Use Defender for Endpoint and Microsoft Intune to Protect Mobile Devices with Mobile Threat Defense
Vložit
- čas přidán 15. 08. 2024
- With corporate data being increasingly available from mobile devices, Mobile Threat Defense is really important.
In this short video, Dean demonstrates how to leverage Microsoft Defender for Endpoint to deploy Mobile Threat Defense to iOS devices and protect corporate data using App Protect Policies.
The Cloud Management Community is YOUR community for Cloud Management, Mobile Device Management and Microsoft Endpoint Manager. Join the discussion on Twitter (@the_cmcommunity) and subscribe to be notified when we go LIVE.
Dean Ellerby is a Microsoft Enterprise Mobility MVP, Certified Trainer, Organiser at CloudManagement..., Contributor at Petri.com, Pluralsight Author and a Workspace Solution Architect. He's on Twitter @dean_ellerby. Any views or opinions expressed here are his own.
00:00 What is MTD?
01:15 Configure Defender for Endpoint
03:12 Connect Defender to Intune
04:56 Create an App Protect Policy
07:10 Deploy Defender for Endpoint
09:23 Does this work on Supervised iOS devices?
12:41 Will App Protect Policies work on unenrolled devices? - Věda a technologie
you are the best. thanks so much for these tutorial, much appreciated.
application protection using MAM is different and defender for end point is different?
Hi thanks for this great video. We have defender for endpoint configured on Android, iOS and Windows. We want to exclude the web filtering feature from Android and iOS devices without disabling the web protection altogether. Is there any way to do this?
thank you so much, will set up my lab promptly
You’re welcome Terry - hope it helps ! /Dean
question, can I use a VPN service such as Nord VPN with MS Defender enabled? When having both installed on my iphone only one can be enabled at a time, but maybe I can configure the VPN so they can work together?
Nice video from you, please I need help on how and where to get the virtual iOS devices.? Can you help with the link please.
Hi, 6:55 I don't have All users available. In the list I just see one group that I created for Autopilot devices. Why is that?
With the Internet 11 desktop application retiring and going out of support on June 15th, 2022, will you have videos on setting up site discovery or site list?
I wasn’t aware it was so soon! As it turns out I don’t have an enterprise deployment of.. well, anything, so it’s tough to demo something real-world without context. If you reach out on Twitter I’d be happy to discuss! /Dean
Hi mate, great video as always! May I ask what software you use to demo / record iOS? I’d like to use something like this to document these features / OOBE
Hey Luke - I personally use AirSquirrels Reflector (3) to record most stuff on iOS and Android. The stuff in this video is certainly all Reflector.
For OOBE stuff, I've had to purchase a Mac (mini) and use Quicktime to record a tethered iOS device. I've not yet had to record an Android device from OOBE.
/Dean
@@theCMC Thank you Dean! Loving the videos, keep them coming 😊
I’ve been demoing this on and off for a while now and whilst it’s good in theory the execution is poor. There’s too much for the end user to do, and it’s too easy for them to simply turn it off. Additionally due to the fact it’s using a VPN loop back connection that means that a corporate VPN can’t be run at the same time. However, as you mentioned the app protection policies are excellent and work very well.
With the APP on personal (unenrolled) devices, you're right - the user has to do a lot of reading and clicking; not ideal, but atleast if they turn it off the APP will prevent access?
For enrolled devices, we can use a Device policy to prevent the user removing the VPN or disabling, which might help. It can also be used to make it a zero-touch enrollment for these devices too.
I take your point on the VPN, though.. that's interesting.
/Dean