Coming up on the show with the recent release of Windows 10 we thought we'd
highlight a few capabilities that benefit
both Office 365 users and IT Admins. From Azure AD domain join for single sign-in
into Microsoft cloud services such as Office 365
and the new business store in Windows 10 which now supports Azure ID and
org ID to mobile device management where Windows 10 tablets can enroll in
Office 365 MDM
Stay tuned.
Microsoft Office
Office Mechanics
Azure Active Directory has been the foundation for user identity in Office
365 and other Microsoft cloud services for some time now
Windows 10 now adds Azure AD support throughout enabling single sign in
and new management scenarios I was joined by Michael Niehaus
Microsoft Ignite and he demonstrated Azure AD domain join
during the Windows 10 first-run experience
Yes, so we want to start off with
a scenario that hopefully people will be able to see
where we take a machine and join into Azure Active Directory
so for that we have a machine that
has Windows 10 installed on it nothing's been done to set it up or to login for
the first time so we can walk through the initial experience
where we can then put in our Azure Active Directory credentials
to join the machine directly into Azure AD
I need to sign in with my work or school account the account that we want to use
so I can sign in with that account it'll take a few seconds to complete
the enrollment process Azure AD and also into
MDM and at that point it begins the first logon experience
so it will start pulsing the colors to say that
this is our first log on to Windows so we don't want to sit around and watch that
for a couple minutes but we can at least see here that
it is joining in so why don't we fast forward this a little bit
and look at a machine this same machine actually
later
where all this is already been configured the joy of snapshots we can
fast forward in time
there I can see that I'm logged on as John Smith which is my Azure AD account
if we want some proof that we can start up a command prompt and we can see that
that's who we are
so we can ask Windows 'Who Am I' and it says I am
Azure AD John Smith so it knows that I am at Azure Active Directory account
if we take that the next step then go into settings
we can go to accounts than work or
school and we can see that this machine is
already enrolled in the organization's MDM solution
so in this case it is being provided by Intune
and more importantly because it's the company device that's been signed into
using an Azure AD account there's no
remove option that's been disabled as well because we want this to remain a
managed device
so that's all it takes we just put in our ID and password once it
sets everything up it pushes down policies it even pushes down applications
in this case the Intune company portal is already on the device and ready to use
so that was Azure AD domain join but it doesn't end there
with Windows 10 you're able to better manage the business store experience for
your organization and authenticate into it with Azure AD for your organization
for Office 365 this also means the ability to manage
and provision Office mobile apps from the business store
we'll go to businessstore.microsoft.com
which will ask us to sign in so this is basically the web page that the
IT administrator uses they'll sign in using an admin account that's used to
acquire apps for their organization
in this case I'll use
admin@contosoincorporated.com
so I sign in as the administrative account and then I can acquire
applications for the organization so I see pretty much the standard store
experience so I could see all the applications that are available to
acquire for the organization
in this case maybe I want to get the
modern version of PowerPoint to put on my machine or in my image whatever
so I can specify that I want that to be available offline
and i want get the application it asks me for confirmation basically says
okay you're going to use your own management tool to distribute this so
the store is not going to be doing that for you so I'll go ahead and confirm
that
and at that point it will take me to my inventory of
acquired applications and licenses and show me that
now I have PowerPoint licensed for my organization for offline use
at that point I could go ahead and download the pieces
or if I'm using config better be next just go to config manager
it talks to the store shows me my complete list of apps and I just check of
the ones that I want
we could also do licenses tied to Azure AD
account so in this case I have a line a business application
that I've submitted to the dev portal
so I'm a developer in my organization, I created the app I uploaded just
like any other application but I said make it available
only to members of my organization okay so it shows appear
and then we could assign it to individual accounts
so using Azure AD we can see all the accounts that are there and directly assign
this application to user
the user that gets a notification that says you have an application available
click here to install it
we can also manage these licenses as the organization we could say
maybe Stephen Carr doesn't work here anymore so we can select that one
and say that we want to revoke that license
reclaim that license and use it for someone else we can also make these
apps available through a private store within the public store so we can just
specify that we want this to show up in the private store
which is as easy as clicking a link which says publish this application so
that my end users can see it and install it using self-service
and that's only for the one that can authenticate with their Azure ID
credentials or anyone who signed in with their organizations Azure AD account
would be able to see the application then click to install
will also provide additional policies for the Windows Store to let you turn off
some of the public
information maybe don't want games to be available in your organization so
turn that off
show the curated organization list and let the employees select apps from there
as we just saw that org ID support with Azure AD in new business store
features provide a more manageable solution
for authenticated application curation of store apps and targeted provisioning
for your organization
but one last thing I want to show you
is actually a demonstration of how we can enroll Windows 10 tablets
into Office Mobile Device Management using Azure AD join
Here I have my Surface and I'll show you the process I do in order to join that
first thing I do is get into my settings menu
and I click on accounts then or click on
the work access tab and there we'll see
the ability to be able to join an Azure AD
domain so when I do that I'm going to go ahead and click that click continue
and now I have the ability to actually type in my Office 365 account
Alex D in this case at mechanics.onMicrosoft.com
I'll go ahead and click join and what that's going to do it's actually going to broker connection
between
this Surface Pro 3 full Windows desktop computer
into Office 365
MDM so here I'm gonna sign into my Office 365
admin console to do that I'm going to use my admin account
we'll type in a password once we log into the admin portal
we'll be able to see whether or not this device is actually joined into MDM so
with that with the admin portal I'll be able click on mobile devices
and then that will actually show me in this case
Alex Darrow camera one the name of this PC and Windows 10 is actually
joined into
Office 365 MDM so now I have the ability another option
to manage this device like
I would manage some other mobile device platforms a really cool really knew
options in order to manage Windows 10 a different way
so if you haven't already upgraded to Windows 10 what we've shown are just a few new
options the compliment the traditional management controls
in Windows plus a few new ones to look forward to
of course all this information and more can be found as it hits on the Office blog
and Wednesdays on Office Mechanics Thank you for watching and goodbye for now
Office Mechanics
OfficeMechanics.com