Post on 11-Sep-2018
Introduction to Windows 10 Mobile in Business
• Overview-level knowledge of Microsoft enterprise services, Office 365, and Windows Phone 8.1 devices
Prerequisites
Objectives• Identify key enterprise features in phones running Windows 10
Mobile• Identify the benefits your company can get with the business
use of Windows 10 Mobile
Learning time
minutes60
Contents
Office and other productivity apps
Mobile device management
Enterprise apps Phone and network security
Windows 10 Mobile in the enterprise
Objectives• Identify the key features available in Windows 10
Mobile devices for enterprise use
Windows 10 Mobile in the enterprise
Learning time
minutes10
One Windows 10
Windows 10 on PCs
Windows 10 Mobile on phones
Windows 10 on tablets
Windows 10 user experience is the same on all devices
Universal apps
PC Tablet PhoneDevelop an app once, run it on all Windows 10 devices
Universal LOB app
Company app developer
App look and feel can be tailored separately for each device type
Unified Windows Store
Install a purchased app on up to 10 devices
One Store for all device types
Windows Store
Upknowledge app
Includes apps, games, music, and movies & TV
Mary Moore
Continuum for phones
Employees can use their phones like a PC
Independent use of phone
Use apps from a large display
Use a mouse and keyboard, or use phone as a touch pad
Work account integration
Company AD
Microsoft cloudOn-premises
Microsoft Azure AD
Directory Sync Tool
Domain joined computers
Cloud joined computers
AD join AAD join
AAD join
Cloud joined phones
Benefits of using a work account
Microsoft Azure AD
Microsoft Intune
1. Set up a work account
2. Automatic enrollment
3. Push policies
Automatic MDM enrollmentSingle sign-on to apps and company resources
Outlook Mail Office apps SharePoint site
What else is new for enterprises?
Easier app deploymentWindows Store for BusinessImproved app signing
Windows HelloMicrosoft Passport (PIN)
Additional security
Better productivityOffice MobileOutlook Mail and Calendar
Extended device managementImproved MDMProvisioning Packages
Key learning points
• The core of Windows 10 is the same for PCs, tablets, and phones
• Universal apps work on all Windows 10 devices, the app UI can adapt to the screen size and device capabilities
• Windows 10 uses a unified Windows Store which includes all content for all device types
• Continuum enables a PC-like experience powered by your phone
• Users can set up their work account on their phone
Objectives• Identify how your users can collaborate on
Microsoft Office documents• Identify other key productivity apps available
for Windows 10 Mobile devices
Office and other productivity apps
Learning time
minutes10
Office Mobile for Windows 10
Same rich editing features on phone than on laptop and PC
Completely free on phones
On-the-go productivity with Word, Excel, PowerPoint, and OneNote
Same universal app on PC and phone
Microsoft Office family
Desktop Office
Available for Desktop Windows only
Office Mobile for Windows 10
Universal apps, available for all Windows 10 devices
Office for iOS and Android
iPhone, iPad, and Android phones and tablets
Office Online
Web based, works practically on any device and platform
Office 365 required
Office Mobile apps are free to use on phones and small tablets*
PCs and large tablets require Office 365 subscription to create and edit documents
*Using Office apps via Continuum requires Office 365
Other key productivity apps
Microsoft SharePoint
Skype for BusinessOneDrive
for Business
Microsoft Exchange
Outlook Mail and Calendar apps
OneDrive appSkype for Business app
SharePoint Newsfeed app
Using multiple accounts
Office 365(work)
Outlook.com(personal)
Many apps allow the simultaneous use of multiple accounts
Easy to change between work and personal inboxes in Outlook Mail
You can manage accounts from settings and directly from apps
Key learning points
• Universal Office Mobile apps are available for all Windows 10 devices
• Office Mobile apps include similar rich editing features to Desktop Office apps
• Windows Store includes many other free productivity apps, like Skype for Business and SharePoint Newsfeed
• Many apps support the use of multiple accounts
Objectives• Identify Mobile Device Management (MDM)
features in Windows 10 Mobile devices
Mobile Device Management
Learning time
minutes10
Management convergence
All Windows 10 devices can be managed with MDM
Microsoft Intune
Phones managed with MDM policies
PCs managed with GPOs
Windows 8.1 / Windows Phone 8.1 Windows 10
Microsoft Intune
Company AD
Microsoft cloud
On-premises
Microsoft cloud
Management lifecycle
Configuration and security
Enrolment
Application Management
Inventory and assistance
Un-enrolmentConverged protocolBulk enrollmentAzure AD integration
New and improved policiesPhone update controlDirect certificate installationPIN and Windows Hello
Windows Store for BusinessDeploy Store apps with MDM
Extended inventory optionsCellular identifiersMAC & IP addressScreen resolution
All apps (Store & LOB)
Remove enterprise appsCan be prevented by policy 100+
new policies
WINDOWS 10 MDM SETTINGS REFERENCE
Management models
MDM Client
EAS Client
Provisioning Engine
Provisioning packages offer a new way to manage Windows 10 devices
Microsoft Exchange
MDM solution
Provisioning package
.ppkg
PROVISIONING PACKAGES OVERVIEW
Creating and using Provisioning Packages
WICD
WICD = Windows Imaging and Configuration Designer
Install Windows ADK for Windows 10, which includes WICD
1
Provisioning Package
Apps
Settings
Use WICD to build a Provisioning Package
2 Deploy the Provisioning Package to the target phones
3
.ppkg
Key learning points
• Windows 10 on PCs, tablets, and phones have converged MDM capabilities
• MDM capabilities have been greatly extended from WP8.1 with over 100 new policies
• Provisioning Packages provide a new way for configuring settings and distributing apps to phones
Objectives• Identify how a company can deploy
line-of-business (LOB) apps to Windows 10 Mobile devices
Enterprise appsLearning time
minutes10
Getting apps on Windows 10 Mobile
Windows Store
Private Store
MDM server
Web server or email
Store apps
LOB apps
Store appsLOB apps
LOB apps
Store apps
App signing
Windows Phone 8.1 Windows 10 Mobile
LOB app
All LOB apps have to be signed with Symantec’s certificate
Company
Self-signed
Windows 10 supports additional LOB app signing options
LOB app
+ +
Windows Store basics
Windows Store
Microsoft account
Credit card or operator billing
Store library
Windows Store purchases rely on employees personal account
Windows Store for Business basics
Windows Store
Domain account
Store library
Store for Business helps companies to obtain and deploy apps to the employees
Company library
Bulk purchasing
Store for Business Portal
WINDOWS STORE FOR BUSINESS OVERVIEW
Getting apps from Windows Store for Business
Choose free apps and paid apps* for the company
We need these four apps …
Store for Business Portal
Inventory
Time to go shopping
Sign in to Store for Business web portal1 2 Apps are added
to company’s app inventory
3
https://www.microsoft.com/business-store
*Now Store for Business only has free apps. Paid apps will be available later.
Benefits for companies
5/10 licenses used
App downloads do not rely on a a Microsoft account
Reclaim and re-use app licenses via the Business Store Portal
Volume purchasing with PO, invoice, or credit card
Deploy all company approved apps from a single location
App purchase management License management
Deployment options Account management
App distribution options
App is added to the Private Store inside the Store app
App package and license are downloaded to a management system
Target user gets an email with a link to the app
Private Store Direct Assignment Management Tools
Intune MDM
Store for Business Portal
Key learning points
• Windows Store for Business is a new way for companies to obtain and distribute apps to employees and manage app licenses
• An MDM server can be used to deploy Store apps for Windows 10 Mobile devices
• LOB apps can be signed with a company’s certificate or be self-signed, in addition to using Symantec’s certificate
Objectives• Identify how PIN and Windows Hello can protect
information on Windows 10 Mobile devices
Phone and network security
Learning time
minutes10
PIN on phones
Lock screen password has been replaced with the PIN feature
I will secure my phone with a PIN
Use PIN instead of password for authentication
PIN is tied to the phone and cannot be used from other devices
MICROSOFT PASSPORT AND PIN AUTHENTICATION
PIN use cases
Used as the lock screen password
Authenticate Store purchases
Authenticate access to managed apps
Windows Hello
Fingerprint
User authentication based on a biometric signature
Iris
Facial recognition
Correct user
Wrong user
Can be used instead of a PIN to unlock phone and authenticate to apps and services
Key learning points
• PIN enables secure access to phone, apps, and services• Windows Hello brings biometric authentication support to
Windows 10 Mobile devices
Summary
Summary
• All devices running Windows 10 have the same core and can run the same universal apps
• Microsoft Office Mobile apps are free for phones and include similar rich editing features to desktop Office
• Windows 10 Mobile devices can be managed with EAS, MDM, or Provisioning Packages
• Windows Store for Business and LOB app signing enhancements make it easier than ever to deploy enterprise apps
• PIN and Windows Hello enhance the robust security features available for Windows 10 Mobile