Exportovat (0) Tisk
Rozbalit vše
EN
Tento obsah není k dispozici ve vašem jazyce, ale můžete využít tuto verzi v anglickém jazyce.

Mobile Device Management Capabilities in Windows Intune

Updated: August 25, 2014

Applies To: Windows Intune

As a standalone service, Windows Intune offers the features in the following tables for supported mobile devices like iOS, Android, and Windows devices. You can manage Windows 8.1 devices using the Windows Intune client or enroll them as mobile devices. The following information for Windows 8.1 applies to Windows 8.1 devices that are enrolled as mobile devices.

This document lists the capabilities for mobile device management using Windows Intune as a standalone service. If you are planning to use Configuration Manager with the Windows Intune connector to manage devices, see How to Manage Mobile Devices by Using Configuration Manager and Windows Intune.

The following sections list the Intune policy settings you can use to help manage mobile devices.

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Require a password to unlock mobile devices

No

No

Yes

Yes

Yes

Required password type

Yes

Yes

Yes

Yes

No

Required password type – Minimum number of character sets

Yes

Yes

Yes

Yes

No

Minimum password length

Yes

Yes

Yes

Yes

Yes

Allow simple passwords

No

No

Yes

Yes

No

Number of repeated sign-in failures to allow before the device is wiped

Yes

Yes

Yes

Yes

Yes

Minutes of inactivity before screen turns off

Yes

Yes

Yes

Yes

Yes

Password expiration (days)

Yes

Yes

Yes

Yes

Yes

Remember password history

Yes

Yes

Yes

Yes

Yes

Password quality

No

No

No

No

Yes

Allow picture password and PIN

Yes

Yes

No

No

No

Minutes of inactivity before password is required

No

No

No

Yes

No

Allow fingerprint unlock

No

No

No

iOS 7 and later

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Require encryption on mobile device

No

No

Applies to Windows Phone 8. Windows Phone 8.1 is already encrypted and cannot be unencrypted.

No

Yes

Require encryption on storage cards 1

n/a

n/a

n/a

n/a

n/a

1 Applies to devices that are managed by Exchange ActiveSync only.

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Require network firewall

Yes

No

No

No

No

Enable SmartScreen

Yes

No

No

No

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Require automatic updates

Yes

No

No

No

No

Allow screen capture

No

No

Windows Phone 8.1 only

Yes

No

Allow control center in lock screen

No

No

No

iOS 7 and later

No

Allow notification view in lock screen

No

No

No

iOS 7 and later

No

Allow today view in lock screen

No

No

No

iOS 7 and later

No

User Account Control

Yes

No

No

No

No

Allow diagnostic data submission

Yes

No

Windows Phone 8.1 only

Yes

No

Allow untrusted TLS certificates

No

No

No

Yes

No

Allow personal wallet software while locked

No

No

No

Yes

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow backup to iCloud

No

No

No

Yes

No

Allow document sync to iCloud

No

No

No

Yes

No

Allow Photo Stream sync to iCloud

No

No

No

Yes

No

Require encrypted backup

No

No

No

Yes

No

Work Folders URL

Yes

No

No

No

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow Microsoft account

No

No

Windows Phone 8.1 only

No

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow users to download email attachments1

n/a

n/a

n/a

n/a

n/a

Email synchronization period1

n/a

n/a

n/a

n/a

n/a

Allow mobile devices that don’t fully support these settings to synchronize with Exchange (Exchange ActiveSync) 1

n/a

n/a

n/a

n/a

n/a

Make Microsoft account optional in Windows Mail application

Yes

No

No

No

No

Allow custom email accounts

No

No

Windows Phone 8.1 only

No

No

1 Applies to devices that are managed by Exchange ActiveSync only.

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow web browser

No

No

Windows Phone 8.1 only

Yes

No

Allow autofill

Yes

No

No

Yes

No

Allow pop-up blocker

Yes

No

No

Yes

No

Allow cookies

No

No

No

Yes

No

Allow plug-ins

Yes

No

No

No

No

Allow active scripting

Yes

No

No

Yes

No

Allow fraud warning

Yes

No

No

Yes

No

Allow intranet site for single word entry

Yes

No

No

No

No

Allow automatic detection of intranet network

Yes

No

No

No

No

Security level for Internet

Yes

No

No

No

No

Security level for intranet

Yes

No

No

No

No

Security level for trusted sites

Yes

No

No

No

No

Security level for restricted sites

Yes

No

No

No

No

Send Do Not Track header

Yes

No

No

No

No

Allow Enterprise Mode menu access

Yes

No

No

No

No

Enterprise Mode site list location

Yes

No

No

No

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow application store

No

No

Windows Phone 8.1 only

Yes

No

Require a password to access application store

No

No

No

Yes

No

Allow in-app purchases

No

No

No

Yes

No

Allow managed documents in other unmanaged apps

No

No

No

iOS 7 and later

No

Allow unmanaged documents in other managed apps

No

No

No

iOS 7 and later

No

Allow video conferencing

No

No

No

Yes

No

Allow adult content in media store

No

No

No

Yes

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow Game Center friends

No

No

No

Yes

No

Allow multiplayer gaming

No

No

No

Yes

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow camera

No

No

Windows Phone 8.1 only

Yes

Yes

Allow removable storage

No

No

Yes

No

No

Allow Wi-Fi

No

No

Windows Phone 8.1 only

No

No

Allow Wi-Fi tethering

No

No

Windows Phone 8.1 only

No

No

Allow automatic connection to free Wi-Fi hotspots

No

No

Windows Phone 8.1 only

No

No

Allow Wi-Fi hotspot reporting

No

No

Windows Phone 8.1 only

No

No

Allow geolocation

No

No

Windows Phone 8.1 only

No

No

Allow NFC

No

No

Windows Phone 8.1 only

No

No

Allow Bluetooth

No

No

Windows Phone 8.1 only

No

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow voice roaming

No

No

No

Yes

No

Allow data roaming

Yes

No

No

Yes

No

Allow automatic synchronization while roaming

No

No

No

Yes

No

 

Setting name Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Allow voice assistant

No

No

No

Yes

No

Allow voice assistant while device is locked

No

No

No

Yes

No

Allow voice dialing

No

No

No

Yes

No

Allow copy and paste

No

No

Windows Phone 8.1 only

No

No

Use Windows Intune to deploy and install software on computers and mobile devices in your organization. For more information, see Deploy software to mobile devices in Windows Intune. The following table includes app deployment options for mobile devices.

 

Application Deployment Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android

Sideloaded Apps

Yes

Yes

Yes

Yes

Yes

Deploy links to stores including:

  • Windows Store

  • Windows Phone store

  • App store

  • Google Play

Yes

Yes

Yes

Yes

Yes

Web links (External Links)

Yes (install shortcut)

No

Yes (launch only)

Yes (install Web clip)

Yes (install shortcut)

Featured apps

Yes

Yes

Yes

Yes

Yes

You can run reports to view information about:

Because mobile devices can store sensitive corporate data and provide access to many corporate resources, Windows Intune provides the following methods to help secure sensitive data in the event that a device is lost or stolen:

  • Full wipe

  • Selective Wipe

  • Remote lock

  • Passcode reset

You can issue a remote device wipe command from the Windows Intune administrator console or users can issue their own remote device wipe commands from the Windows Intune company portal. A remote wipe can either set the device back to factory settings or you can use a selective wipe to only remove company data. You can also remotely lock the device or reset the passcode.

For more information, see Help protect your data with Remote Wipe, Remote Lock, or Passcode Reset Using Windows Intune.

 
Byl tento obsah pro vás užitečný?
(Zbývající počet znaků: 1500)
Děkujeme za váš názor.
Zobrazit:
© 2014 Microsoft