All posts tagged MDM

mtp-blog-3-00The fourth blog about the integration of Microsoft Intune and Lookout MTP we will have a look at the administrative side of things. We will have a look at what we are able to configure in relation to threats, we will have a look the devices that can be managed both in Lookout and how we need to setup compliance within Microsoft Intune.

Read more

mtp-blog-3-00In the last two blogs we looked at the global overview and the architecture of the solution. In this blog I want to go a bit deeper and have a look how to integrate the two services with each other.

Like said, the Lookout service is currently hosted on Amazon Web Services and Microsoft Intune is hosted on Microsoft Intune.

Read more

In June Microsoft and Lookout announced their partnership and bath also announced the integration of Microsoft Intune and Lookout Mobile Threat Protection. In the last couple of months I was able to test and implement this first release of the integration between those two products at my customer in close corporation with the engineers of Lookout and Microsoft.

logos-1

So in the next couple of blogs I will be describing what the current version of the integration is capable of, how we need to configure it, what the administrator experience is and what the user experience is. Looking at the current integration of both services is a nice addition to the complete Enterprise Mobility +Security proposition of Microsoft and allows you to secure your apps and data to the next level! But first look at why we actually want to integrate Microsoft Intune and Lookout Mobile Threat Protection.

Read more

android-compl-00In one of my tenants the new compliance rules for Android arrived last night. So as from now we are able to block users to access corporate data that have Android devices that have enabled USB Debugging, enabled the installation of apps from Unknown Sources and when users have disabled the option “Scan device for security threats”.

If you ask me three of the most wanted compliance enhancements to be able to support Android devices. Let’s have a look at how it works.

Read more

force-intune-mb01It took me a while to figure out the Web Clip/Aweb App story on Android devices, on iOS it is easy, you simple get a shortcut/icon pushed to the start screen of the device. For Android you need to add the Company Portal Widget to the start screen of an Android device.

Let’s see how to add the Company Portal Widget with the web clips and see how the web clip is enforced to be opened in the Intune Managed Browser.

Read more

A big wish of a lot of customers came true after the update of Microsoft Intune earlier this week. As from now you are able to force Web Clips (URLS) to use the Intune Managed Browser on Android and iOS devices. So this way you are able to configure corporate websites to use the Managed Browser, which is a great addition to the Intune service if you ask me! 🙂

force-intune-mb01

Require a managed browser to open this link

Read more

expiring_certIf you have an iOS device and you are managed by Microsoft Intune (or Hybrid) you may see an expired certificate in your Management Profile on your device. When I saw this I contacted the Intune PG and they came back that there is nothing to worry about! This certificate is only needed to install the management profile on iOS devices during the enrollment process. After the enrollment is done, this certificate is not used anymore.

So what you will see is that devices that are already are enrolled will work as expected and newly enrolled devices will receive an iOSProfileSigning certificate with the new date.

Till later!

intuneEarlier this week Apple released iOS version 9.3, today Microsoft released a statement that Intune supports and is compatible with iOS 9.3. Where iOS version 9.2 broke MDM capabilities of most MDM vendors the available iOS policies are supported for and working on iOS 9.3, so we don’t have to wait for an iOS update to be managed again for weeks..

For the new educational options in iOS 9.3, Microsoft is collaborating with Apple to see where Intune is able to manage the new features. Feel free to provide feedback to the Intune Product Group about features that you like to be managed via Microsoft Intune via UserVoice. Read the complete announcement of Microsoft here.

mms2016-01For the third year in a row I will be presenting at the Midwest Management Summit in Minneapolis. This year the conference will be held in May instead of November.

The last week sessions are added almost daily and one of the sessions which is approved is a preconference session together with fellow Enterprise Mobility MVP John Marcum, this 4 hour hands on lab session will be all about managing Mobile Devices using ConfigMgr and Intune.

Read more

As from this weekend Microsoft enrolled the earlier announced new features in all Intune tenants. Like mentioned last week also Windows 10 Passport for Work support has been added. By default this great feature is enabled and configured with default settings from Microsoft, so be sure to have a look at the feature (Admin > Mobile Device Management > Windows > Passport for Work) and configure it for your needs so that you are compliant with your corporate security guidelines.

Passport for Work enabled by default

Passport for Work enabled by default

 

jan-win10-updates-00Next to smart lock support for Android, another update that came with the new Microsoft Intune release of January is Health Attestation Reports and the ability to check compliance based on the Health Attestation.

The compliance part I could not find yet but the reports are already there and usable to get a view if your Windows 10 devices are healthy or not.

Also the ability to fully wipe (factory reset) a Windows 10 device is new. Let’s have a look!

Read more