w m u g nl€¦ · spoke on several events like techdays netherlands, expertslive, user group...
TRANSCRIPT
![Page 1: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/1.jpg)
W M U G NL
WMUG Meeting #2 - DeploymentAPPLICATION DEPLOYMENT ACROSS SEVERAL DEVICES WITH SYSTEM CENTER 2012 CONFIGURATION MANAGER
![Page 2: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/2.jpg)
Our Sponsors
![Page 3: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/3.jpg)
Agenda
Introduction
Microsoft’s Cross Plaform Architecture
Enrollment
Deployment Types for Mobile Applications
Settings Management
![Page 4: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/4.jpg)
Introduction
![Page 5: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/5.jpg)
Who we are
Kenneth van Surksum
Consultant at itgration
Microsoft MVP for 3 yrs, vExpert for 2 yrs
Author:◦ Contributor System Center 2012 Configuration Manager Unleashed◦ Contributor System Center 2012 R2 Configuration Manager Unleashed◦ Contributor System Center 2012 R2 Service Manager Unleashed◦ Co-Author Mastering Windows 7 Deployment
Communities:◦ Co-founder WMUG NL (http://wmug.nl)◦ Founder and Blogger www.vansurksum.com◦ Chief Editor at virtualization.info en cloudcomputing.info
Speaker:◦ Microsoft Techdays◦ Microsoft Management Summit
Follow me: @kennethvs / www.vansurksum.com
![Page 6: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/6.jpg)
Who we are
Peter Daalmans
Senior Technical Consultant at IT-Concern
3 year Microsoft MVP: Enterprise Client Management (ConfigMgr and Windows Intune)
Author:◦ Mastering System Center 2012 Configuration Manager◦ Mastering System Center 2012 R2 Configuration Manager
Communities:◦ Co-founder WMUG NL (http://wmug.nl)◦ Founder and Blogger ConfigMgrBlog.com
Speaker:◦ Spoke on several events like TechDays Netherlands, ExpertsLive,
User Group meetings, TechEd New Zealand and TechEd Australia.
Follow me: @pdaalmans / ConfigMgrBlog.com / [email protected]
![Page 7: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/7.jpg)
Cross platform support
![Page 8: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/8.jpg)
Microsoft’s cross-platform management
![Page 9: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/9.jpg)
Microsoft’s cross-platform Architecture
Mac OS X
Windows PCs(x86/64, Intel SoC),
Windows to GoWindows Embedded
Windows RT, Windows Phone 8
iOS, Android
Microsoft Exchange Server 2010 SP3Microsoft Exchange Server 2013
orOffice 365
![Page 10: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/10.jpg)
Windows Intune & ConfigMgr 2012 R2
Infrastructural requirements:Windows Intune subscription
Windows Azure Active Directory Sync tool (DirSync)
Windows Intune Connector site role
![Page 11: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/11.jpg)
Single Sign On
Two options: Via Windows Azure Active Directory Sync tool (DirSync)Passwords need to be synced to Azure Active Directory
Authentication is done on Azure Active Directory
DirSync and Active Directory Federation ServicesNo passwords are saved in the cloud
Authentication happens on your Active Directory
Not supported but you can configure DirSync what to synchronize.
![Page 12: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/12.jpg)
How does ADFS work?
AFDS Proxy ADFS / DC
Windows Azure Active Directory Sync toolwithout password sync
1. User goes to Windows Intuneportal.manage.microsoft.com
2. User is redirected to ADFS Proxy
3. User provides AD credentials
4. Credentials areverified
5. User receives security token
6. User presents security token and gets access (or not)
DMZ
Active Directory1. User goes to Windows Intune
portal.manage.microsoft.com
2. User is redirected to ADFS Proxy
3. User provides AD credentials
4. Credentials areverified
5. User receives security token
![Page 13: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/13.jpg)
Setting up Windows Intune
1. Go to http://www.windowsintune.com and sign up for a trial
2. Setup Domain Name in Windows Intune
3. Setup UPN in your Active Directory (if different from domain name in Windows Intune)
4. Setup DirSync
5. Setup ADFS / ADFS Proxy
6. Activate Users in Windows Intune Portal (https://account.manage.microsoft.com/)
7. Install and configure Windows Intune Connector in Configuration Manager 2012 R2
![Page 14: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/14.jpg)
DemoWINDOWS INTUNE AND CONFIGMGR TOGETHER
![Page 15: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/15.jpg)
How does ConfigMgr keep up with Windows Intune and the market?
Updates of Windows Intune are done quarterly
Via the Extensions for Windows Intune Microsoft is able to add Windows Intune features to Configuration Manager 2012 R2
Recently added: Email Profiles Extension (Configure and wipe Exchange ActiveSync accounts on
managed iOS and Windows Phone 8 devices.)
iOS 7 Security Settings (Adds functionality for iOS 7 security settings such as “Open In” and lock screen settings.)
![Page 16: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/16.jpg)
DemoEXTENSIONS FOR WINDOWS INTUNE
![Page 17: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/17.jpg)
Mobile Device Enrollment
Enrollment is done by the users themselves
Enrollment can be done from the Company Portal for◦ Android
◦ iPhone / iPad
Enrollement via build in OMA-DM agent ◦ Windows RT
◦ Windows Phone
![Page 18: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/18.jpg)
DemoENROLLMENT ANDROID & IPAD
![Page 19: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/19.jpg)
End User Experience
Native Windows app package (.appx)
Available in the Windows Store
Windows Phone 8 Company Portal
iOS/Android Company Portal
Native Windows Phone 8 app (.xap)
Needs to be sideloaded
Web based portal Hosted in Windows Intune
Windows RTCompany Portal
![Page 20: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/20.jpg)
Deployment Types for Mobile Applications
Platforms Windows App Windows Phone Apple iOS
Android
Application install (sideloading)
*.appx *.xap *.ipa *.apk
Deep links from store
Windows Store Windows Phone Store
Apple App Store Google Play
![Page 21: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/21.jpg)
Deeplinking Applications
DeeplinkingProviding direct links to the application in the Application StoreWindows Store
Windows Phone Store
Apple Store
Google Play
![Page 22: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/22.jpg)
DemoDEEPLINKING MOBILE APPLICATIONS
![Page 23: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/23.jpg)
Sideloading
SideloadingIn house/company custom developed applicationsRequires development tools/licenseMicrosoft: Visual Studio
Apple: Xcode
Google: Android Developer Tools plugin for Eclipse
![Page 24: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/24.jpg)
Testing Sideloaded Applications
Testing ApplicationsGoogle: Just enable installation on a per device basis
Apple: UUID of device must be registred to developer (100 max/year) - http://developer.apple.com/programs/ios/enterprise
Microsoft: Domain Joined Machines via GPO and a Certificate
Microsoft Phone: Emulator for Windows Phone 8/Windows Intune Trial Management for Windows Phone 8
![Page 25: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/25.jpg)
Installing Sideloaded Applications
Microsoft: Domain Joined (GPO/Certificate) or non domain joined or specific editions (Pro) then sideloading key (per 100)
Microsoft (Phone): Code signing using Verisign Certificate(http://www.symantec.com/verisign/code-signing/windows-phone)
Google: Just install
Apple: Encrypted file must be authorized (uses Apple FairplayDRM)
![Page 26: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/26.jpg)
DemoSIDELOADING MOBILE APPLICATIONS
![Page 27: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/27.jpg)
Web Applications
Deploy a link to a website, just like an application
![Page 28: W M U G NL€¦ · Spoke on several events like TechDays Netherlands, ExpertsLive, User Group meetings, TechEd New Zealand and TechEd Australia. ... Microsoft Exchange Server 2010](https://reader035.vdocuments.mx/reader035/viewer/2022081612/5f285ee24488f2152339b877/html5/thumbnails/28.jpg)
Settings Management
Settings Management
Retire/Wipe devices