However, you can also directly connect a Windows 10 device to a device management server. Device Management: Azure AD can optionally enroll your device in an MDM, or mobile device management, server.The account provides single sign-on to work resources and applications. Administrators can apply different, less-restrictive policies to these personally-owned devices than they would to fully domain-joined employer-owned devices. The device is then registered in the organization’s Azure AD server and can be automatically enrolled in a mobile device management system–or not. Azure AD: As Microsoft’s Azure documentation explains, Windows 10 allows you to add a “work or school account” to your computer, tablet, or phone.There are actually two Work Access options on this screen: Azure AD and Device Management. Domain-joining is intended for devices an organization owns, while devices owned by employees or students should use Work Access options instead. This is an alternative to joining computers to a domain. How much control the organization exerts over your device is up to that specific organization and how its servers are configured. You give the organization some control over your device so it can be remotely managed and secured. These resources can include enterprise apps, certificates, and VPN profiles, for example. The organization provides an account and various resources to you. This is known as a “bring your own device,” or BYOD, scenario. The “Work Access” options are intended for situations where you own your own computer and need to use it to access work or school resources. RELATED: What is a Windows Domain and How Does It Affect My PC? What Are Work Access, Azure AD, and Device Management?
0 kommentar(er)
