You are browsing the archive for 2014 February.

Windows Intune and Windows Azure Multi Factor Authentication

10:06 am in Uncategorized by nsienaert

 

Hi All,

Microsoft acquired Phone Factor and added this service into Windows Azure.

This is a great feature to activate MFA on a quick and easy way. Mostly MFA is linked to certificates, smart cards,… which are for some companies a challenge to roll out. Well Windows Azure MFA can be an opportunity to accelerate MFA within these kind of environments.

Let’s have a high-level look on how this needs to be configured and how it can leverage Mobile Device Management.

First you need to create a Directory into Windows Azure and make sure it’s synced with your Windows Intune Tenant so these users are known in Azure.

capture

Configure a MFA provider

capture1.5

Enable the users that you need to have MFA enabled.

capture2

And actually…. that’s all!

Go now to your device that you want to enroll in Windows Intune. In this case it’s a Windows RT.

Once I have typed my Intune password, you will notice that I will receive a phone call. Azure MFA is calling me (=2nd authentication method)

I need to hit the pound button for authentication.

capture4

Once I have done that my devices will be enrolled in Intune.

Interesting to see \ hear was that the call was in Dutch. The system is intelligent enough based on your IE settings in which language you need to be called.

Also note, that you can customize these message by uploading WAV files into Azure.

capture5

During the setup of the MFA provider I need to choose how I need to be billed. You have the choice between “per user” or “per authentication”.

When I check my bill I can see now an extra entry which specifies my MFA cost.

capture3

Till next time!

Nico Sienaert (@nsienaert)

imagesCA18FG24 imagesCAIOYXPP

Configuration Manager: Windows Intune Console Extensions in action

9:26 am in Uncategorized by nsienaert

 

Hi All,

Recently Brad Anderson announced some important changes in Windows Intune and Configuration Manager.

As a cloud service Intune is able to provide quickly new features without the need of upgrading your environment.

Typically each 6 months Intune released some updates and new features. To even accelerate this pace the Product Team introduced Windows Intune Console Exentsions in Configuration Manager 2012 R2. Well this week the first Console Extensions arrived.

Let’s elaborate on the look and feel:

If you open your console you will see a message that new Console Extensions are available for you.

Capture

Now you can decide to enable them, also a short description is provided.

capture2

You accept the UELA

capture3

Close now your console and open the console again with “Run as Administrator”

ConfigMgr will inform you now that it will download the extensions that you have enabled.

capture4

A download progress bar is showed.

Capture5

Once the download is finished, the console will open and you can start to discover the new add-ins.

Ex.: Email Profiles

Capture6

Ex.: New iOS Settings

Capture7

This is such a great improvement to have quickly all these new and future settings available!

Happy Mobile Device Management!

Till next time!

Nico Sienaert

8637_Microsoft_MVP_logo imagesCAIOYXPP