Scribd Logo
Upload

Welcome to Scribd!

  • 270 views

    Microsoft Endpoint Manager Overview

    Uploaded by

    ion
    Microsoft Endpoint Manager is a unified endpoint management platform that includes Microsoft Intune, Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. It helps secure access to data across mobile devices, desktops, servers and more whether on-premises, in the cloud, or using a mixed approach. Endpoint Manager provides tools to deploy apps, monitor devices, and respond to security risks. Intune focuses on cloud management while Configuration Manager is for on-premises systems, and co-management combines both approaches.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Microsoft Endpoint Manager Overview

    Uploaded by

    ion
    270 views4 pages
    Microsoft Endpoint Manager is a unified endpoint management platform that includes Microsoft Intune, Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. It helps secure access to data across mobile devices, desktops, servers and more whether on-premises, in the cloud, or using a mixed approach. Endpoint Manager provides tools to deploy apps, monitor devices, and respond to security risks. Intune focuses on cloud management while Configuration Manager is for on-premises systems, and co-management combines both approaches.

    Original Title

    Microsoft Endpoint Manager overview

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Microsoft Endpoint Manager is a unified endpoint management platform that includes Microsoft Intune, Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. It helps secure access to data across mobile devices, desktops, servers and more whether on-premises, in the cloud, or using a mixed approach. Endpoint Manager provides tools to deploy apps, monitor devices, and respond to security risks. Intune focuses on cloud management while Configuration Manager is for on-premises systems, and co-management combines both approaches.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    270 views4 pages

    Microsoft Endpoint Manager Overview

    Uploaded by

    ion
    Microsoft Endpoint Manager is a unified endpoint management platform that includes Microsoft Intune, Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. It helps secure access to data across mobile devices, desktops, servers and more whether on-premises, in the cloud, or using a mixed approach. Endpoint Manager provides tools to deploy apps, monitor devices, and respond to security risks. Intune focuses on cloud management while Configuration Manager is for on-premises systems, and co-management combines both approaches.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 4

    Contents

    Microsoft Endpoint Manager


    Overview
    Microsoft Endpoint Manager overview
    Microsoft Endpoint Manager overview
    9/4/2020 • 5 minutes to read • Edit Online

    Microsoft Endpoint Manager helps deliver the modern workplace and modern management to keep your data
    secure, in the cloud and on-premises. Endpoint Manager includes the services and tools you use to manage and
    monitor mobile devices, desktop computers, virtual machines, embedded devices, and servers.
    Endpoint Manager combines services you may know and already be using, including Microsoft Intune,
    Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. These services are part of the
    Microsoft 365 stack to help secure access, protect data, and respond and manage risk.
    Start by watching the following two-minute video from Brad Anderson, Microsoft corporate vice president for
    Microsoft 365:

    What you get


    Endpoint Manager includes the following services:
    Microsoft Intune : Intune is a 100% cloud-based mobile device management (MDM) and mobile
    application management (MAM) provider for your apps and devices. It lets you control features and settings
    on Android, Android Enterprise, iOS/iPadOS, macOS, and Windows 10 devices. It integrates with other
    services, including Azure Active Directory (AD), mobile threat defenders, ADMX templates, Win32 and
    custom LOB apps, and more.
    If you have on-premises infrastructure, such as Exchange or an Active Directory, the Intune connectors are
    also available:
    The Intune Connector for Active Director y adds entries to your on-premises Active Directory
    domain for computers that enroll using Windows Autopilot. For more information, see Deploy hybrid
    Azure AD-joined devices.
    The Intune cer tificate connector processes certificate requests from devices that use certificates for
    authentication and S/MIME email encryption. For more information, see Use certificates for
    authentication.
    As part of Endpoint Manager, use Intune to create and check for compliance, and deploy apps, features, and
    settings to your devices using the cloud.
    For more information, see What is Microsoft Intune.
    Configuration Manager : Configuration Manager is an on-premises management solution to manage
    desktops, servers, and laptops that are on your network or internet-based. You can cloud-enable it to
    integrate with Intune, Azure Active Directory (AD), Microsoft Defender ATP, and other cloud services. Use
    Configuration Manager to deploy apps, software updates, and operating systems. You can also monitor
    compliance, query and act on clients in real time, and much more.
    As part of Endpoint Manager, continue to use Configuration Manager as you always have. If you're ready to
    move some tasks to the cloud, consider co-management.
    For more information, see What is Configuration Manager?.
    Co-management : Co-management combines your existing on-premises Configuration Manager
    investment with the cloud using Intune and other Microsoft 365 cloud services. You choose whether
    Configuration Manager or Intune is the management authority for the seven different workload groups.
    As part of Endpoint Manager, co-management uses cloud features, including conditional access. You keep
    some tasks on-premises, while running other tasks in the cloud with Intune.
    For more information, see What is co-management?.
    Desktop Analytics : Desktop Analytics is a cloud-based service that integrates with Configuration Manager.
    It provides insight and intelligence for you to make more informed decisions about the update readiness of
    your Windows clients. The service combines data from your organization with data aggregated from
    millions of devices connected to the Microsoft cloud. It provides information on security updates, apps, and
    devices in your organization, and identifies compatibility issues with apps and drivers. Create a pilot for
    devices most likely to provide the best insights for assets across your organization.
    As part of Endpoint Manager, use the cloud-powered insights of Desktop Analytics to keep Windows 10
    devices current.
    For more information, see What is Desktop Analytics?.
    Windows Autopilot : Windows Autopilot sets up and pre-configures new devices, getting them ready for
    use. It's designed to simplify the lifecycle of Windows devices, for both IT and end users, from initial
    deployment through end of life.
    As part of Endpoint Manager, use Autopilot to preconfigure devices, and automatically enroll devices in
    Intune. You can also integrate Autopilot with Configuration Manager and co-management for more complex
    device configurations (in preview).
    For more information, see Windows Autopilot overview and Enroll Windows devices in Intune.
    Azure Active Director y (AD) : Azure AD is used by Endpoint Manager for identity of devices, users, groups,
    and multi-factor authentication (MFA). Azure AD Premium , which may be an additional cost, has additional
    features to help protect devices, apps, and data, including dynamic groups, auto-enrollment, and conditional
    access.
    For more information, see add users, set up auto-enrollment, and about conditional access.
    Endpoint Manager admin center : The admin center is a one-stop web site to create policies and manage
    your devices. It plugs-in other key device management services, including groups, security, conditional
    access, and reporting. This admin center also shows devices managed by Configuration Manager and Intune
    (in preview).

    Choose what's right for you


    There are a few ways to determine what's right for your organization. Your next steps depend on what your
    organization does. Consider what you're trying to achieve.
    For example:
    If you constantly provision new devices, then start with Windows Autopilot.
    If you add rules and control settings for your users, apps, and devices, then start with Intune.
    If you currently use Configuration Manager to deploy apps, and want to use conditional access based on
    security requirements, then start with co-management.
    If you currently use Configuration Manager and are responsible for keeping Windows 10 devices up-to-date,
    then start with Desktop Analytics.
    If you're getting started with MDM and MAM, or use ADMX templates to control Office, Microsoft Edge, and
    Windows settings, then start with Intune.
    You can also think of Endpoint Manager in three parts: cloud, on-premises, and cloud + on-premises:
    Cloud : All data is stored in Azure. And, no more data centers. This approach gives you the mobility benefits
    of the cloud, and the security benefits of Azure.
    On-premises : If you have an on-premises infrastructure that includes Configuration Manager, or aren't
    ready to use the cloud, then you can keep your existing systems.
    Cloud + on-premises : Many environments are mixed, and use a cloud-attach approach. Meaning they use
    a combination of cloud and on-premises. For new devices, use the benefits of Intune to access and protect
    data. If you use Configuration Manager, connect to the cloud for additional functionality and analytics. If you
    want to move some workloads to the cloud, then co-management is a good option.

    What you need to get started


    Microsoft Endpoint Manager is a solution platform that unifies several technologies. It's not a new license. The
    services are licensed according to their individual licenses terms. For more information, see the product licensing
    terms.
    If you currently use Configuration Manager, you also get Microsoft Intune to co-manage your Windows devices. For
    other platforms, such as iOS/iPadOS and Android, then you'll need a separate Intune license.
    In most scenarios, Microsoft 365 may be the best option, as it gives you Endpoint Manager and Office. For more
    information, see Microsoft 365.

    Next steps
    Use the power of cloud intelligence to simplify and accelerate IT and the move to a modern workplace
    Microsoft Endpoint Manager
    Tutorial: Walkthrough Intune in Microsoft Endpoint Manager
    What is Microsoft 365? learn module

    You might also like