Put a fence around your devices

'Geofencing' and 'Time-fencing' the devices on your network provides an additional layer of security and helps prevent malware and unauthorised users reaching your data. This protective fencing is applied and managed by Microsoft Intune and can be tailored to your individual needs.

Control data access by location and time with Intune

Much like a literal fence protects items within it, geofencing protects your data by only allowing devices access to your network if they are connecting from an approved location. For example, if the Intune policy only allows connections from the UK, a device will not connect to a user's email if they are in Spain, even with the correct username, password and multi-factor authentication.

Geofencing policies can be inclusive and exclusive. You could exclude access from Russia on a company-wide policy but include Western European countries on a policy for senior managers who travel for business.

Time-fencing works on the same principle with Intune policies only allowing access to the IT system during specified times and days of the week.

Access when travelling and through VPNs

Of course, you may want to access the company network while travelling in a country that is normally excluded. This can easily be achieved by extending the fence for individuals on either a permanent or temporary basis. You can even create a specific policy that allows access to particular resources only, such as email.

You may be aware that location tracking is done on an IP address, a specific code that shows where you are connecting from. This can be circumvented using a VPN (virtual private network that encrypts your data) to appear to be connecting from another country.

Microsoft Intune can protect you by only allowing access through known VPNs and can go a step further by only allowing access through a secure VPN owned by your business. This keeps data passing between your devices and your network encrypted and protected.

Policies that work for your business across all devices

Microsoft Intune can manage all Windows 10 and Windows 8.1 laptops and desktops as well as Apple and Android devices.

We work with each business to establish a set of policies that work for them. We start by creating groups and then providing that group with the necessary resources and permissions. When a user is added to a group, and they can belong to more than one, they adopt the permissions of that group.

As Microsoft Gold Partners, Strident have proven expertise in delivering a modern flexible working IT infrastructure for your business. To find out more, contact us on 01473 835 280.