As an organization grows, the often-fragmented endpoint management that worked in a smaller company starts to present a significant risk. Scaling requires a user-centric approach with a focus on security and self-service access to your organization’s most necessary applications. Cloud-based apps that offer universal access from any device are flexible, but legacy support is equally important.
That’s the power of Unified Endpoint Management: streamlined enterprise IT management. With ZENworks, managers have a unified desktop and mobile management platform with extensive functionality. With the release of ZENworks 2017 Update 4, the following new features and enhancements are available.
This update streamlines some critical aspects of mobile management. For example, administrators can deploy Wi-Fi profile bundles on users’ devices and streamline the connection to the corporate network. Factory Reset Protection prevents users from factory resetting work-managed devices via the Settings app, but it’s possible to whitelist corporate unlock accounts.
Update 4 also supplies new details about Android bundles, including the app version and tracking the “last published” date. New details on Device Summary provide administrators with expedited access to the security patch level applied to any given device.
Alongside these important changes and updates comes the depreciation of the Device Admin API. Google’s deprecation of Device Admin API from the Android P release has deprecated this basic device enrollment mode. We will continue to support the work profile mode and the work-managed device mode.
Android devices can now remotely restart via the existing Restart/Shutdown quick task. Additionally, this update brings support for Direct Boot for devices with Android 7.0 or greater. Administrators will have the ability to enforce policies, remove the Work Profile, or factory reset the device, even when the device is locked, now that ZENworks Agent is always active in the background.
Administrators can bundle iOS enterprise apps with the Bundle feature, and view them on the Apps Catalog page. Use this functionality to distribute in-house apps that are custom built and not publicly available.
Additionally, new support has been added for Android and iOS 12 restrictions (and DEP settings).
On the Android side, administrators can now enable device keyguard features and provide data sharing, either by mounting as physical external media or using an NFC beam. Teams can also restrict OS updates.
iOS support now allows administrators to set up time and date, delay OS updates, and complete new device setup as long as the device is in proximity. Additional enhancements allow quality of life changes, such as selecting the default language and region when setting up an Apple TV device.
A new Android App Protection Policy for Office 365 allows the use of secure Android apps built using Intune SDK without the device being enrolled in ZENworks. Administrators can also schedule a sync to the ZENworks Intune App Protection Policy with Microsoft Azure. It’s possible to audit the Wipe Device Actions of devices that are Intune App Protected.
Additionally, this update provides remote password reset for Android 8.0 and higher. It’s now possible to auto-fill credentials in the ZENworks app using the QR code.
New changes to desktop management improve support for Windows 10 and provide greater oversight of remote capabilities. It’s now possible to locate Windows 10 devices from the Geolocation tab as well as wipe them remotely using the new quick task.
This new update allows administrators to define when bundles should be installed on ZENworks managed devices and to check the processes and services running on each managed device.
Imaging and Remote Management
With ZENworks 2017 Update 4, administrators can now reference an existing MDT bundle. It also now includes support for TLS 1.2. This move utilizes PCI compliant security protocols to better protect the personally identifiable data of both customers and employees.
New improvements to inventory management streamline reporting and database management. This new update adds the ability to automatically clean up PRU bundles while ZCC Inventory reports make it easier to locate inventory data for mobile hardware. Additionally, it’s now possible to perform inventory scans once a device is imaged.
ZENworks 2017 Update 4 comes with the ability to import network devices using Oracle ADF data into the ZCC console and link them to ZAM Contracts.
Endpoint Security Management
Efficient endpoint security requires a solution that reduces overhead and simplifies policy implementation. This new update adds wildcard enhancements in the Application Control Policy for comprehensive access to controls and streamlined configuration overhead.
Enhancements to the Storage Device Control Policy further simplify policy creation and maintenance.
Full Disk Encryption
Disks fully encrypted by ZENworks can temporarily bypass pre-boot authentication for specified reboots.
Update 4 adds greater flexibility to patch management. It’s possible to release device patches from quarantine using a quick task designated for this process. It’s also possible to further control patch reboot behavior and store patch trending data.
ZENworks 2017 Update 4 supports the following new platforms:
- Agent and Primary Server: SLES 12 SP4
- Agent and Satellite Server: Windows Server 2019, Windows 10 1809, Window 10 enterprise LTSC 2019, OES 2018 SP1, RHEL 7.5, Scientific Linux 7.5, Mac 10.14
- Mobile: iOS 12, Android 5 and later
Teams using PostgreSQL as a database can now report on a specific zone.
Finally, this update provides a new registry key that grants additional power options when ZAPP is the shell.
ZENworks 2017 Update 4 broadens mobile support and streamlines client management. With better patch management capabilities, and PCI compliant security protocols, teams have greater control over every connected device. Always-on mobile functionality brings true remote capabilities to Android and iOS, and updates to security management reduce overall configuration effort. ZENworks continues to grow toward the ideal Unified Endpoint Management system.
Thanks for reading!