7 enterprise mobile management features in Windows 10

Security and enterprise mobile management (EMM) are big concerns for businesses of all sizes as they scramble to make sure corporate data is secure. And there’s no shortage of EMM products, but there are features already baked into your operating system?

Microsoft, for example, with its Windows 10 update, Redstone 1 — officially called the Windows 10 Anniversary Update 1607 — introduced a slew of new IT friendly features. Here are the six most notable features in the latest update that will get IT celebrating.

Windows Information Protection

With Windows Information Protection (WIP), previously called enterprise data protection (EDP), IT departments can get a handle on BYOD. It allows you to manage data on enterprise-owned and personal devices to avoid any security issues if a device falls into the wrong hands. Employees won’t have to change the devices or apps they use and businesses can have the peace of mind of being able to encrypt and remote-wipe corporate data without affecting personal data.

Audit reports also help keep on top of devices that have lapsed in updates, or that require immediate action. It also encrypts any data that an employee copies or downloads to their device from services like SharePoint or a shared network, adding another layer of security.

[ Related story: 4 tips for tough conversations with your employees ]

MDM updates

If you want, you can look at the entire list of things that have changed in terms of Microsoft’s MDM tools in Redstone 1, right down to every new setting they included. But for a brief overview, Microsoft updated the enrollment procedure, making it easier to get Windows devices secured. In the past, users had expressed difficulties with MDM enrollment for Azure Active Directory and issues with software compatibility, but those problems should be cleared up with the latest update. There aren’t any major updates to the MDM tools, but you’ll also find tons of new processes added and plenty of niggling bugs patched.

Windows Hello for Business

Managing passwords has been an uphill battle for IT departments — employees don’t want to make complex ones they’ll forget, or they end up using the same one across multiple platforms and eventually become frustrating with changing their password every few months. But with Windows Hello for Business, users can authenticate their Windows account using something even more secure: their face. This feature already exists on Windows 10 devices with front-facing webcams, but now the technology has been extended to business users, and IT departments can configure exactly how they want it to work. Users can also choose to create a PIN, or a biometric gesture to sign into not only their device, but other compatible Microsoft accounts.

Upgraded analytics

Getting everyone in the office up and running on the same operating system can be a headache for any IT department large or small. There are bound to be compatibility issues, employees are likely running on different PC models and it takes time and energy to update every computer. But with Upgrade Analytics, businesses can get a rundown of system, application and driver data to identify any compatibility issues before they happen making a company-wide upgrade a much smoother process.

Malware updates

Windows Defender is not new to Redstone, but the updates Microsoft introduced almost make it feel like a new service thanks to updates to its well-known malware program. Most notably, it can now run offline using the most recent up-to-date definitions, so you don’t have to be connected to the internet or your company’s network to eliminate threats. Microsoft also introduced Block at First Sight, which promises to reduce Windows Defender’s response time to new malware down to mere seconds, rather than hours, finding and identifying malware before it can manage to do any damage.

App management & customization

Prior to this update, Windows users had to download separate programs to run virtualized apps and any customized Windows or application settings had to be managed manually. Now, those are baked into the update, with App-V and UE-V, which automate both processes. With App-V, IT departments can give employees access to custom apps as virtual applications in real-time, while they’re managed and stored on central servers. Meanwhile, UE-V lets users store customized windows and app settings and then synchronize those across multiple devices, anytime, anywhere to any users you have in the enterprise. You can even create custom templates for business-apps and third-party apps as well.