The industry perspective

“Critical Capabilities for Mobile Device

Management Software”, Gartner

The Windows 8.1 perspective

Open MDM capabilities built into Windows 8.1 and Windows RT 8.1 •

•

•

• Features are focused on BYOD scenarios

Can be implemented by any MDM provider • OMA-DM

• http://msdn.microsoft.com/en-us/library/dn409494.aspxhttp://msdn.microsoft.com/en-us/library/dn392112.aspx

•

Also supported with Windows Phone •

Capabilities

Policy enforcement and security management •

•

•

Application management •

Workplace configuration •

•

•

•

Capabilities

Remote business data removal •

Inventory

Easy enrollment process •

•

•

Enhancements •

•

• http://support.microsoft.com/kb/2909569

Connections

HomeGroup

Proxy

Radio devices

Workplace

Network

Join your workplace network so that you can use network resources like internal

websites and business apps.

Apps and services from IT

someone@example.com

Workplace

Enter your user ID to get workplace access or turn on device management

Join

Turn on

Workplace

amyers@contoso.com

Connections

HomeGroup

Proxy

Radio devices

Workplace

Network

Enter your user ID to get workplace access or turn on device management.

This device has joined your workplace network

Your organization’s device management system lets your IT admin set up apps and network

connections for you.

Leave

Turn on

Cancel Turn on

Get apps and services from IT

I agree to the Terms of Use

Some workplaces have policies, certificates, and apps that help

you connect your device to business info.

If you connect your PC, your workplace may apply settings, collect

basic info, and install or remove apps that they manage. Talk with

your IT admin to learn more about your specific workplace.

Supported Policies and Settings

Setting Setting

Enable Windows Error Reporting (Diagnostics Submission) Enable SmartScren (Force Fraud Warning)

Permit Data Roaming (Mobile) Enable Auto-Fill

Allow Work Folders (ECS Synchronization Enabled) Allow Internet Scripting (JavaScript)

Configure Work Folders (ECS Synchronization Setup) Allow Internet Plugins

Enable User Account Control Enable Popup Blocking

Enable Smart Screen Enable Do Not Track

Minimum Password Length Intranet Security Zone Enabled

Auto-lock Timeout Internet Zone Configuration

Maximum Password History Define Wi-Fi Profiles

Password Expiration Define VPN Profiles

Failed Password Attempts before Wipe Enroll Certificates

Minimum Required Complex Characters Define Application Launch VPN Triggers

Disallow Convenience Login Reset local account password

Supported Inventory

Inventory class Corresponding WMI class

CPU Information Win32_Processor

Memory Information Win32_PhysicalMemory

Operating System Win32_OperatingSystem

Computer System Win32_ComputerSystem

Networking Adapters Win32_NetworkAdapter

Physical Disks Win32_DiskDrive

Logical Disks Win32_LogicalDisk

Encrypted Volumes Win32_EncryptableVolumes

Display Devices Win32_DesktopMonitor

Infrared Devices Win32_InfraredDevice

Battery Win32_Battery

System Bios Win32_BIOS

Shared Resources (disk, printer, screen) Win32_Share

Services Win32_Service

Date and Time Information

Modern apps deployed via MDM

Inventory class Corresponding WMI class

Web links deployed via MDM

RemoteApps deployed via MDM

Firewall enabled

Windows Update (Auto Update) enabled

Anti-virus enabled

Anti-virus signature

Encryption enabled

Bluetooth enabled

Wi-Fi enabled

PC Settings synchronization enabled

Credentials synchronization enabled

Metered network synchronization enabled

Intranet zone security level

Internet zone security level

Restricted sites zone security level

Trusted sites zone security level

http://support.microsoft.com/kb/2909569

Limitations

What about Windows Store apps?

• The enterprise app store scenario: Deploy new apps to existing computers

• Using Mobile Device Management

• The imaging scenario: Include apps in your standard image

• Using MDT or DISM, not MDM

Provisioning Installation

Making an enterprise app store work

Gartner’s 2013 MDM Magic Quadrant

Third-party support

Several options

OS OMA-DM Windows Intune agent

(cloud-only)

Windows Intune (OMA-

DM) + ConfigMgr (hybrid)

ConfigMgr agent (on-

prem)

Windows 8.1 Yes Yes Yes Yes

Windows RT 8.1 Yes No Yes No

ios (version 6 or below):

Please input the below URL:

http://aka.ms/WCP206

Other platform:

QR Code: