Microsoft Enterprise Mobility Suite

If your job is managing iOS, Android, or Windows devices, this book is for you. You will find practical guidance based on our many years of real-world experience managing mobile devices around the world. This book provides you with detailed step-by-step instructions, as well as decision-making guidance and explanations that provide answers on the whys and hows around modern device management using Microsoft Enterprise Mobility Suite and System Center Configuration Manager. The book also includes many real-word notes and troubleshooting tips and tricks. To get you going as quickly as possible, the book sample scripts contain a fully automated build of the entire environment, the hydration kit. That includes a fully configured Active Directory environment, including DNS, AD FS, WAP, NDES, Intune, Office365, Azure Active Directory Premium, Azure Rights Management, and more. With this book, you will learn how to: Plan and implement the Enterprise Mobility Suite - Use Azure Active Directory Premium to implement identity management - Implement Multi-Factor Authentication - Use self-service password reset- Employ Azure Rights Management to protect data - Implement Microsoft Intune to support standalone environments - Implement Microsoft System Center Configuration Manager to support hybrid environments - Manage iOS, Android, and Windows 10 devices - Implement conditional access to secure resource access control to Exchange, SharePoint, Skype for Business, and other corporate resources - Implement Microsoft NDES to distribute certificates - Deploy store-based applications - Deploy LOB applications - Develop and deploy managed applications - Perform a successful EMS proof of concept

Enable employees to be productive and access data from any location or device Protect both corporate assets and employee privacy, so your people can be fully productive from any device, anywhere. Learn how to use Microsoft Intune to manage applications to satisfy your unique requirements, make the most of Mobile Device Management (MDM) for Office 365, and defend on-premises resources with Microsoft Advanced Threat Analytics (ATA). Plan, deploy, and deliver complete enterprise mobility while improving security Choose the right Microsoft enterprise mobility solution for your organization Protect apps and data with Microsoft Intune Mobile Application Management (MAM) Identify suspicious user or device activity in hybrid cloud/on-premises environments Prepare for and successfully implement Microsoft ATA Flexibly manage diverse mobile devices with MDM for Office 365 Configure access, define policies, enroll mobile devices, and manage compliance

Manage all the mobile devices your workforce relies on Learn how to use Microsoft’s breakthrough Enterprise Mobility Suite to help securely manage all your BYOD and company-owned mobile devices: Windows, iOS, and Android. Two of the leading mobile device management experts at Microsoft show you how to systematically help protect employee privacy and corporate assets without compromising productivity. You’ll find best practices, step-by-step guidance, and real-world scenarios for every stage of planning, design, deployment, and administration. Empower your mobile users while improving security and controlling costs Master proven best practices for centrally managing smartphones and tablets Plan mobile strategies that encompass users, devices, apps, and data Overcome BYOD’s unique challenges, constraints, and compliance issues Provide common “hybrid” user identities and a seamless experience across all resources: on-premises, datacenter, and cloud Simplify and improve device enrollment, monitoring, and troubleshooting Help safeguard both corporate and personal information

The first-ever book on Microsoft Endpoint Manager (MEM), written by Microsoft Program Manager Scott Duffey! Did you just land an IT job only to learn your new employer is using Microsoft Endpoint Manager (MEM) for device management? Perhaps you stretched the truth on your resume and suggested you knew it already? Maybe you are an old-hat, know-your-stuff device management pro for another MDM or PC management product but your company is now migrating? Whatever the case, this book will be your zero-to-hero ramp-up guide. Microsoft Endpoint Manager has rapidly become the tool of choice for IT professionals around the world for managing corporate and personal devices but the learning curve can be steep. This book can be used to fast-track your understanding of MEM by laying out the concepts, including examples and tips for the real world, along with guided lab exercises. Topics include: • Microsoft Endpoint Manager – What it is and how to use it. • How to set up a MEM learning environment. • Mobile Device Management (MDM) for iOS, macOS, Android, and Windows 10 devices with Microsoft Intune. • Device enrollment concepts for Personal and Corporate. devices including Windows Autopilot, Apple Automated Device Enrollment (ADE), and Google ZeroTouch • Endpoint Security configuration in MEM including device Compliance and Azure AD Conditional Access across Microsoft Intune, Configuration Manager, Azure AD, Microsoft Defender for Endpoint, and Office 365. • Deploying, protecting, and configuring mobile and desktop applications with Microsoft Intune.

Conquer Microsoft 365 administration, from the inside out! Dive into Microsoft 365 administration and harness the full power of cloud scaling, automation, and availability in Microsoft 365! This supremely well-organized reference packs hundreds of time-saving solutions, tips, and workarounds; all you need to continually enhance organizational agility, productivity, and security. Three Microsoft insiders help you fully leverage Microsoft Purview, Microsoft Enterprise Mobility + Security (EMS), Azure AD, Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, and more. Discover how experts tackle today's key tasks and challenge yourself to new levels of mastery. Plan deployment, understand downstream impacts, and avoid pitfalls Prepare your environment, establish governance, and enforce compliance Assess and improve security posture with Microsoft 365 Secure Score Move to identity-based security with Microsoft Enterprise Mobility + Security (EMS) Plan identity types, authentication, identity federation, and AAD Connect deployment Replace costly premises infrastructure with cloud-based Azure synchronization Manage complex Azure AD scenarios such as mergers, acquisitions, and divestitures Automate Azure to improve consistency, security, and standardization Prepare for Exchange Online cloud-only deployments, hybrid coexistence, and migration Move mailboxes and public folders to Exchange Online Understand Microsoft Teams concepts, architecture, and user interface Support meetings, webinars, and live events Deliver full-featured telephony solutions with Teams Phone System Implement telephony scheduling, room collaboration, automation, and IVR Use SharePoint Online to manage content and extend it with analytics and dashboards For IT Professionals and Consultants Your role: You have, or will have, responsibilities for deploying, migrating to, or managing some or all of a Microsoft 365 environment Prerequisites: For individuals at any stage of their cloud journey

Get up to speed with planning, deploying, and managing Microsoft Office 365 services and gain the skills you need to pass the MS-101 exam Key FeaturesExplore everything from mobile device management and compliance,through to data governance and auditingGet to grips with using Azure advanced threat protection and Azure information protectionLearn effectively through exam-focused practice exercises and mock testsBook Description Exam MS-101: Microsoft 365 Mobility and Security is a part of the Microsoft 365 Certified: Enterprise Administrator Expert certification path designed to help users validate their skills in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. This book will help you implement modern device services, apply Microsoft 365 security and threat management, and manage Microsoft 365 governance and compliance. Written in a succinct way, you’ll explore chapter-wise self-assessment questions, exam tips, and mock exams with answers. You’ll start by implementing mobile device management (MDM) and handling device compliance. You’ll delve into threat detection and management, learning how to manage security reports and configure Microsoft 365 alerts. Later, you’ll discover data loss prevention (DLP) tools to protect data as well as tools for configuring audit logs and policies. The book will also guide you through using Azure Information Protection (AIP) for deploying clients, applying policies, and configuring services and users to enhance data security. Finally, you’ll cover best practices for configuring settings across your tenant to ensure compliance and security. By the end of this book, you’ll have learned to work with Microsoft 365 services and covered the concepts and techniques you need to know to pass the MS-101 exam. What you will learnImplement modern device servicesDiscover tools for configuring audit logs and policiesPlan, deploy, and manage Microsoft 365 services such as MDM and DLPGet up to speed with configuring eDiscovery settings and features to enhance your organization’s ability to mitigate and respond to issuesImplement Microsoft 365 security and threat managementExplore best practices for effectively configuring settingsWho this book is for This book is for IT professionals looking to pass the Microsoft 365 Mobility and Security certification exam. System administrators and network engineers interested in mobility, security, compliance, and supporting technologies will also benefit from this book. Some experience with Microsoft 365, Exchange servers, and PowerShell is necessary.

Design and implement a secure end-to-end desktop management solution with Microsoft Endpoint Manager Key Features Learn everything you need to know about deploying and managing Windows on physical and cloud PCs Simplify remote working for cloud-managed cloud PCs via new service Windows 365 Benefit from the authors' experience of managing physical endpoints and traditional virtual desktop infrastructures (VDI) Book DescriptionMicrosoft Modern Workplace solutions can simplify the management layer of your environment remarkably if you take the time to understand and implement them. With this book, you’ll learn everything you need to know to make the shift to Modern Workplace, running Windows 10, Windows 11, or Windows 365. Mastering Microsoft Endpoint Manager explains various concepts in detail to give you the clarity to plan how to use Microsoft Endpoint Manager (MEM) and eliminate potential migration challenges beforehand. You'll get to grips with using new services such as Windows 365 Cloud PC, Windows Autopilot, profile management, monitoring and analytics, and Universal Print. The book will take you through the latest features and new Microsoft cloud services to help you to get to grips with the fundamentals of MEM and understand which services you can manage. Whether you are talking about physical or cloud endpoints—it’s all covered. By the end of the book, you'll be able to set up MEM and use it to run Windows 10, Windows 11, and Windows 365 efficiently.What you will learn Understand how Windows 365 Cloud PC makes the deployment of Windows in the cloud easy Configure advanced policy management within MEM Discover modern profile management and migration options for physical and cloud PCs Harden security with baseline settings and other security best practices Find troubleshooting tips and tricks for MEM, Windows 365 Cloud PC, and more Discover deployment best practices for physical and cloud-managed endpoints Keep up with the Microsoft community and discover a list of MVPs to follow Who this book is for If you are an IT professional, enterprise mobility administrator, architect, or consultant looking to learn about managing Windows on both physical and cloud endpoints using Microsoft Endpoint Manager, then this book is for you.

The first major book on MDM written by Group Policy and Enterprise Mobility MVP and renowned expert, Jeremy Moskowitz! With Windows 10, organizations can create a consistent set of configurations across the modern enterprise desktop—for PCs, tablets, and phones—through the common Mobile Device Management (MDM) layer. MDM gives organizations a way to configure settings that achieve their administrative intent without exposing every possible setting. One benefit of MDM is that it enables organizations to apply broader privacy, security, and application management settings through lighter and more efficient tools. MDM also allows organizations to target Internet-connected devices to manage policies without using Group Policy (GP) that requires on-premises domain-joined devices. This makes MDM the best choice for devices that are constantly on the go. With Microsoft making this shift to using Mobile Device Management (MDM), a cloud-based policy-management system, IT professionals need to know how to do similar tasks they do with Group Policy, but now using MDM, with its differences and pitfalls. • What is MDM (and how is it different than GP) • Setup Azure AD and MDM Auto-Enrollment • New PC Rollouts and Remote Refreshes: Autopilot and Configuration Designer • Enterprise State Roaming and OneDrive Documents Roaming Renowned expert and Microsoft Group Policy and Enterprise Mobility MVP Jeremy Moskowitz teaches you MDM fundamentals, essential troubleshooting techniques, and how to manage your enterprise desktops.