{"id":1175,"date":"2017-06-08T08:00:46","date_gmt":"2017-06-08T15:00:46","guid":{"rendered":"https:\/\/www.microsoft.com\/lv-lv\/2017\/06\/08\/the-new-intune-and-conditional-access-admin-consoles-are-ga\/"},"modified":"2022-06-28T11:15:46","modified_gmt":"2022-06-28T18:15:46","slug":"the-new-intune-and-conditional-access-admin-consoles-are-ga","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/lv-lv\/microsoft-365\/blog\/2017\/06\/08\/the-new-intune-and-conditional-access-admin-consoles-are-ga\/","title":{"rendered":"Jaun\u0101 Intune un nosac\u012bt\u0101s piek\u013cuves administr\u0113\u0161anas konsole ir visp\u0101r\u0113ji pieejama"},"content":{"rendered":"
Past\u0101v gana daudz t\u0113mu, kas uzrodas ikreiz, kad tiekos ar m\u016bsu klientiem un partneriem, un viena no visbie\u017e\u0101kaj\u0101m t\u0113m\u0101m ir par to, k\u0101 l\u012bdzsvarot produktivit\u0101ti lietot\u0101jiem ar uz\u0146\u0113muma datu dro\u0161\u012bbas un kontroles nepiecie\u0161am\u012bbu. Spriedzi starp \u0161\u012bm div\u0101m vajadz\u012bb\u0101m ir posms, kuram past\u0101v\u012bgi rodas arvien liel\u0101ki izaicin\u0101jumi: \u00a0katrai IT komandai vis\u0101 pasaul\u0113 tiek uzdots paveikt vair\u0101k, izmantojot maz\u0101k, turkl\u0101t laik\u0101, kad tehnolo\u0123ijas att\u012bst\u0101s arvien strauj\u0101k un nozares pamati past\u0101v\u012bgi main\u0101s.<\/p>\n
\u0160aj\u0101s sapulc\u0113s manis sa\u0146emtais piepras\u012bjums ir \u013coti skaidrs un konsekvents: mums ir nepiecie\u0161ami efekt\u012bvi risin\u0101jumi, kas atvieglo pieaugo\u0161\u0101s sare\u017e\u0123\u012bt\u012bbas p\u0101rvald\u012bbu un kontroli; vai varat mums pal\u012bdz\u0113t samazin\u0101t sare\u017e\u0123\u012bt\u012bbu, ar kuru mums ir j\u0101tiek gal\u0101?<\/p>\n
Un \u0161eit m\u0113s n\u0101kam ar lab\u0101m zi\u0146\u0101m:<\/strong>\u00a0 Intune un nosac\u012bt\u0101s piek\u013cuves p\u0101rvald\u012bba kop\u0101 ar Azure AD<\/a> m\u016bsu strauji augo\u0161ajai IT speci\u0101listu kopienai ir k\u013cuvusi iev\u0113rojami vienk\u0101r\u0161\u0101ka. \u0160obr\u012bd esam sasniegu\u0161i divus svar\u012bgus atskaites punktus saist\u012bb\u0101 ar Microsoft Intune un EMS nosac\u012bt\u0101s piek\u013cuves<\/a> iesp\u0113j\u0101m:\u00a0 abas jaun\u0101s administr\u0113\u0161anas iesp\u0113jas tagad ir visp\u0101r\u0113ji pieejamas Azure port\u0101l\u0101<\/strong>.<\/p>\n Intune p\u0101rvieto\u0161ana uz Azure port\u0101lu tehniskaj\u0101 zi\u0146\u0101 ir \u013coti lielas p\u0101rmai\u0146as. Ne tikai main\u012bj\u0101s Intune konsole, bet ar\u012b visi EMS konsoles lieto\u0161anas iesp\u0113ju komponenti tagad ir apvienoti. Migr\u0113\u0161anas uz jauno port\u0101lu iesp\u0113ju process bija neticama iesp\u0113ja no jauna p\u0101rdom\u0101t visas administr\u0113\u0161anas iesp\u0113jas no pa\u0161iem pamatiem, un tas, ko m\u0113s nodro\u0161in\u0101m \u0161odien, ir unik\u0101las mobilit\u0101tes p\u0101rvald\u012bbas v\u012bzijas izpausme<\/strong>, kas veidota atbilsto\u0161i m\u016bsu vair\u0101k nek\u0101 45\u00a0t\u016bksto\u0161u unik\u0101lo maksas klientu vajadz\u012bb\u0101m<\/strong>.<\/p>\n Man pat\u012bk m\u016bsu \u0161eit g\u016btie pan\u0101kumi, jo Intune pakalpojum\u0101 Azure ir lielisks risin\u0101jums m\u016bsu eso\u0161ajiem klientiem<\/strong>, jo tagad tie var p\u0101rvald\u012bt visas Intune MAM un MDM iesp\u0113jas vien\u0101 konsolid\u0113t\u0101 administr\u0113\u0161anas viet\u0101, turkl\u0101t \u0161eit tie var neman\u0101mi izmantot visus Azure AD l\u012bdzek\u013cus. Vienreiz\u0113ji!<\/p>\n Paties\u012bb\u0101 aiz jauno administr\u0113\u0161anas iesp\u0113ju \u201cpriek\u0161kara\u201d notiek daudz kas vair\u0101k. Apvienotas ir ne tikai administr\u0113\u0161anas iesp\u0113jas, bet kop\u0113j\u0101 arhitekt\u016br\u0101 un platform\u0101 m\u0113s apvienoj\u0101m ar\u012b Intune un Azure Active Directory. Arhitekt\u016bru apvieno\u0161ana iev\u0113rojami vienk\u0101r\u0161o m\u016bsu atbalstam nepiecie\u0161amo darbu, j\u016bsu lieto\u0161anai nepiecie\u0161amo darbu, k\u0101 ar\u012b \u013cauj izmantot da\u017eus neticamus klienta\/servera scen\u0101rijus identit\u0101tes un mobilit\u0101tes p\u0101rvald\u012bbas ietvaros.<\/p>\n Ja neesat izm\u0113\u0123in\u0101jis Intune pakalpojum\u0101 Azure, iesak\u0101m p\u0101riet uz \u0161o jauno pieredzi kop\u0101 ar mums. Lai izm\u0113\u0123in\u0101tu to<\/strong>, nekav\u0113joties piesakieties Microsoft Azure port\u0101l\u0101<\/a>. \u00a0M\u0113s vienm\u0113r \u0146emam v\u0113r\u0101 j\u016bsu atsauksmes un v\u0113lamies noskaidrot j\u016bsu domas!\u00a0 Kop\u0161 decembr\u012b to s\u0101k\u0101m pied\u0101v\u0101t priek\u0161skat\u012bjuma re\u017e\u012bm\u0101, tika nodro\u0161in\u0101ts vair\u0101k nek\u0101 simts t\u016bksto\u0161u maksas un izm\u0113\u0123in\u0101jumversijas nomnieku<\/strong>.<\/p>\n Jaun\u0101s nosac\u012bt\u0101s piek\u013cuves administr\u0113\u0161anas iesp\u0113jas \u0161odien ar\u012b ir visp\u0101r\u0113ji pieejamas. Azure nosac\u012bt\u0101 piek\u013cuve bag\u0101t\u012bg\u0101s Azure Active Directory un Intune iesp\u0113jas apvieno vien\u0101 vienot\u0101 konsol\u0113. M\u0113s izveidoj\u0101m \u0161o funkcionalit\u0101ti p\u0113c piepras\u012bjumu sa\u0146em\u0161anas saist\u012bb\u0101 ar darba slod\u017eu papildu integr\u0101ciju un maz\u0101ku konso\u013cu daudzumu. Tie\u0161i to nodro\u0161ina \u0161odien pieejam\u0101s lieto\u0161anas iesp\u0113jas.<\/p>\n Organiz\u0101cij\u0101m vis\u0101 pasaul\u0113 ir izaicin\u0101jums iesp\u0113jot lietot\u0101jus arvien pieaugo\u0161aj\u0101 mobilo ier\u012b\u010du mas\u012bv\u0101, kam\u0113r dati, kuri tiem ir j\u0101aizsarg\u0101, tiek p\u0101rvietoti \u0101rpus to t\u012bkla perimetra uz m\u0101ko\u0146pakalpojumiem. Turkl\u0101t tas viss notiek, iev\u0113rojami palielinoties uzbrukumu noz\u012bm\u012bgumam un sare\u017e\u0123\u012bt\u012bbai. IT komand\u0101m ir nepiecie\u0161ams veids, k\u0101 kvantitat\u012bvi nov\u0113rt\u0113t riskus, kas saist\u012bti ar identit\u0101ti, ier\u012bci un programmu, kas tiek izmantota, lai piek\u013c\u016btu uz\u0146\u0113muma datiem, vienlaikus \u0146emot v\u0113r\u0101 fizisko atra\u0161an\u0101s vietu, un p\u0113c tam pie\u0161\u0137irt vai blo\u0137\u0113t piek\u013cuvi uz\u0146\u0113muma programm\u0101m\/datiem atbilsto\u0161i holistiskajam risku nov\u0113rt\u0113jumam \u0161ajos \u010detros virzienos. L\u016bk, k\u0101 j\u016bs g\u016bstat uzvaru.<\/p>\n Nosac\u012bt\u0101 piek\u013cuve \u013cauj to paveikt un nodro\u0161ina, ka tikai atbilsto\u0161i autentific\u0113ti un p\u0101rbaud\u012bti lietot\u0101ji<\/strong>, izmantojot sader\u012bgas ier\u012bces<\/strong> un apstiprin\u0101tas programmas<\/strong>, k\u0101 ar\u012b atbilsto\u0161os apst\u0101k\u013cos<\/strong> var piek\u013c\u016bt j\u016bsu uz\u0146\u0113muma datiem. \u0160eit izmantot\u0101 funkcionalit\u0101te ir tehnolo\u0123iski neticama, bet ne vienm\u0113r ir skaidrs, cik patie\u0161\u0101m detaliz\u0113ta un jaud\u012bga ir \u0161\u012b vad\u012bba. Jaun\u0101s nosac\u012bt\u0101s piek\u013cuves lieto\u0161anas iesp\u0113jas pakalpojum\u0101 Azure tagad \u0161o tehnolo\u0123iju padara krist\u0101lskaidru, vien\u0101 apvienot\u0101 skat\u0101 par\u0101dot dzi\u013co vad\u012bbu, kas jums ir katr\u0101 l\u012bmen\u012b:<\/p>\n <\/p>\n Tagad varat \u0113rti izmantot konsolid\u0113to pl\u016bsmu, kas \u013cauj iestat\u012bt detaliz\u0113tas politikas, kuras defin\u0113 piek\u013cuvi lietot\u0101ja<\/strong>, ier\u012bces<\/strong>, programmas<\/strong> un atra\u0161an\u0101s vietas<\/strong> l\u012bmen\u012b. \u00a0P\u0113d\u0113jo 6 m\u0113ne\u0161u laik\u0101 \u0161\u012bs integr\u0113t\u0101s lieto\u0161anas iesp\u0113jas esmu par\u0101d\u012bjis simtiem klientu, un visbie\u017e\u0101kais koment\u0101rs ir:\u00a0 \u201cTagad es piln\u012bb\u0101 saprotu, par ko Microsoft st\u0101st\u012bja saist\u012bb\u0101 ar to, ka identit\u0101tes p\u0101rvald\u012bbai\/aizsardz\u012bbai ir j\u0101darbojas ar uz\u0146\u0113mumu mobilit\u0101tes p\u0101rvald\u012bbu, lai aizsarg\u0101tu m\u016bsu datus\u201d. \u0160eit ir integr\u0113ts ar\u012b l\u012bdzeklis Microsoft Intelligent Security Graph<\/a>, kas nodro\u0161ina dinamisku risku nov\u0113rt\u0113jumu nosac\u012bt\u0101s piek\u013cuves l\u0113mumu pie\u0146em\u0161anai.<\/p>\n Piek\u013cuvi resursiem varat ar\u012b kontrol\u0113t atkar\u012bb\u0101 no lietot\u0101ju pierakst\u012b\u0161an\u0101s riska, izmantojot pla\u0161us iek\u013cautos datus. Tikl\u012bdz ir iestat\u012btas j\u016bsu politikas, lietot\u0101jiem, kas darbojas atbilsto\u0161os apst\u0101k\u013cos, tiek pie\u0161\u0137irta re\u0101llaika piek\u013cuve programm\u0101m un datiem\u00a0\u2014 tom\u0113r<\/em>, mainoties apst\u0101k\u013ciem, s\u0101k str\u0101d\u0101t intelektisk\u0101s vad\u012bklas, lai nodro\u0161in\u0101tu j\u016bsu datu dro\u0161\u012bbas saglab\u0101\u0161anu. \u0160\u012bs vad\u012bklas ietver:<\/p>\n M\u0113s uzskat\u0101m, ka korpor\u0101cijai Microsoft ir unik\u0101ls st\u0101voklis, kas \u013cauj nodro\u0161in\u0101t risin\u0101jumus, kuri ir visaptvero\u0161i un sare\u017e\u0123\u012bti, bet joproj\u0101m ir vienk\u0101r\u0161i darbin\u0101mi. Izmantojot EMS, \u0161\u0101da veida funkcionalit\u0101te ir iesp\u0113jama t\u0101p\u0113c, ka veidojam to kop\u0101, no pa\u0161iem pamatiem, lai pild\u012btu m\u016bsu ap\u0146em\u0161anos attiec\u012bb\u0101 uz dro\u0161u un mobilu produktivit\u0101ti.<\/p>\nL\u016bk, k\u0101 Intune noform\u0113juma mai\u0146a pal\u012bdz j\u016bsu organiz\u0101cijai<\/h3>\n
L\u016bk, 3\u00a0lietas, kas jums ir j\u0101zina par risin\u0101jumu Intune pakalpojum\u0101 Azure:<\/h3>\n
\n
\n<\/strong>Azure platforma nodro\u0161ina milz\u012bgu Intune elast\u012bbas un uzticam\u012bbas pieaugumu, turkl\u0101t nodro\u0161ina pamatu gandr\u012bz neierobe\u017eotai m\u0113rogo\u0161anai. Jaun\u0101s administr\u0113\u0161anas iesp\u0113jas darbosies ar\u012b jebkur\u0101 p\u0101rl\u016bkprogramm\u0101<\/strong> un jebkuras ier\u012bces<\/strong> formas faktor\u0101. Tagad varat p\u0101rvald\u012bt Intune neatkar\u012bgi no atra\u0161an\u0101s vietas\u00a0\u2014 pat no t\u0101lru\u0146a.
\nP\u0101rveidot\u0101 arhitekt\u016bra un jaun\u0101 konsole \u013cauj pan\u0101kt gandr\u012bz neierobe\u017eotu pakalpojuma m\u0113rogo\u0161anu. \u0160obr\u012bd mums ir klienti, kas strauji<\/em> palielin\u0101s l\u012bdz simtiem t\u016bksto\u0161u ier\u012b\u010du vien\u0101 nomniek\u0101. Nek\u0101du probl\u0113mu!\u00a0 Viens no klientiem past\u0101st\u012bja, ka tas saist\u012bja sare\u017e\u0123\u012btu politiku ar ~200\u00a0000\u00a0lietot\u0101ju, un to, kas k\u0101dreiz pras\u012bja stundas, paveica maz\u0101k nek\u0101 3\u00a0min\u016bt\u0113s. T\u0101 k\u0101 tagad tas ir ieb\u016bv\u0113ts Azure konsol\u0113, pilnvaru dele\u0123\u0113\u0161anai j\u016bs ieg\u016bstat visas bag\u0101t\u012bg\u0101s administr\u0113\u0161anas iesp\u0113jas, kuru pamat\u0101 ir lomas.<\/li>\n<\/ol>\n\n
\n<\/strong>P\u0101rvietojot Intune uz Azure un Azure port\u0101lu, tagad konso\u013cu lieto\u0161anas iesp\u0113jas ir pieejamas ar\u012b citos EMS pamatpakalpojumos, piem\u0113ram, Azure Active Directory un Azure inform\u0101cijas aizsardz\u012bba. \u0160o pakalpojumu blakus m\u012bto\u0161\u0101 kolekt\u012bv\u0101 jauda \u013cauj efekt\u012bv\u0101k un viegl\u0101k p\u0101rvald\u012bt identit\u0101tes un piek\u013cuves p\u0101rvald\u012bbu, MDM un MAM, k\u0101 ar\u012b inform\u0101cijas aizsardz\u012bbas darba slodzi.
\nPiem\u0113rs.\u00a0 Ja tikko pabeidz\u0101t veidot nosac\u012bt\u0101s piek\u013cuves politiku kopu, lai kontrol\u0113tu piek\u013cuvi datiem, izmantojot Intune taj\u0101 pa\u0161\u0101 port\u0101la vid\u0113, tagad esat tikai viena klik\u0161\u0137a att\u0101lum\u0101 no t\u0101du papildu programmu aizsardz\u012bbas politiku pievieno\u0161anas, kas nodro\u0161ina j\u016bsu datu aizsardz\u012bbu p\u0113c piek\u013cuves tiem un izmantojot mobilaj\u0101s ier\u012bc\u0113s.
\nIntune p\u0101reja uz Azure nodro\u0161ina ar\u012b padzi\u013cin\u0101tu integr\u0101ciju ar Azure Active Directory grup\u0101m, kuras gan lietot\u0101jus, gan ier\u012bces var nor\u0101d\u012bt k\u0101 viet\u0113jas, dinamiski izv\u0113l\u0113tas grupas, kuras ir piln\u012bb\u0101 federat\u012bvas ar organiz\u0101cijas lok\u0101lo Active Directory.<\/li>\n<\/ol>\n\n
\n<\/strong>Veidotas par pamatu izmantojot Microsoft Graph API<\/a>, jaun\u0101s Intune lieto\u0161anas iesp\u0113jas \u013cauj pan\u0101kt pla\u0161\u0101ku sist\u0113mu integr\u0101ciju un automatiz\u0101ciju. Tas noz\u012bm\u0113, ka tagad m\u016bsu klienti p\u0113c saviem ieskatiem var vienk\u0101r\u0161ot, automatiz\u0113t un integr\u0113t darbpl\u016bsmas gan Intune, gan ar\u012b citos pakalpojumos. Papildinform\u0101ciju par to, k\u0101 \u0161o visu var izmantot ieteicams skat\u012bt \u0161aj\u0101 rakst\u0101<\/a>. Microsoft Graph API iesp\u0113jas pa\u0161laik darbojas priek\u0161skat\u012bjuma re\u017e\u012bm\u0101; \u0161\u012bs funkcionalit\u0101tes visp\u0101r\u0113jas pieejam\u012bbas izzi\u0146o\u0161anu gaidiet n\u0101kamaj\u0101 ceturksn\u012b.<\/em><\/li>\n<\/ol>\nNosac\u012bt\u0101 piek\u013cuve\u00a0\u2014 jaun\u0101s administr\u0113\u0161anas iesp\u0113jas Azure port\u0101l\u0101<\/h3>\n
\n