The Endpoint Zone with Brad Anderson (Audio) - Channel 9: Recent Episodes
Microsoft
In this episode of The Endpoint Zone, Brad and Simon discuss how Microsoft Endpoint Manager brings all your managed devices together into one view across your estate. This unique approach allows devices managed by Configuration Manager or Intune to show up in the Endpoint Manager. From here you can manage settings, apply remote actions, and view analytics to gain insight into your estate. Also, demos, demos demos!
In this episode of The Endpoint Zone with Brad Anderson, Brad and Simon discuss the current state of IT in the COVID-19 pandemic. They talk about how organizations are moving from a state of response to COVID-19 and new work from home practices to a sustained hybrid-workplace model. In this new model IT will need to seamlessly enable end users to both work from home and from the offices with fluidity. Brad and Simon discuss how organizations are making this move.
Brad and Simon also discuss and demo the new Endpoint Security experience in Microsoft Endpoint Manager and the importance of IT Admin / SecAdmin handoffs. Simon shows you the new experience centralizing security management for Windows, macOS, Android and iOS. You'll see how Microsoft Defender ATP comes into this experience to deliver security on Windows and macOS.
This episode of The Endpoint Zone with Brad Anderson is the first during our "new normal" of working from home! In this episode Brad and Simon talk about how customers are getting their workforces up and running at home while keeping them secure with Microsoft Endpoint Manager. They discuss Cloud Management Gateway for Microsoft Endpoint Configuration Manager (fka SCCM) and how Conditional Access will help secure your organization during this time.
Brad and Simon also share their experiences of working from home full time and lots of resources.
In this month's Endpoint Zone with Brad Anderson, Brad and Simon talk about what Brad learned from his recent customer visit to Canada. Brad and Simon discuss the latest trends and developments in the endpoint management space including the concept of "cloud cadence". With a cloud cadence your endpoints and endpoint manager stay in constant sync, always able to instantly take advantage of the latest updates. Simon demos some of the most exciting new features of Endpoint Manager.
In this episode of The Endpoint Zone Brad and Simon talk about their favorite up coming Ignite sessions. They also explain where Microsoft lands in Gartner Magic Quadrants and how and why you should be looking to deeply integrated management options for Microsoft 365. Brad also takes you through Desktop Analytics, which was just made generally available.
In this episode of The Endpoint Zone with Brad Anderson, Brad and Simon talk about Windows PCs in the modern workplace and what it means to manage them. They spend time delving into the reasons why co-management is better than co-existence and why ONLY Intune and ConfigMgr can provide co-management.
Also as mentioned, here's a link to the Microsoft Office Twins Challenge
In this episode of The Endpoint Zone with Brad Anderson we take a look at when you'd use ConfigMgr and/or Intune and why co-management is a unique thing, that only Intune and ConfigMgr can do. Why you would use them instead of any other UEM solution. This is a really demo heavy episode with:
- Where we take a look at the new integration between Microsoft Defender ATP and Microsoft Intune that surfaces SecOps actions in Intune for the IT admin to complete.
- Rip and replace upgrades are how many customers need to move to Windows 10 from Windows 7, Simon and Brad show you how ConfigMgr makes this easy with Autopilot.
- Then we take a look at Autopilot white glove, an experience where you can give your employees a "concierge" like experience for new devices.
- Automatic deployment and upgrade of Office Pro Plus directly from Microsoft 365 with Intune.
- We'll take a look at managing BitLocker with Intune, including key escrow and reporting
- Brad announces support for Zebra devices and Simon shows you how to manage those devices from Intune.
- Simon shows you how Microsoft 365 experiences are enabled across all your devices with Intune.
The FastTrack organization is a large group of expert engineers who specialize in helping all types of organizations deploy Microsoft 365 apps. There is simply no group in the world with more specialized skills on this subject, nor is there anyone else with greater access to the innerworkings of the platform.
How do I request FastTrack assistance?
To make a request for assistance from FastTrack, first go to FastTrack for Microsoft 365. Once you're there, click on the "Sign In" prompt, and enter your org ID. After you've authenticated, go to the dashboard and follow the prompts to find the "Request for Assistance" form.
Your submission will then be reviewed and routed to the appropriate FastTrack team, and they will address your specific needs and eligibility. At the M365 FastTrack site you will also find expert-created documentation, best practices, tools, and resources.
Getting cloud connected with Co-management adds new functionality to your existing Configuration Manager deployment, without changing how you already work. When you enable co-management, you immediately begin benefitting from the cloud. You can apply that value to your existing management infrastructure and processes. In this co-management Blastoff series, you'll find how you can quickly drive new management value. Co-management is built to create features and tools you can use right now.
If you missed the memo over the summer, as of 14 August 2018, hybrid mobile device management (Intune integrated with Configuration Manager) is a deprecated feature with support ending on 1 September 2019. For more information on what this means, check out this documentation.
The short version: Intune standalone is now Microsoft's recommended deployment topology and it is required for Co-Management.
From this point forward, if you want to enable Co-Management, you must move from an Intune hybrid configuration to Intune standalone.
If, at any point in the process, you need assistance migrating away from Intune hybrid, just use the "request assistance" option at: Microsoft.com/en-us/FastTrack/
As you work towards onboarding your organization to Co-Management, a significant hurdle for some teams is getting Current. For Co-Management, Windows 10 1709 (released in January 2018) is required. Your organization may be in the process of planning or implementing this update, and, once you are updated and Auto Enrollment is configured, your clients will be automatically enrolled to Co-Management.
The great news is that upgrading Windows 10 is enabled by default! In most cases, upgrade problems are related to AAD tenant configurations that have not been updated. To learn how to update these configurations, check out this documentation.
If, at any point in the process, you need assistance with your Windows 10 upgrade, just use the "request assistance" option at: Microsoft.com/en-us/FastTrack/
If your environment currently has Windows 10 devices locally domain joined, you will need to Hybrid Azure AD join your devices before you can enable Co-Management in ConfigMgr.
Hybrid Azure AD joining your devices is a process that automatically registers your on-premises domain-joined devices with Azure AD. For more context on this process, check out the Introduction to device management in Azure Active Directory, as well as this documentation about How to plan your Hybrid Azure AD join.
Unwrapping a new PC is incredibly exciting, but we've all felt a bit of dread when thinking about how long it will take it get all our settings and apps just right so that we can start being productive. Co-Management solves this device provisioning problem with Windows Autopilot.
Whether you are looking to set up and pre-configure new Windows 10 devices, or reset, repurpose and recover existing devices – Autopilot provides a simplified experience for both IT and the end user.
Autopilot also reduces the time, resources, and complexity associated with deploying, managing, and retiring/recycling devices. And, while all this is going on, the experience for your end users is streamlined and easy right out of the box.
Windows Autopilot supports multiple scenarios, all of which are maximized with Co-Management:
- Your end users can drive their own new-device deployments into either Active Directory (Hybrid Azure AD Join) or Azure Active Directory.
- You can set up self-deploying new device deployments into Azure Active Directory, for shared devices and kiosks.
- With Windows Autopilot for existing devices, you can use ConfigMgr to migrate an existing device from Windows 7 and Active Directory into Windows 10 and Azure Active Directory.
For detailed info on how to enroll Windows devices in Intune using Autopilot, check out this detailed documentation.
There's no simpler way to say it than this: In the cloud, Identity is the new control plane. This fundamental principal of security and management means that securely connecting users to applications and resources (no matter where they exist or how they are used) is what will set apart world-class organizations.
This huge shift in how we approach IT is embodied by Azure AD. Azure AD allows you to seamlessly link your users, devices, and applications – across both cloud and on-premises environments. Bringing your devices to Azure AD enables you to take advantage of Azure AD's full potential to better improve productivity for your users and security for your resources. Having devices in Azure AD is the foundation for both Co-Management and device-based conditional access.
When you have Windows 10 deployed, Azure AD provides two options for corporate-owned devices to suit your organization's varied needs: Azure AD Join and Hybrid Azure AD Join.
The health of our network is directly connected to the health of the devices moving in and out of it. Intune has the unique ability to talk to unhealthy clients and act as a watch dog for your organization, even when a client is not on your corporate network. When you use Co-Management to combine this power with ConfigMgr's ability to report back 98% of known healthy clients, you can detect, assess, and provide great visibility across all clients, in real time. Intune also adds the support needed for compliance upgrades across all connected clients.
Getting started with this feature is simple – to borrow a very famous advertising slogan, here are the three steps:
- Use Windows 10 1709 (or later) and enable Co-Management.
- Use ConfigMgr 1806 (or later).
- There is no step 3.
To begin using these features, you do not need to move any workload over to Intune.
In upcoming release we'll add additional functionality into CCMeval, the identification of potentially unhealthy machines (in both ConfigMgr and Intune) will get even easier.
IT must be able to ensure that every device they manage is reachable – no matter where it is – whenever it connects. IT must also provide each device and device user with everything needed to stay productive while protecting the apps and data being used. With the device actions supported by Intune, these critical functions can be solved (as the name implies) remotely.
Why you need it:
Remote device actions give IT unparalleled management controls on the device without interfering with personal data. These remote device actions allow IT to delete company data on lost or stolen devices, rename a device, restart a device, review device inventory, and remote control into a device. This is an important and simple way to protect corporate data stored on these devices – whether it is in e-mail or OneDrive.
Additional real-time actions include restarting a device, wiping out pre-installed OEM apps with the a fresh start reboot, and performing a factory reset on any Windows 10 device.
To learn how to remote control a Windows 10 device via the third party program TeamViewer, use this documentation.
Simply put, Conditional Access is EMS flexing its might. Surprisingly often, regular uses of ConfigMgr overlook how much they can use Conditional Access (CA) and take advantage of the simple, cloud-attached benefits.
CA is a perpetual-motion machine which ensures that corporate resources are only accessed by trusted users on trusted devices using trusted apps. It has been built from scratch in the cloud and, whether you're managing devices with Intune or extending your ConfigMgr deployment with Co-Management, it works the same way.
With Co-Management, Intune evaluates every device in your network to determine how trustworthy it is – and it does this in two key ways:
- Intune ensures a device or app is managed and securely configured based on any way you choose to set your organization's compliance policies (g. make sure all devices have encryption enabled and are not jailbroken).
- This is a pre-security breach, configuration-based evaluation.
- For Co-Managed devices, ConfigMgr also does configuration-based evaluation such as required updates or apps compliance – and Intune combines this evaluation along with its own assessment.
- Intune detects active security incidents on a device thanks to the intelligent security of Windows Defender Advanced Threat Protection and other mobile threat defense providers. These partners perform ongoing behavioral analysis on a devices to detect active incidents and pass this information to Intune for real-time compliance evaluation.
- This is a post-security breach, incident-based evaluation.
You can listen to Brad Anderson discuss CA in depth (with live demos!) in this section of his keynote at Ignite 2018.
In this episode of the Endpoint Zone with Brad Anderson you'll hear from Microsoft's Chief Information Security Officer, Bret Arsenault, about how Microsoft protects it's employees mobile devices.
To learn more about Desktop App Assure: https://aka.ms/DesktopAppAssure
To request assistance with your apps today: https://aka.ms/DesktopAppAssureRequest
Coming up in this episode of the Endpoint Zone with Brad Anderson Brad talks to the CEO of JAMF software, Dean Hager. Brad and Dean discuss the JAMF Casper integration with Microsoft Intune and Microsoft 3365
[01:00] Some context on JAMF
[03:40] "We're Apple guys"
[07:40] Whiteboarding ow JAMF and Conditional Access work together
[10:45] Demo
[17:00] Insight into where the JAMF / Microsoft partnership is going next
Coming up in the show we'll be taking a look at how you migrate to Microsoft 365 and Microsoft Intune and we'll take a deep dive into an amazing tool; EBF onboarder for Microsoft Intune.
[02:06] - Millions of devices are migrating to Microsoft 365
[07:00] - Understand how you consolidate your security with Microsoft 365
[08:50] - How many users are using EMS?
[10:00] - Nico shows us EBF on boarder for Intune
[15:12] - EBF on boarder demo
[21:30] - Looking at some of the top deploying customer trends for Intune
Coming up in this episode of the Endpoint Zone with Brad Anderson. We take a look at feedback through Gartner's Peer Feedback. Brad and Simon deep dive into how conditional access works and how Windows Defender ATP integration protects your organization. You'll see end to end demos, architecture whiteboards and learn how Microsoft 365 simplifies your management and defense of your organization so you can explain it to others.
[00:45] Gartner Peer review - Config Manager is recognized by Customer Choice awards
[02:20] "Conditional access is something every customer on the planet should have deployed"
[03:20] Conditional Access deep dive with whiteboard and demos
[08:00] Every identity is classified as high, medium or low risk
[10:00] The only way to access your data is to have a trusted user on a trusted device, in a trusted location from a trusted app
[12:30] Bringing all the Microsoft signal together in one place
[15:22] Extending Conditional Access to Windows Defender ATP
[19:00] Our belief is that you need to have ways to detect and respond to attacks within minutes, and that's only possible with the cloud
[20:00] Windows Defender ATP walk through
[22:54] Demo - Configuring Windows Defender ATP and Intune for conditional access
[25:00] Demo - investigating an incident and showing device block with conditional access
[28:00] We will be one of your key partners on defending your organization
Coming up in this episode of The Endpoint Zone with Brad Anderson is a deep dive into co-management which allows a PC to be managed with both Microsoft Intune and Configuration manager simultaneously. We also take a look at changes to Conditional Access and the new Company Portal app for iOS.
[00:56] - How good is Windows Defender? Windows Defender Results walkthrough
[05:21] - Why are enterprises moving to Windows Defender?
[09:22] - What did we learn from visiting some customers in Australia?
[14:34] - Co-Management deep dive
[15:00] - Co-Management architecture whiteboard
[21:50] - #just4clicks to get started with co-management
[23:12] - Device compliance in Intune for co-managed devices
[25:00] - learn how to get your #just4clicks laptop sticker
[26:00] - What else is new in Intune this month
[26:30] - Hybrid Modern Auth for Exchange on-prem brings CA and App Protection to on-prem mailboxes
[29:00] - Changes to Conditional Access for device compliance
[30:00] - Enhanced jailbreak detection for iOS
[31:00] - New iOS company portal
In this episode of The Endpoint Zone with Brad Anderson the duo talk about what's happening in the EMM space right now; How schools like Davidson Academy are using Intune for Education and Windows to deliver better learning. We take a look at the Intune Managed Browser and Azure App Proxy experience that gives you a simple architecture to access on-prem resources and highlight the new Intune Managed Browser CA experience. Brad and Simon also look at co-management with Configuration Manager and Intune, Windows Upgrade analytics and finally preview some upcoming training.
[00:30] -Intro
[01:30] -What's happening in the EMM market
[02:24] -"More than a million devices a month for Microsoft 365"
[02:30] -ConfigMan is seeing a Windows 7 device upgrade to 10 every 0.98 seconds
[03:30] -EMS is growing at 3 or 4 times the rate of the other vendors
[04:15] -What's happening in Schools with Intune for EDU
[05:05] -Windows took market share from Chromebooks in the US in the last 90 days
[05:30] -Davidson Education customer case study
[07:30] -Intune Managed Browser and App Proxy architecture and demo
[01:23] -Docs for Azure App Proxy and Intune Managed Browser
[10:56] -DEMO: Intune Managed Browser demo
[11:13] -DEMO: Intune Managed Browser being required by App Protection policy
[11:50] -DEMO: Intune Managed Browser blocking access to sites listed by admins
[12:30] -DEMO: Intune Managed Browser enabling single sign on to SharePoint
[13:30] -DEMO: Intune Managed Browser accessing an on-prem site through App Proxy
[13:55] -DEMO: Intune Managed Browser as the only allowed browser for my apps using Conditional Access
[14:30] -Configure Intune Managed Browser in Intune and Azure AD
[16:00] -Windows 10 co-management, enabling a device to be managed by Intune and ConfigMan at the same time
[17:00] -3 immediate values you get from co-management: Conditional Access, Remote Assistance anywhere, immediate execution of actions like remote wipe, reboot and lock
[18:30] -ConfigMan will tell you when you're ready for co-management
[19:00] -DEMO: How to enable co-management in ConfigMan
[20:00] -DEMO: How to move your workloads to Intune from ConfigMan with co-management
[20:34] -DEMO: Moving to a modern management methodology is a journey, your management solution needs to support that
Docs for co-management
[21:00] -Why intelligence is important in your security solutions
[22:18] -DEMO: Identity Risk in Azure AD
[24:00] -What's Marco doing?
[24:53] -Microsoft listens to over 10 TB of signal every single day
[26:00] -Windows Upgrade Analytics
[30:35] -Microsoft 365 security training video - hint it's ... there are no words.
Create a Free Account (Azure)
In this episode of The Endpoint Zone with Brad Anderson, Brad and Simon talk about what happened in 2017, how much changed and how much usage of Microsoft Intune grew. How the world of IT is changing and IT is now on the cusp of modernizing the workplace. Brad and Simon also look at some of the Windows Defender enhancements that have landed in Intune.
[00:25] Brad and Simon talk about the amazing year that was 2017
[01:22] Did Intune grow in 2017? [spoiler: you bet!]
[02:26] 100%, 200%, 500%, 1000% - just how much did Intune grow by?
[04:13] Configuration Manager has passed 100m monthly active users!
[09:15] IT are making workplace modernization happen!
[17:00] Understand what shipped in Intune in December.
[23:51] Demo- Windows Defender controls in Intune
[26:00] Accenture's gigantic Microsoft 365 deployment is the biggest in the world
[27:00] Predictions for 2018
[30:00] What should IT people do in 2018
In this episode of the Endpoint Zone we talk about a huge past month of releases in the world of Intune and Enterprise Mobility and Security, thanks to Microsoft Ignite. Lots of demos in this show, including:
Demo: Brad and Simon talk about moving from traditional to modern management with co-management. [05:00]
Demo: macOS management through a partnership JAMF came roaring in at Microsoft Ignite [10:00]
Demo: Conditional Access improvements that help you move away from a perimeter based security model. Azure Information Protection is now integrated with Conditional Access [16:00], we also have location based CA rules [19:00] Terms of Use CA rules [20:00].
Demo: Use the Intune Managed Browser to access on-prem resources through Azure App Proxy [25:00]
Demo: Amazing analytics with PowerBI and the Intune Data Warehouse.[28:00]
In this episode of the Endpoint Zone with Brad Anderson you'll find a bumper crop of demos of the latest and greatest Enterprise Mobility + Security features! OneDrive for business policy integration in the Office 365 console, custom dashboards with PowerBI, Conditional Access policy that lets you express organizational risk tolerance, device compliance and the new Intune on Azure Console. Brad and Simon also talk through the latest information about the Enterprise Mobility Market including a shocking statistic about just how much Office 365 authentication is done by non-Microsoft identity providers.
- [01:03] What's going on Inside EMM [blog link]
- [04:00] Staggering news on the Identity Providers for Office 365
- [06:00] "The world is standardizing on EMS"
- [09:00] The runaway success of 70M managed devices!
- [10:28] The Conditional Access effect explained through live telemetry
- [13:58] "I don't know that the ConfigMan team could have done any better"
- [14:25] Demo: The new Intune on Azure console in the Azure Portal!
- [15:38] Demo: Device compliance
- [16:00] Demo: Conditional Access policy to express the acceptable risk of access
- [28:46] Demo: Build a custom dashboard with PowerBI to Microsoft Graph
- [32:58] Demo: App publishing through Company Portal website for users without enrollment
- [33:43] Demo: EMS Capabilities integrated into OneDrive for business
In this episode of The Endpoint Zone with Brad Anderson we take a look back at the past year in enterprise mobility [00:47]. Brad and Simon discuss the new Intune console in the Azure Portal [06:00], the Microsoft Graph [07:13] and dive into the new console [10:00] which gives a single view across all of Enterprise Mobility and Security and, in fact, the whole of Azure.
Brad shows you the experience of creating a new iOS policy [12:04]
Explains the blade concept in the Azure portal [13:00]
Starts to manage apps [13:37] importing the apps from the Apple App Store
Brad breaks out PowerShell at [15:07] to use the Graph API to pull all the "Microsoft Corporation" published apps from the Apple App Store
You'll see an exclusive first look at the Intune for Education experience [19:06], a new administrative experience created for education administrators. One of the unique things with education is that they always start with a group [21:00].
Finally, Brad and Simon then answer the burning question - when can you take advantage of the new features [25:46]
In the 1610 release of The Endpoint Zone with Brad Anderson we discuss [01:00] Microsoft Ignite and give you a recap [09:00] of the foundation session at the event. Brad then shows Azure Active Directory Identity Protection [15:00] and then what's new in EMS [20:40] including demos of Conditional Access for Apps demo [21:12] and Conditional Access for Windows 10 [26:10]. Finally Brad takes us through the improvements coming in the Azure console which will soon home Microsoft Intune and all of EMS. [34:00]
What's new this month
Check out the EMS blog to keep up-to-date with release announcements as they happen https://blogs.technet.microsoft.com/enterprisemobility
Intune
MAM-CA (we could demo this quickly)
CA for Windows (we could demo this quickly)
Lookout Integration
MAM-WE App Wrapping for Android
MAM policy to prevent printing company data
These Intune releases are documented here: https://docs.microsoft.com/en-us/intune/whats-new/whats-new-in-microsoft-intune
AAD
Azure AD PowerShell 2.0 is now in public preview
Configurable token lifetimes now in preview
Azure AD Domain services GA
AIP
AIP GA
Ignite Sessions
Secure and manage your digital transformation with Brad Anderson
Manage your mobile devices and apps with System Center Configuration Manager and Microsoft Intune with Paul Mayfield
Dive deeper into what's new and what's coming in Outlook mobile with the Outlook team
Secure Android devices and apps with Microsoft Intune with Chris Baldwin
Deliver a BYOD program that employees and security teams will love with Microsoft Intune with Kent Agerlund, MVP
Customer led Ignite sessions
Learn how Microsoft Intune helped Avanade's global workforce get more productive with Avanade
Learn how Unilever modernized IT with Azure Active Directory at the core with Unilever
In this episode of The Endpoint Zone with Brad Anderson, Simon and Brad talk about the new features shipped this month in Microsoft Inunte, about EMS E5 including demos of Azure AD Identity Protection, Azure Information Protection, and Microsoft Cloud App Security.
They also take a look at the EMM market for the past month and give you a little tiny view into what's happening at Microsoft Ignite later in the month.
In this episode of The Endpoint Zone with Brad Anderson, Joseph Paradi from consulting firm Avanade, joins Brad and Simon to talk about their deployment of Intune MAM. Avanade chose to use Intune MAM and not require their employees to enroll their devices into any MDM The effect has been to enable more people to be more product and to protect their corporate and client information.
[01:43] - Joseph Paradi from Avanade
[21:00] - How Gartner sees the structure of organizations changing
In this episode of The Endpoint Zone with Brad Anderson we discuss the news Brad released at Citrix Synergy, quick deep integration with SAP Fiori apps and the Intune App SDK to protect corporate data and much more.
[01:00] - SAP Fiori announcement deep dive
[08:10] - SAP Fiori and Intune App SDK integration
[13:00] - Citrix Synergy announcements and partnership
[15:00] - Citrix and Azure
[16:20] - Citrix and Microsoft accelerating the move to Windows 10
[19:56] - Citrix and Microsoft accelerating Office 365 migrations
[22:20] - Citrix and Microsoft integration around EMM
In this special episode Brad talks through what he explained in the Controlling the uncontrollable series.
In this episode of The Endpoint Zone with Brad Anderson, [00:47] Brad explains the Microsoft Q3 earnings announcements in a way that matters to IT people, explaining where Microsoft is growing and what it really matters when you're making decisions.
Brad then also shows the highly requested [08:50] Skype for Business mobile application management (MAM) integration with Microsoft Intune that his team has been working on.
Ever wondered what execs at Microsoft look at on a day-to-day basis with your service? [13:00] Brad's PowerBI Configuration Manager dashboard. 11k customers, managing almost 16m devices with Configuration Manager current branch!
Finally Brad blows Simon's mind [17:02] with Cloud App Security and the depth and breadth of information that is instantly available. If you need SOX, PCI or any other kind of compliance information in your organization this is a must watch section!
In this special edition of the Endpoint Zone, Simon May dives into the depths of Conditional Access in Intune and Azure AD with Dilip.
In this special "over time" episode of The Endpoint Zone, Simon May talks to Dilip from the Intune product team about MAM without device enrollment. Find out more on Brad's blog https://aka.ms/inthecloud
In this spin-off from The Endpoint Zone with Brad Anderson, Brad and Simon explore a new blog series on Brad's blog, Controlling the Uncontrollable, in which Brad helps you deploy protected email for your organization. You can find the series on Brad's Blog.
In this episode of The Endpoint Zone with Brad Anderson you'll learn about Microsoft's financial results and how they impact the EMM market (hint: you need a good long term partner). Brad and Simon then talk about new technology introduced in the latest Configuration Manager preview, improvements for Windows 10 with MDM like MSI distribution, pass the hash style attacks and how Intune lets you configure Microsoft Passport for Work to overcome them, Mobile Device Management without enrollment from the Admin's viewpoint and much more!
[01:00] Brad's thoughts on Microsoft's results
[03:23] Over 70% of the Fortune 500 are now using 2+ Microsoft cloud services
[07:26] Over 1/3rd of the Fortune 500 have purchased EMS
[08:24] Fantastic how well Surface business is doing
[11:47] New CEO at Mobile Iron and new CEO at Citrix, Kirill Tataninov
[13:17] New Technology! Configuration Manager 1601
[15:40] New capability to manage MSI based apps using MDM
[16:47] New Windows 10 capabilities for Configuration Manager and Intune
[17:20] Simon explains how a Pass-the-hash style attack takes place
[20:00] Microsoft Passport for Work configuration in Microsoft Intune
[22:24] Brad explains how Provable PC Health will work with Intune
[26:30] IMEI preconfig for corporate owned devices
[27:00] Brad demos the admin experience for MAM without device enrollment
[34:46] iOS enhancements including increased DEP and VPP for the AppStore
[35:26] Ignite registrations are out!
Let us know what you think of the show in the comments, and don't forget to subscribe on iTunes!
Follow @inthecloudmsft
Follow @simonster
or leave comments on Channel 9.
In this episode of The Endpoint Zone with Brad Anderson we reflect [01:01] on what a big year 2015 was for enterprise mobility and some of the major shifts that happened in the Enterprise Mobility Market - remember if you're considering any technology as part of your strategy you need to understand how one vendor or product is doing against the others. You also need to be thinking about what new challenges that technology area has faced (this year it was big security concerns and remediation technologies).
Brad also talks about the iconic Office experience on any device and the need to keep is safe. [08:43]
Dual persona Office apps with Mobile App Management (MAM) [11:15]
Demo of MAM without device enrollment [12:47]
Shipping Configuration Manager [21:48]
You can follow Brad on twitter @inthecloudmsft and also Simon @simonster.
In this Episode of The Endpoint Zone, Brad Anderson (CVP Enterprise Mobility and Client Management, Microsoft) and Simon May talk about Windows 10 with special guest star Jim Alkove, CVP Windows Enterprise and Security. There are lots of nuggets in this super-informative 20-minute episode, but here are some highlights:
- First up, a new, fun video series! [00:49]
- Introducing Jim Alkove [02:00]
- Where does an IT guy need to spend his time with Windows 10 [02:50]
- Thinking about internal deployment "rings" [05:00]
- You don't need to upgrade everything to go to Windows 10 [08:00]
- With Windows 10 your management needs to run "as a service" i.e. rapid update cadence [09:00]
- Prepare your enterprise for Windows as a Service Jumpstart [09:40]
- Windows 10 security features [10:00]
- Windows Hello (face unlock) and demo [11:00]
- Single Sign On to Office 365 and other cloud apps with Azure AD [12:50]
- How do the Windows and Configuration Manager teams work together [15:08]
Useful links from this episode:
- Watch the Preparing your enterprise for Windows 10 as a Service Jumpstart
- Join Windows Insiders
Read Brad's blog, Simon's Blog, the Microsoft Intune blog, Configuration Manager blog and
Remember to follow Brad and Simon on Twitter.
In this Episode of The Endpoint Zone, Brad Anderson (CVP Enterprise Mobility and Client Management, Microsoft) and Simon May discuss dual persona, managed productivity apps on iOS and Andriod that people actually want to use; what's new in Configuration Manager TP2; and they give you some clarity on what Gartner Magic Quadrants to look at to help make decisions with EMM and why.
- Dual Persona Apps [01:18]
- Dual Persona Apps Demo [03:27]
- Configuration Manager TP2 [07:55]
- Gartner Magic Quadrants[15:00]
Useful links from this episode:
Outlook App on iOS and Android
The Microsoft Intune blog, Configuration Manager blog and Brad's blog (don't forget to take a look at the MQ posts).
Remember to follow Brad and Simon on Twitter.
In this edition of the Endpoint Zone, Corporate Vice President, Brad Anderson talks to Simon May about everything that's happened in Enterprise Mobility this past month including:
- The new Enterprise Mobility Suite Website [00:49]
- Mobile Device Management in Office 365 [10:13]
- Enterprise Mobility Suite Roadman [21:34]
For the latest on Enterprise Mobiltiy follow @InTheCloudMSFT (Brad) and @Simonster (Simon)
In this episode Brad talks about a recent trip to some customers in the mid-west, an incredible learning experience, seeing some of the real world challenges of trying to cobble point solutions together for EMM. Simon and Brad then talk about Conditional Access controls, Microsoft Ignite and much more.
Don't forget to register for the Enterprise Mobility Core Skills Jumpstart Series, starting with Azure AD Core Skills and checkout the introductory blog post.
Brad also mentioned the Enterprise Mobility Roadmap
Check out these sessions at the Ignite conference about Enterprise Mobility:
Enterprise Management in 2015 and Beyond
learn about building hybrid infrastructures—about combining cloud and on-premises technologies. Learn about the enhancements Windows 10 brings for the Enterprise, and how to use SCCM.
Windows 10: Enterprise Mobility Workshop
teaches you in six hours how to set up your own Enterprise Mobility Management Lab.
[SM] I'm heavily involved in this workshop, along with MCS
Building a Hybrid Exchange Server 2013 Environment
learn how to deploy a hybrid Exchange Server 2013 environment from scratch.
Device and Data Protection with Mobile Device Management in Office 365
dive deep into mobile device and data management for Office 365. This includes our MDM for Office 365 and application management with Microsoft Intune.
Overview of the Microsoft Identity Platform
learn about Microsoft business and consumer identity platforms, Azure Active Directory and Microsoft Accounts.
Upgrading from FIM to Microsoft Identity Manager and Azure Active Directory
how to upgrade from Forefront Identity Manager and earlier products to the upcoming Microsoft Identity Manager (MIM).
Don't Get Stuck with UAG and TMG, Move to New Application Proxy Solutions from Microsoft
Learn the benefits of moving to the new remote access solutions from Microsoft: Windows Server Web Application Proxy and Azure Active Directory Application Proxy.
What's New in Windows 10 Deployment
all the changes that are coming, including enhancements to built-in mobile device management protocols, new Windows Store and volume purchase program capabilities, sign-on capabilities with organizational IDs (Microsoft Azure Active Directory), sideloading and other app deployment enhancements
In this episode of the Endpoint Zone with Brad Anderson, Simon May asks Brad what's new since the last show (cyber attacks and world wide Intune roll-outs [00:20]). Next up Simon and Brad talk about the last 90 days in the world of Enterprise Mobility and Brad's architecture matters blog series.
In the guest interview Brad and Simon talk to Jack Madden from BrianMadden.com about enterprise mobility in 2015 and what Jack expects to see. [15:22]. Finally Brad share's his predictions for 2015 (#GoHawks!).
Don't forget you can find extra resources such as deep technical labs and free technical training.
In this months edition of The Endpoint Zone with Brad Anderson you'll hear directly from Corporate Vice President, Brad Anderson (that means he runs engineering) about the biggest month yet in Microsoft Intune releases. You'll hear about the Intune Secure Browser, about Exchange On-Prem and Office 365 conditional access and other groundbreaking new features. But that's not all. Simon May also asks Brad about the General Availability of Azure Remote App and about the new Enterprise Cloud Suite (which super-sets Windows per user licensing, Office 365 and Enterprise Mobility Suite.
Yes, this is the Tech Industries official enterprise mobility talk show.
In this edition of the Endpoint Zone Brad Anderson discusses three game changing announcements around Office 365 integration with Microsoft Intune, native instrumentation of Microsoft Office apps for Microsoft Intune management and Office for Android. Brad and Simon interview Patrick Wirtz, Innovation Manager at the Walsh group – a Microsoft Intune customer – who explains why they chose Intune and what more they plan on doing with Enterprise Mobility Suite.
You can read Brad's overview of Office for Android on his blog, here.
Brad and Simon talk about the last month in enterprise mobility in the second episode of The Endpoint Zone with Brad Anderson. If you don't know Brad is CVP Enterprise Mobility and Client Management at Microsoft and he's tasked with delivering Microsoft Enterprise Mobility vision through the solutions his team develops.
In this episode Brad and Simon talk about:
- Windows 10 and what it means for enterprise endpoints.
- Look back at Brad's time at Gartner Symposium, the worlds largest gathering of CIOs (spoiler: this stuff might affect your career).
- Brad outlines the key reasons that Microsoft chose to stay out of this round of analysts reports and why he thinks we won't be away for long (spoiler: strategic solutions).
- Simon quizzes Brad about when someone should chose Intune standalone over integration with SCCM.
- Brad and Simon turn the tables on CITEworld contributor, Ryan Faas, by interviewing him!
- Brad gives us his thoughts on the what's coming up (spoiler: TechEd Europe!)
Don't forget to give Brad and Simon your feedback in the comments. They got some amazing feedback last time from some very interesting people, this time give us some captions for the freeze frame at the start of the video.
Follow @inthecloudMSFT on twitter
-and-
Follow @simonster on twitter
for all the latest EMM rumblings and the inside track on Enterprise Mobility at Microsoft along with other cool content.
In the inaugural episode of the Endpoint Zone we get a view on the last month in enterprise mobility from Brad Anderson (CVP Enterprise Client and Mobility) and Simon May (Enterprise Device Infrastructuralist). Simon asks Brad about:
- What's new in iOS8 and Intune's support of the new platform (hint: it already does!)
- Brad's thoughts on VMworld and Airwatch Connect
- How Microsoft makes decisions building cloud and hybrid platforms for mobilty
- Brad and Simon interview Andre Garcia (AVP Global Enterprise Services at ABM). A passionate Intune, SCCM and Azure AD customer! Including how ABM are using Intune, SCCM And Azure AD and why they chose to use those solutions.
- And Finally Brad gives us insight into what he's looking forward to over the next few weeks
We hope you like the show. Please give your comments below - tell us what you love and hate and don't forget to follow
Brad @intheCloudMSFT
Simon @Simonster
and also Andre @andregarcia