Microsoft Enterprise Mobility + Security

very large encompassing product with a lot of configurations and controls. Easy to get lost in the licensing though for features you want to use. I use this for general systems management and the defender for endpoint suite. With the toolsets you have access to in depth reporting and some analysis is available within a few minutes of the incident and can start generating automated actions.

• Low overhead for setup and machine configurations
• Automated alerting with backed in knowledge base.
• Easy update cycles
• Updates can cause negative results and are hard to track

Microsoft offers a convenient package for simplicity and security for our end users with Microsoft Endpoint Mobility + Security. In this product offering, we opted for the E5 plan which encompasses Azure P1, Azure Information Protection P1, ATP and Microsoft Intune. We were already using some of these solutions as standalone products, so it's great to have it bundled into one product offering for simplicity. Since our organization is predominantly Windows based, we use Microsoft Intune to manage user access to sensitive company data, and on all devices such as laptops, workstations/desktops, and countless mobile devices.

• On-Premise Advanced Threat Protection (ATP)
• Microsoft Intune

• Increased productivity, including service requests for our customers
• Reduced operational costs, and threat/risk of cyber-attacks

ChromeOS

We use Microsoft Enterprise Mobility + Security primarily for end-point management as well as for its multifactor authentication and privileged identity management.

We use it to manage the setup and security of our devices through the use and configuration of Microsoft Intune as well use using it to secure all user accounts with MFA and our admin account with PIM.

• End point managment
• Multifactor Authentication
• Privileged Identity Management

• MFA has prevented a number of phishing attacks against our organization
• Endpoint management has allowed us to use autopilot to set up our devices far faster
• PIM has helped to secure our admin accounts

Sophos Central Device Encryption and Microsoft Endpoint Manager (Microsoft Intune + SCCM)

Microsoft 365, Sophos Central Device Encryption, Keepit

• SSO setup through Azure AD has saved IT staff countless hours of lost passwords, multiple password resets, offboarding departed staff accounts, etc.
• Anti malware/phishing policies have prevented active malware/phishing campaigns.

Barracuda Email Security Service and OneLogin

Microsoft Office 365, Google Drive, Datto