Microsoft Enterprise Mobility + Security

We use Microsoft Enterprise Mobility + Security primarily for end-point management as well as for its multifactor authentication and privileged identity management.

We use it to manage the setup and security of our devices through the use and configuration of Microsoft Intune as well use using it to secure all user accounts with MFA and our admin account with PIM.

Microsoft offers a convenient package for simplicity and security for our end users with Microsoft Endpoint Mobility + Security. In this product offering, we opted for the E5 plan which encompasses Azure P1, Azure Information Protection P1, ATP and Microsoft Intune. We were already using some of these solutions as standalone products, so it's great to have it bundled into one product offering for simplicity. Since our organization is predominantly Windows based, we use Microsoft Intune to manage user access to sensitive company data, and on all devices such as laptops, workstations/desktops, and countless mobile devices.

We implement Microsoft EMS + Security at all of our clients who use Office 365, as well as internally. It provides advanced threat protection from malware, phishing and impersonation attacks, as well as includes an Azure AD Premium subscription for each user, so they are licensed for Azure AD services like Single Sign-On, which we use with just about any cloud service we can that supports Azure AD SSO via SAML. Lastly, we use the InTune subscription included for basic asset management and configuration policies for Windows 10 devices.