Today schallenges People centricIT EnableyourendusersAllowuserstoworkonthedevicesoftheirchoiceandprovideconsistentaccesstocorporateresources UnifyyourenvironmentDeliveraunifiedapplicationanddevicemanagementon premisesandinthecloud ProtectyourdataHelpprotectcorporateinformationandmanagerisk Management Access Protection AccessandInformationProtection Empowerusers SimplifiedregistrationandenrollmentforBYOdevicesAutomaticallyconnecttointernalresourceswhenneededAccesstocompanyresourcesisconsistentacrossdevices Challenges Solutions Userswanttousethedeviceoftheirchoiceandhaveaccesstoboththeirpersonalandwork relatedapplications data andresources Userswantaneasywaytobeabletoaccesstheircorporateapplicationsfromanywhere ITdepartmentswanttoempoweruserstoworkthisway buttheyalsoneedtocontrolaccesstosensitiveinformationandremainincompliancewithregulatorypolicies Userscanregistertheirdevices whichmakesthemknowntoIT whocanthenusedeviceauthenticationaspartofprovidingaccesstocorporateresources Userscanenrolltheirdevices whichprovidesthemwiththecompanyportalforconsistentaccesstoapplicationsanddata andtomanagetheirdevices ITcanpublishaccesstocorporateresourceswithconditionalaccessbasedontheuser sidentity thedevicetheyareusing andtheirlocation Empowerusers EnablingITtoempowerusers ITcanpublishaccesstoresourceswiththeWebApplicationProxybasedondeviceawarenessandtheusersidentity ITcanprovideseamlesscorporateaccesswithDirectAccessandautomaticVPNconnections Userscanworkfromanywhereontheirdevicewithaccesstotheircorporateresources Userscanregisterdevicesforsinglesign onandaccesstocorporatedatawithWorkplaceJoin UserscanenrolldevicesforaccesstotheCompanyPortalforeasyaccesstocorporateapplications ITcanpublishDesktopVirtualization VDI foraccesstocentralizedresources RegisteringandEnrollingDevices ITcanpublishaccesstocorporateresourceswiththeWebApplicationProxybasedondeviceawarenessandtheusersidentity Multi factorauthenticationcanbeusedthroughWindowsAzureActiveAuthentication UserscanregisterBYOdevicesforsinglesign onandaccesstocorporatedatawithWorkplaceJoin Aspartofthis acertificateisinstalledonthedevice UserscanenrolldeviceswhichconfigurethedeviceformanagementwithWindowsIntune TheusercanthenusetheCompanyPortalforeasyaccesstocorporateapplications Aspartoftheregistrationprocess anewdeviceobjectiscreatedinActiveDirectory establishingalinkbetweentheuserandtheirdevice DatafromWindowsIntuneissyncwithConfigurationManagerwhichprovidesunifiedmanagementacrossbothon premisesandinthecloud Demo WorkplaceJoin PublishaccesstoresourceswiththeWebApplicationProxy Userscanaccesscorporateapplicationsanddatawherevertheyare ITcanusetheWebApplicationProxytoauthenticateusersanddeviceswithmulti factorauthentication Useconditionalaccessforgranularcontroloverhowandwheretheapplicationcanbeaccessed ActiveDirectoryprovidesthecentralrepositoryofuseridentityaswellasthedeviceregistrationinformation DeveloperscanleverageWindowsAzureMobileServicestointegrateandenhancetheirapps Demo WebApplicationProxy Userscansynctheirworkdatatotheirdevices UserscanregistertheirdevicestobeabletosyncdatawhenITenforcesconditionalaccess ITcanpublishaccessdirectlythroughareverseproxy orconditionalaccesscanbeenforcedviadeviceregistrationthroughtheWebApplicationProxy ITcanconfigureaFileServertoprovideWorkFoldersyncsharesforeachusertostoredatathatsyncstotheirdevices includingintegrationwithRightsManagement ITcanselectivelywipethecorporatedatafromWindows8 1clients MakecorporatedataavailabletouserswithWorkFolders ActiveDirectorydiscoverabilityprovidesusersWorkFolderslocation AccessPolicy Demo WorkFolders EffectiveworkingwithRemoteAccess Canoriginateadminconnectionfromintranet Connectiontointranetisalwaysactive Cannotoriginateadminconnectionfromintranet WithDirectAccess ausersPCisautomaticallyconnectedwheneveranInternetconnectionispresent TraditionalVPNsareuser initiatedandprovideon demandconnectivitytocorporateresources AnautomaticVPNconnectionprovidesautomatedstartingoftheVPNwhenauserlaunchesanapplicationthatrequiresaccesstocorporateresources Unifyyourenvironment Challenges Solutions Providinguserswithacommonidentitywhentheyareaccessingresourcesthatarelocatedbothon premisesinacorporateenvironment andincloud basedplatforms ManagingmultipleidentitiesandkeepingtheinformationinsyncacrossenvironmentsisadrainonITresources Usershaveasinglesign onexperiencewhenaccessingallresources regardlessoflocation UsersandITcanleveragetheircommonidentityforaccesstoexternalresourcesthroughfederation ITcanconsistentlymanageidentitiesacrosson premisesandcloud basedidentitydomains Expandeddomainjoincapabilities NotJoined WorkplaceJoined DomainJoined Userprovideddevicesare unknown andIThasnocontrol Partialaccessmaybeprovidedtocorporateinformation Registereddevicesare known anddeviceauthenticationallowsITtoprovideconditionalaccesstocorporateinformation DomainjoinedcomputersareunderthefullcontrolofITandcanbeprovidedwithcompleteaccesstocorporateinformation Browsersessionsinglesign on Seamless2 FactorAuthforwebapps Enterprisea