As part of the name change to ‘Microsoft Intune’ a new look and feel has been released this week.  Contact the Atidan team at intune@atidan.com for information on how to manage and secure all of your devices.

New Intune standalone features that will be released as part of this service update include:

• Enhanced user interface for Intune administration console
• Ability to restrict access to Exchange on-premises email based upon device enrollment
• Bulk enrollment of devices using a single service account
• Lockdown of Supervised iOS devices and devices using Samsung KNOX with Kiosk mode
• Targeting of policies and apps by device groups
• Ability to report on and allow or block a specific set of applications
• Enforcement of application install or uninstall
• Deployment of certificates, email, VPN and WiFi profiles
• Ability to push free store apps to iOS devices
• More convenient access to internal corporate resources using per-app VPN configurations for iOS devices
• Remote pin reset for Windows Phone 8.1 devices
• Multi-factor authentication at enrollment for Windows 8.1 and Windows Phone 8.1 devices
• Ability to restrict administrator access to a specific set of user and device groups
• Updated Company Portal apps to support customizable terms and conditions

Mobile Device Management (MDM)

With the increasing volume and diversity of corporate and personal devices being used in organizations today, a growing challenge for IT departments is keeping corporate information secure. Intune helps minimize complexity by offering mobile device management through the cloud with integrated data protection and compliance capabilities.

• Provide a self-service Company Portal for users to enroll their own devices and install corporate applications across the most popular mobile platforms
• Deploy certificates, WiFi, VPN, and email profiles automatically once a device is enrolled, enabling users to access corporate resources with the appropriate security configurations
• Deliver comprehensive settings management for mobile devices, enabling the execution of remote actions such as passcode reset, device lock, data encryption, and full wipe to protect corporate data on lost or stolen devices
• Protect corporate data by restricting access to Exchange email when a user tries to access resources on an unenrolled or non-compliant device based upon policies set by the administrator
• Simplify enrollment of corporate devices with bulk enrollment using Apple Configurator or a single service account, enabling IT administrators to set policies and deploy applications on a large scale
• Enable the enforcement of more strict “lock down” policies for Supervised iOS devices, Android devices using Kiosk Mode, and Windows Phone devices using Assigned Access

Mobile Application Management (MAM)

Employees are demanding access to corporate applications, data, and resources from their mobile devices. Intune addresses this challenge by building manageability and data protection directly into the Office mobile apps your employees are most familiar with. Intune also provides the flexibility to extend these capabilities to existing line-of-business apps and to enable secure viewing of content using the Managed Browser, PDF Viewer, AV Player, and Image Viewer apps.

• Enable your workforce to securely access corporate information using the Office mobile apps they know and love while preventing leakage of your company’s data by restricting actions such as copy/cut/paste/save in your managed app ecosystem
• Apply the same management policies to your existing line-of-business (LOB) applications using the Intune app wrapper, without requiring code changes in those LOB apps
• Allow users to securely view content on devices within your managed app ecosystem using the Managed Browser, PDF Viewer, AV Player, and Image Viewer apps for Intune
• Allow administrators and device users to protect corporate information through selective wipe of managed apps and related data when a device is unenrolled, no longer compliant, lost, stolen, or retired from use
• Enable administrators to push required apps automatically during enrollment and allow users to easily install corporate apps from the self-service Company Portal
• Provide the ability to deny specific applications or URL addresses from being accessed on mobile devices

PC Management

As the number of device types allowed in corporate environments grows, management becomes more challenging. Intune provides a comprehensive management solution through a single administrative console that allows you to manage across a variety of devices, including PCs and laptops.

• Integrate your existing System Center 2012 Configuration Manager infrastructure with Intune, further enhancing your ability to manage PCs, Macs, and Unix/Linux servers, as well as mobile devices from a single management console, while building on existing investments and skills
• Provide real-time protection against malware threats on managed computers, keep malware definitions up-to date, and automatically scan computers to help protect against malware infections and other potentially unwanted software
• Collect information about hardware configurations and software installed on managed computers, allowing you to generate reports, organize groups of computers, and more effectively target software deployments
• Simplify administration by deploying software and configuring Windows Firewall settings on computers based upon policies defined by the administrator