If you’re in IT, you know device management is a challenge all companies face. It’s especially difficult to make sure devices are up to date and in compliance within an enterprise environment of thousands or even hundreds of thousands of devices. Another complication is that employees use a mix of personal and corporate-owned devices, which might run several possible operating systems, each with unique needs.
At Microsoft, we’ve experienced and met these challenges. Daniel Manalo shares how with Gabe Storment, our senior business program manager, in this Inside Track Spotlight interview.
Manalo, a principal service engineer in Microsoft Digital Employee Experience (MDEE), Microsoft’s IT organization, explains that we overcame many hurdles to reach a modern management state with our devices.
“Some of our build mechanisms have hard dependencies on on-premises or Active Directory—a traditional environment,” Manalo says.
To handle these needs, we in MDEE worked with the Microsoft Intune product group to implement co-management. With co-management, a device can be simultaneously managed by both the traditional managed environment of Configuration Manager and the modern environment of cloud-based Microsoft Intune.
Zero Trust principles are another aspect of device management at Microsoft.
“At Microsoft, we ensure that a set of zero trust policies are enforced using conditional access policies,” Manalo says. “An example of some of these device health checks are minimum operating system, anti-malware installed, the device is malware-free, application control, and other conditional access checks.”
Watch our interview to learn more about device health checks in the video as Manalo describes how compliance is verified over time, what happens to non-compliant devices, and how users are kept informed.
Try Microsoft Intune at no cost.
- Learn more about co-management and how you can use it at your company.
- Unpack evolving the device experience at Microsoft.
- Discover making device management frictionless at Microsoft.
- Explore verifying device health at Microsoft with Zero Trust.
- Check out verifying identity in a Zero Trust model internally at Microsoft.
Tags: device health, Enterprise Mobility and Security, remote work
