Microsoft Enterprise Mobility Suite (EMS)

Microsoft Enterprise Mobility Suite is a set of cloud services for management of corporate data and services from any device.

Specific Features

At the heart of EMS the architecture of Intune and services working on the Azure servers. The C of their help IT departments of the organizations will be able to configure cross-platform applications, to configure access to them to different users and to provide confidentiality of data.

EMS is a cloud solution for the organizations which staff uses devices on different platforms: Windows, Mac OS X, Windows Phone, Android and iOS.

Microsoft Enterprise Mobility Suite provides integrated management of devices, identification and access with simultaneous data protection from a cloud. EMS includes Windows services of Intune, Azure Active Directory Premium and Azure Rights Management which provide to IT departments the tools necessary for protection of corporate data and give to people the chance to select the most convenient devices for work.

Enterprise Mobility Suite will extend on Microsoft Volume Licensing channels, since May 1, 2014.

The EMS service consolidates advantages of several products and allows the companies to manage any devices – on Windows platforms, iOS or Android - from "cloud". Microsoft Enterprise Mobility Suite includes a set of software solutions: service Azure Active Directory Premium which is responsible for identification and access control, cloud service of Windows Intune for device management and applications and also services of data protection Azure Rights Management. All services provided within the complete solution have advanced functionality in comparison with the previous versions of these products. So, in particular, Azure Active Directory Premium grants the full-fledged rights to use the solution for management of the identification information of users (FIM).

The main business scenarios of use of complexes based on Microsoft Enterprise Mobility Suite are the organization of work of mobile employees and remote branches and also ensuring interaction with partners and contractors. The companies will be able to implement the concept of BYOD and the procedure of multifactor authentication and authorization.

Solutions for employees of the bank

If earlier work of the employee of the bank out of office was limited to filling of the questionnaire, then today for formation of the competent commercial offer at a meeting and successful negotiation with the client it is necessary to have near at hand exhaustive data from CRM and other internal systems of bank. Microsoft EMS creates effect of "intra office" work directly on site of meeting without damage to comfort of the client: required data can be presented in the form of tables, profiles, diagrams or video^[1].

Banking organizations should deal with different information: commercial and personal, confidential and "for office use". Before IT specialists there is a difficult task – to give an opportunity of remote work with data without risk to be in a conflict with corporate politicians of ensuring their security in order to avoid the facts of violation of confidentiality, integrity and availability of information. For each group the scenario of work and, respectively, specific rules of use is provided. Allow consider them at the organization of mobile access for the employees who are outside corporate perimeter Microsoft Azure Active Directory of Premium technology from the structure of EMS.

The unified approach put in Microsoft Azure Active Directory Premium provides the access control level similar to that which is implemented when using classical service of the Microsoft Active Directory directory, but with a possibility of its application both from corporate perimeter, and from a cloud. Azure AD Rights Management technologies do possible implementation of different approaches to identification and authorization of the user in a system, including scenarios of multifactor authentication. Let's tell if the employee does not work in the organization any more or if the document is mistakenly transferred to the inadequate receiver, these companies will be reliably protected in strict accordance with the corporate politicians causing lifecycle and access rights for each file type.

Caring for observance of corporate rules on data protection, IT services should consider area of the circulation of information which even more often exceeds the limit of corporate perimeter, only complicating process and increasing importance of following to regulations. Windows Intune gives confidence that the registered politicians of access will be applied on all devices, even belonging to the users having access to a corporate IT environment. The structure of Windows Intune includes tools for automation of scenarios of mobile device management (MDM), by applications (MAM) and workstations (up to 50 thousand users within one corporate network) that does it by universal remedy on management of a broad spectrum of IT company assets with emphasis on mobile scenarios of work.

Use of EMS technologies creates basis for a flexible response of the IT block of the organization to requirements of core business. There are real options of providing new regional office of the company with IT infrastructure and the user access to IT services immediately. Without waiting for a supply of the corporate computer equipment, the staff of the opening branch can begin work with personal devices.

Notes