2. Pat Fetty – Principal PM Manager Securing your mobile assets with Microsoft Intune WIN33 1

3. Protect your data Enable your users Unify Your Environment DevicesAppsData Help organizations enable their users to be productive on the devices they love while helping ensure corporate assets are secure

4. SharePoint Server Exchange Server CORPORATE NETWORK Mobile devices PCs Browsers INTERNET DMZ Active Directory Policies Filter EAS Filter web access Filter or block mobile app access Block unmanaged devices Prevent downloads Force multi-factor authentication Require domain joined Force traffic via proxy/VPN

5. SharePoint Server Exchange Server CORPORATE NETWORK Mobile devices PCs Browsers INTERNETDMZ Active Directory The perimeter can not help protect data Challenge Solution Access control and data containment integrated natively in the apps, devices, and the cloud.

6. Native Mail Managed Browser LoB SharePoint Exchange CORPORATE NETWORK DMZ AD Azure ADAccess Control, MFA, SSO IntuneDevice policy, data containment Azure RMSFile level protection & policy Enterprise Mobility Suite Data Protection Layers

7. Containers 1.Depend on specific DMZ infrastructure 2.Work on premise only SharePoint Server Exchange Server CORPORATE NETWORK DMZ Active Directory SDK/wrapper, helper apps Managed browser, viewers Mobile application management Custom email app Custom file app Custom collab app Native device MDM

8. SDK/wrapper, helper apps Managed browser, viewers Managed Office productivity SharePoint Server Exchange Server CORPORATE NETWORK DMZ Active Directory

9. The more IT control, the more “as appropriate” access for employees Unknown DevicePersonal DeviceManaged DeviceShared Device Example Kiosk at a hotelPersonal iPad or home PCCompany provided phoneMobile retail point of sale tablet Type of user Information Worker Task Worker What can you access Employees can access corporate data only within a protected browser session Employees can use mobile productivity apps controlled by IT to prevent leakage Employees can access all mobile apps, access the corporate network, and sync corporate documents Employees use the specific shared apps needed for their tasks What you can’t access Employees can’t download anything Employees can’t access the corporate network, sync data, use private apps Employees get full access per IT policy Anything else What’s managed Browser sessionMobile productivity apps and a managed browser All mobile devices or PC plus all the apps A locked down device with specific apps Key features Web CA Web session protection MFA Desktop and MAM CA MAM Service, RMS, ARA, MFA Device CA MDM + MAM RMS, ARA, MFA Win 10 provision profile DEP/Configurator Kiosk Mode New

10. Intune Device Management Office 365 Productivity Azure AD Identity and Access

11. Intune Config Mgr (on-premise) Deployment choices

17. Cloud-hosted corporate data protection Best end-user experience for mobile productivity World-class engineering and security with a single support system and 3 rd -party ecosystem Complete solution for application and device management, access, identity, productivity, and data protection

19. Continue your Ignite learning path Visit Microsoft Virtual Academy for free online training visit https://www.microsoftvirtualacademy.com Visit Channel 9 to access a wide range of Microsoft training and event recordings https://channel9.msdn.com/ Head to the TechNet Eval Centre to download trials of the latest Microsoft products http://Microsoft.com/en-us/evalcenter/

22. Microsoft Confidential - Shared under NDA

44. Continue your Ignite learning path Visit Microsoft Virtual Academy for free online training visit https://www.microsoftvirtualacademy.com Visit Channel 9 to access a wide range of Microsoft training and event recordings https://channel9.msdn.com/ Head to the TechNet Eval Centre to download trials of the latest Microsoft products http://Microsoft.com/en-us/evalcenter/