微軟官方白色簡約卡通圖標(biāo)

微軟官方白色簡約卡通圖標(biāo)AccessandInformationProtectionProtectyourdataCentralizecorporateinformationforcomplianceanddataprotectionPolicy-basedaccesscontroltoapplicationsanddataEmpowerusersSimplifiedregistrationandenrollmentforBYOdevicesAutomaticallyconnecttointernalresourceswhenneededAccesstocompanyresourcesisconsistentacrossdevices√UnifyyourenvironmentCommonidentitytoaccessresourceson-premisesandinthecloud銳普PPT論壇chinakui分享：ChallengesSolutionsUserswanttousethedeviceoftheirchoiceandhaveaccesstoboththeirpersonalandwork-relatedapplications,data,andresources.Userswantaneasywaytobeabletoaccesstheircorporateapplicationsfromanywhere.ITdepartmentswanttoempoweruserstoworkthisway,buttheyalsoneedtocontrolaccesstosensitiveinformationandremainincompliancewithregulatorypolicies.Userscanregistertheirdevices,whichmakesthemknowntoIT,whocanthenusedeviceauthenticationaspartofprovidingaccesstocorporateresources.Userscanenrolltheirdevices,whichprovidesthemwiththecompanyportalforconsistentaccesstoapplicationsanddata,andtomanagetheirdevices.ITcanpublishaccesstocorporateresourceswithconditionalaccessbasedontheuser’sidentity,thedevicetheyareusing,andtheirlocation.Empowerusers銳普PPT論壇chinakui分享：EnablingITtoempowerusersITcanpublishaccesstoresourceswiththeWebApplicationProxybasedondeviceawarenessandtheusersidentityITcanprovideseamlesscorporateaccesswithDirectAccessandautomaticVPNconnections.Userscanworkfromanywhereontheirdevicewithaccesstotheircorporateresources.Userscanregisterdevicesforsinglesign-onandaccesstocorporatedatawithWorkplaceJoinUserscanenrolldevicesforaccesstotheCompanyPortalforeasyaccesstocorporateapplicationsITcanpublishDesktopVirtualization(VDI)foraccesstocentralizedresourcesActiveDirectoryWebAppsWebApplicationProxyRemoteAccessRDSGatewayVDISessionhostFilesLOBApps銳普PPT論壇chinakui分享：RegisteringandEnrollingDevicesITcanpublishaccesstocorporateresourceswiththeWebApplicationProxybasedondeviceawarenessandtheusersidentity.Multi-factorauthenticationcanbeusedthroughWindowsAzureActiveAuthentication.UserscanregisterBYOdevicesforsinglesign-onandaccesstocorporatedatawithWorkplaceJoin.Aspartofthis,acertificateisinstalledonthedeviceUserscanenrolldeviceswhichconfigurethedeviceformanagementwithWindowsIntune.TheusercanthenusetheCompanyPortalforeasyaccesstocorporateapplicationsAspartoftheregistrationprocess,anewdeviceobjectiscreatedinActiveDirectory,establishingalinkbetweentheuserandtheirdeviceDatafromWindowsIntuneissyncwithConfigurationManagerwhichprovidesunifiedmanagementacrossbothon-premisesandinthecloudActiveAuthenticationActiveDirectoryWebApplicationProxyADFS銳普PPT論壇chinakui分享：DemoWorkplaceJoinPublishaccesstoresourceswiththeWebApplicationProxyUserscanaccesscorporateapplicationsanddatawherevertheyareITcanusetheWebApplicationProxytoauthenticateusersanddeviceswithmulti-factorauthenticationUseconditionalaccessforgranularcontroloverhowandwheretheapplicationcanbeaccessedActiveDirectoryprovidesthecentralrepositoryofuseridentityaswellasthedeviceregistrationinformationOthercloudbasedappsandidentitystoresMobileServicesActiveDirectoryDeveloperscanleverageWindowsAzureMobileServicestointegrateandenhancetheirappsActiveDirectoryReverseproxypassthroughe.g.NTLM&BasicbasedappsPublishedapplicationsRestfulOAuthappsOfficeFormsBasedAccessClaims&KerberoswebappsADIntegratedADFSWebApplicationProxyDevicesApps&Data銳普PPT論壇chinakui分享：DemoWebApplicationProxy銳普PPT論壇chinakui分享：Userscansynctheirworkdatatotheirdevices.UserscanregistertheirdevicestobeabletosyncdatawhenITenforcesconditionalaccessITcanpublishaccessdirectlythroughareverseproxy,orconditionalaccesscanbeenforcedviadeviceregistrationthroughtheWebApplicationProxyITcanconfigureaFileServertoprovideWorkFoldersyncsharesforeachusertostoredatathatsyncstotheirdevices,includingintegrationwithRightsManagementITcanselectivelywipethecorporatedatafromWindows8.1clientsMakecorporatedataavailabletouserswithWorkFoldersActiveDirectorydiscoverabilityprovidesusersWorkFolderslocationDomainjoineddevicesAccessPolicyActiveDirectoryWebApplicationProxyReverseProxyFileServicesDevicesApps&Data銳普PPT論壇chinakui分享：DemoWorkFolders銳普PPT論壇chinakui分享：EffectiveworkingwithRemoteAccessCanoriginateadminconnectionfromintranetConnectiontointranetisalwaysactiveCannotoriginateadminconnectionfromintranetVPNDirectAccessWithDirectAccess,ausersPCisautomaticallyconnectedwheneveranInternetconnectionispresent.TraditionalVPNsareuser-initiatedandprovideon-demandconnectivitytocorporateresources.AnautomaticVPNconnectionprovidesautomatedstartingoftheVPNwhenauserlaunchesanapplicationthatrequiresaccesstocorporateresources.FirewallWebAppsSessionhostLOBAppsFilesVDI銳普PPT論壇chinakui分享：UnifyyourenvironmentChallengesSolutionsProvidinguserswithacommonidentitywhentheyareaccessingresourcesthatarelocatedbothon-premisesinacorporateenvironment,andincloud-basedplatforms.ManagingmultipleidentitiesandkeepingtheinformationinsyncacrossenvironmentsisadrainonITresources.Usershaveasinglesign-onexperiencewhenaccessingallresources,regardlessoflocation.UsersandITcanleveragetheircommonidentityforaccesstoexternalresourcesthroughfederation.ITcanconsistentlymanageidentitiesacrosson-premisesandcloud-basedidentitydomains.銳普PPT論壇chinakui分享：ExpandeddomainjoincapabilitiesNotJoinedWorkplaceJoinedDomainJoinedUserprovideddevicesare“unknown”andIThasnocontrol.Partialaccessmaybeprovidedtocorporateinformation.Registereddevicesare“known”anddeviceauthenticationallowsITtoprovideconditionalaccesstocorporateinformationDomainjoinedcomputersareunderthefullcontrolofITandcanbeprovidedwithcompleteaccesstocorporateinformationBrowsersessionsinglesign-onSeamless2-FactorAuthforwebappsEnterpriseappssinglesign-onDesktopSingleSign-On銳普PPT論壇chinakui分享：ActiveDirectoryforthecloudRunActiveDirectoryatscalewithsupportforvirtualizationandrapiddeploymentthroughdomaincontrollercloning.Developerscanintegrateapplicationsforsinglesign-onacrosson-premisesandcloud-basedapplications.LeveragecloudplatformstorunWindowsServerActiveDirectoryandActiveDirectoryFederationServicestoreduceinfrastructureon-premises.ManageActiveDirectoryusingWindowsPowerShell,usetheimproveddeploymentexperienceandleveragetheActiveDirectoryAdministrativeCenterforcentralizedmanagementActivate

clientsrunningOfficeonatleastWindows

8orWindowsServer2012automaticallyusingexistingActiveDirectoryinfrastructure.ActiveDirectoryFilesLOBAppsWebAppsInfrastructureServices銳普PPT論壇chinakui分享：UsersgetaccessthroughaccountsinWindowsAzureActiveDirectorytoWindowsAzure,Office365and3rdpartyapplicationsManagingcloudidentitiesITcanprovideuserswithacommonidentityacrosson-premisesorcloud-basedservicesleveragingWindowsServerActiveDirectoryandWindowsAzureActiveDirectoryUsersaremoreproductivebyhavingasinglesign-ontoalltheirresourcesITcanuseActiveDirectoryFederationServicestoconnectwithWindowsAzureforaconsistentcloudbasedidentity.DeveloperscanbuildapplicationsthatleveragethecommonidentitymodelDirsynckeepsuserattributesinsyncacrossdirectories.ADFSDirSyncActiveDirectoryActiveDirectoryWebAppsLOBAppsFiles3rdparty

servicesAppsin

Azure銳普PPT論壇chinakui分享：IncreasingthevalueinActiveDirectoryFederationServicesUserscanregistertheirdevicestogainaccesstocorporatedataandappsandsinglesign-onthroughdeviceauthenticationConditionalaccesswithmulti-factorauthenticationisprovidedonaper-applicationbasis,leveraginguseridentity,deviceregistration&networklocationOrganizationscanfederatewithpartnersandotherorganizationsforseamlessaccesstosharedresourcesOrganizationscanconnecttoSaaSapplicationsrunninginWindowsAzure,Office365and3rdpartyprovidersEnhancementstoADFSincludesimplifieddeploymentandmanagementPublishedapplicationsRestfulOAuthappsOfficeFormsBasedAccessClaims&KerberoswebappsFirewallADFSWebApplicationProxy(includesADFSProxy)ADFSActiveDirectoryResourcesinotherbusinessesoridentityrealmsSaaSApps銳普PPT論壇chinakui分享：DemoADFS銳普PPT論壇chinakui分享：CorporateidentitymanagementAllowuserstomanagetheiridentitywithaneasytouseportal,tightlyintegratedwithOffice.Self-servicegroupanddistributionlistmanagement,includingdynamicmembershipcalculationinthesegroupsanddistributionlists,isbasedontheuser’sattributes.UserscanresettheirpasswordsviaWindowslogon,significantlyreducinghelpdeskburdenandcosts.Syncusersidentityacrossdirectories,includingActiveDirectory,Oracle,SQLServer,IBMDS,andLDAP.ManagethecompletelifecycleofcertificatesandsmartcardsthroughintegrationwithActiveDirectory.ActiveDirectory銳普PPT論壇chinakui分享：Userprovisioning,de-provisioning,androleupdatesBuilt-inworkflowforidentitymanagementAutomaticallysynchronizealluserinformationtodifferentdirectoriesacrosstheenterpriseAutomatetheprocessofon-boardingnewusersReal-timede-provisioningfromallsystemstopreventunauthorizedaccessandinformationleakageLDAPCertificateManagementActiveDirectory銳普PPT論壇chinakui分享：ProtectyourdataChallengesSolutionsAsusersbringtheirowndevicesintouseforwork,theywillalsowanttoaccesssensitiveinformationandhaveaccesstothisinformationlocallyonthedevice.Asignificantamountofcorporatedata

canonlybefoundlocallyonuserdevices.ITneedstobeabletosecure,classify,andprotectdatabasedonthecontentitcontains,notjustwhereitresides,includingmaintainingregulatorycompliance.Userscanworkonthedeviceoftheirchoiceandbeabletoaccessalltheirresources,

regardlessoflocationordevice.ITcanenforceasetofcentralaccessandauditpolices,andbeabletoprotectsensitiveinformationbasedonthecontentofthedocuments.ITcancentrallyauditandreportoninformationaccess.√銳普PPT論壇chinakui分享：PolicybasedaccesstocorporateinformationITcanpublishresourcesusingthewebapplicationproxyandcreatebusiness-drivenaccesspolicieswithmulti-factorauthenticationbasedonthecontentbeingaccessed.ITcanaudituseraccesstoinformationbasedoncentralauditpolicies.UserscanaccesscorporatedataregardlessofdeviceorlocationwithWorkFoldersfordatasyncanddesktopvirtualizationforcentralizedapplications.ITcanprovideasecureandfamiliarsolutionforuserstoaccesssensitivecorporatedatafromanywherewithVDIandRemoteApptechnologies.AccessPolicyLOBAppsWebAppsSessionhostFilesVDIDistributedDataDevicesDesktopVirtualizationCentralizedDataRDSGateway銳普PPT論壇chinakui分享：Protectinginformationwithmulti-factorauthentication1.UsersattemptstologinorperformanactionthatissubjecttoMFAActiveAuthentication2.Whentheuserauthenticates,theapplicationorserviceperformsaMFAcall3.Theusermustrespondtothechallenge,whichcanbeconfiguredasatxt,aphonecallorusingamobileapp5.ITcanconfigurethetypeandfrequencyoftheMFAthattheusermustrespondto4.TheresponseisreturnedtotheappwhichthenallowstheusertoproceedUserApplicationauthenticatione.g.ActiveDirectory,Radius,LDAP,SQL,CustomappsADFSDevicesApps&Data銳普PPT論壇chinakui分享：DemoWindowsAzureActiveAuthentication(PhoneFactor)Dependentonnetworkconnectivity

銳普PPT論壇chinakui分享：ProtectdatawithDynamicAccessControlCentrallymanageaccesscontrolandauditpolicesfromWindowsServerActiveDirectory.Automaticallyidentifyandclassifydatabasedoncontent.Classificationappliesasfilesarecreatedormodified.IntegrationwithActiveDirectoryRightsManagementServicesprovidesautomatedencryptionofdocuments.Centralaccessandauditpoliciescanbeappliedacrossmultiplefileservers,withnearreal-timeclassificationandprocessingofnewandmodifieddocuments.Fileclassification,accesspoliciesandautomatedRightsManagementworksagainstclientdistributeddatathroughWorkFolders.ActiveDirectoryFileServices銳普PPT論壇chinakui分享：DemoDynamicAccessControl銳普PPT論壇chinakui分享：搜集整理Recap:AccessandInformationProtectionProtectyourdataCentralizecorporateinformationforcomplianceanddataprotectionPolicy-basedaccesscontroltoapplicationsanddataEmpowerusersSimplifiedregistrationandenrollmentforBYOdevicesAutomaticallyconnecttointernalresourceswhenneededAccesstocompanyresourcesisconsistentacrossdevices√UnifyyourenvironmentCommonidentitytoaccessresourceson-premisesandinthecloud銳普PPT論壇chinakui分享：RelatedcontentAc