{"id":5377,"date":"2023-08-04T07:30:51","date_gmt":"2023-08-04T14:30:51","guid":{"rendered":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?p=5377"},"modified":"2023-08-04T07:38:12","modified_gmt":"2023-08-04T14:38:12","slug":"microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/","title":{"rendered":"Microsoft helps employees work securely from home using a Zero Trust strategy"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-7479 size-medium\" style=\"margin-top: 0px;\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/ms-digital-perspectives-300x106.png\" alt=\"Microsoft Digital Perspectives\" width=\"300\" height=\"106\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/ms-digital-perspectives-300x106.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/ms-digital-perspectives.png 500w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>When COVID-19 began its spread across the globe, Microsoft moved quickly to ensure our employees were able to work securely from home. Fortunately, we had a business continuity crisis plan in place that we used to guide our response.<\/p>\n<p>Our ability to respond to the crisis was greatly enhanced by how prepared Microsoft was to have its employees work from home. Having an entire company suddenly shift to remote working comes with its own challenges\u2014it\u2019s a lot more complex than making sure an employee\u2019s laptop and home Wi-Fi are secure.<\/p>\n<p>Jared Spataro, corporate vice president for Microsoft 365, and Nathalie D\u2019Hers, Corporate Vice President of Employee Experience, <a href=\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2020\/03\/12\/top-9-ways-microsoft-it-enabling-remote-work-employees\/\" target=\"_blank\" rel=\"noopener noreferrer\">shared nine things that our larger IT team, Microsoft Digital, is doing to enable remote work<\/a> at Microsoft. What I found most interesting about their conversation is how many of those nine things tie back to our Zero Trust initiative.<\/p>\n<p>Specifically, our Zero Trust strategy calls for strong identity authentication everywhere by confirming that all our users are validated using multifactor authentication (MFA). It requires that all devices employees use for work are managed and healthy. It accomplishes this by using <a href=\"https:\/\/docs.microsoft.com\/en-us\/mem\/intune\/fundamentals\/what-is-intune\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Intune<\/a> for <a href=\"https:\/\/www.microsoft.com\/en-us\/itshowcase\/managing-windows-10-devices-with-microsoft-intune\">device management<\/a>. It also relies on pervasive telemetry to monitor the performance and health of all services, applications, and networks.<\/p>\n<p>Another way to think of Zero Trust is as a requirement for constant verification. Throughout the process, Microsoft continuously monitors all access to corporate services, applications, and network connections.<\/p>\n<p>Our security strategy has been focused on Zero Trust security principles for a while now. The strategy helps us navigate supporting the vast majority of our employees as they work from home. Our ability to ensure that all of our employees are using MFA and continuously verifying that all devices on our network are managed and healthy has allowed us to accelerate our adoption of our Zero Trust strategy and to move away from a perimeter based security model.<\/p>\n<p>For most of our users, we\u2019ve been able to <a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/running-on-vpn-how-microsoft-is-keeping-its-remote-workforce-connected\/\">move away from using virtual private network (VPN) to access our line of business applications<\/a>. We have moved most of our line of business (LOB) applications to Microsoft Azure, where they are internet accessible. Applications that we are not able to move to Microsoft Azure are being published with an internet proxy. Finally, we use virtualization via <a href=\"https:\/\/www.microsoft.com\/en-us\/microsoft-365\/blog\/2019\/09\/30\/windows-virtual-desktop-generally-available-worldwide\/\" target=\"_blank\" rel=\"noopener noreferrer\">Windows Virtual Desktop<\/a> to provide our employees, vendors, and guests with the ability to access Microsoft applications in a more constrained environment that restricts movement to other Microsoft resources and network resources.<\/p>\n<p>The result is that our employees can remotely access most of our LOB applications without needing to use VPN. This meant Microsoft was very well positioned when it came time to ask our employees to work from home.<\/p>\n<p>We haven\u2019t finished deploying our Zero Trust vision, but our framework is in place, and that\u2019s helping us successfully support our remote-working employees.<\/p>\n<p>If your company is transitioning its workforce to remote working and you don\u2019t already have these same elements in place, it\u2019s probably overwhelming to think about where to begin. We suggest you start by <a href=\"https:\/\/www.microsoft.com\/en-us\/itshowcase\/implementing-strong-user-authentication-with-windows-hello-for-business\">implementing MFA<\/a>. If you don\u2019t have the necessary hardware to leverage biometrics, you can start with an app like <a href=\"https:\/\/www.microsoft.com\/en-us\/account\/authenticator\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Authenticator<\/a>. This step is the single best thing you can do to secure your environment.<\/p>\n<p>One of the benefits of our approach to Zero Trust is that it gives each company the ability to align security strategy with the cloud-first strategy that we are seeing in the industry. If you want to know more about our approach, read <a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/using-a-zero-trust-strategy-to-secure-microsofts-network-during-remote-work\/\">Using a Zero Trust strategy to secure Microsoft\u2019s network during remote work<\/a>. You\u2019ll find more content about our Zero Trust strategy by visiting this <a href=\"https:\/\/www.microsoft.com\/en-us\/itshowcase\/transitioning-to-modern-access-architecture-with-zero-trust\">Transitioning to modern access architecture with Zero Trust content suite<\/a> and by reading this <a href=\"https:\/\/www.microsoft.com\/en-us\/itshowcase\/implementing-a-zero-trust-security-model-at-microsoft\">Implementing a Zero Trust security Model at Microsoft<\/a> article.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When COVID-19 began its spread across the globe, Microsoft moved quickly to ensure our employees were able to work securely from home. Fortunately, we had a business continuity crisis plan in place that we used to guide our response. Our ability to respond to the crisis was greatly enhanced by how prepared Microsoft was to [&hellip;]<\/p>\n","protected":false},"author":83,"featured_media":5379,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"_hide_featured_on_single":false,"_show_featured_caption_on_single":true,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[1],"tags":[456,161,452,453,457,407,459,454,451,95,430,458,300,455,417,418],"coauthors":[447],"class_list":["post-5377","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-authentication","tag-azure-active-directory","tag-bcdr","tag-crisis","tag-device","tag-enterprise-mobility-and-security","tag-lob","tag-mfa","tag-remote","tag-security","tag-vpn","tag-wfh","tag-windows","tag-wvd","tag-zt","tag-ztn","program-microsoft-digital-perspectives","m-blog-post"],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Microsoft helps employees work securely from home using a Zero Trust strategy - Inside Track Blog<\/title>\n<meta name=\"description\" content=\"Microsoft is taking a Zero Trust approach to keeping its employees safe as they work from home.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft helps employees work securely from home using a Zero Trust strategy - Inside Track Blog\" \/>\n<meta property=\"og:description\" content=\"Microsoft is taking a Zero Trust approach to keeping its employees safe as they work from home.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/\" \/>\n<meta property=\"og:site_name\" content=\"Inside Track Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-04T14:30:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-04T14:38:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2200\" \/>\n\t<meta property=\"og:image:height\" content=\"1237\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Brian Fielder\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brian Fielder\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/\",\"name\":\"Microsoft helps employees work securely from home using a Zero Trust strategy - Inside Track Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg\",\"datePublished\":\"2023-08-04T14:30:51+00:00\",\"dateModified\":\"2023-08-04T14:38:12+00:00\",\"author\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/1776d129a10904df6ae18e06472638dc\"},\"description\":\"Microsoft is taking a Zero Trust approach to keeping its employees safe as they work from home.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg\",\"width\":2200,\"height\":1237,\"caption\":\"Brian Fielder speaks at Microsoft Ignite 2019. Fielder, a general manager on the security team at Microsoft, is helping Microsoft employees work securely from home. (Photo by Austin Macdowell | Inside Track)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft helps employees work securely from home using a Zero Trust strategy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/\",\"name\":\"Inside Track Blog\",\"description\":\"How Microsoft does IT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/1776d129a10904df6ae18e06472638dc\",\"name\":\"Brian Fielder\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/image\/38e3fc343f0c7b3457f6941630ec79fe\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e31480928cd95de3ed48132a27d9840c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e31480928cd95de3ed48132a27d9840c?s=96&d=mm&r=g\",\"caption\":\"Brian Fielder\"},\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/author\/bfielder\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft helps employees work securely from home using a Zero Trust strategy - Inside Track Blog","description":"Microsoft is taking a Zero Trust approach to keeping its employees safe as they work from home.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft helps employees work securely from home using a Zero Trust strategy - Inside Track Blog","og_description":"Microsoft is taking a Zero Trust approach to keeping its employees safe as they work from home.","og_url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/","og_site_name":"Inside Track Blog","article_published_time":"2023-08-04T14:30:51+00:00","article_modified_time":"2023-08-04T14:38:12+00:00","og_image":[{"width":2200,"height":1237,"url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg","type":"image\/jpeg"}],"author":"Brian Fielder","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Brian Fielder","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/","name":"Microsoft helps employees work securely from home using a Zero Trust strategy - Inside Track Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg","datePublished":"2023-08-04T14:30:51+00:00","dateModified":"2023-08-04T14:38:12+00:00","author":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/1776d129a10904df6ae18e06472638dc"},"description":"Microsoft is taking a Zero Trust approach to keeping its employees safe as they work from home.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#primaryimage","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg","contentUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg","width":2200,"height":1237,"caption":"Brian Fielder speaks at Microsoft Ignite 2019. Fielder, a general manager on the security team at Microsoft, is helping Microsoft employees work securely from home. (Photo by Austin Macdowell | Inside Track)"},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-helps-employees-work-securely-from-home-using-a-zero-trust-strategy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/insidetrack\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft helps employees work securely from home using a Zero Trust strategy"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/","name":"Inside Track Blog","description":"How Microsoft does IT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/1776d129a10904df6ae18e06472638dc","name":"Brian Fielder","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/image\/38e3fc343f0c7b3457f6941630ec79fe","url":"https:\/\/secure.gravatar.com\/avatar\/e31480928cd95de3ed48132a27d9840c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e31480928cd95de3ed48132a27d9840c?s=96&d=mm&r=g","caption":"Brian Fielder"},"url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/author\/bfielder\/"}]}},"jetpack_featured_media_url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2020\/05\/10049_wordpress_hero.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9hcZA-1oJ","_links":{"self":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/5377"}],"collection":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/comments?post=5377"}],"version-history":[{"count":7,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/5377\/revisions"}],"predecessor-version":[{"id":11648,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/5377\/revisions\/11648"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/media\/5379"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/media?parent=5377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/categories?post=5377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/tags?post=5377"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/coauthors?post=5377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}