Brad then also shows the highly requested [08:50] Skype for Business mobile application management (MAM) integration with Microsoft Intune that his team has been working on.

Ever wondered what execs at Microsoft look at on a day-to-day basis with your service? [13:00] Brad’s PowerBI Configuration Manager dashboard. 11k customers, managing almost 16m devices with Configuration Manager current branch!

Finally Brad blows Simon’s mind [17:02] with Cloud App Security and the depth and breadth of information that is instantly available. If you need SOX, PCI or any other kind of compliance information in your organization this is a must watch section!

The post Endpoint Zone Episode 13: Microsoft Earnings, Skype for Business with MAM, Cloud App Protection appeared first on Windows, Enterprise Mobility, Productivity and IoT.

Enterprise State Roaming for Windows 10 and Azure AD

This week we announced the preview of enterprise state roaming for Windows 10 and Azure AD. Now your business Windows 10 devices can roam their state data to the cloud, with separation of business and personal settings. All you need is the preview in AAD and Windows 10 1511,10589.

The Ops Team

One of my regular shows the Ops Team is worth a watch this week as we explore the amazing world of IT operations.

Work like a network

I think this is a really great way for anyone in IT to get a slightly different view on how the world of collaboration has changed. Many of us in IT don’t have the time to see how the world is changing and we regularly get locked in. I thin this video on the office blog is really worth watching.

MAM without enrollment FAQ – from the community

Peter Van Der Woude wrote up a great FAQ about the questions he’s been asked about MAM without device enrollment. It thinks it’s really worth reading, along with the documentation and watching the Endpoint Zone to get a good view on a cutting edge new technology. I think this may well change how we manage our users in a BYOD context.

Amazing display

This video that was first posted by @edwardsanchez on Twitter is a really amazing view of what the future holds:

First time I see transparent LED being used. Feels science fictiony. pic.twitter.com/IIelYstoj6

— Edward Sanchez (@edwardsanchez) January 27, 2016

The post Friday 5: Windows and Enterprise Mobility #16 appeared first on Windows, Enterprise Mobility, Productivity and IoT.

• [01:00] Brad's thoughts on Microsoft's results
• [03:23] Over 70% of the Fortune 500 are now using 2+ Microsoft cloud services
• [07:26] Over 1/3rd of the Fortune 500 have purchased EMS
• [08:24] Fantastic how well Surface business is doing
• [11:47] New CEO at Mobile Iron and new CEO at Citrix, Kirill Tataninov
• [13:17] New Technology! Configuration Manager 1601
• [15:40] New capability to manage MSI based apps using MDM
• [16:47] New Windows 10 capabilities for Configuration Manager and Intune
• [17:20] Simon explains how a Pass-the-hash style attack takes place
• [20:00] Microsoft Passport for Work configuration in Microsoft Intune
• [22:24] Brad explains how Provable PC Health will work with Intune
• [26:30] IMEI preconfig for corporate owned devices
• [27:00] Brad demos the admin experience for MAM without device enrollment
• [34:46] iOS enhancements including increased DEP and VPP for the AppStore
• [35:26] Ignite registrations are out!

The post Endpoint Zone Episode 12: Market update, Windows 10, MAM without device enrollment appeared first on Windows, Enterprise Mobility, Productivity and IoT.

Support for Microsoft Passport for Work in Microsoft Intune

Peter Daalmans, one of my Dutch MVP friends for Intune, blogged about these new capabilities this week. What I love here is that you get complete control over Microsoft Passport for Work, a Windows 10 feature that helps enterprises prevent credential theft. Passport for Work places your authentication tokens into a (optionally) hardware secured container on your device and provide SSO to any Azure AD secured resources your user is allowed access to. This prevents them having to enter their password and reduces the chances of a phishing attack…among others.

Cloud Innovation for the year ahead

Mark Russinovich posted a superb blog post on where cloud is heading. My favorite prediction is that “Security becomes a cloud enabler”.

Box and Dropbox Integration

Office released real-time co-authoring for documents stored in Box and Dropbox, expanding the capability from SharePoint and OneDrive. Super cool for many people…well the Box CEO thinks so!

Configuration Manager Windows 10 Provisioning packages

Windows 10 brings the ability to configure a machine with provisioning packages. These packages can setup things like MDM enrollment. With Configuration Manager now supporting on-prem MDM for Windows 10, you now have the ability to bootstrap that enrollment with a provisioning package, removing complexity. Config Man will even create the packages for you and Gerry Hampson has a nice walk through for you!

What’s your address?

Gonna just leave this right here, courtesy of @rspruijt

The post Friday Five: Windows and Enterprise Mobility #15 appeared first on Windows, Enterprise Mobility, Productivity and IoT.

At the end of another interesting week in my world I finally managed to start a little side project I hope you’ll find interesting that I’ve been planning all year, but more on that another time! Let’s take a look at the best of this week in Windows and Enterprise Mobility.

New stuff in Microsoft Intune

This is something that I think your users will just plain love. The product team changed the user experience for apps that are managed by your organization so that we don’t annoy the user by continuously reittereating that the app is managed. Read about that one on the Intune blog.

Get up and running with MAM without device enrollment

MVP Peter Van der Woude explains how to get up and running with our MAM without enrollment feature that allows you to manage Microsoft Office apps on iOS without the need to enroll the device. This does two huge things – First, it reduces the time to deploy Office for iOS with all the protections enterprises need (encryption, copy protections etc.). Second, it means your users don’t have to worry about what you can see on their device, since you aren’t managing the device, just the apps. If you’re worried about over-extending your control, this is for you.

Fix your OneDrive for Business sync issues

I love ODB but sometimes it just gets all hinky. I really found this post on fixing OneDrive sync issues very helpful this week!

Learn to deploy Windows 10 with Configuration Manager

There are many ways to deploy Windows 10 but probably one of the most common ways for enbterprises will be with Conbfiguration Manager. Why? Well it’s the only way to do a zero touch deployment of Windows 10 to thousands of machines where you need to replace the image that’s already there. Sure you could use an in-place upgrade and hopefully many will, but there are some very solid use-cases for image replacement. For example, you might have 32-bit OSes deployed today and you want to move to 64-bit, or you have BIOS emulation running on UEFI and want to take advantage of wicked security features such as Secure and Measured boot (HINT: YOU REALLY NEED THIS IN TODAYS WORLD, quit using BIOS!) Checkout Blain Barton’s blog for more!

Yammer takes to the sky (again)

A friend of mine worked really hard on this so I want to give her props. Almost everytime I get on a plane over to Europe I hear the cabin crew talking about using Yammer – both British Airways and now KLM are super into their internal social network. Having your flight attendants able to talk to each other is very important when a workforce would otherwise be disconnected. You can read a little about what this means to KLM on the Office blog.

The post Friday Five: Windows and Enterprise Mobility #14 appeared first on Windows, Enterprise Mobility, Productivity and IoT.

Brad also talks about the iconic Office experience on any device and the need to keep is safe. [08:43]

Dual persona Office apps with Mobile App Management (MAM) [11:15]

Demo of MAM without device enrollment [12:47]

Shipping Configuration Manager [21:48]

You can follow Brad on twitter @inthecloudmsft and also Simon @simonster.

The post Endpoint Zone Episode 11: Year in review and Mobile App Management (MAM) without device enrollment appeared first on Windows, Enterprise Mobility, Productivity and IoT.

Video I made

A few weeks ago I hit the studio with Alex Simons from our Azure AD team to record this great session on Azure AD B2C and the capabilities that it provides to you. Azure AD B2C lets you provide easy access to your applications using a consumer identity such as Facebook or Google. Check out the video on the Microsoft Mechanics channel.

Blog Post I like

Enterprise Mobility MVP, Gerry Hampson, released a great overview of what’s new in Configuration Manager current branch (aka 1511), take a look at this short, sharp post here on Gerry Hampson’s blog.

PowerShell for Intune

Another smashing community post from Nickolaj who’s written up a great, step-by-step blog on how to remove users from an Intune (aka Azure AD) tenant. Something that you might want to do, as he explains, if you moved from trail (with trial users) into production. Nickolaj has done the hard work for you with a script that you can reuse.

Something I want in my next car

The connected car is something that’s coming, and it’s not far away. At CES this week Microsoft and a number of auto-makers announced some interesting partnerships. What some people missed initially is that this goes way beyond the (now frankly a bit old) infotainment experience in the car. This is really about being able to have your auto-maker proactively contact you about potential wear and tear, issues, upgrade and much more that you in-car network is sensing.

Also at CES

I can’t help but talk about droolworthy PCs such as the new Lenovo Thinkpad X1 Yoga, new Dells, new Samsungs

The post Friday Five: Windows and Enterprise Mobility #13 appeared first on Windows, Enterprise Mobility, Productivity and IoT.

Apple broke MDM in iOS 9.2

All the EMM vendors, including Microsoft, have had some struggles today with iOS 9.2 releasing and lots of features of MDM having broken as a result. You can read about it on the Intune blog. Rest assured we are working closely with Apple to fix the problems, but for now, our advice is to ask your users not to upgrade their devices.

Windows 10 and App Compat

If you want some fun checkout Chris Jackson @appcompatguy in this great session (3^rd in the series) with Kevin Remde talking about app compat and in this case browser compat in Windows 10. There are some really great changes under the hood here that should make your migration to Windows 10, much easier than perhaps you think!

Chakra

Sticking with Edge this past week the Chakra JavaScript engine that we built for Internet Explorer and Edge was open sourced! Or at least we announced that it would be soon under MIT license on GitHub. There are tons of great, detailed info in the official post. One thing that stood out for me was just how much faster than other browsers Edge is in the Octane 2.0 and Jet Stream benchmarks (owned by Google and Apple respectively).

Labs

Every year I create some great labs that you can use to experience all that new and fun in Windows and Enterprise Mobiilty, and this year is no exception. You can find some awesome labs that don’t require you to make anything locally and will just run inside your web browser right here on TechNet vLabs.

Remote App

November was another big month in the world of Azure RemoteApp with a bunch of new features being released. My favorite of which is Intune MAM management of the RemoteApp app for iOS and Android which means that it can participate in the same policy as other MAM managed apps like Word, Outlook and Adobe PDF reader. Which in turn means that you can control cut, copy and paste between those apps and that the RemoteApp app will be encrypted and PIN protected.

58 most commonly misused words

I do love some misuse of my language! So I thought I would appraise you in the hope of entertaining and bemusing you with this clichéd sentence of words you could hone in on. Wow that was a lot of bad English and I bet you didn’t even realize… Read this fab article in the Independent just here.

The post Friday Five: Windows and Enterprise Mobility #12 appeared first on Windows, Enterprise Mobility and Productivity.

Nerding out with Surface Book

This week Milad Aslaner and I took the Channel 9 studio to nerd out about the Surface Book for Inside Windows. It’s super-cool to get inside the hardware with someone responsible for making this the ultimate laptop. I learnt all about NVMe, the Pen and the custom UEFI in the device. Watch Inside Windows to find out more.

Azure AD Domain Services, now available in Europe

I got to spend time with Mahesh, the engineer behind Domain Services a couple of weeks ago and now the Domain Services has been enabled in the European Azure Regions!

Using a hypervisor to secure your desktop – Credential Guard in Windows 10

Credential Guard in Windows 10 enterprise is one of those things that pushes Windows 10 to one of the most protected operating systems ever made. Ben, who you probably know is awesome, is one of the key people behind Hyper-V and he’s detailed in this video just how it works. Really cool.

The complete guide for troubleshooting Azure AD Application Proxy

Most of our jobs is about fixing things that went wrong. You might encounter some things that went wrong with Azure AD Application Proxy at some point and this really helpful paper will guide you through the troubleshooting process. Save it in your document library for the next time you need to search for a fix.

Ops Team Episode 2 “Ricks Finger”

Loving making this show with the rest of my team, hope you enjoy it too:

The post Friday Five: Windows and Enterprise Mobility #10 appeared first on Windows, Enterprise Mobility and Productivity.

Videos

There are a lot of quick, 20-30-minute videos highlighting how-tos and demos of Windows 10 Enterprise. We’ve even created two pages on our beloved Ch9 to help. Here are my thoughts on how and when to go to these pages.

All Windows all the time: this page is where we are highlighting every video regardless of the job you do about Windows 10.  It includes content from sessions at flagship events like Ignite and //BUILD, videos from other series, and even highlights for developers as they are building on the Windows 10 platform. It’s easy to quickly review, so if you want to be in the first in the know on all things Windows 10, bookmark this page and check back often.

I’m also am beginning work on topic specific playlists. September and October’s focus, for me, was Windows 10 Enterprise Security. Check it out and stay tuned for upcoming topics include data loss prevention, application compatibility, and management.

Virtual Labs

If you have 90 minutes and are looking for a hands-on experience, I recommend a tour through our virtual labs. There is no complex setup or requirements, so they are great to also share with co-workers that you think need to get up to speed, and hey you always look great when you’re sharing this stuff!

The IT Pro Try-It-Out-Lab is for schools and education institutions, but still provides a great hands-on experience on how to upgrade devices from Window 7 to Windows 10, and then how to manage devices, apps and users.

My other favorites tell you what you need to know in the title. But if you want more details, click the link it will take you to a details page – it won’t actually launch a lab, but that’s only another click.

On-Prem and Cloud App and data protection with Azure RMS

Azure Active Directory Fundamentals

Device Management with Microsoft Intune

Free (and some $$$) e-books

Videos are great for in-the-background learning but, for some, nothing replaces an in-depth e-book. And Microsoft Press has put together some invaluable resources. They highlight real word scenarios all while giving you no-nonsense guidance on the how and why. They help you be more articulate in the solutions you want to champion in your organization, and are also great to reference in your conversations with your boss. Here are my current favorites:

Introducing Windows 10 for IT Professionals, Preview Edition (free) Ed Bott (the author) is putting the finishing touches on the final release of this book (the version above is the preview edition.) To be the first to know make sure you follow the Born to Learn blog– or check back here. I consider Ed to be a friend and this book totally nails it!

Windows 10 Inside Out (Available in Nov – $39.99 ebook) ebook retail $39.99. This one is great (again it’s from that Ed guy) and it goes wayyyy deeper.

Enterprise Mobility Suite Managing BYOD and Company-Owned Devices ($19.99 ebook). This book is not specifically Windows 10, but it goes inside much of the modern management infrastructure components you need. There is a pattern here, although I promise there’s nothing in it…Yuri and Jeff (the authors) are friends of mine too, you’ll see me interviewing them on that page at Microsoft Ignite.

Free Online Training

I’m shocked at how many people I’ve meet that still have never heard of our free online training site, Microsoft Virtual Academy (or MVA for short, as you know we love acronyms here at MSFT ). They have hours and hours of online deep technical training to help prepare you for Windows 10 Enterprise and to also get you ready to take on Enterprise mobility. I won’t share a lot of details as the modules are each explained in detail and you can create the learning path that’s right for you and your skill set. People actually come up to me on a regular basis and thank me for this training, which I love. Strangest place so far is in the bathroom at a Taylor Swift concert!

Get Started with Windows 10 for IT Professionals

Enterprise Mobility Core Skills – Prepare you mobile environment for Windows 10

Tools

Are you ready to begin building your prep-prod lab or to start deployment? There’s a lifecycle that my Microsoft counterparts have put together on Windows TechCenter on TechNet. It contains some similar content that I reference above but also has a lot more tools to help you prepare your Enterprise for deployment, including detailed Windows 10 deployment scenarios, Microsoft Deployment Toolkit, Windows 10 ADK, Plan for volume activation, and more.

Feedback

Please add your comments below.  I’d definitely like to know if this information was helpful, and what else I can do to help you find the resources you need!

The post 15+ killer Windows 10 resources for IT admins appeared first on Windows, Enterprise Mobility and Productivity.