Mobile Device Management

Every organization has unique needs for connecting mobile devices to the corporate network to increase user productivity. Based on the principle of People-centric IT (PCIT) a mobile device strategy can be created to meet those needs. Once the strategy has been determined then it’s time to created the infrastructure.

Lesson 1: Planning for a Mobile Device Management Strategy

Lesson 2: Designing a Mobile Device Management Infrastructure with Windows Server 2012 R2

Exercise 1: Prepare Active Directory.

Exercise 2: Prepare the Certification Authority.

Exercise 3: Prepare Active Directory Federation Services (ADFS).

After completing this module, students will be able to:

Create a mobile device management (MDM) strategy.

Design a mobile device management infrastructure based on Windows Server 2012 R2 technologies.

Allowing device connectivity is important, but more important is managing that connectivity. Workplace Join allows a way to track and control which devices can connect. Once connected users will need access to data, no matter the device. That data must be current and consistent without users manually copying files. Work Folders creates this ability.

Lesson 1: Workplace Join for Mobile Devices

Lesson 2: Work Folders

Exercise 1: Prepare the Workplace Join Infrastructure.

Exercise 2: Workplace Join an iOS Device.

Exercise 3: Workplace Join a Windows Device.

Lab : Work Folders

Exercise 1: Create the Work Folders Infrastructure.

Exercise 2: Install Work Folders on Devices.

After completing this module, students will be able to:

Set up the requirements for Workplace Join.

Workplace Join devices to Active Directory.

Create the Work Folders infrastructure.

Test Work Folders on devices.

Resolve common application compatibility issues.

In the previous module we learned how to connect non-domain devices to Active Directory for management and policies with Workplace Join. In addition we showed how to synchronize data between multiple devices using Work Folders. However almost always data will be used in some type of application, therefore a part of our MDM (Mobile Device Management) strategy must include accessing those applications from devices. This is the responsibility of Web Application Proxy.

Lesson 1: Web Application Proxy Overview

Lesson 2: Installing the Web Application Proxy Role Service

Lesson 3: Configuring the WAP and Publishing Applications

Exercise 1: Prepare the web application (website) on the SCCM virtual machine.

Exercise 2: Prepare the certificates.

Exercise 3: Install Web Application Proxy.

Exercise 4: Publish the application in Web Application Proxy.

After completing this module, students will be able to:

Understand the features and benefits of Web Application Proxy (WAP).

Install and configure WAP.

Publish and connect to applications using WAP.

One of the primary responsibilities of any IT professional is security. Physical security, network security and data security are critical. In this module we will look at how mobile devices affect security plans not just for BYOD, but also for the entire network infrastructure.

Lesson 1: Overview of Enterprise and Mobile Device Management Security

Lesson 2: Hardening the Mobile Device Management Infrastructure

Exercise 1: Secure Accounts Used by MDM.

Exercise 2: Use Bitlocker to Encrypt a Client System.

Exercise 3: Configure IPSec.

After completing this module, students will be able to:

Understand security in the enterprise.

See how previously discussed MDM technologies are secured.

Harden the security infrastructure for mobile devices.

In this module we will discover the process of managing mobile devices throughout their lifecycles. Technologies including the Microsoft Exchange Connector, System Center Configuration Manager and Windows InTune can be used for these purposes. We will also see how applications can be managed for mobile devices.

Lesson 1: Mobile Device Lifecycle Management

Lesson 2: Configuring the SCCM Windows InTune Connector

Lesson 3: Mobile Device Application Management

Exercise 1: Create the Microsoft and Windows InTune Accounts.

Exercise 2: Connect Windows InTune and Active Directory.

Exercise 3: Configure Windows InTune to be managed by Configuration Manager.

Exercise 4: Enroll an External Device in Windows InTune.

After completing this module, students will be able to:

Understand the Microsoft Exchange Connector.

Connect System Center Configuration Manager to Windows InTune.

Manage applications for mobile devices.