So the last thing I want to talk about today is just kind of pulling all of these different things together
as it relates to preparing devices for enterprise deployment, using Microsoft applications settings
as well.
So just you know, I've mentioned all along here how much Microsoft is playing nice in the sandbox with
Apple and seems like Apple's doing somewhat of the same thing.
And that's just the benefit to users, particularly in the enterprise environment where Microsoft is
very pervasive.
So what I've done here, as you remember, back to a profile manager, we can go ahead and configure
these devices ahead of time, configure device groups and use, you know, basically configuration profiles
and an automatic app assignment to configure a very nice interface and user experience for enterprise
users and really roll this out in mass.
So what I'm going to do real quick is just show two examples.
So I'm going to create a device group for iOS and I'm going to just going to call it Microsoft iOS and
I'm going to make another group here.
We're going to call it Microsoft Mac OS.
All right, so what I'm going to do is just kind of talk about putting devices in these groups, and
if you're talking about the enterprise, you're probably talking about onboarding, you know, hundreds
or thousands of devices in very much the same way and being able to manage control.
So we want to I want to kind of show how you can do that very easily with some of the basic things here.
And you can always build on this.
But in my experience, this has been very helpful for my user base.
And it's also been really helpful for me because it ensures that every person gets a good experience
out of the box with some specific things automatically installed.
When I first started doing this before this technology existed.
I was spending a lot of time creating handouts with server information on it, telling people here's
the link to the iTunes store to download this particular app for that particular app and doing other
things.
That was it was kind of frustrating because it just it took a lot of extra effort to make sure that
people had the same apps and they all got them all at the same time and that they were functional and
that everyone had a consistent experience.
So I'm going to go ahead and just talk about two things.
So one of one of the things I want to talk about is apps.
So to Microsoft's credit with the office three sixty five environment, they have now put the the Microsoft
Office applications out on the App Store and they're a free download.
You can download them and then you have to sign into them the first time you use it with your company
credentials or your office.
Three sixty five credentials.
If it's a personal account that allows us now to automate the installation of of that software rather
than having to use a Microsoft volume license serializer.
So here's how you want to do that.
So first thing I did before recording the video, I did go ahead and and redeem five seats for free
of outlook PowerPoint one.
No.
One Drive teams word and excel.
So I've got all the Microsoft apps here.
I'm actually going to.
Just look at the iOS ones here and Skype for business to can't forget Skype and then Mac OS.
So here's what I can do is I'm going to go ahead back to my device groups and we're going to start with
Microsoft Mac OS.
We're going to do the apps first.
So very similar we've done before.
We're going to go through and just do.
Softmax.
And one to one note from Jack Lew, I'll outlook for Mac our point.
And word.
And we didn't have Skype for business for Mac.
I did not download it or it was not in the App Store, so we'll skip that for now.
But I will grab one drive.
All right, so OK to that we want these to be automatically installed.
So we'll go ahead and say that now let's go back over to Microsoft iOS and we'll do the exact same thing.
But for iOS apps, so we'll do.
So one drive, one note.
Outlook.
Our point, we've got teams, we've word.
And we've got Skype for business.
And.
So there we go.
But those will hit save.
All right, now I've got my apps ready to go for my Microsoft settings, and I've got the same thing
for Mac OS.
All right, let's talk about settings, so we've gone through a lot of this already with the MDM section
and profile manager section, so I'm not going to go through a lot of this.
But I will point out a couple of things.
When you're configuring an enterprise device for Mac OS.
So further down here, certainly you can uncheck all the setup assistance options like we discussed
in the past.
You can also not prompt the user to create any type of an account at login and you can create your MapQuest
administrator account instead automatically.
I recommend that.
And then what you can do.
Is go ahead and edit on my settings, we're setting up our mobile config profile here.
One of the things we can do is if I scroll down a Mac OS, we have some options here for directory and
active directory certificate's.
So if you use your organization uses active directory certificate's, you can configure those here.
You can put multiple certificates in if you need to go ahead and hit minus.
And under directory, you can configure.
This will allow you to select active directory and you can just put things in here like.
Server name, your administrator, username and password for your domain admin account, you put a client
ID in there, you can specify and you I'm going to leave it in the default computer.
Zouliou, which is where it goes if this is blank.
But you could also provide an organizational path here and have it put these in a specific group for
you.
You can create a mobile login account, which I recommend, because then you can still log into the
machine locally if the network connection is severed.
So if you've got laptop users, definitely use that as well.
I find that to be useful even for desktop users.
You can map drives.
You can.
I'm sorry.
Click on that.
You can map drives down here.
Yes.
And be.
You have the ability to map you kids and kids and you have the option here to specify a domain server
and some of these other settings as well, depending on your environment.
There's also a password trust interval.
So, you know, one of the things that I've seen in the past is where machines will fall off the domain
because the password changes and something didn't click.
So you could you can make that zero if you needed to.
So once you've done that, you've set up active directory.
OK, that will hit save now on my devices, on board, it should automatically add them to active directory.
So we'll get into that a little bit later in the session.
My counterpart, Brian, is going to talk a lot more about active directory and the integration of Mac
OS and Macs into active directory environments.
But I wanted to show this just from a standpoint of a place to configure it.
So you're you're loading in.
You can you can provide a Mac on the domain with the the Microsoft applications.
You can certainly map drives.
You can certainly had printers and all those kinds of things can either be scripted or are applied through
mobile config profiles.
So we'll let Brian get into that more in the future lesson.
But you can really take and integrate a lot of this.
There's by no means do you have to manage Macs using a mobile device management solution.
Brian will show how you can do that without one.
But if you are onboarding tons of machines out of the box, you may find the combination of some of
the deployment solution and management solutions that we've shown here, coupled with an MDM, even
as basic as this, just to enroll a device into management and supervision is probably a good practice
to try to adopt.
So that's Mac OS iOS.
We've got one thing here that's a little nice.
I'd really like to see it added to the Mac OS set up, but I'm going to go ahead.
We've done the same thing here.
We've got our apps we mentioned before and I want to go in and set up some settings as well.
So, you know, same deal here.
There's a lot of changes.
You can uncheck these and all that stuff you talk about for iOS before.
So really no big difference there.
We are going to edit our mobile config profile here.
And what I'm going to show in this is very, very simple and an easy setup that your users will really
like, and that is the exchange setting right here.
So this will work for any iOS device, iPhone or iPad.
So it can be very handy for that if you're deploying iPads or if you're deploying phones even to your
your end users and you're using exchange or office three sixty five.
So just hit configure and you just go through and set this up for the account.
So we're just going to call this, you know, my company exchange will be whatever you want to call
that.
We have our options here exchange out of sync.
It's going to force me to put a user account in here, so since I'm going to be using this across multiple
different devices, I'm just going to put a no go and put my server name in.
So we'll do mailed that my company dot com.
And since it wants a user, I'm just going to default to domain backslash user.
And the one thing I do need to then work with my user base on is just making this change, putting in
their correct username and putting in their email address and their password, all of which they can
do right on the device after I've given the device to them.
But things like configuring SSL and putting in the exchange server and those kinds of things are already
done up front.
So people aren't fat finger the server name or miss miss something.
So I can also go ahead and set this.
I'm going to go ahead and say no limit on the past days of mail to sink and just going to go ahead.
And I'm not going to do a payload here for cert.
I could if I wanted to, but I'm not going to do that here.
Will mail drop for the account.
This allows you to use it only in the mail app.
But since we're providing outlook as a client on the device, I believe this unchecked so they can use
either of those and the rest of the stuff.
I'm just going to leave off here.
But your organization may want some of these things turned on, so they're there for your use.
So once we've got that done, go ahead and hit, OK?
And now we've basically got it set up so that it will automatically install these Microsoft apps and
it will configure the exchange account for them with the exception of their username and password,
which they'll add at the time of onboarding, and their device will be ready to go.
One other thing to mention is that if you are using office, three sixty five's built in MDM or any
of the policies inside active sync for locking down mobile devices, remote wipe, you know, password
minimum password requirements, password attempt requirements, any of those kinds of things, those
will automatically apply once the exchange account is configured.
So while I could go in and set all of those things here, it could potentially be redundant because
exchange the exchange server, once the device is configured, will have that.
If if you're concerned that users may try to remove the exchange account, you could always apply it
here as well for just an added level of security.
But at this point, I've got a group for iOS and a group for Mac OS and now I can on board devices into
the members and hand the devices out to users.
And as they go through the setup, they'll be managed, configured and the required Microsoft apps will
be installed.
The only last thing they would have to do, really, upon launching one of the Office 365 apps, is
sign in with their credentials to activate the software.
So that's Microsoft Mako's and the.