT Enable consumerization of IT without compromising compliance
Empower users
Allow people to work on the device of their choice and provide consistent access to corporate resources.
Unify your environment
Deliver a unified application and device management on-premise and in the cloud.
Users
Devices
Apps
Data
Protect your data
Help protect corporate information and manage risk.
Management. Access. Protection.

6. Empower BYOD Flexible solutions for your business
Virtual Desktop Infrastructure (VDI)
Device Management
Joining workplace with personal devices
Windows To Go

7. Why implement AIP? Users IT Empowering user productivity
Unifying management infrastructure
Device choice
Application self-service
Personalized app experience
Nonintrusive management
Manage all devices through a single interface
Deliver apps to the user, not the device
Integrated security and compliance
Reduced infrastructure complexity
Access to corporate resources across devices and platforms
Single admin
console
Users IT
2012 R2 Configuration Manager

8. Managing Windows devices
Governance
Full control
Microsoft Exchange ActiveSync
Mobile device management (MDM) via Open Mobile Alliance Device Management (OMA-DM)
Enterprise management
Windows 8.1 provides choices.
Choose by device based on scenario or capabilities needed.
Consider employee versus organization-owned, BYOD, connectivity.
Organizations can choose the options that work best for them.

9. Workplace Join Lightweight registration process for personal devices
Enables access to data when using a registered, trusted device; leverages the user and device identities together
Used with Dynamic Access Control in Windows Server 2012 R2
Primarily a security capability, potentially combined with MDM for manageability

10. Expanded domain join capabilities
Not joined
Workplace joined
Domain joined
User-provided devices are “unknown,” and IT has no control. Partial access can be provided to corporate information.
Registered devices are “known,” and device authentication allows IT to provide conditional access to corporate information.
Domain-joined computers are under the full control of IT and can be provided with complete access to corporate information.
Browser session single sign-on (SSO)
Seamless two-factor authentication for web apps
Enterprise apps SSO
Desktop SSO

11. Workplace Join to register a trusted device
Network
Connections
HomeGroup
Proxy
Radio devices
Workplace
Workplace
Device not joined to Workplace
Join
Workplace Join to register a trusted device
Connecting to a service
User name
Password
Sign in with a certificate
Cancel
Sign in

12. Windows 7 support Must be joined to the domain
Install the Workplace Join client
technet.microsoft.com/en-us/library/dn aspx

13. Domain-joined devices
Make corporate data available to users with Work Folders
Active Directory discoverability provides users Work Folders location
IT can configure a file server to provide Work Folder sync shares for each user to store data that syncs to their devices, including integration with rights management
IT can selectively wipe the corporate data from Windows 8.1 clients
Active Directory
Devices
Apps and data
Reverse Proxy
File Services
Web Application Proxy
Domain-joined devices
Access Policy
Users can sync their work data to their devices.
Users can register their devices to be able to sync data when IT enforces conditional access.
IT can publish access directly through a reverse proxy, or conditional access can be enforced via device registration through the Web Application Proxy

14. Publish access to resources with the Web Application Proxy
Active Directory integrated
Developers can leverage Windows Azure Mobile Services to integrate and enhance their apps.
Other cloud-based apps and identity stores
Mobile Services
Published apps
RESTful OAuth apps
Microsoft Office Forms-Based Access
Claims and Kerberos web apps
Use conditional access for granular control over how and where the app can be accessed. AD
Devices
Apps and data
Active Directory Federation Services
Web Application Proxy
Reverse proxy pass-through
(e.g., NTLM- and Basic-based apps
Users can access corporate apps and data wherever they are.
Active Directory provides the central repository of user identity as well as device registration information.
Active Directory
IT can use the Web Application Proxy to authenticate users and devices with Multi-Factor Authentication

15. TechNet Virtual Labs
Deep technical content and free product evaluations
Hands-on deep technical labs
Free, online, technical courses
At the TechNet Evaluation Center you can download free, trial versions of Microsoft software, with no feature limits. Dozens of trials are available – all at no cost.
Try Windows Server 2012 for up to 180 days. Download the Windows 8 Enterprise 90-day evaluation. Or try Windows Azure at no-cost for up to 90 days.
Microsoft Hands On Labs offer virtual environments that will take you through guided, technically deep product learning experience.
Learn at your own pace in labs that you can complete in 90 minutes or less. There is no complex setup or installation is required to use TechNet Virtual Labs.
Microsoft Virtual Academy provides free online training on the IT scenarios that are important to your company and your career.
Learn at your own pace and boost your IT skills with over 100 courses across more than 15 Microsoft technologies including Windows Server, Windows 8, Windows Azure, Office 365, virtualization, Windows Phone, and more.
Download Microsoft software trials today.
Find Hand On Labs.
Take a free online course.
Technet.microsoft.com/evalcenter
Technet.microsoft.com/virtuallabs
microsoftvirtualacademy.com

16. 11/29/2019 9:13 AM
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.