Managing Mobile Devices with Windows Intune and SCCM 2012 (Adrian Stoian)

Premium community conference on Microsoft technologies itcampro@ itcamp14#

Managing mobile devices with Windows Intune and System Center

2012 Configuration Manager

Adrian Stoian

IT Consultant & Trainer

MVP Enterprise Client Management

TechReady

www.adrianstoian.com

Huge thanks to our sponsors & partners!

• Windows Intune Overview

• Identity Management

• Cloud Only Windows Intune Configuration

• Unified Management with Configuration Manager

Agenda

WINDOWS INTUNE OVERVIEW

• Windows Intune is a Microsoft cloud-based management solution

What is Windows Intune?

Computer management Mobile Device Management

Application ManagementSoftware UpdatesInventory and ReportingEndpoint ProtectionWindows FirewallRemote Assistance

Application DeploymentSoftware UpdatesInventory and ReportingPolicy SettingsRemote WipeRemote LockPasscode Reset

Platform Support

Scenario System Center 2012 R2

Configuration Manager

Windows Intune Configuration Manager and

Windows Intune

Microsoft Windows

Yes Yes Yes

Microsoft Windows Server

Yes No Yes

Windows Phone No Yes YesWindows RT No Yes YesiOS No Yes YesAndroid No Yes YesMac OS X Yes No YesUnix/Linux Servers Yes No Yes

BETTER TOGETHER

Windows Intune ConsolesAccount Portalhttps://account.manage.microsoft.com/

Administrator Consolehttps://admin.manage.microsoft.com/

IDENTITY MANAGEMENT

What is Windows Azure Active Directory?

AzureAD

SharePointOnline

ExchangeOnline

LyncOnline

CRMOnline

Windows Intune

Windows Azure Active Directoryis designed for authentication in the cloud

• Manage users and access to cloud applications

• Extend your on-premises directories to the cloud

• Provide single sign-on across your cloud applications

• Enable multi-factor authentication

On-Premise

• Separate Windows Intune accounts

• Dirsync

• Active Directory Federation Services (ADFS)

Identity Management Options

CLOUD ONLY WINDOWS INTUNECONFIGURATION

Windows Intune Architecture – Cloud Only

Windows Intune

Corp Net Internet

Exchange

Windows RTWindows Phone 8iOSAndroid

Windows 8Windows 7Windows VistaWindows XP

ActiveSync EAS Policy

Administrator

DirSync

UNIFIED MANAGEMENT WITH CONFIGURATION MANAGER

Windows Intune Architecture – Unified Mgmt

Windows Intune

Corp Net Internet

Exchange

Windows RTWindows Phone 8iOSAndroidWindows 8

Windows 7Windows VistaWindows XP

ActiveSync EAS Policy

Administrator

Intune Connector

ConfigMgr

SingleSign-On

ExchangeConnector

CERTIFICATE PROFILESIN CONFIGURATION MANAGER

Certificate Profiles Architecture

• Install AD CS and configure certificate templates

• Install NDES on a separate Windows Server 2012 R2 and configure service account, CA name, Registration Authority

• Enroll for server certificate

• Install Certificate Registration Point (CRP) site system role

• Install Configuration Manager Policy Module

Configuration Steps

• Create a certificate profile for the Trusted Root CA certificate

• Create a certificate profile for devices

• Create a certificate profile for users

• Deploy Trusted Root certificate profile to device collections

• Deploy other certificate profiles for users and devices to relevant collections

• Monitor compliance

Enrolling for certificates

• Windows 8.1 (incl. RT)

• iOS (5.0, 6.0, 7.0) for iPhone and iPad

• Android

Applicable platforms

VPN PROFILESIN CONFIGURATION MANAGER

• Run Create VPN Profile Wizard

• Specify connection type

• Configure authentication method

• Specify proxy settings

• Configure Automatic VPN

• Configure supported platforms

• Deploy VPN profile to an users collection

Configuration Steps

• Devices that run Windows 8.1 32-bit and 64-bit

• Devices that run Windows RT or Windows RT 8.1

• IPhone devices that run iOS 5, iOS 6 and iOS 7

• IPad devices that run iOS 5, iOS 6 and iOS 7

WI-FI PROFILESIN CONFIGURATION MANAGER

• Run the Create Wi-Fi Profile Wizard

• Specify network name and SSID

• Configure authentication method

• Configure advanced and proxy settings

• Configure supported platforms

• Deploy Wi-Fi profile to an users collection

• Monitor compliance

Configuration Steps

• Devices that run Windows 8.1 32-bit and 64-bit

• Devices that run Windows RT 8.1

• IPhone devices that run iOS 5, iOS 6 and iOS 7

• IPad devices that run iOS 5, iOS 6 and iOS 7

• Android devices that run version 4

• Enterprise Feature Pack

– S/MIME for signing and encrypting e-mail

–VPN support

– Enterprise Wi-Fi with EAP-TLS

–Rich MDM policies (lock down)

–Certificate management

• Releasing in H1 2014

What about Windows Phone 8?

• Mobile Device Management with Windows Intune and System Center Configuration Manager– Attend this 2-day seminar to find out how you can manage mobile devices

using Windows Intune, either in the Cloud Only configuration, or using the Unified Mangement configuration with System Center 2012 Configuration Manager R2.

• Agenda:1. Windows Intune Overview2. Identity Management with Windows Intune3. Cloud Only Windows Intune Configuration4. Mobile Device Management with Windows Intune5. Deploying Software to Mobile Devices6. Unified Management with Windows Intune and System Center 2012

Configuration Manager R27. Managing Mobile Device Settings and Compliance8. Unified Software Deployment9. End User Experience for Mobile Devices

Seminar

Contact details:

Blog: www.adrianstoian.com

Twitter: @astoian

Managing Mobile Devices with Windows Intune and SCCM 2012 (Adrian Stoian)

Technology

CLOUD OS WEEK People Centric IT Unified Device Management with SCCM + Windows Intune

Guidance End User Devices Security Guidance: Windows …...Manager (SCCM) 2012 R2 CU3 with the Windows Intune Connector, Windows Phone 8.1 Extension and ADFS 3.0. 1. Usage scenario

InTune 141122

SCCM Training

Troubleshooting SCCM

Ecomarketing - Mirela Stoian - capitolul7

Windows Intune 2013

Dell SCCM Administrator’s Guide Managing Dell Thin … SCCM... · Dell SCCM Administrator’s Guide Managing Dell Thin Clients ... 7 Troubleshooting Tools and Related ... Dell SCCM

Intune 2012

Microsoft Partner Marketing-Brand-MASTER with Guidelines ...mscom.co.il/downloads/MSS-IL-Jan14DevDepc.pdf · Windows Devices Office 365 Windows Intune (with a little SCCM) Competency

Microsoft Intune

Zeynep Ozdemir | Carolina Santos | Ovidiu-Stefan Stoian

Modernizing Windows Management with Configuration Manager ... · Intune/SCCM Auto-enroll into Intune Configure Policies, Settings Install SCCM agent for Co-Mgmt Office, SfB, WUfB

Bangalore IT Pro Full Day Event on Intune and SCCM

InTune 141018

Seminario SCCM

Objectives - SCCM

SCCM & PowerShell

Windows 10 SCCM Software Center script/application mitigation · SCCM Software Center script/application mitigation . Deployment of SCCM Software Center Scripts: The SCCM Software

EOTSS Intune MDM Support: Microsoft Intune MDM install for