Microsoft 365: Securing Mobile Devices with Microsoft Intune

MDM stands for mobile device management. Mobile device management includes smartphones, tablets, and laptops. MDM secures mobile devices and business data, notably in BYOD environments. Common mobile device management features include password enforcement, which locks mobile devices with a PIN or password and sets minimum standards. Data encryption enforcement can encrypt all device data. Data inventory and tracking to keep track of any devices with corporate data or system access. And remote wiping, if needed. Remote wiping ensures no one may access a lost device's data.

After MDM, let's look into MAM. IT administrators can use mobile app management tools to establish and enforce company policies and limit app data sharing. It separates professional apps and data from personal stuff on a device. MAM also helps with licensing management and software distribution through a corporate app store. MDM can manage the device, but in the new bring-your-own-device world, it's more important for enterprises to only take control of the corporate aspect of your device and leave the personal apps and content alone.

Let's look at Microsoft's mobile device and application management offerings now that we know what they are. Microsoft has numerous MDM and MAM services that can function together or separately. System Center Configuration Manager, MDM for Office 365, and Microsoft Intune are Microsoft's three services. Let's compare them. MDM for Office 365 is basic. This basic MDM solution comes with most Office 365 subscriptions and manages iOS, Android, and Windows devices. It can set and manage security policies and perform remote wipes. Microsoft Intune is a full MDM and MAM solution that requires an EMS subscription or a separate Intune subscription, or it's included in Microsoft 365. It includes all MDM for Office 365 features, plus the ability to manage Mac OS X devices, deploy programs, and restrict copy/paste from select apps. System Center Configuration Manager isn't new. SCCM, System Center Configuration Manager, has been around for years and manages traditional clients or PCs. SCCM is part of the System Center package, which comprises four or five other apps. It can be connected with Microsoft Intune for a hybrid MDM and MAM solution, allowing you to manage Windows 7 desktops, iPhones, and Android devices.

Let's focus on Microsoft Intune now that we've reviewed all the possibilities. Intune may be administered from the Azure site; it has no separate admin center. Let's see what we can do from there. First, compliance policies. Device compliance policies specify help and security minimums. You may set updates, encryptions, passwords, and USB debugging. These help ensure gadgets are secure and up to code. Noncompliant devices will be placed on the noncompliant list. Intune can manage client apps. These client apps can be downloaded from the App Store or Google Play Store, or they can be produced in-house and uploaded. Then add app protection policies. These policies allow you to implement restrictions at the app level instead of the device level, such as banning copy/paste, demanding a PIN to launch particular apps, or encrypting app data. Microsoft Intune lets you create and install VPN profiles. Users can simply connect to the VPN and access internal programs and files without configuring additional settings. These are Intune's most-used features.

#ms900 #az900 #cloudcomputing #iaas #saas #paas #azure #microsoft365 #computing #deployments #microsoftoffice #office365

Видео Microsoft 365: Securing Mobile Devices with Microsoft Intune канала EduFi