This week a blog post about a very nice new app type in Microsoft Intune standalone. The Office 365 Pro Plus Suite (Windows 10) app type. This app type makes it very. This is the old version, please see the new Sysprep a Windows 7 Machine – Start to Finish V2. Note – I highly recommend creating a boot or rescue disk before.
OldVersion.com provides free software downloads for old versions of programs, drivers and games. So why not downgrade to the version you love? Flashcards unexpectedly found their way into the public discourse last week when Counselor to the President Kellyanne Conway appeared on Fox News to defend Donald.
More than just Config. Mgr – Peter blogs about Configuration Manager and Microsoft Intune. This week part 2 of my blog post about Windows 1.
MAM- WE. Last week it was about the configuration, this week it’s about the end- user experience. I’ll start this post with a short introduction about the settings that are configured for the end- user experience in this post. After that I’ll show the end- user experience with the enrollment, with accessing data and after enrollment. Introduction. As I explained last week, there are a few Important settings that should be considered. The end- user experience shown throughout this post is based on the following configuration: Allowed apps: Microsoft Edge, Power. Point Mobile, Excel Mobile, Word Mobile, IE1.
Microsoft Remote Desktop, Microsoft Paint, Microsoft One. Drive, Notepad; Required settings: Windows Information Protection mode: Allow Overrides; Advanced settings: Network boundary: All Microsoft cloud services; Revoke encryption keys on unenroll: On; Show the enterprise data protection icon: On.
Enroll device. Now let’s start with the end- user experience for enrolling the Windows 1. Keep in mind that the end- user must be Microsoft Intune licensed and must be using at least Windows 1. The en- user can now navigate to Settings > Accounts > Access work or school and click Connect (see below on the left). This will start the enrollment experience that is similar to a normal MDM enrollment.
The difference is in the background process. Scrabble En Ligne Sans Installation Services. Once MAM enrollment is enabled, Windows 1. MAM. After enrollment this can be verified by selecting the work or school account and by clicking Info.
This will show the information about the Management Server Address that points to the MAM check- in URL (see below on the right). Note: After enrolling the device, an administrative user can find an additional device for the end- user in Azure AD. That device has the Trust Type attribute set to Workplace and the Managed By attribute set to None. Access cloud work data.
After enrolling the device it’s possible to connect to the configured Microsoft cloud services, like Share. Point Online. With and without conditional access configured. Browsing to Share.
Point Online will show the enterprise data protection icon, the briefcase, next to the URL (see below on the top). When clicking on the enterprise data protection icon, a message will show indicating that the website is managed (see below on the bottom). Access local work data. When connecting to the configured Microsoft cloud services, like Share. Point Online, it’s also possible to download data, like documents. The downloaded documents will be marked as work data. The fact that it’s work data, ensures that the documents are encrypted.
The work data can be recognized by the enterprise data protection icon, the briefcase, and by the File ownership. The File ownership will be set to the company (see below on the left). Work data can only be opened with managed apps. A clear example will show when using Open with > Choose another app. That will show the programs that can be used to open the document, including information about if the program can open work or personal files (see below on the right). Copy work data. Now that it’s possible to open work data, it’s good to have a look at the behavior with copying content. In this case, opening work data, like a document, in Word Online (as shown below on the left) and Word Mobile (as shown below on the right).
When copying content to an unmanged app, like Word. Pad, the end- user will be prompted for giving temporary access to use work content (as shown below). After clicking Give access, the content will be copied and the action will be logged.
Note: Keep in mind that every activity related to accessing work data, is logged, in the Event Viewer, In the EDP- Audit- Regular log. Switch owner. After enrolling the device it’s possible to switch the owner of local data.
It’s even possible to switch the owner of the data, when selecting to download it. That enables the end- user to switch personal data to company data and company data to personal data (as shown below). When marked as work data, the data will be encrypted. When marked as personal data, the data will be unencrypted and free accessible.
Note: Keep in mind that every activity related to switching the owner of work data, is logged, in the Event Viewer, in the EDP- Audit- Regular log. Unenroll device. Another important end- user action is unenrolling the device.
With the current configuration this will revoke the encryption keys, which will revoke the end- user access to downloaded work data (as shown below on the left). It’s also really important to know that setting Revoke encryption keys on unenroll to Off will not revoke the end- user access to downloaded work data (as shown below on the right). The indication that it’s work data is still available, but the end- user has full access. Note: Keep in mind that setting Revoke encryption keys on unenroll to No, should only be used in specific scenarios. Using it in a normal production configuration will create major data leakage.
