2. Lack of control for mobile devices Different tools for phone & PC Policy conflict Inconsistent user experience… Granular mobile device mgmt Converged admin controls

3. Investment AreaKey Promises Business StoreProvide an enterprise commerce, with app distribution, license management and application updates through ConfigMgr and Intune. Enterprise Upgrade and Update Upgrades to Windows 10 from Windows 7+ are a first class experience, with Task Sequence support in ConfigMgr Customers don’t have to upgrade ConfigMgr to upgrade to Windows 10 Software updates manageable through modern management (MDM) Inbox MDM Enterprise-rich manageability exposure through inbox MDM, for extensive Intune management Manage Windows 10 “MDM Style” with either Intune or ConfigMgr (i.e. no separate client to managed) Task Worker Devices (Kiosk Mode) Manageability enhancements (enrollment, lockdown, policies) for shared-use task-worker devices Azure Domain Join Login to devices with AAD accounts (MSA for enterprise), just like domain accounts Get key services like Store and Business Store through AAD accounts Force Intune enrollment through AAD login.

4. Investment AreaKey Promises Provisioning Package First boot configuration of vanilla-image Windows devices Simplified tool for building out initial configurations Configurations transmittable to devices by NFC, Tethering, USB, SD, etc. Device Encryption Enforcement Force encryption of devices logged on with AAD account (connected standby capable hardware) Store and manage recovery keys in AAD Enforce specific encryption policies through Intune (still MBAM for ConfigMgr) Enterprise Data Protection Protect and isolate corporate data associated with managed applications, like Office Conditional Access Limit access to corporate resources based on device enrollment and compliance Passport Modernized authentication not dependent on user/password Management of authentication through Intune Endpoint Protection Management of inbox Defender through ConfigMgr and Intune (PC agent/MDM)

6. MDM Configuration Service Providers (CSP) Device WMI provider Common component PC component Common Device Configurator EAS Client MDM Client Service/Server Provisioning Engine WMI Bridge EAS Provisioning MDM ConfigMgr

7. A single experience across all Windows devices

8. Password Sign in to your work or school account Sign inCancel Privacy statement Forgot your password? If your organization uses Office 365 or other business services from Microsoft, use the same user name and password to sign in here. Sign in What account should I use? |someone@example.com Work or school account Allow this PC to be managed ? Accep t Canc el Contoso requires this PC to be managed before it can access org resources. What you get on this PC: Email, Calendar, Contacts OneDrive for Business Access to company apps How this PC is controlled by Contoso: Enforce PIN lock Partial device wipe Enforce password policy Monitor device location Questions? Contact Contoso IT Help Desk at (206) 555-1234.

10. Security ConnectivityExperience Hardware SystemEmail

11. Access please 1 2 Prove to me you are healthy MDM & Windows Attestation Service Here is my proof 5 Approved 4 Company resources Documents Email 3 Request

13. for business personal Business Apps & Data Managed Personal Apps & Data Unmanaged Data exchange is blocked or audited

14. Common platform All-user apps Consistent side loading Win32 ( MSI ) app mgmt. App restrictions by “Applocker”

22. Business Store Support for Work Identities Bulk acquisition App management/reuse Reclaim/reuse Offline usage Flexible application distribution Familiar experience Integrated with Store Integrated with management tools Support for LOB Apps

29. Icons (can be recolored in PowerPoint)

30. Windows Office XboxVisual Studio BingIEOneDriveMSNDynamics Skype Yammer SurfaceWindows phone Surface Pro 3 PC, DesktopAll-in-oneXbox Controller TabletLaptopServersTabletiPad tabletiPhoneXbox Kinect Skype