33% 18% 66% President Convergent Computing

Transcription

1 Start Justin President Convergent Computing 66% 33% 18% 66% of employees use personal devices for work purposes. 33% of employees typically work on their employer s premises yet frequently work away from their desks. 18% of all software spending will be SaaS delivery by

2 Desktop Virtualization Enterprise Mobility Suite is a cloudbased mobile management system built around the user identity. Employee productivity anywhere, on any device Access & Information Protection Hybrid Identity Authenticated access to apps and data Remote device management across platforms Enable your users Mobile Device & Application Management Protect your data 8 Employee productivity anywhere, any device Empower users to do more with single sign-on, selfservice password reset, and managed access to apps Provide single sign-on to apps and data from personal or corporate devices based on user identity Enable self-service password reset with multi-factor authentication Let users register personal devices and install IT-approved apps through a web-based, company-specific app store (Company Portal) Enable your mobile workforce Sign-on Single Sign-on Self-service password reset Company Portal "With employees using the self-service password reset feature in Azure AD Premium, we ve been able to reduce annual help-desk costs by $20,000. *** Download apps Authenticated access to apps and data Make sure users are who they say they are Verify identity with multi-factor authentication (call, text, mobile app) Choose who can read, copy, print, save, forward, and edit and set when these rights expire Let users download only the apps they re authorized to use through the Company Portal Multi-factor authentication Help protect corporate data, apps and docs Log on to any device Data Apps Docs Double-check identity through text, call or app With Windows Azure MFA, we have a stronger level of protection for Office 365 so we have all of our external services well protected. Remote device management across platforms Deliver an up-to-date and security-enhanced experience on nearly any device Remotely manage & help protect Windows and Windows Phone 8, Apple ios, and Google Android devices Handle device theft and loss with remote wipe: selectively remove corporate apps, data, and policies Better protect corporate data as users and devices travel Deploy policies and updates, and inventory HW and SW via the cloud Simplified, device management via the cloud IT Windows ios Android Full Integrated Directory Existing (AD), Cloud (AzureAD), SaaS / SAML / OAUTH Active Directory Now we can deploy, secure, and manage mobile apps that staff use to move faster than the competition and drive business. 2

3 Passwords Private Key Microsoft Dynamics CRM Windows: Business ready devices LUMIA LUMIA LUMIA 1320 LUMIA 930 LUMIA LUMIA Surface Pro 3 3

4 Universal Windows Apps Windows Phone investments for business VPN, app aware, auto-triggered Convergence Enterprise Wi-Fi support with EAP-TLS Certificate management Assigned Access Encrypted (S/MIME) App platform Cloud Connected Secure by design Tools Enhanced MDM A more personal, personal assistant Outlook Mobile and Office Mobile built-in Read and edit with Word, Excel, and PowerPoint, plus OneNote! Seamless integration with Office 365, Exchange Server, SharePoint and Lync Integrated IRM rights management and S/MIME Cortana learns about you and the topics you care about, people in your life, and even your routines. Cortana stores this information in her notebook (with your permission, of course) and uses it to make recommendations and suggestions tailored to you. She also works on your behalf by anticipating your needs, be it a weather update, driving directions or reminders about friends and loved ones. Cortana is powered by Bing, so your interests and alerts go with you to bing.com. Layered Mobile Security Architecture SSL 3.0 with AES128 and AES256, IPsec and SLL VPN System integrity with secure hardware and trusted boot Malware protection with application sandboxing and certification Keep data safe with full device encryption Secure Access with Wi-Fi EAP-TLS and auto triggered app specific IPsec or SSL VPN Files and data Apps User Partition Data protection API App Containers Device-Lock Single source updates Drivers UEFI Secure Boot Certified hardware IRM & SMIME built-in Secure browser Encryption based on BitLocker technology Fixes from MSRC Security Networking Graphics Developer platform Code-signed chain of trust TPM 2.0 all phones 4

5 Easy enrollment to access corporate resources from anywhere IT pushes enterprise collection and configures accounts, VPN, Wi-Fi, certificates, apps, and restrictions with an extensive set of policies IT monitors assets and assists user Enterprise Wipe removes all company data but preserves consumer data MDM support by Windows Intune and 3 rd party vendors Enrollment Configuration Management Certificate Management Application Management Monitoring Enterprise Wi-Fi Virtual Private Networks S/MIME EAS Workplace join and native platform enrollment Native Clients for 10.6, 10.7, 10.8, 10.9 Supports push software distribution, settings management, and inventory Simple enrollment CentOS 5+6, Debian 5+6, Ubuntu 10.4 LTS and 12.4 LTS, Oracle Linux 5+6 Windows Phone 8 Android 4.0+ ios 6.0+ Empower users Allow users to work the device of their choice and provide consistent access to corporate resources. Users can work from anywhere on their devices with access to their corporate resources. Users can enroll devices for access to the company portal for easy access to corporate applications. IT can publish desktop virtualization resources for access to centralized resources. Enable users Unify your environment Protect your data Access to company resources consistently across devices On-premises and cloud-based management of devices within a single console. Protect corporate information by selectively wiping apps and data from retired/lost devices Simplified registration and enrollment of devices Synchronized corporate data Simplified, user-centric application management across devices Comprehensive settings management across platforms, including certificates, VPNs, and wireless network profiles A common identity for accessing resources on-premises and in the cloud Identify which mobile devices have been compromised Users can register devices for single sign on, and access to corporate data, with Workplace Join. Firewall IT can provide seamless corporate access. IT can publish access to resources with the web application proxy based on device awareness and the users identity. Easy enrollment experience Launch workplace control panel from hyperlink Web authentication broker for flexibility and security Flexible and customizable Customize with your branding Choice of authentication mechanism No MDM app needed alias@contoso.com Device lockdown A limited set of applications and settings experience Or: A single application experience Managed by MDM Enables controlled experience on moderately priced retail phones for task focused individuals 5

6 Completely removes all corporate data from employee owned phone Accounts ( and documents) Certificates Network Profiles Apps And all associated data Initiated by IT Administrator or user MDM policies Disable mdm un-enrollment Disable soft reset Disable hard reset -us/library/jj aspx Device Lock Simple password Alphanumeric password Minimum password length Minimum password complexity Password expiration Password history Device wipe threshold Inactivity timeout Restrictions Disable Camera Disable Bluetooth Disable Wi-Fi Disable Location Disable NFC Storage Configuration Enable device encryption Disable removable storage card Disable desktop sync over USB App Management App allow list App deny list Disable Microsoft Store Disable developer unlock Disable Internet Explorer Assigned Access Data protection S/MIME IRM Corporate Lockdown Disable Microsoft Account Disable Windows device roaming Disable Cortana Disable consumer Disable screen capture Disable copy & paste Office Documents Disable Share Disable Save As Enterprise Mobility Suite provides user-centric device and information management IT Administrator Company Portal Cloud services Line of business apps SaaS apps Store apps Wi-Fi Disable Internet Sharing Disable Wi-Fi Off loading Disable Manual Configuration VPN Disable VPN when Roaming Disable VPN over Cellular Remote Remediation Full device wipe Partial enterprise wipe MDM enrollment Deny un-enroll Deny soft reset Deny hard reset Corporate devices Personal devices User The logos above may be the property of their respective owners. Deployed to user or device collections Apps can contain multiple deployment types User picks apps they want Company Portal picks best deployment method 6

7 Microsoft Mobile Roadmap Managed Corporate-owned Devices Enable IT to bulk enroll devices Device management focused on task-worker scenarios Conditional Access Policy Provide access to and documents only if device is managed Exchange and OneDrive for Business Protect confidential information Ensure corporate compliance Managed Mobile Productivity and Data Protection Managed Office Mobile Apps App Wrapper for existing ios, Android apps Protected web browser Managed PDF, audio, video viewers Protect brand and reputation anagement Scan and attachments to look for patterns that match document templates Word, Encryption Protect sensitive information where stored and in transit using DLP and rights management Use Rights Management to restrict access to desired users and encrypt documents Encrypt and digitally sign s through S/MIME Encryption at rest for OneDrive for business and SharePoint Online (coming 2014*) Outlook, Policy Tip Ensure adherence to risk management policies via hold, block, audit, and notifications Avoid and plug compliance loop holes with a comprehensive reporting of DLP policy performance Data loss protection for SharePoint Online in Office 365 (coming 2014*) Protect sensitive documents from being accidently shared outside your organization No coding required; simply upload sample documents to create fingerprints Consume (and Protect) from any device Automatically protect s with using Exchange Transport Rules 7

8 Microsoft Enterprise Mobility Suite Summary Azure Active Directory Premium Windows Intune Azure Rights Management Service Directory as a service User and group management Selective remote device wipe Consume & create RMS content with company ID SSO for pre-integrated SaaS and custom apps Microsoft Directory Synchronization Tool Mobile app management Mobile device settings management Protect content stored in Office 365 User- and Group-based access management and provisioning Self-service app installation Protect content stored in on-premises Office (Exchange, SharePoint via RMS Connector) Multi-factor authentication Self-service IT support interface Self-service group management for cloud users Self-service password change & reset for cloud users Deploy apps Bring your own key (hybrid protection) Get work done more easily Advanced security reporting (based on machine learning) Usage reporting Company branding for logon & Access Panel Service-level agreement Inventory software and hardware Push out anti-malware updates Policy management RMS protection for non-office files (PDF,.JPG) RMS SDK Get the most from your device Engage and excite customers Forefront Identity Manager CAL & Forefront Identity Manager Server 1 Single console for on-prem & cloud device management (when used with Configuration Manager) 2 RMS On-Prem Connector for Windows Server shares 3 43 Mobile first, cloud first: Office for ipad Office apps on any device Seamlessly switch devices and keep the rich experience using Office Mobile, Office Online, Office for ipad Familiar Office experience designed for ipad with Word, PowerPoint, Excel Create professional output even without your own machine, using any browser Fantastic touch experience built from the ground up for ipad Get your personalized Office experience on all your devices with Office 365 ProPlus Edit, create, and collaborate to create beautifully designed documents Be instantly productive in a new location by streaming Office to any Internet-connected PC Anywhere access to your up-to-date documents in SharePoint and OneDrive for Business Full, rich Office experience, even offline with Office 365 ProPlus Excel 2013 for PC Office Mobile Office for ipad Office Online Touch, ink and voice OneNote on PC Work naturally on mobile devices using Touch Work in real-time with colleagues to finish a report, sales presentation, or financial plan Optimal experience for each task; touchfirst or keyboard/mouse with touch Work on digital content like you would on paper - annotate or draw using inking Multi-task with voice-activation; read your voice mail or respond to an OneNote on Windows 8 tablet Accelerate an RFP response by distributing sections to topic experts wherever they are located OWA for ios, push notifications Lync Mobile Real-time co-authoring lets you work from the Web, desktop, a Windows tablet or ipad, a mobile device, offline or online Office for ipad, co-authoring Stay informed with Exchange alerts and notifications pushed to your device Continue an ongoing conversation with team members or get help, even when you re traveling OWA for Android - 8

9 Cloud storing & sharing Work in real-time with colleagues to finish a report, sales presentation, or financial plan OneDrive for Business Enable employees to work remotely, with easy access to documents, reports, policies from virtually any device Avoid delays by ensuring everyone is working on the most current documents on their PC, tablet, or phone OneDrive for Business via browser OneDrive for Business app for ios Enable employees to catch up on mail or use Office even when offline, on their tablet, laptop, or phone Share business files selectively and securely with colleagues, suppliers, and customers Familiar consumer experience makes it easy to use Accelerate an RFP response by distributing sections to topic experts wherever they are located File fidelity, including formatting, stays intact Real-Time coauthoring with Office Online Support for major browsers Lync HD Video Conferencing on PPI Quickly set up or join conference calls from your Windows, Android or ios device Increased storage limits 1TB by default Shared with me View OneDrive for Business for ios Post to Yammer Simple Controls Lync Meeting, multiparty conversations Pro Purchasable storage Increased file upload size (10GB) Automatic Versioning Office Mobile on Android & iphones Office for ipad Smart Search Add attendees or presenters on the fly with integrated presence Accelerate innovation by bringing together the right people from multiple locations Meet virtually face-to-face more frequently with customers and partners without the travel costs Easy access from ios, Mac OS X, Android, Windows and Windows RT On-premises Azure IaaS Azure RemoteApp Remote to: o Personal and pooled VMs o Session based desktops o RemoteApp programs o Azure RemoteApp o User PCs Built-to-order infrastructure On-premises infrastructure Deployed and managed with Server Manager No upfront capital investment Customizable Requires deployment, capacity planning and management No upfront capital investment Simple, high-level administration Built-in Secure WAN access from any device Dynamic scale, global presence, fault-tolerance from Azure Increased control and customization Higher complexity Turn-key service Reduced complexity 9

10 Azure RemoteApp: Cloud Deployment Windows Server session-based applications hosted in Azure Azure RemoteApp: Hybrid Deployment Windows Server session-based applications hosted in Azure Cloud deployment: IT can quickly provision access to pre-built app collections Hybrid deployment: IT can bring their own session host to deliver access to LOB Windows applications Easy access from devices people love with Microsoft Remote Desktop Apps Easy access from devices people love with Microsoft Remote Desktop Apps Office 2013 ProPlus preinstalled Rapid provisioning: apps quickly available Automatic maintenance: OS and apps always up-to-date, Microsoft anti-malware Users can logon with Microsoft Account or with corporate credentials federated with Azure AD Users can access Azure RemoteApp from anywhere and anytime. Users can login in with their Microsoft accounts or organizational accounts (optional) Apps, OS and settings are fully customizable IT can manage template images and apply updates via Azure Portal Full access to on-premises network User logon with corporate credentials federated with Azure AD VPN Users can access Azure RemoteApp from anywhere and anytime. Users can login in with their organizational accounts Questions? Microsoft s Mobility Strategy: Securely Supporting Microsoft and non-microsoft Endpoints Created and Presented by: Rand Morimoto, Ph.D., MCITP, CISSP Author, Unleashed -series / Sams Publishing President, Convergent Computing randm@cco.com 10