locked
Skype for Business Mobile Client without Intune RRS feed

  • Question

  • We'd like to deploy the Skype for Business Mobile Client to hook into our Lync 2013 infrastructure, however we don't have Intune. Are there any other ways to control data leakage etc from the mobile client?

    The reason we haven't deployed Intune yet is the requirement for Azure AD integration

    Saturday, November 5, 2016 8:54 PM

All replies

  • Hello 

    there is few third party produc like skype shield to provide MDM or MAM for Lync but this will cost much more than Azure AD integration/intune and they are much more complex to deploy and support.

    Please note that even intune still not fully support lync for MAM and conditional access if you use lync on prem or you are in hybrid because  one main requirement for both is Modern authentication which  only supported for skype for business online for the moment. // this may change by the end of the year.

    for reference 

    modern authentication for Lync https://support.microsoft.com/en-gb/kb/3126604

    Note: MAM without device enrollment and conditional access functionality require modern authentication to be enabled for Skype for Business Online, and it is currently disabled by default. Follow these instructions to enable it. An upcoming update will let you manage it directly from the Office 365 admin console.

    for reference 

    https://blogs.office.com/2016/04/28/mobile-application-management-and-conditional-access-now-available-for-skype-for-business-online-with-intune/

    https://docs.microsoft.com/en-us/intune/deploy-use/restrict-access-to-skype-for-business-online-with-microsoft-intune


    you may think also to use different client for users than Lync client like blackberry(Good) connect which will be linked to Lync infrastructure and will stop any data leakage.

    • Proposed as answer by GUIz49 Sunday, November 6, 2016 3:32 PM
    Saturday, November 5, 2016 10:19 PM
  • Thank you for the quick reply. We already have Good Connect along with Good Work, however we want to pursue the MS "native" applications on iOS/Android rather than these third party implementations.

    So given that Intune doesn't support MAM S4B, I assume our only option at the moment is SkypeShield?

    Sunday, November 6, 2016 11:40 AM
  • unfortunately the answer yes. I do believe the support for on prem and hybrid for modern authentication will come really soon, please check https://channel9.msdn.com/events/Ignite/2016/BRK3057. so it may worth waiting  
    • Proposed as answer by jim-xu Tuesday, November 15, 2016 5:32 AM
    Sunday, November 6, 2016 3:35 PM