Mobile Device Management (MDM) MOBILEIRON

Transcription

1 Mobile Device Management (MDM) MOBILEIRON

2 Context Office of K-12 Outreach, College of Ed MI Excel - Michigan Department of Education s State Wide System of Support (SSOS) 70+ Field Personnel working in schools Geographically distributed (Detroit to Escanaba, MI) Retired school administrators = no tech savvy

3 Why ipads (Assumptions) Easy to carry Less hardware support New configuration tools Apple Configurator, AirWatch, MobileIron Existing hardware in schools (projectors) Reality is that schools still don t have dedicated administrative meeting spaces (or spaces are in high demand) LTE Availability

4 Need for MDM Retain ownership of equipment User profiles On the road support Security & data protection App management

5 Barriers Lack of productivity Apps (2012) MS Office clones PDF editors Accessories Car charger, power supply, VGA adapter, HDMI adapter, Logitech keyboard/case

6 Security #1 Concern Family Education Rights and Privacy Act (FERPA) Golden Package PDFs Access to MISchoolData.org (CEPI) Loss prevention Three ipads stolen in two years

7 MobileIron VSP Virtual Smartphone Platform (VSP) Connects to ipads through MobileIron App Loads security and policy certificates remotely Intuitive web-based management console

8 Cloud based MobileIron Two virtual machine appliances (multiday phone supported install) VSP Sentry Hosted on College of Education vsphere Cluster $75 per device + $15 annual license Licensed through AT&T (Enterprise Portal)

9 VSP - Device Management User management with Active Directory Labels Control of features & policies Policies Security, App control App distribution (in-house & app store) Prepaid Apps (Volume Licensing Program)

10 Provisioning ipads 1. Add device to MobileIron 2. Attach to an Active Directory user 3. User is automatically notified through and follows instructions to download MobileIron app, or username & PIN is provided to install 4. MobileIron App is loaded and connected to VSP server 5. Profiles are downloaded and installed, app is loaded onto ipad 6. Loads Exchange account

11 Device Management Remote operation Unlock, Wipe, Geo-locate, Review client logs, Push notifications, Policy updates Allow user to install App Store apps through Volume Licensing Program Allows users to be temporarily assigned apps Set policies for allowable Apps

12 Policy Violations Remove access to secure services Revoke ActiveSync Close App Tunnels Notify Administrators & Users Multiple automated triggers and actions 12

13 Issues with Deployment Exchange functionality (root cause tbd) Backing up/restoring ipads Multiple passwords per user (Apple, MSUNet, Exchange) 13

14 Positive Aspects Easy to deploy ipads Easy to manage large number of users Volume Licensing Make prepaid Apps available through Volume Licensing for Ed 50% off on bulk orders 14

15 Unexplored Windows, Android, Blackberry support App Tunnels Ability to temp assign Apps Very restrictive policies 15

16 CLIENT MANAGEMENT SALESFORCE 16

17 Managing our Clients Client/Customer Relations Management Schools = clients Manage multiple contact people Manage points of contact Collect data about activities in schools through easily customizable forms 17

18 Workflows Automated Workflows Intervention Specialist Regional Manager Manager Payroll & Travel Data & Evaluation Team Multi-tiered access to data Data portability (transferring ownership) 18

19 Advanced Customization Create custom reports (text & graphic) with automated processing & workflows APEX classes allow you to build custom, integrated web apps that take advantage of jquery, CSS, HTML 19

20 Worth the Money Inexpensive Cloud Based Solution Annual license: $360/year for Full Salesforce Named Portal Users: 100 for $1,000/year 90% Discount through Salesforce Foundation 20

21 Thank You! Ken Dirkin 21