In order to provide an advanced education in the 21st century, your school needs to make the most of what modern technology has to offer. Ensuring students and staff have access to the latest applications is essential to increasing engagement, collaboration and innovation.
Some schools may already be using Microsoft Office 365 as their main education platform, while others may be using Google’s G-Suite for Education and various other applications.
Many are using various Windows laptops, while others are on Chromebooks or Macbooks to enhance student learning and communication.
However, the challenges of handling various platforms for accessing resources can be overwhelming. Security, accessibility, and resource management are just a few problems that can disrupt the learning environment.
By implementing Microsoft Enterprise Mobility Suite (EMS) for your school, you can enable the security and mobility of students and faculty no matter what combination of applications or devices are on campus or online.
MAKE EVERY SINGLE MINUTE COUNT
When teachers are unable to log in at the start of class or quickly get to the websites they need to start their lesson plan, the entire classroom is disrupted. Precious minutes are wasted and students’ learning comes to a standstill.
When faculty members are unable to grade papers or prepare assignments from home, they are falling behind schedule having to wait until the next day to access the resources they need.
In the education world, every minute counts. When you’re managing thousands of students and staff, the need for quick and streamlined access to everyday applications is critical. The ability to manage a multitude of mobile devices with the same consistency and experience is essential.
Did you know that mobility is expected to account for 10 to 12% of the total IT expenditure for 2020?
And according to a PBS Survey, teachers are integrating digital learning into their classrooms now more than ever.
48% of teachers surveyed reported using technology for online lesson plans
45% give students access to web-based educational games or activities
65% of teachers reported technology allows them to demonstrate lessons they cannot show in any other way
EMS is a One-Stop Suite for Everything You Need
So how do you manage those myriad devices within your educational institution securely and effectively?
With Microsoft’s Enterprise Mobility Suite (EMS), mobile device management is made easy. Here are some key features to consider with EMS for your school:
Secure and manage your identity across on-premises and cloud devices with features like single sign-on, multi-factor authentication for any application, and self-service. With the advent of the cloud, SaaS, and cloud applications, you can replicate objects and identities in Azure. Now, you have two hubs that you can use to provide identity authentication. You can leverage Azure to tie in all of your applications, whether they are on-premise, custom-developed, or already in existence in the market. This allows users to access ALL apps from one portal. They only need a single password and username to gain access. When someone leaves the company or a new employee arrives, administration to provision or deprovision the user is made much simpler.
Multi-factor authentication: For on-premise and cloud applications, you can set conditions which will trigger an MFA challenge. Examples of these conditions include user attributes (ex: all members of sales should access CRM), devices (ex: only domain joined devices or devices with up to date anti-virus can access certain apps), type of application, location or IP range (ex: create a geofence and question traffic outside of known networks with MFA), and security risk level of the app.
Advanced Threat Analytics
Identify suspicious activities and advanced attacks that target your on-premises platform. Quickly focus on what is most important with clear, actionable reporting.
Almost all banking institutions track spending patterns to trigger possible fraudulent activity on a user’s banking account. Similarly, Microsoft is learning about how users use their identities and devices. For example, once ATA is turned on, if you live in San Diego and drive to work in Irvine, it will recognize patterns including that a user may log into network resources from home in San Diego and also logs into the network from his office in Irvine. Any departure from this pattern is considered a risk event. For example, if you take a business trip to Dallas, Texas, this will be outside of the usual pattern, which will trigger a multi-factor authentication.
MDM with InTune
You can create policies around enrollment. For example, require your current OS before allowing a device to enroll. You can also decide which applications can run on these devices by sanctioning certain applications, such as Outlook and Word, as well as mark certain apps like Facebook as unsanctioned. You can allow an attachment from a sanctioned apps, like Outlook, to be opened, copied, etc. but you are able to block saving or copying and pasting into marked unsanctioned apps like personal storage apps.
In the past, a remote app would wipe ALL data- corporate and personal. Now, you can selectively wipe only data that belongs to the sanctioned app- meaning, the ex-employee can keep their photos of their kids on the phone and the remote wipe will only remove corporate data like their work email account.
Azure Rights Management
Protect your information from unauthorized access – both internal and external – no matter whom you share it with. Azure Rights management allows users to send and receive sensitive files and emails across all devices – including smartphones, tablets and PCs with greater peace of mind.
Can you answer “yes” to these questions?
Are you helping your school protect user logins to web apps?
Can you be certain you’re protecting documents from landing in the wrong hands?
Are you providing safe and secure access to school resources for BYOD?
EMS helps you adapt and respond quickly to malicious activities and modern threats in near real time with constant reporting and remediation. That way you can protect student data, secure mobile devices, and thwart threats before they cause damage to your organization.
Microsoft has created security at the file level with information protection. It can detect the fact that certain files can be marked as critical or confidential. For example, it can be configured to recognize all files that include passwords or sensitive data and can encrypt those files. In a sense, because the security is at the document level, the document is alive and will report attempted opens, denied opens, views, and more. Every file has its own web portal that can be accessed. First, you classify and label the data to apply security or business logic to it. Then, you can protect the data with encryption, access control, and policy enforcement and track the documents. Here is an example of the portal that you can track a document from. You can click a button in this portal that says “Revoke access” which will deny all attempts.
Cloud App Security
What about the apps outside of the Microsoft ecosystem? What if your boss comes to you and asks how much time faculty or students are spending on Instagram or Facebook? The cloud app security piece of EMS gives you the insight needed. It connects to your firewalls and audit logs from windows servers and will generate a live view of what is happening within your organization that you can configure alerts against. With the Adallom acquisition, Microsoft has over 13,000 apps graded for level of risk.
Akins IT Can Show You the Way
Leverage the latest technologies and devices for your school with our help. At Akins IT, we believe valuable time shouldn’t be wasted on trying to log in or manage applications with technological limitations. By taking advantage of what Microsoft Enterprise Mobility Suite has to offer, you can successfully foster a dynamic learning environment with secure access to valuable educational resources and applications.
We hold several informative EMS workshops for our clients throughout the week and would love for you to sign up. Or get in touch directly, and we’ll show you how you can leverage EMS to reach higher and farther for your students.