This blog post will break down EMS (Enterprise Mobility Suite) by first giving you an overview including some YouTube videos.
And you will then get a detailed look at the three different services that Enterprise Mobility Suite is built upon.

You might think that many of these features are included in licenses or services that you already own?
Well the second part of the blog post will describe the differences in detail and you will see that its not really the case as Enterprise Mobility Suite includes much more and got a lot of great features that you cant get anywhere else.

These particular features makes Enterprise Mobility Suite a must have and it gets our strong recommendation to buy with any Office 365 plan.

Remember that you can always contact us if you have any questions regarding Office 365 or Enterprise Mobility Suite on phone: +468239600 or email:  cs@altitude365.com

 

Now let us start with the basics of Enterprise Mobility Suite.

The Enterprise Mobility Suite is a comprehensive suite of cloud services to address your consumerization of IT, BYOD (Bring Your Own Device), and SaaS (Software as a Service) challenges.
The suite is the most cost effective way to acquire all of the included Microsoft cloud services:

Please take a few minutes to watch the videos to get a better understanding of what Enterprise Mobility Suite can do for your organizations.

 

 

Hybrid Identity and access management, Azure AD Premium delivers robust identity and access management from the cloud, in sync with your existing on-premises deployments:

• -Cloud-based self-service password reset for your employees
• -Group Management, including user self-service management of groups
• -Group-based provisioning and access management for hundreds of Software as a Service applications-
• -Machine learning-driven security reports to show log-in anomalies and other threats
• -Rich and robust synchronization of user identities from on-premises directories, including write back of changes
• -Reduce risk and support compliance requirements with comprehensive Multi-Factor Authentication (MFA) options Mobile device management

 

 

Windows Intune enables you to manage PCs and mobile devices from the cloud. People can use the devices they love for work while protecting corporate data and adhering to security policies:

• -Deliver and manage apps across a broad range of devices.
• -Manage a variety of device types, from Windows, Windows RT, and Windows Phone 8 to Apple iOS and Google Android.
• -Configure and deploy policies, and inventory hardware and software. Data protection

 

 

Azure AD Premium and Azure Rights Management can help protect your corporate assets:

• -Deliver information protection in the cloud or in a hybrid model with your existing on- premises infrastructure.
• -Integrate information protection into your native applications with an easy-to-use software development kit (SDK).

 

 

Now that you have a basic understanding of Enterprise Mobility Suite lets break it down even more and look at the details, what is it that you really get for your bucks!

 

 

Comparing Azure Active Directory and Azure Active Directory Premium

Azure AD Premium has more advanced capabilities to help streamline Enterprise-level administrative tasks and make an admins life easier.
The following table describes common admin benefits and how signing up for Azure AD Premium helps to simplify them.
And remember the Azure AD Free is what you already got if you signed up for Office 365.

• 1. The 500k object limit does not apply for Office 365, Windows Intune or any other Microsoft online service that relies on Azure AD for directory services.
• 2. With Azure AD Free, end users who have been assigned access to each SaaS app, can see up to 10 apps in their Access Panel and get SSO access to them (assuming they have first been configured with SSO by the admin).
  Admins can configure SSO and assign user access to as many SaaS apps as they want with Free, however end users will only see 10 apps in their Access Panel at a time.

 

 

Windows Intune features.

Now let’s look at Windows Intune and to do that comparison I have included a sheet that compares it with its on-premises step brother and what you get if you mix them both.

 

For a list of settings that you can configure on mobile devices, see:

• Mobile Device Management Capabilities in Windows Intune
• Compliance Settings for Mobile Devices in Configuration Manager

For information about new features in Windows Intune, see Windows Intune Service Updates.

 

 

Azure Rights Management

Azure Rights Management lets you encrypt and assign usage restrictions to content when your organization subscribes to Microsoft online services. Rights Management helps protect content that is created and exchanged by using Microsoft Office as well as other applications or services that have been updated to integrate with the Rights Management service. By implementing a cloud-based rights management service, Rights Management provides an alternative for organizations seeking information protection capabilities within Microsoft Office 365.

Information Rights Management (IRM)

• -Help protect data across different workloads such as SharePoint, Exchange, and Office documents by easily applying Information Rights Management to set up policy-based permissions rules
• -Help protect emails against unauthorized access by applying different IRM options to your email messages.
• -Enhance security of your SharePoint libraries by using IRM to set up appropriate permissions.
• -Help keep your information safe, online or offline, because your files are protected whether they’re viewed using Office Online or downloaded to a local machine.
• -Seamless integration with all Office documents helps guard your organization’s intellectual property.
• -Apply custom templates based on your business needs in addition to using default Rights Management Services templates.
• -Safeguards sensitive information.   Applications and services such as Microsoft Office 2010 and Microsoft Office Professional Plus 2013, SharePoint Online and Microsoft Exchange Online are enabled to help safeguard sensitive information. Users and administrators can define who can open, modify, print, forward, or take other actions with the information. Organizations are provided usage policy templates such as “Company Confidential – Read Only” that can be applied directly to the information.
• -Provides persistent protection.   Rights Management persists protection of file data when at rest and in motion. Once information is locked, only trusted entities that were granted usage rights under the specified conditions (if any) can unlock or decrypt the information.
• -Supports closer management of usage rights and conditions.   Organizations and individuals can assign usage rights and conditions using rights management that define how a specific trusted entity can use rights-protected content. Examples of usage rights are permission to read, copy, print, save, forward, and edit. Usage rights can be accompanied by conditions, such as when those rights expire.
• -Integrates rights management with Office 365.   Rights Management is integrated with SharePoint Online, Exchange Online, and other Office 2010 and Office Professional Plus 2013 applications to provide rights management functionality across the Microsoft Office suite.

Office 365 Message Encryption

Deliver confidential business communications with enhanced security, allowing users to send and receive encrypted email as easily as regular email directly from their desktops.

• -Send encrypted emails to anyone, independent of which mail service the recipient uses.
• -Grow your organization’s brand by enhancing the contents of the mail and your users’ experience with your custom logo or disclaimer.
• -Strong integration with Exchange transport rules allows you to set up encryption/decryption using a single action.
• -The clean Office 365 user interface makes it easier to read, review and respond to encrypted mail.
• -Help protect the entire conversation by encrypting an entire email thread without requiring any service subscription for recipients.

 

And to finally compare it with what you might already have on-premises

 

And please feel free to contact us if you have any questions regarding Office 365 or Enterprise Mobility Suite on Phone: +468239600 or email: cs@altitude365.com