Olav TvedtMVP – Windows Expert-ITPRO

Twitter: @olavtwitt – Blog: http://olavtvedt.blogspot.com

A Perfect 10 (?)

Agenda

• Installasjon og oppdateringer

• Device Based Conditional Access

• OneGet

Workplace Join&

Azure Active Directory Device Registration

https://msdn.microsoft.com/en-us/dn788908

Authentication

AD FS

Azure Active Directory

Office 365

Intune Dirsync

Active DirectoryDomain Controller

Users

Workplace JoinOr

Azure Active Directory Device Registration=

Device Based Conditional Access

• Supported Devices o Windows 7 domain joined devices.o Windows 8.1 personal and domain joined devices.o iOS 6 and later.o Android 4.0 or later, Samsung GS3 or above phones, Samsung Note2 or above tablets.

• Scenarioso On-Premises Appliactiono Office 365 Appliactions With Intune

Device Based Conditional Access

https://msdn.microsoft.com/en-us/dn788908

SHOW & TELL: Azure Active Directory Device Registration

https://msdn.microsoft.com/en-us/6a14cb1f-a058-4453-8ede-d9f4a66a7073.aspx

Server Side

• Prepare Active Directory Forest

• Enable Device Authentication In AD FS

• Configure Directory Sync (DirSync) To Allow Device Object Write-Back

Prepare For Device Registration

Entry Type Address

enterpriseregistration.bergenevry.onmicrosoft.com CNAME enterpriseregistration.windows.net

Enterpriseregistration.ebergenevry.com CNAME enterpriseregistration.windows.net

Client Experience

Azure Experience

OneGet-

How To Get What You WantWhen You Want It

OneGet Private Store/Provider

DEMO: OneGet