Do You Use 'Workplace Join' for BYOD? -- Redmondmag.com

The Schwartz Report

Do You Use 'Workplace Join' for BYOD?

When Microsoft released Windows Server 2012 R2 back in the fall of 2013, one of the many features we pointed out at the time was "Workplace Join," which is designed to let organizations give single sign-on capability to their bring your own device (BYOD) employees -- or for anything not designed to join an Active Directory domain. Simply put, it lets you register a non-domain-based device running Windows 8.1, iOS and Android to Active Directory.

Microsoft was especially happy to tout Workplace Join when it launched its Windows RT-based Surface 2 back in September 2013. In an interview with Surface Director of Marketing Cyril Belikoff at the time, she talked up the Workplace Join capability with me. "Workplace Joins are the access components of a directory service that allows a user to use their ID and password to access their corporate network documents and shares in a secure way," Belikoff said. "It's not a fully domained device but you get the administration of mobile device management and get the access component." Last year, Microsoft added support for Windows 7-based systems as well.

Workplace Join does require Active Directory Federation Services, Active Directory on premises and the Device Registration Service, all part of the "Federation Services Role on Windows Server 2012 R2," as described in the TechNet library.

I've talked to a variety of mobile device management vendors and suppliers of Active Directory management and auditing tools and I've heard various views. Some say customers (or prospective ones) are questioning how these tools will support Workplace Join and others recommend using the device enrollment features in their wares.

Microsoft boosting the functionality of Workplace Join in the forthcoming Windows 10 operating system could be a factor that builds to its popularity.

Please share your experience or views on Workplace Join. Is it suitable for your BYOD authentication requirements? Drop me a line at [email protected].

Posted by Jeffrey Schwartz on 01/08/2015 at 2:31 PM

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.