Windows 10: Ensuring mobile devices are up to date using Microsoft Intune

Brink · Aug 26, 2016

On August 25th, 2016 Lookout released research, conducted in partnership with The Citizen Lab (Munk School of Global Affairs, University of Toronto), about a sophisticated, targeted, and persistent mobile attack on iOS that uses three zero-day vulnerabilities called “Trident.” When exploited, these vulnerabilities can form an attack chain that subverts even Apple’s strong security.

According to Lookout’s research, Trident is used in a mobile spyware product called Pegasus, attributed to an organization called NSO Group, to attack high-value targets. The Pegasus attack starts with SMS phishing using spoofed sender numbers and anonymized domains to deliver malware to the target’s iPhone. The target’s phone is remotely jailbroken and immediately starts compromising the target’s digital life. Further, Pegasus has a built-in self-destruct capability. Lookout’s research reveals that the system is always monitoring to see if it’s been discovered. If it detects tampering, it has the ability to wipe itself out. Lookout is reporting that their products detect and alert customers to this threat.

Lookout has published extensive information on this threat in this blog post and this associated white paper.

Microsoft and Lookout have been working together on a partnership for mobile security that can help you insure that your corporate assets are always protected.

In addition to the use of mobile security technology, Microsoft Intune, part of the Enterprise Mobility + Security (EMS) suite, provides capabilities to help reduce the risk of data loss due to compromised devices by helping ensure that devices are up to date and fully patched.

Given that OS updates take time to roll out across all devices in your organization, you can run the Intune Mobile Device Inventory report to view which devices are still vulnerable. This report shows all devices that are enrolled in Intune MDM, plus devices connected to Exchange through Exchange ActiveSync (the latter requires the Exchange connector to be deployed).

The report will enable you to identify who you should follow up with to ensure they plan to install the latest updates.

You can start enforcing an update by setting the minimum OS version setting in an Intune compliance policy and using Conditional Access to restrict access to services like Exchange Online and SharePoint Online.

You can also specify a patch version for Android devices.

Users who attempt to connect to these services from an unpatched device will be blocked until they are at the required version. It is recommended that organizations provide early notification to users before this policy goes into effect.

You can use these methods to help ensure that iOS, Android, Windows, and Windows Phone devices are patched and up to date.
Click to expand...

Source: Ensuring mobile devices are up to date using Microsoft Intune Enterprise Mobility and Security Blog

:)

garym123 · Aug 26, 2016

InTune Enterprise Mobility on Windows Mobile?

There is a lot of info online

Supported devices

Operating systems and browsers supported by Microsoft Intune

Use managed devices

Use managed devices to get work done

Windows devices

Using your Windows device with Intune

It looks like Windows mobile devices don't need an app, just enrolled

Using your Windows device with Intune

Kai Ponte · Aug 26, 2016

InTune Enterprise Mobility on Windows Mobile?

My organization is requiring that we migrate all mobile devices to use managed services for our corporate email and calendaring. I am in charge of deployment for my department. I have instructions to deploy InTune on our 144 Android devices and 51 Apple
devices. However, I cannot find where to install InTune on our Windows Mobile devices. I don't even see InTune as an app in the store. Unfortunately, both my Microsoft sales rep and TAM now use Iphones.

Any ideas?

Windows 10: Ensuring mobile devices are up to date using Microsoft Intune

Ensuring mobile devices are up to date using Microsoft Intune

Ensuring mobile devices are up to date using Microsoft Intune

Ensuring mobile devices are up to date using Microsoft Intune - Similar Threads - Ensuring mobile devices

Patch Windows 10 devices using Intune

Patch Windows 10 devices using Intune

Patch Windows 10 devices using Intune

Intune device issue

Used laptop - Microsoft Intune registered?

Used laptop - Microsoft Intune registered?

Window is not up to date microsoft device account

Microsoft is not up to date

Ensuring Windows 10 devices are up to date never been more important