Your browser (Internet Explorer 6) is out of date. It has known security flaws and may not display all features of this and other websites. Learn how to update your browser.

Tech Talks: Azure Rights Management

Today I’m happy to present a video in a new series I’m doing where we’ll be taking topics and presenting them in a video format. The goal is to provide an overview or breakdown of the topic in a 5 minute or less video.

Today’s video is Azure Rights Management, I’m going to quickly show you what the experience looks like on the PC and on the iPad and how easy the solution is to use.




Microsoft Intune: Intune and EMS subscriptions now available in the Office 365 portal!

Nice update to the o365 portal to make management easier.

Read the full post here.

We have received feedback from you asking for fewer portals to manage your Microsoft subscriptions. Based upon this feedback, we are merging the Microsoft Intune account portal with the Office 365 management portal to simplify your user experience.

As an initial change, the Office 365 management portal now supports subscription management and license assignment for Intune and Enterprise Mobility Suite (EMS). Until late September, you can continue to use the Intune account portal while you update your workflows and bookmarks. Following this transition period, the Office 365 management portal will be where you will manage subscriptions and license assignments. We anticipate retiring the Intune portal on or after September 28, 2015 and an in-service banner will be added to remind you of this change.

For EMS customers who previously visited the Azure portal for user creation and license assignment, you can continue to use the Azure portal to take advantage of advanced features such as group license assignment. Alternatively, you can begin assigning licenses while already managing other subscriptions in the Office 365 management portal. There are no changes to the Azure portal or the Intune admin console as part of this migration.



Intune: New Features

Latest batch of Intune features was announced, read the original post here.

New Microsoft Intune features and enhancements will be released over the next week. Building on the Intune management capabilities for Windows 10 that were announced in May, this service update adds support for creating and deploying Windows 10 configuration policies and VPN profiles using new Windows 10-specific templates. Additionally, as detailed on the Active Directory team blog, you can now automatically enroll Windows 10 devices into Intune device management using Azure AD join.

In addition to these new Windows 10 management capabilities, this Intune service update includes several other features and enhancements, such as:

Deployment of certificates in .pfx format: You can deploy certificates in Personal Information Exchange (.pfx) format to Windows 10 and Android devices without need for Network Device Enrollment Service (NDES).

  • Multi-identity support for OneDrive app on Android: When using the OneDrive app for Android devices, users can access both their personal and corporate accounts in the same app while Intune mobile application management policies are only applied to the user’s corporate account (Multi-identity support for OneDrive app on iOS previously released in June).
  • User-specific terms and conditions: You can deploy customized terms and conditions to Intune user groups which they must accept before using the Intune Company Portal to enroll devices and access corporate resources.
  • Conditional access for Windows PCs: You can restrict access to Office 365 so that only domain-joined PCs running Office 2013 can connect.
  • Support for custom VPN profiles for iOS: You have the ability to define VPN settings for additional VPN providers on iOS devices using the new custom option in the VPN profile dropdown menu.
  • Management of Activation Lock feature for iOS: You have the ability to manage the Activation Lock feature on iOS 7.1+ devices, providing you with the option to turn the feature on/off, view status, and bypass the Activation Lock.
  • Intune Company Portal app for Android updated: The Intune Company Portal app for Android has been updated to display device enrollment instructions after signing in for those who have not yet enrolled their device for management.

Intune: Managed Browser Write-Up

Very well done write-up on the Intune Managed Browser done by Peter van der Woude.

Read his excellent post here.

Before I’ll start with the second part of the my blog post about multi-identity in the managed Outlook app, I thought it would be wise to make a side-step to the Microsoft Intune Managed Browser first. The main reason for that is that the Microsoft Intune Managed Browser can also have a managed browser policy configured. That policy can have a direct impact on the end-user experience when opening links from the Outlook app.

The good thing, for this blog post, is that the Microsoft Intune Managed Browser doesn’t use multiple identities. It’s either managed, or not. This blog post will describe the behavior of the Microsoft Intune Managed Browser. During the second part, of my post about multi-identity in the managed Outlook app, this behavior will also be shown.


Table of Contents: Windows 10 + EMS & ConfigMgr

Great post over on the TechNet Blogs. 

Some posts are already published, others are coming, either way, it’s a great resource and I recommend you check it out!


Ignite Keynote Summary/Links


Microsoft Enterprise Mobility Suite Webinar Series

Here is a very big and extensive list of the upcoming webinar’s focused around the Enterprise Mobility Suite (EMS):

Microsoft Enterprise Mobility Suite Webinar Series

  • How Do I protect my data wherever it goes?
  • An analyst view of EMM trends
  • Extend your existing Active Directory to the cloud
  • Cloud Suites explained: EMS and ECS
  • Configure Azure Active Directory Premium features
  • Better Together: O365 and EMS
  • Secure O365 apps with Microsoft Intune
  • Compare point solutions for enterprise mobility to Microsoft EMS
  • Configure Azure RMS for secure sharing
  • Streamline new employee onboarding with EMS
  • Configure Azure AD Application Proxy
  • Enterprise mobility security with Azure RemoteApp, MFA, and RMS
  • Configure Azure RemoteApp to provide user access to applications

There is also a list of on-demand webcasts:

  • Control access to cloud resources with Enterprise Mobility Suite
  • Secure access to cloud resources with Enterprise Mobility Suite
  • How to deliver apps with Azure RemoteApp
  • How to secure BYOD scenarios with conditional access
  • How do I make e-mail and office secure on mobile devices?
  • Do I really need an integrated approach for mobility instead of compiling point solutions?
  • Protecting corporate data with Enterprise Mobility Suite
  • How do I know when I’m under attack – and then what do I do?
  • How to manage apps in BYOD scenarios

Microsoft Intune: March 2015 Updates

    As part of our monthly release cadence, we will be making available the next service update for Microsoft Intune between March 4, 2015 and March 7, 2015. New Intune standalone (cloud only) features that will be released as part of this service update include:

    • Ability to streamline the enrollment of iOS devices purchased directly from Apple or an authorized reseller with the Device Enrollment Program (DEP)
    • Ability to restrict access to SharePoint Online and OneDrive for Business based upon device enrollment and compliance policies
    • Management of OneDrive apps for iOS and Android devices
    • Ability to deploy .appx files to Windows Phone 8.1 devices
    • Ability to restrict the number of devices a user can enroll in Intune

    Additionally, as part of this service update, we will be providing hybrid customers with the ability to create custom WiFi profiles with pre-shared keys (PSK) for Android devices. Delivering new features to our hybrid customers using System Center Configuration Manager integrated with Intune remains a top priority for our team, and you can expect additional hybrid features to be made available soon. Make sure to bookmark this blog and the ConfigMgr blog to keep up-to-date as we continue to release new features on a monthly basis.


Intune: February Updates


  • Management of the Office Mobile app (access, view, and edit Word, Excel, and PowerPoint documents) for Android phones
  • Management of the OneNote app for iOS devices. Management of Office mobile apps (Word, Excel, and PowerPoint) on iOS devices made available in December 2014
  • Ability to browse and install apps on Windows Phone 8.1 devices using Intune Company Portal website
  • Deployment of WiFi profiles for Windows devices using XML import and Windows Phone devices using OMA-URI (deployment of WiFi profiles currently supported for iOS and Android devices)
  • Support for Cisco AnyConnect per-app VPN configurations for iOS devices
  • Ability to require encryption on Windows 8.1 (x86) devices
  • Ability to set minimum classification of platform updates to be installed automatically on Windows 8.1 (x86) devices