Microsoft Enterprise Mobility + Security

very large encompassing product with a lot of configurations and controls. Easy to get lost in the licensing though for features you want to use. I use this for general systems management and the defender for endpoint suite. With the toolsets you have access to in depth reporting and some analysis is available within a few minutes of the incident and can start generating automated actions.

Overall it is well suited to a mid size Enviromint with a limited staff. If you have a limited amount of time you can dedicate to solutions then having one that is by default already included in the system and can be managed well then it makes for fast integration with low overhead.

We use Microsoft Enterprise Mobility + Security primarily for end-point management as well as for its multifactor authentication and privileged identity management.

We use it to manage the setup and security of our devices through the use and configuration of Microsoft Intune as well use using it to secure all user accounts with MFA and our admin account with PIM.

Microsoft Enterprise Mobility + Security has been ideal for our organization (and would be for any I can think of) for securing user accounts through MFA and admin accounts through PIM.

Its end-point management is also great for set-up and configuration as well as management of your devices. It also provides you with useful metrics and feedback on your devices.

Microsoft offers a convenient package for simplicity and security for our end users with Microsoft Endpoint Mobility + Security. In this product offering, we opted for the E5 plan which encompasses Azure P1, Azure Information Protection P1, ATP and Microsoft Intune. We were already using some of these solutions as standalone products, so it's great to have it bundled into one product offering for simplicity. Since our organization is predominantly Windows based, we use Microsoft Intune to manage user access to sensitive company data, and on all devices such as laptops, workstations/desktops, and countless mobile devices.

One of the greatest solutions included in Microsoft Enterprise Mobility + Security is their Advanced Threat Protection (ATP). We find that ATP is very well polished and proficient in protecting our business in our security challenges. We also use Microsoft Intune to manage over 5000 devices, including any from 'BYOD'. Working with our Enterprise Mobile app developers, we ensure that our business (and our users) is well protected.

We implement Microsoft EMS + Security at all of our clients who use Office 365, as well as internally. It provides advanced threat protection from malware, phishing and impersonation attacks, as well as includes an Azure AD Premium subscription for each user, so they are licensed for Azure AD services like Single Sign-On, which we use with just about any cloud service we can that supports Azure AD SSO via SAML. Lastly, we use the InTune subscription included for basic asset management and configuration policies for Windows 10 devices.

Any organization that is running Office 365 for email should have EMS licenses. The benefits are manifold compared to the reasonable cost. Truthfully, I think a lot of the features should be part of an O365 Business Premium license, but since the EMS license is a drop in the bucket, it's hard to complain.