Windows 10 Enterprise and security function interpretation

Microsoft's latest windows are not just changes in the user interface, but Microsoft also brings new changes in the security, manageability, and application stores of the system. Recently, the Science and Technology Web site ZDNet on these low-level functions of the analysis and introduction.

Last week, Microsoft's official blog introduced new features in Windows 10 that would be of interest to business users, but the introductions were vague.

Microsoft last week provided two preview versions of Windows 10, technical previews and enterprise technology previews. The latter includes some enterprise-qualified SKU features, such as Windows to Go,directaccess,branchcache and AppLocker, which are not available in another version. While not all of these features are in the current preview, Microsoft should be adding them incrementally in future upgrades.

Oliver Niehus, Microsoft Windows and Security chief Application development manager, previously published an article on Windows 10 Security, privacy, and management features in his MSDN blog, but quickly removed it. But the content is still known to the outside world.

Niehus says Microsoft has been doing enough to secure Windows 10 security features. In this release, they turned azure Active directory into a "first-class citizen", allowing users to log into the device using Azure ad identity to enjoy the same benefits as using the MSA (Microsoft account), such as the access rights of the application store, settings, synchronization, and dynamic tiles. Businesses can still use existing active Directory without the need for a Microsoft account. Windows 10 will also have a "next-generation user certificate", which is like a password replacement that can bring a single sign-on anywhere.

"Threshold (Windows 10) puts data protection into the natural stream and consolidates data protection at the platform level. "Niehus wrote. It supports every VPN application, that is, it allows a specific application to use a VPN connection. Administrators can restrict remote access to specific applications and/or specific port/IP addresses. For example, IT departments can allow it access through VPN, but limit it to a specific port or IP address. Another example is that the IT department can allow applications in the Enterprise Data Protection (Enterprise) list to access VPNs. Protection Existing Inbox VPN clients or Windows Store VPN clients (Windows 8.1 and Windows Phone 8.1) can support this feature.

Microsoft's official layer says Windows, Windows Phone and Xbox One will have a unified App store in the future. And Niehus revealed that the App Store will also usher in a series of adjustments and promotion.

"The new Windows application store supports more than just modern applications. It will also include desktop applications and other types of digital content. We will provide a variety of ways to pay applications and add an organization store to the public windows Store to allow organizations to place common public applications and specific business applications that employees require. ”

Microsoft is also developing new bulk purchase capabilities that enable companies to implement bulk purchase, deployment, and management of applications. In this way, the application authorization can be retracted and reused after the employee leaves the office. Microsoft will support the use of Azure Active directory accounts to obtain organizational applications, while Microsoft accounts are used to access private applications. Microsoft will also continue to allow users to sideload applications, or use new mobile device management controls to deploy from app stores.

Companies can also use mobile device management (MDM) services such as Intune. The latter will communicate with the bulk purchase project to allow the Windows store to perform heavy operations, such as installing applications and obtaining authorization for users.

When it comes to MDM, Microsoft will also bring the MDM feature to the desktop and notebook through Windows 10. In addition, Microsoft will allow Third-party MDM services to manage Windows and Windows Phone VPN based remote access. Any VPN service provider can create a remote access application,

In addition to these, Windows 10 has some enterprise features that Niehus not mentioned, including quick update features and System Center management plans, and so on.