Enterprise Mobility Security

**AZURE ACTIVE DIRECTORY & IAM**

Configuration and setup of Azure Active Directory (AAD) for the Client's organization.

Integration of AAD with on-premises Active Directory (AD) for user and attribute synchronization and seamless user management.

Configuration of Multi-Factor Authentication (MFA) to enhance security and prevent unauthorized access.

Auto license assignment policies based on logic shared by Maxlife Team

Configuration of conditional access policies to enforce additional security measures based on user behavior and risk factors.

Configure Public DNS Device Registration

SSPR-Self-service password reset/ change/unlock with right back on-premises AD.

Configure USB block, Password Policy, and Admin rights block policies.

Configure banned password list for authentication.

Configure Hybrid Azure AD Join for Maxlife assets.

Configure Conditional Access Policy to enable Multi-Factor Authentication for Office 365 Services.

Configure Conditional Access Policy to prevent access of Maxlife M365 services from non-managed devices and non-trusted IP Addresses.

Configure GPO to enable Intune Auto-enrolment of Maxlife Provided assets (Laptop\Desktop) and Mobile device (BYOD)

Set Mobile Devices Management (MDM) Authority

Auto Configure OneDrive Policy for Desktop and document folder on Windows 10 and later devices.

Configure up to 5 Dynamic Group for Intune Policy.

Company branding for sign in page as per available customization & requirement.

Alerts & report configuration to monitor usage, unauthorized access, compliance related issues.
- **Intune/MDM**

Provisioning and setup of Intune for the Max Life's organization.

Configuration of device enrollment methods, including user-driven, automatic, and bulk enrollment options in alignment with Maxlife Security standards

Implementation of conditional access policies to enforce security measures based on device compliance and user context.

Integration of Intune with Azure Active Directory (AAD) for user and device management.

Implementation of app protection policies to control access and prevent data leakage from managed apps.

Blocking Websites - only allowed websites can be accessed through company asset irrespective of network connectivity.

Device and app troubleshooting during project deployment, including remote device wiping if necessary.

Guidance on utilizing Intune reports and analytics to monitor device and app compliance.

Configuration of BitLocker auto encryption and key rotation policies

Create an App protection policy for iOS, Android for Office 365, and Hybrid Exchange mailboxes for Intune Gallery Apps.

Configuration of MAM & MDM policies as per Maxlife security requirements listed below:

- Enrollment process for approved and compliant mobile devices._
- Prevent cut/copy & paste from managed apps to non-managed apps._
- Prevent Screenshots on Android Devices._
- Apps password / Pin._
- Remote push for supported apps_
- Jailbroken device cannot access Office 365 Services._
- Selective Wipe
- Official App & Data Container deletion should take place without deleting the user’s personal data for BYOD Devices._
- Mobile screenshot protection form iOS for Company own devices only in MDM scenario._
- Remote lock_

Configuration of management policies for Windows10 & above
- Autopilot (Zero touch provisioning of new/reset devices)_
- Windows update management (feature & quality updates)_
- BitLocker (full disk encryption & removable media) enablement_
- Attack Surface Reduction - Device control etc._
- Windows Hello for Business_
- Windows defender antivirus rollout for eligible SKU/plan_

Enroll up to (200) including Windows 10, Android, and iOS devices with Intune. (After UAT signoff). UAT must be performed by at least combination of 50 users.
- **MS Collaboration Apps**:
Configuration of MS teams, Viva Engage, SharePoint & OneDrive access policies for Maxlife Assets and Mobile devices.

Support for user onboarding, including training materials and resources.

Configuration of the Viva Engage platform to align with Max Life's branding and corporate identity.

Configuration of security settings, such as data encryption, compliance, and retention policies across O365

Training sessions for the Max Life’s IT team on administering and managing O365 EMS effectively.

Recommendations and support for optimizing Teams performance and scalability based on the Client's requirements.

Assistance with user onboarding and training sessions to promote adoption and effective usage of Microsoft services like Intune, Microsoft Teams, SharePoint, Viva Engage, Self-password reset and Self BitLocker recovery features.
- **Microsoft Information Protection**

Design and implement Microsoft Information Protection capabilities consistent with Customer classifications.

Configuration for online services to use the Microsoft Rights Management service for Exchange Online.

Configure and Publishing Policy, including the addition of up to 4 custom labels