managing ios device using configmgr and intune hybrid mdm john marcum @sccm_marcum...

30
Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum [email protected] Presenter #2 Twitter Handle Blog or e-mail address

Upload: linette-bryan

Post on 19-Jan-2016

243 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS Device Using ConfigMgr and IntuneHybrid MDM

John Marcum@[email protected]

Presenter #2Twitter HandleBlog or e-mail address

Page 2: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

#MMSMOA

@SCCM_Marcum

Sr. Client Management Architect

12 years working with SMS and MDM

Birmingham, AL

John Marcum

Page 3: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

#MMSMOA

@jasonsandys

Principal Consultant 15+ Years

San Antonio, TX

Jason Sandys

Page 4: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

What is Hybrid MDM?This is the next section

Page 5: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Advantages of Hybrid MDM

S

Page 6: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

MDM-Lite

Page 7: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

The Exchange Connector

S

Page 8: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Preparing ConfigMgr EnvironmentGetting started

Page 9: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Prerequisites

Intune Subscription

Apple Push Notification Cert

Authorized User Collection

Directory Synchronization

S

Page 10: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Synchronization and Federation

ADFS

S

Page 11: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Extensions

S

Page 12: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS DevicesConfiguration ItemsCompliance Policies

Page 13: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Configuration items

Password Characteristics

Store Access

Location Services }Browser Settings

Enforcement

M

Page 14: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Compliance Policies

Password Policy

Jailbreak Detection

Device Restrictions} Conditional Access

M

Page 15: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS DevicesCompany Resource Access

Page 16: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Company Resource Access Profiles

Certificates Email VPN Wi-Fi

M

Page 17: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS DevicesConditional Access

Page 18: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Provides access to a resources if it meets specific criteria

M

Page 19: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

DemoCompliance policies and configuration items

Page 20: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS DevicesEnrolling devices

Page 21: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Enrollment methods

Intune Company Portal Device Enrollment Program

S

Page 22: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

DemoEnrollment via Company Portal

Page 23: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS DevicesManaging devices

Page 24: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Device Remote Actions

Full Wipe

Selective Wipe

Remote Lock

Passcode Reset

S

Page 25: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

DemoDevice Remote Actions

Page 26: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Managing iOS DevicesManaging Applications

Page 27: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

DemoFrom App StoreIPA

Page 28: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Things we didn’t have time to cover…

• Apple configurator • preshared wifi key

•Device enrollment program•MAM

Page 29: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address

Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS!Session Title: Managing iOS Devices Using ConfigMgr and Intune

Discuss…

Ask your questions-real world answers!Plenty of time to engage, share knowledge.

SPO

NSO

RS

Page 30: Managing iOS Device Using ConfigMgr and Intune Hybrid MDM John Marcum @SCCM_Marcum JohnMarcum@outlook.com Presenter #2 Twitter Handle Blog or e-mail address