UEM1859BU Be a Power Admin: VMware AirWatch or distribution · 2019-06-27 · Adarsh Kesari Senior...

Adarsh KesariSenior Systems Engineer

UEM1859BU

#VMworld #UEM1859BU

Be a Power Admin: VMware AirWatch Console Tips and Tricks

VMworld 2017 Content: Not fo

r publication or distri

bution

• This presentation may contain product features that are currently under development.

• This overview of new technology represents no commitment from VMware to deliver these features in any generally available product.

• Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind.

• Technical feasibility and market demand will affect final delivery.

• Pricing and packaging for any new technologies or features discussed or presented have not been determined.

Disclaimer

CONFIDENTIAL 2



bution

Corporate-Owned,

Purpose-Built

Combined Management Tools and Processes for Improved Efficiency

AirWatch Unified Endpoint Management

#UEM1859BU CONFIDENTIAL 3

Modern Management and Security for All Connected Devices

AIRWATCH UEM

LIFECYCLE MANAGEMENT

SECURITY

USER EXPERIENCE BYO

ANY ENDPOINT

ON ANY PLATFORM

ACROSS ANY USE CASE

Desktops, Laptops,

Mobile Devices, IoT



bution

How To Be a Power Admin

4

Admin Workflows

Grouping

AD Automation

Custom Reporting

Rest API

Automatic Ownership

Enrollment Customization

Branding

Self-Service

End-user Experience

#UEM1859BU CONFIDENTIAL



bution

Simplify the Admin Workflows


Grouping

AD Automation

Custom Reporting

Rest API

55#UEM1859BU CONFIDENTIAL



bution


Create organization groups for:• UAT• Production• Admins/Developers• New use cases• Workspace ONE adoption• Ruggedized devices

Separate test from production using multi-tenancy

Use Grouping to Its Fullest Potential!



bution


Create, filter and separate groups of users

Test the impact across platforms and versions

Assign policies and applications to specific users

Define settings for specific use cases

Create smart groups to assign your updates

Use Grouping to Its Fullest Potential!



bution

Use Grouping to Its Fullest Potential


• AD Security Groups• Organizational Groups• Device Ownership Types• OU Groups• Custom AD Queries• Device-based criteria

• OS version• Device model

• Local AirWatch User Groups

Attributes of Smart Groups

• Apps• Profiles• Compliance policies• Enrollment restrictions• Content Repositories• VMware Identity Manager policies• Workspace ONE application

assignment

Items that Support Smart Groups



bution



Use them in your Smart Groups | Apply these groups to Workspace ONE

Use your Active Directory Security Groups in AirWatch



bution



Sync directory users and groups to VMware Identity Manager

AD grouping for Workspace ONE



bution



Grouping

AD Automation

Custom Reporting

Rest API




bution

13

Groups and Settings All Settings System Enterprise Integration Directory Services User Advanced. Set the Automatically Sync Enabled or Disabled User Status to Enabled.

Groups and Settings All Settings Devices & Users General Enrollment Grouping.Set the Default Action for Inactive Users to Enterprise Wipe Currently Enrolled Devices.

Automate Console Actions

Enterprise wipe devices from disabled Active Directory users




bution

14

Solutions that update Active Directory groups, such as HR management tools, can be automatically reflected in AirWatch

Add or remove assigned resources automatically


Automatically sync your AD groups and users




bution

15

Compliance policies are used to perform actions on devices that are not within your rules set in the console.

Set compliance rules based on the severity of the compliance violation, and the work effort required for the user to get back into compliance.

BEST PRACTICE – create one rule in the console with many actions, rather than many rules. Rules are AND commands!


Compliance policies help your administration experience




bution

16





bution



Grouping

AD Automation

Custom Reporting

Rest API




bution

Use Workspace ONE Intelligence for AirWatch Monitoring

19

ONE VIEW

Get visibility into your entire

environment in one place

SEARCH

Query your environment to detect

anomalies

ANALYSE

Get custom and historical reports

on your entire digital workspace to

make data-based decisions (app

deployment, adoption, usage,

engagement, performance and

user experience, device posture

and more)

Insights Planning Automation

SMART DELIVERY

Better plan your app and policy

deployments with custom

recommendations

PERFORMANCE

Monitor app performance to identify

critical issues and increase user

experience

SCALE

Deploy apps and patches to your

entire environment without taking

the network down

RULES ENGINE

Automate processes across your

environment by defining rules that

take actions based on a rich set of

parameters.

CONTEXTUAL WORKFLOWS

Create contextual policies that take

automated remediation actions

based on security threats, and

meet compliance requirements

through automated access control.




bution

20



bution

CONFIDENTIAL 21



bution

CONFIDENTIAL 22



bution

CONFIDENTIAL 23



bution



Grouping

AD Automation

Custom Reporting

Rest API




bution

Automate Tasks Using REST APIs

AirWatch API help page:

SaaS:

https://{ds###}.awmdm.com/API/help

Or installed on the console if on-premises

Use the API for:

• MDM settings

• MAM policies

• MEM configuration

• System Configuration

26

Build custom workflows using REST APIs




bution

https://aw400.awmdm.com/API/help

Automate Tasks Using REST APIs

VMware Identity Manager API documentation:

https://code.vmware.com/apis/57/idm

Use the API for:

• Admin tasks in the console

• Oath2 token settings

• User configuration

• Device registration

27

Build custom workflows using REST APIs




bution

https://code.vmware.com/apis/57/idm

Simplify the End-User Experience


Automatic Ownership


Branding

Self-Service

28



bution

Make the Most of Simplified Enrollment Methods

Define Settings

Automatically apply settings when users power on devices

Eliminate Staging Costs

Take configuration time from hours a few minutes

Simple consumer-like setup

Enable users with instant access and productivity,

skipping unnecessary setup steps

Scalable Deployments

Automating all steps of device management to scale

deployments without added time or effort

29

Apple Device Enrollment Program




bution


30

Android Enterprise

Provision a work managed device by

entering afw#airwatchwhen prompted for a

Google account

Provision work managed device out of the box by

scanning a QR code




bution


31

KNOX Mobile Enrollment

Turn OnDevice

Wi-Fi Set Up

Finish SetWizard

MEPPop-up

EULA andAirWatchPrompts

Device isEnrolled

• Simplified and automated end user enrollment process

• Streamlined administrator staging process

• Helps reduce cost and increase adoption




bution



Automatic Ownership


Branding

Self-Service

32



bution



Automatic Ownership


Branding

Self-Service

33



bution

Optimize the BYOD Enrollment Workflow

34

Clear and concise privacy information for your users

ADAPTIVE MANAGEMENT




bution


Optimize the BYOD Enrollment Workflow

Groups and Settings All Settings Devices & Users General Privacy

35

Deploy the Privacy App to proactively inform your users

Configure privacy per device ownership type

Determine what is being collected on end user devices



bution

https://airwatch.invisionapp.com/share/SX5095SGC#/screens/112041648



Customize Your Terms of Use

Groups and Settings All Settings Devices & Users General Enrollment Terms of Use

Enable the setting to Require Enrollment Terms of Use Acceptance

Create different terms of use settings for different OG’s and device ownership types

36

Tailor the terms of use to the enrollment OG




bution



Automatic Ownership


Branding

Self-Service

37



bution



Automatic Ownership


Branding

Self-Service

38



bution

Create a Consistent Experience Using Branding

Provide a consistent experience for IT and end users




bution

Create a Consistent Experience Using Branding

40

Now with Workspace ONE branding!




bution



Automatic Ownership


Branding

Self-Service

41



bution

Implement Self Service to Reduce Help Desk Calls

• Clear Passcode

• Send sound to locate

• Lock Device

• Push Profiles

Accessible on any device!

42

Help your users help themselves




bution

How To Be a Power Admin43

Admin Workflows

Grouping

AD Automation

Custom Reporting

Rest API

Automatic Ownership


Branding

Self-Service

End-user Experience




bution

Like What You See?

Check out myAirWatch for how-to knowledgebase articles




bution

Accelerate your Knowledge of Workspace ONE

Date Title Session # Speaker

Wednesday, 2:00pm Deployment Deep Dive: Best Practices and Troubleshooting of Workspace ONE SAAM2197BU Kevin Sheehan

Adarsh Kesari

Wednesday, 3:30pm Apple MDM for the Enterprise and the New Mac Management UEM1887BU Naveen Pitchandi

Wednesday, 3:30pm Big MDM and MAM Deployment Data: What We Have Discovered and How We

Have Responded

UEM2931GU Scott Kelley

Nicolas Rochard

Wednesday, 3:30pm Secure and Seamless Access to all of your Applications with Conditional Access

and Mobile SSO in Workspace ONE

SAAM2204BU Vikas Jain

Prab Kalra

Thursday, 10:30am VMware on VMware: Winning a Single Sign-On Solution with VMware

Workspace ONE

SAAM1321BU Robert Coggins

Josue Fontanez

Thursday, 12:00pm AirWatch Enterprise Email Troubleshooting with Confidence UEM2120BU Jagriti Jain

Ashwin Gopal

Thursday, 1:30pm Simplify Management and Security of your Mobile Apps with Workspace ONE SAAM2294BU Vikas Jain

Vinay Jain

Also join us for Expert Discussions, and Hands-on-Labs!!!



bution



bution

UEM1859BU Be a Power Admin: VMware AirWatch or distribution · 2019-06-27 · Adarsh Kesari Senior...

Documents

Transcript of UEM1859BU Be a Power Admin: VMware AirWatch or distribution · 2019-06-27 · Adarsh Kesari Senior...