© Lighthouse Computer Services, All rights reserved
Microsoft Enterprise
Mobility Suite
March 25, 2015
Colm Whelan – VP of Cloud Solutions [email protected]
@colmw
Microsoft Cloud implementations under his
belt
Full-time on the cloud platform since 2009
Microsoft Azure, Microsoft Office 365, Third
Party Integration and Cloud Best Practices
Lead customers in the positioning,
demonstration, design and implementation of
Microsoft solutions
Lighthouse Computer Services
© Lighthouse Computer Services, All rights reserved
Full spectrum of services include
assessments, designs,
deployments and management
Complementary practices allow
us to architect integrated IT
solutions
Expert pre & post sales services
staff with over 200 industry
certifications
Expert Project Management
Skills
devices for work purposes.*
be SaaS delivery by 2017.**
work on employer
premises, frequently work
away from their desks.***
User
Devices
Apps
Data
IT
like Workday, Salesforce, Box, Citrix etc…
• How are you managing your desktops today?
• Is your organization looking to or are
implementing a BYOD strategy?
• Are you struggling with the number of devices
needing to be managed in your environment?
• Are you concerned about data protection on
mobile devices?
• Are you looking for a two-factor authentication
Enterprise Mobility Suite
Single
Identity
Device &
Mobile
App
Management
Rights
Desktop
virtualization
Rights
Management
Challenge –Identity
Hybrid Identity
Empower users with self-service and single sign-on experiences, while creating consistent identities and protecting access to corporate data
.
User Pain points
Users want access to corporate
applications and data from any location across multiple devices
Users want to be able to use a single set of credentials with a consistent identity across devices, applications and
services.
Users want self-service capabilities to be able to work autonomously without the need to engage with IT
IT Pain points
It’s complex to manage the identity of users and their relationships with the corporate resources they access in private and public clouds.
IT needs to reduce the cost of helpdesk calls related to users forgetting their passwords.
•••••••••••
On-premises
Azure Active Directory
User’s identity
•••••••••••••
Username ?
User’s identity
•••••••••••••
Username ? New app Identity layerToo many passwords
On-premises
IT
User
Username
•••••••••••••
User’s identity
•••••••••••••
Username ?
Forgot your password?
Self-service experiences On-premises
IT
User
User’s identity
Security reports
Self-service password reset On-premises
IT
User
Device choice, simplified management
Desktop
virtualization
Rights
ManagementMobile device
& application
management
Hybrid
identity
Consistent user experience
MDM
Give users access to workplace
applications, data, and resources from almost any device from virtually
anywhere, while ensuring devices are compliant.
User Pain points
Users want to work from their preferred device(s) with access to both personal and professional applications, data, and resources.
Users want a consistent experience across all the devices they use.
IT Pain points
IT needs to be able to deploy and manage applications on end-user devices.
Security and compliance must be
maintained while still accommodating device requests.
IT needs to efficiently apply policies and settings across all devices.
Mobile application
management
PC management
Mobile device
management
Microsoft Intune
•••••••••
Microsoft Intune
•••••••••
Username
Device enrolled
Apply policy
Company Portal
Recommended apps for User’s devices
Right info, right person, right device
Desktop
virtualization
Rights
Management
Mobile device &
application
management
Hybrid
identity
Dynamic Access Control
Rights management
Access and Information
Protection
Protect company information by
centralizing data, classifying information and controlling access to the datacenter
User Pain points
Users working from personal
devices still need to access sensitive
information, sometimes locally.
IT Pain points
Significant amounts of corporate data can only be found locally on user devices.
IT must be able to define classification of data based on content and not just
location.
Conclusions
Azure AD Premium enables:
‒
Self-service password reset for your people, to reduce helpdesk calls
‒
Multi-factor authentication options for greater security
‒
Group-based provisioning and single sign on for over 1000 SaaS apps
‒
Machine learning-driven security reports for visibility and threat management
‒
Broad device support for Windows, Windows Phone, Apple iOS, and Android
devices
‒
Selective wipe of apps and data for greater security
‒
Conditional access
Conclusions
Azure Rights Management enables:
‒
Brings Office 365 Rights Management Services capabilities to your on
premise content sources (File servers, Exchange, SharePoint etc)
‒
Granular policy based settings to protect content
‒
User/Group restrictions / Federated Scenarios
‒
Time restrictions through Expiration Controls
‒
View Controls restricting printing, screen captures and copy controls
Enterprise
Mobility
Suite
RMS Protection via RMS for O365
• Protection for content stored in Office (on prem or O365)
• Access to RMS SDK • Bring your own Key
RMS for O365 +
• Protection for on-premises Windows Server file shares Departmental templates
Email notifications when sharing documents
Email notifications when shared documents are forwarded
Office Integration
Managed browser, PDF, Email
Basic Mobile Device
Management via MDM for O365
• Device Settings Management • Selective Wipe
• Built into O365 Mgmt Console
MDM for O365 +
• PC Management
• Mobile App Management (prevent cut/copy/past/save as from
corporate apps to personal apps) • Secure content viewers
• Certificate Provisioning • System Center integration
• Compliance Policies • Conditional Access
Basic Identity Mgmt via Azure AD for O365:
• Single Sign on for O365
• Basic Multifactor Authentication (MFA) for O365
• Basic Branding
Azure AD for O365 +
• Single Sign on for all cloud apps • Advanced MFA for all workloads • Self Service group management
and password reset with write back to on prem directory
Upcoming Events
Microsoft Experience Center 4/24 Cambridge Ma
Webinar PowerBI
Webinar Intune Deep Dive
Webinar AD Premium Deep Dive
Virtual Machine Portability
@colmw