enterprise mobility suite overview - catatpult...
TRANSCRIPT
![Page 1: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/1.jpg)
Enterprise Mobility
Suite Overview
Joe Kuster
Catapult Systems
![Page 2: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/2.jpg)
![Page 3: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/3.jpg)
![Page 4: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/4.jpg)
![Page 5: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/5.jpg)
52% of information workers
across 17 countries report
using three or more devices
for work*
>80% of employees admit to
using non-approved software-
as-a-service (SaaS) applications
in their jobs***
90% of enterprises will have
two or more mobile operating
systems to support in 2017**
52% 90% >80%
* Forrester Research: “BT Futures Report: Info workers will erase boundary between enterprise & consumer technologies,” Feb. 21, 2013** Gartner Source: Press Release, Oct. 25, 2012, http://www.gartner.com/newsroom/id/2213115*** http://www.computing.co.uk/ctg/news/2321750/more-than-80-per-cent-of-employees-use-non-approved-saas-apps-report
![Page 6: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/6.jpg)
Security RealitiesNo one wants to be the next _______
![Page 7: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/7.jpg)
USERS DEVICES APPS DATA
![Page 8: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/8.jpg)
MANAGEMENT | ACCESS | PROTECTION
DATAAPPSDEVICESUSERS
![Page 9: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/9.jpg)
WINDOWS INTUNE
Mobile device settings management
Mobile application management
Selective wipe
MICROSOFT AZURE ACTIVE DIRECTORY PREMIUM
Security reports, and audit reports, multi-factor authentication
Self-service password reset and group management
Connection between Active Directory and Azure Active Directory
MICROSOFT AZURE RIGHTS MANAGEMENT SERVICE
Information protection Connection to on-premises assets
Bring your own key
![Page 10: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/10.jpg)
![Page 11: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/11.jpg)
![Page 12: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/12.jpg)
![Page 13: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/13.jpg)
Identity
![Page 14: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/14.jpg)
![Page 15: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/15.jpg)
![Page 16: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/16.jpg)
MICROSOFT AZURE RIGHTS MANAGEMENT SERVICE
Information protection Connection to on-premises assets
Bring your own key
WINDOWS INTUNE
Mobile device settings management
Mobile application management
Selective wipe
WINDOWS INTUNE
Mobile device settings management
Mobile application management
Selective wipe
MICROSOFT AZURE ACTIVE DIRECTORY PREMIUM
Security reports, and audit reports, multi-factor authentication
Self-service password reset and group management
Connection between Active Directory and Azure Active Directory
MICROSOFT AZURE RIGHTS MANAGEMENT SERVICE
Information protection Connection to on-premises assets
Bring your own key
![Page 17: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/17.jpg)
![Page 18: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/18.jpg)
![Page 19: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/19.jpg)
![Page 20: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/20.jpg)
![Page 21: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/21.jpg)
![Page 22: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/22.jpg)
![Page 23: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/23.jpg)
What is Multi-Factor Authentication…and why you should care
![Page 24: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/24.jpg)
Azure Multi-Factor Authentication
What You Know + What You Have = Access
Limits Stolen/Hacked Password Abuse
Use a Mobile App, Phone Call or Text
Supports IP Whitelisting
Extensible on-prem for additional token options
![Page 25: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/25.jpg)
Multi-Factor Authentication Server Bring Office 365’s Multi-Factor Authentication’s Security and Ease
of Use to On-Premises
Integrates with many of your pre-existing applications through IIS, Windows Authentication, LDAP & Radius
Presents Real-Time Monitoring Capabilities & Threat Reporting
Software Development Kit (SDK) Allows Integration into Custom Apps
![Page 26: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/26.jpg)
![Page 27: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/27.jpg)
![Page 28: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/28.jpg)
![Page 29: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/29.jpg)
![Page 30: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/30.jpg)
MICROSOFT AZURE ACTIVE DIRECTORY PREMIUM
Security reports, and audit reports, multi-factor authentication
Self-service password reset and group management
Connection between Active Directory and Azure Active Directory
WINDOWS INTUNE
Mobile device settings management
Mobile application management
Selective wipe
MICROSOFT AZURE RIGHTS MANAGEMENT SERVICE
Information protection Connection to on-premises assets
Bring your own key
MICROSOFT AZURE ACTIVE DIRECTORY PREMIUM
Security reports, and audit reports, multi-factor authentication
Self-service password reset and group management
Connection between Active Directory and Azure Active Directory
MICROSOFT AZURE RIGHTS MANAGEMENT SERVICE
Information protection Connection to on-premises assets
Bring your own key
![Page 31: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/31.jpg)
![Page 32: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/32.jpg)
![Page 33: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/33.jpg)
Comprehensive lifecycle management
Enroll• Provide a self-service Company
Portal for users to enroll devices
• Deliver custom terms and
conditions at enrollment
• Bulk enroll devices using Apple
Configurator or service account
• Restrict access to Exchange
email if a device is not enrolled
Retire• Revoke access to corporate
resources
• Perform selective wipe
• Audit lost and stolen devices
Provision• Deploy certificates, email, VPN,
and WiFi profiles
• Deploy device security policy
settings
• Install mandatory apps
• Deploy app restriction policies
• Deploy data protection policies
Manage and Protect• Restrict access to corporate
resources if policies are violated
(e.g., jailbroken device)
• Protect corporate data by
restricting actions such as
copy/cut/paste/save outside of
managed app ecosystem
• Report on device and app
compliance
User IT
![Page 34: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/34.jpg)
Conditional access to email
•••••••••
Username Microsoft Intune
ITITUser
![Page 35: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/35.jpg)
Intuitive end user experience
Restrict access for:• Non-managed devices
• Non-compliant devices
Assistance with remediating issues• Steps provided on how to enroll devices and remediate compliance
issues
Quick compliance remediation and evaluation• Intune automatically remediates most of the policy issues
• End user can retrigger compliance evaluation in the Company Portal
To access your Contoso e-mail and other company resources, this device needs to be enrolled with Contoso. Part of this process includes installing the Company Portal. Click first link below to begin this process.
Step 1Enroll your device.
Step 2Once you’ve enrolled your device, click here to Activate your enrollment.
![Page 36: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/36.jpg)
Consistent experience across:
Discover and install corporate apps
Manage devices and data
Ability to contact IT
Customizable terms and conditions
![Page 37: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/37.jpg)
Consistent experience across:
Discover and install corporate apps
Manage devices and data
Ability to contact IT
Customizable terms and conditions
![Page 38: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/38.jpg)
Mobile application management policies
Enforce corporate data
access requirements
Prevent data leakage
on the device
Enforce encryption
of app data at rest
App-level
selective wipe
![Page 39: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/39.jpg)
Mobile application management
Personal apps
Managed apps
Maximize productivity while preventing leakage of company
data by restricting actions such as copy/cut/paste/save in
your managed app ecosystem
User
![Page 40: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/40.jpg)
Microsoft Office mobile apps are natively manageable with Intune
• Word
• Excel
• PowerPoint
• Outlook Web Access
(OWA)
• OneDrive for Business
Office mobile apps
Intune provides apps for secure content viewing
• Managed Browser
• PDF Viewer
• AV Player
• Image Viewer
Intune viewer apps
Make any app manageable without modifying code
• ‘Wrap’ internal line-of-
business (LOB) apps to
manage with Intune
MAM policies
Intune app wrapping tool
Build your apps from the ground-up with Intune SDK
• Developers can easily
integrate applications for
manageability
• Provide more control
over user experience
with SDK (vs. app
wrapping)
Intune SDK
![Page 41: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/41.jpg)
Options for corporate data removal
Restore device to factory defaults
• All data on the device is removed
• Device is reset to factory defaults
• Typically used for lost/stolen devices or resetting
corporate-owned devices
Full wipe
Remove company assets from device
• Company resources (apps, data, profiles,
certificates, settings, and email) are removed
• MAM support adds ability to remove only
corporate data from multi-account applications
• Typically used for personal-owned devices
Selective wipe
![Page 42: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/42.jpg)
Managed corporate-owned devices
• Bulk enroll devices with a service account
• Support for Apple Configurator
• Support for Apple Device Enrollment Program
Bulk enrollment
• Custom iOS policy
• Device lockdown
• Policies and apps targeted to devices
• Application install allow/deny list
Configuration policies
![Page 43: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/43.jpg)
Mobile devices and PCs Mobile devices
System Center Configuration
Manager
Domain joined PCs
Configuration Manager integrated with Intune (hybrid)Intune standalone (cloud only)
IT IT
Intune web console Configuration Manager console
![Page 44: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/44.jpg)
User Installs
Company Portal
Native Applications
Loaded
Supported Apps are
Configured – Native
Email, Managed
Browser
SaaS Apps Available
in MyApps
Windows Apps
presented through
RemoteApp or RDP
User is fully
provisioned
![Page 45: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/45.jpg)
![Page 46: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/46.jpg)
![Page 47: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/47.jpg)
MICROSOFT AZURE RIGHTS MANAGEMENT SERVICE
Information protection Connection to on-premises assets
Bring your own key
MICROSOFT AZURE ACTIVE DIRECTORY PREMIUM
Security reports, and audit reports, multi-factor authentication
Self-service password reset and group management
Connection between Active Directory and Azure Active Directory
Enterprise Mobility SuiteMICROSOFT AZURE ACTIVE DIRECTORY PREMIUM
Security reports, and audit reports, multi-factor authentication
Self-service password reset and group management
Connection between Active Directory and Azure Active Directory
WINDOWS INTUNE
Mobile device settings management
Mobile application management
Selective wipe
WINDOWS INTUNE
Mobile device settings management
Mobile application management
Selective wipe
![Page 48: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/48.jpg)
![Page 49: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/49.jpg)
![Page 50: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/50.jpg)
![Page 51: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/51.jpg)
![Page 52: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/52.jpg)
![Page 53: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/53.jpg)
ServerFiles Services
ServerRights Management
![Page 54: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/54.jpg)
![Page 55: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/55.jpg)
![Page 56: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/56.jpg)
![Page 57: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/57.jpg)
![Page 58: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/58.jpg)
![Page 59: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/59.jpg)
![Page 60: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/60.jpg)
EMS benefits for O365
![Page 61: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/61.jpg)
Hybrid identity and single sign-on for Office 365.
Multi-factor authentication for Office 365.
Cloud-based information protection for Office 365.
Security reports and multi-factor authentication.
Self-service password reset and group management.
Connection between Active Directory and Azure Active Directory.
Mobile device settings management.
Mobile application management.
Selective wipe.
Information protection.
Connection to on-premises assets.
ON-PREMISES SOLUTION CLOUD SOLUTION
![Page 62: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/62.jpg)
EMS IT Manageability benefits for O365 customers
CLOUD AND HYBRID IDENTITY MANAGEMENT
MOBILE DEVICE MANAGEMENT
INFORMATION PROTECTION
Enterprise Mobility Suite
![Page 63: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/63.jpg)
Productivity
Conditional access for Office 365
If compliant,
email access is
granted
7
Enrollment /
compliance
remediation
5
If not compliant,
push device into
quarantine
Quarantine
4
2
Quarantine email with
remediation steps
Link to enroll device
and compliance
remediation steps
Who does what?
Intune: Evaluate policy
compliance for device
Azure AD: Authenticate user
and provide device
compliance status
Exchange Online: Enforces
access to email based on
device state
Attempt
connection1
3
Azure Active Directory
Set device
management/
compliance
status
6Office 365
Mobile device
Microsoft Intune
![Page 64: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/64.jpg)
Azure Active Directory offering comparison
![Page 65: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/65.jpg)
Azure MFA offering comparison
![Page 66: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/66.jpg)
RMS for O365 Azure RMS (EMS)
![Page 67: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/67.jpg)
Pricing
![Page 68: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/68.jpg)
![Page 69: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/69.jpg)
![Page 70: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/70.jpg)
![Page 71: Enterprise Mobility Suite Overview - Catatpult Systemspages.catapultsystems.com/rs/catapultsystems/images/EMS Overview.pdfMICROSOFT AZURE RIGHTS MANAGEMENT SERVICE Information protection](https://reader031.vdocuments.site/reader031/viewer/2022020214/5aaee4697f8b9adb688cf0f1/html5/thumbnails/71.jpg)
Next Steps• Contact Catapult to arrange an EMS or
Azure RemoteApp POC, Pilot or
Production Deployment
• To find out more about Enterprise
Mobility Suite visit:
http://www.microsoft.com/EMS
http://www.catapultsystems.com/applica
tion/enterprise-mobility
Joe Kuster
Senior Lead Consultant
Catapult Systems
Email: [email protected]
Blog: MicrosoftMercenary.com
Twitter: @Joe_Kuster