Introduction to Windows 10 Mobile in Business

• Overview-level knowledge of Microsoft enterprise services, Office 365, and Windows Phone 8.1 devices

Prerequisites

Objectives• Identify key enterprise features in phones running Windows 10

Mobile• Identify the benefits your company can get with the business

use of Windows 10 Mobile

Learning time

minutes60

Contents

Office and other productivity apps

Mobile device management

Enterprise apps Phone and network security

Windows 10 Mobile in the enterprise

Objectives• Identify the key features available in Windows 10

Mobile devices for enterprise use

Windows 10 Mobile in the enterprise

Learning time

minutes10

One Windows 10

Windows 10 on PCs

Windows 10 Mobile on phones

Windows 10 on tablets

Windows 10 user experience is the same on all devices

Universal apps

PC Tablet PhoneDevelop an app once, run it on all Windows 10 devices

Universal LOB app

Company app developer

App look and feel can be tailored separately for each device type

Unified Windows Store

Install a purchased app on up to 10 devices

One Store for all device types

Windows Store

Upknowledge app

Includes apps, games, music, and movies & TV

Mary Moore

Continuum for phones

Employees can use their phones like a PC

Independent use of phone

Use apps from a large display

Use a mouse and keyboard, or use phone as a touch pad

Work account integration

Company AD

Microsoft cloudOn-premises

Microsoft Azure AD

Directory Sync Tool

Domain joined computers

Cloud joined computers

AD join AAD join

AAD join

Cloud joined phones

Benefits of using a work account

Microsoft Azure AD

Microsoft Intune

1. Set up a work account

2. Automatic enrollment

3. Push policies

Automatic MDM enrollmentSingle sign-on to apps and company resources

Outlook Mail Office apps SharePoint site

What else is new for enterprises?

Easier app deploymentWindows Store for BusinessImproved app signing

Windows HelloMicrosoft Passport (PIN)

Additional security

Better productivityOffice MobileOutlook Mail and Calendar

Extended device managementImproved MDMProvisioning Packages

Key learning points

• The core of Windows 10 is the same for PCs, tablets, and phones

• Universal apps work on all Windows 10 devices, the app UI can adapt to the screen size and device capabilities

• Windows 10 uses a unified Windows Store which includes all content for all device types

• Continuum enables a PC-like experience powered by your phone

• Users can set up their work account on their phone

Objectives• Identify how your users can collaborate on

Microsoft Office documents• Identify other key productivity apps available

for Windows 10 Mobile devices

Office and other productivity apps

Learning time

minutes10

Office Mobile for Windows 10

Same rich editing features on phone than on laptop and PC

Completely free on phones

On-the-go productivity with Word, Excel, PowerPoint, and OneNote

Same universal app on PC and phone

Microsoft Office family

Desktop Office

Available for Desktop Windows only

Office Mobile for Windows 10

Universal apps, available for all Windows 10 devices

Office for iOS and Android

iPhone, iPad, and Android phones and tablets

Office Online

Web based, works practically on any device and platform

Office 365 required

Office Mobile apps are free to use on phones and small tablets*

PCs and large tablets require Office 365 subscription to create and edit documents

*Using Office apps via Continuum requires Office 365

Other key productivity apps

Microsoft SharePoint

Skype for BusinessOneDrive

for Business

Microsoft Exchange

Outlook Mail and Calendar apps

OneDrive appSkype for Business app

SharePoint Newsfeed app

Using multiple accounts

Office 365(work)

Outlook.com(personal)

Many apps allow the simultaneous use of multiple accounts

Easy to change between work and personal inboxes in Outlook Mail

You can manage accounts from settings and directly from apps

Key learning points

• Universal Office Mobile apps are available for all Windows 10 devices

• Office Mobile apps include similar rich editing features to Desktop Office apps

• Windows Store includes many other free productivity apps, like Skype for Business and SharePoint Newsfeed

• Many apps support the use of multiple accounts

Objectives• Identify Mobile Device Management (MDM)

features in Windows 10 Mobile devices

Mobile Device Management

Learning time

minutes10

Management convergence

All Windows 10 devices can be managed with MDM

Microsoft Intune

Phones managed with MDM policies

PCs managed with GPOs

Windows 8.1 / Windows Phone 8.1 Windows 10

Microsoft Intune

Company AD

Microsoft cloud

On-premises

Microsoft cloud

Management lifecycle

Configuration and security

Enrolment

Application Management

Inventory and assistance

Un-enrolmentConverged protocolBulk enrollmentAzure AD integration

New and improved policiesPhone update controlDirect certificate installationPIN and Windows Hello

Windows Store for BusinessDeploy Store apps with MDM

Extended inventory optionsCellular identifiersMAC & IP addressScreen resolution

All apps (Store & LOB)

Remove enterprise appsCan be prevented by policy 100+

new policies

WINDOWS 10 MDM SETTINGS REFERENCE

Management models

MDM Client

EAS Client

Provisioning Engine

Provisioning packages offer a new way to manage Windows 10 devices

Microsoft Exchange

MDM solution

Provisioning package

.ppkg

PROVISIONING PACKAGES OVERVIEW

Creating and using Provisioning Packages

WICD

WICD = Windows Imaging and Configuration Designer

Install Windows ADK for Windows 10, which includes WICD

1

Provisioning Package

Apps

Settings

Use WICD to build a Provisioning Package

2 Deploy the Provisioning Package to the target phones

3

.ppkg

Key learning points

• Windows 10 on PCs, tablets, and phones have converged MDM capabilities

• MDM capabilities have been greatly extended from WP8.1 with over 100 new policies

• Provisioning Packages provide a new way for configuring settings and distributing apps to phones

Objectives• Identify how a company can deploy

line-of-business (LOB) apps to Windows 10 Mobile devices

Enterprise appsLearning time

minutes10

Getting apps on Windows 10 Mobile

Windows Store

Private Store

MDM server

Web server or email

Store apps

LOB apps

Store appsLOB apps

LOB apps

Store apps

App signing

Windows Phone 8.1 Windows 10 Mobile

LOB app

All LOB apps have to be signed with Symantec’s certificate

Company

Self-signed

Windows 10 supports additional LOB app signing options

LOB app

+ +

Windows Store basics

Windows Store

Microsoft account

Credit card or operator billing

Store library

Windows Store purchases rely on employees personal account

Windows Store for Business basics

Windows Store

Domain account

Store library

Store for Business helps companies to obtain and deploy apps to the employees

Company library

Bulk purchasing

Store for Business Portal

WINDOWS STORE FOR BUSINESS OVERVIEW

Getting apps from Windows Store for Business

Choose free apps and paid apps* for the company

We need these four apps …

Store for Business Portal

Inventory

Time to go shopping

Sign in to Store for Business web portal1 2 Apps are added

to company’s app inventory

3

https://www.microsoft.com/business-store

*Now Store for Business only has free apps. Paid apps will be available later.

Benefits for companies

5/10 licenses used

App downloads do not rely on a a Microsoft account

Reclaim and re-use app licenses via the Business Store Portal

Volume purchasing with PO, invoice, or credit card

Deploy all company approved apps from a single location

App purchase management License management

Deployment options Account management

App distribution options

App is added to the Private Store inside the Store app

App package and license are downloaded to a management system

Target user gets an email with a link to the app

Private Store Direct Assignment Management Tools

Intune MDM

Store for Business Portal

Key learning points

• Windows Store for Business is a new way for companies to obtain and distribute apps to employees and manage app licenses

• An MDM server can be used to deploy Store apps for Windows 10 Mobile devices

• LOB apps can be signed with a company’s certificate or be self-signed, in addition to using Symantec’s certificate

Objectives• Identify how PIN and Windows Hello can protect

information on Windows 10 Mobile devices

Phone and network security

Learning time

minutes10

PIN on phones

Lock screen password has been replaced with the PIN feature

I will secure my phone with a PIN

Use PIN instead of password for authentication

PIN is tied to the phone and cannot be used from other devices

MICROSOFT PASSPORT AND PIN AUTHENTICATION

PIN use cases

Used as the lock screen password

Authenticate Store purchases

Authenticate access to managed apps

Windows Hello

Fingerprint

User authentication based on a biometric signature

Iris

Facial recognition

Correct user

Wrong user

Can be used instead of a PIN to unlock phone and authenticate to apps and services

Key learning points

• PIN enables secure access to phone, apps, and services• Windows Hello brings biometric authentication support to

Windows 10 Mobile devices

Summary

Summary

• All devices running Windows 10 have the same core and can run the same universal apps

• Microsoft Office Mobile apps are free for phones and include similar rich editing features to desktop Office

• Windows 10 Mobile devices can be managed with EAS, MDM, or Provisioning Packages

• Windows Store for Business and LOB app signing enhancements make it easier than ever to deploy enterprise apps

• PIN and Windows Hello enhance the robust security features available for Windows 10 Mobile