Peer to Peer Magazine

55 WWW.ILTANET.ORG » Disable Edge browser » Perform Health aestation for endpoint protection » Configure Windows updates » Push VPN and Wi-Fi profiles » Push certificates » Push custom seings (OMA-URI), similar to Windows Registry edits » Upgrade any version of Windows 10 to Enterprise via automated process Microso is embracing the transition to a cloud- first, mobile world by viewing all Windows 10 operating systems as mobile devices, and companies need an effective way to secure and manage these devices. Some of the features in Windows 10 and Intune are great while others need improvement, this new feature set will be continuously improved, with hopes we will have feature parity with SCCM or Group Policy one day. The single sign-on aspect for cloud workloads provides immediate value to your end users, especially if you are already using Microso Office 365 or the various workloads in Microso Enterprise Mobility Suite. P2P Mobile Application Management (MAM) Microso Intune allows you to create compliance policies for mobile applications that are policy-aware. Examples include Outlook Mobile, the Office Mobile suite of applications and the Mail app in Windows 10. When a MAM policy is assigned to a supported application, you can enforce data protection policies that limit what can be done with the corporate data residing within the application. Administrators can restrict copying of data to non-managed applications or backups of managed application data, and they can require increased security measures like a PIN or fingerprint sensor to access the application. Enrolling a Windows 10 device with Intune also enables a set of Hybrid Identity features and provides single sign-on to various Microso cloud resources. The device is registered with Azure AD and, once marked as compliant, is seamlessly allowed access to corporate resources. Hybrid Identities Corporate users can log into on-premises and cloud workloads using a single Hybrid Identity. Microso AD Connect syncs on-premises Active Directory accounts and aributes to Azure AD. Azure AD is the backend directory for all Microso Online services. Users can log into their Windows 10 devices and all hybrid workloads using their email addresses and Active Directory passwords. Single Sign-On to Cloud Applications Azure Active Directory Premium enables administrators to give users access to other non- Microso cloud resources using the same Hybrid Identity username and password. The apps are presented within a single portal and accessed with a user's Hybrid identity. Enrolling a Windows 10 device also allows you to enforce various operating system configuration policies, similar to Group Policy for Active Directory Domain PCs. Examples of these configurations are: » Enforce password complexity » Require encryption » Disable Cortana Windows 10 and Microso Intune: The New Mobile Device Management FEATURES The second form of authentication is customizable by users during the enrollment process.

• Cover