Enable “Bring Your Own Device” with SCCM 2012

1. WCL315 Enable “Bring Your Own Device” with SCCM 2012 David Caddick david.caddick@quest.com Solutions Architect, Quest Software

2. Agenda • Extend SCCM to cover Apple iOS devices • Why it makes sense • How does it work • Mobile Enterprise • Demo –https://qmx.questworkspace.com/mdm • Or - http://bit.ly/Oo62Yx • user: Quest\demoanzpwd:P@ssword

3. Why MDM is rapidly becoming a “must have” A report from JPMorgan shows that the iPad is *the* most disruptive technology to date. Gartner predicts that by 2015, mobile application development projects for smartphones and tablets will outnumber native PC projects by a ratio of 4:1

4. A World of Connected Devices One User =One Desktop In 2011 power users owned between 5 and 7 internet connected devices 916M smart connected devices were shipped in 2011 This is forecastedto double to 1.84Bin 2016 Source: IDC, "Nearly 1 Billion Smart Connected Devices Shipped in 2011 with Shipments Expected to Double by 2016, According to IDC," Doc #prUS23398412, March 28, 2012. Source: IDC, 2010-2011Media Tablet Multi-Client Study, February 2011. Note: IDC only surveyed iPad owners for this study. Organizations say 34%of their employees are accessing business appson personal devices 69% of employees saythey are accessing business apps on personal devices Source for both: IDC, “2011 Consumerization of IT Study : Closing the ‘Consumerization Gap’”, July 2011

5. Simply extend SCCM to enable BYOD • SCCM is rapidly becoming the defacto standard for Desktop Management, why not simply extend the system to incorporate any other devices? • Get control of *ALL* of your Mac’s, iOS and mobile devices • Mac OSX management (Agent or Agent-less) • Apple iOS management (Agentless) • Over 120+ other cross-platforms available • QMX – also enables Operations Manager integration (QMX can extend both SCCM and SCOM)

6. QMX for SCCM 2012Why it makes sense • The ability to integrate OSX & iOS devices into SCCM simplifies the management of these devices in a predominately Microsoft-based IT organizations. • QMX is the onlysolution providing reporting, software distribution, and device administration natively through System Center Configuration Manager (SCCM) for both OSX and iOS. • 100% accountability for an entire organization is now possible through Microsoft System Center.

7. QMX for SCCM 2012Easy to use • QMX is the only solution providing reporting, software distribution, and device administration natively through System Center Configuration Manager (SCCM) for both OSX and iOS. • Leverages the existing SCCM infrastructure • A familiar “pane of glass” • Reporting, Inventory, Software distribution, and device admin • OSX and iOS … and a whole lot more

8. SCCM & QMX – How it works

9. How SCCM and QMX works Inventory • Apply restrictions Reporting • Apply policies iPhone iPad Android • Apply applications Simple Enrolment Groups Software Distribution Groups Provision Exchange Policy Provision Policies Secure Mail Gateway Provision Applications

10. QMX for SCCM 2012 Deploy Secure Settings http://www.dsd.gov.au/publications/iOS5_Hardening_Guide.pdf

11. demo Live demo from RedmondQMX Server in Microsoft Labs

12. QMX - Configuration Manager Managing the Mobile Workforce with the iOS Extension iOS Mobile Device Management: push profiles, applications, run hardware & software inventories; lock, wipe and manage your growing number of Apple iOS mobile devices System Center Integration • Configuration Manager direct integration to standard collections, resource explorer and reporting • Consistent QMX configuration tool UI for Global Infrastructure usability • Menu driven Utility invocation • Menu driven Security Control • Profile Library container and Web service listing for self-service distribution Seamless integration with the Microsoft System Center Configuration Manager console

14. QMX for SCCM 2012Very broad coverage Email Directory File/Print Database Application Web Storage Network OS “ERP” Linux Apache Cisco GroupWise Solaris Oracle EMC NDS Apple Java Unix Netscape 3COM Notes DB2 NetApp NIS SQL Server Active Directory .NET Sharepoint IIS Exchange Windows Juniper McData System Admin Network Admin

15. QMX Mac Edition • How does it work for Mac OSX? • Agentless or Agent based • As a service connecting to SCCM All information is encrypted / each transaction is logged • The device is instructed to contact the QMX/SCCM Server to process requests/instructions • Enables simple right-click menu to VNC, SSH, Telnet, etc to OSX device as well as all standard SCCM functions.

16. Mac OSX Management Flexibility to Manage Mac OSX – with Agents or Agent-lessly Seamless integration with the Microsoft System Center Configuration Manager console QMX – Configuration Manager Features: 120 cross-platforms • System Discovery – Multiple auto-discovery methods • Hardware Inventory – Displays system information in the Resource Explorer • Software Inventory – Captures & Integrates Mac and other non-Windows systems • Software Distribution – Remote software distribution keeps desktops up to date • Reporting – Standard Configuration Manager reporting from the SCCM database • Collections – Installed with Windows collections for heterogeneous management

17. QMX Mac Edition If not BYOC – add QAS? • Tying Apple's Managed Client Solution to Active Directory Group PolicyAuthentication Services delivers Mac preferences and settings from Active Directory Group Policy directly to Apple Computer’s managed client solution. This native integration allows existing Apple applications, such as the System Profiler, to see and display preference settings from Active Directory Group Policy. • Active Directory Settings Extended to the MacAuthentication Services also extends many powerful Windows identity and access management polices to the Mac environment for: • Passwords • Account lockout • Kerberos • User rights assignment • Security options

18. SCCM & QMX – Mobile Enterprise

19. QMX Mobile Enterprise • How to enable BYOD securely • Instead of disabling a host of features on Smartphones in the name of security – shouldn’t we simply protect the Data instead? • Ensure Data Protection is enabled for corporate email on a BYOD • Let users access iCloud for backup – safe in the knowledge that there is no company data being backed up to a private account • Isn’t this what BYOD is all about?

20. QMX Mobile Enterprise • Features • Agentless with a simple enrolment process – increase battery life • Detect Jailbroken devices – but we will assume it is broken anyway • All mail and attachments are held in memory only – *NOT* stored on device or SSD – now there is no need to enforce encryption • Wide range of policies as to what can and can’t be done with mail and attachments – disable forwarding, cut & paste, etc. • GeoFencing – change the policies based on location

21. SCCM & QMX - Review

22. SCCM & QMX: Review • QMX – Compatible with SCCM & SCOM 2012 • Support for self service software distribution for OSX – SCCM 2012 (CY 2012) • QMX for Mobile Enterprise • Enable detection of Jailbroken devices • Protect email and attachments with an Agentless system • The Entire System Center Suite • Over 400 Extensions in total – growing constantly • Any SNMP device can be added if the MIB is available – less than 4 weeks turnaround

23. Next Steps: • Contact Quest for Trial • Trial use for 30 days • HowTo for install and setup guide - http://bit.ly/PakJvn • Use SCCM 2012 • Manage Exchange and Supports Windows 8 and VDI • Migrating to Windows 7 & 8 • Use Quest ChangeBASE to accelerate App Migrations • Quest’s vWorkspace • can accelerate Server 2012 RDSH and Windows 8 now

24. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.