Abstract: Disclosed are various examples for remote email configuration using dynamically generated configuration profiles. A computing environment having a management service can determine variable names for inclusion in configuration profiles that are capable of configuring email settings on various managed device operating systems. The computing environment can dynamically generate configuration profiles using the appropriate variable names such that a client device having a particular operating system installed thereon is capable of interpreting the value and the variable name to configure the email setting.

Abstract: In response to receiving an indication from a client device experiencing a network connectivity error, a grouping of target client devices is identified for purposes of executing a distributed network diagnostic, the grouping being identified based on one or more configuration settings associated with client devices. The client devices in the identified grouping retrieve and execute an instruction. Data generated upon executing the instruction is received from each client device over a device management channel. The data is aggregated and trend data is generated. An instruction is sent to the client device experiencing the network connectivity error, wherein the instruction mitigates the network connectivity error.

Abstract: Disclosed are various examples for client device migration. In one example, a client device is enrolled with a first management service. A user interface is generated that identifies a user request to enroll the client device with a second management service. An un-enrollment from the first management service is initiated. The un-enrollment from the first management service is initiated using identifier of the client device. An enrollment with the second management service is initiated. The enrollment with the second management service is initiated using a the identifier of the client device.

Abstract: Disclosed are various embodiments for staging client devices that allow for multiple user access. A computing device retrieves a current version of the list of user profiles associated with the client device. The computing device determines that the current list of user profiles differs from a previous version of the list of user profiles associated with the client device. The computing device identifies a list of policies to be sent to a management component executing on the client device based at least in part on a determination that the current list of user profiles differs from the previous version, wherein the list of policies comprises at least one policy that is associated with at least one user profile included in the current list of user profiles that is absent from the previous version of the list of user profiles. The computing device then sends the list of policies to the management component executing on the client device.

Abstract: Application specific certificate deployment may be provided. An application may generate a security certificate comprising a public key and a first private key. The public key may be stored in a shared segment of a memory store, from where it may be retrieved and signed. The signed public key may be re-deployed and/or used to transmit securely encrypted resources.

Abstract: Examples described herein include systems for generating a predictive action button within a graphical user interface. The system can launch an action generator that tracks a user's behavior, either directly or through the use of an action profile. User behavior can be tracked in individual applications or across multiple applications and devices. Action modules can implement application events and procedures to track particular events and behavior information for that application. A module engine can analyze correlations between the events and behaviors. Based on this analysis, the predictive action button can be displayed for carrying out the predicted action when the corresponding application event occurs.

Abstract: Systems herein allow an administrator to efficiently set up user devices for use in a classroom environment. A management server can display a graphical user interface that includes selection options for defining and using carts of user devices. The carts can be selected and assigned to classes. The GUI also allows the administrator to specify which applications a class will use. Based on these selections, the management server can then manage which user devices install which applications, and allocate licenses accordingly.

Abstract: A search client executable in a computing device transmits a search term to a search engine. The search client obtains a search result from the search engine. The search client generates a rendering of the search result using a document structure and a document layout provided by the search engine. The rendering of the search result comprises contextual content for the search term.

Abstract: Systems and methods herein can provide device-specific access to an e-mail server, including an EWS-based e-mail server. In an example, a management server controlled by a system administrator provides device identification information to a user device and to a tunnel server. The management server also provides a custom request identifier to the tunnel server, and provides instructions to the e-mail server to allow access for requests including that custom request identifier. The tunnel server receives a request from the user device, rewrites the request to include the custom request identifier, and passes the request to the e-mail server.

Abstract: Disclosed are various examples for client device migration. In one example, a client device is enrolled with a first management service. A user interface is generated that identifies a user request to enroll the client device with a second management service. An un-enrollment from the first management service is initiated. The un-enrollment from the first management service is initiated using identifier of the client device. An enrollment with the second management service is initiated. The enrollment with the second management is initiated using a the identifier of the client device.

Abstract: Disclosed are approaches for enforcement of updates for devices unassociated with a directory service. An application executing on a computing device can determine, based on a policy received from a management service, that the computing device is to use an update service specified in the policy to receive updates. The application then modifies a setting of the computing device to specify the use of the update service by the computing device.

Abstract: Disclosed are various examples for staging client devices. A computing device assigns a first policy to a client device. The computing device later authenticates a user account based at least in part on receipt of a user authentication message from the client device. The computing device then selects a second policy to assign to the client device based at least in part on authentication of the user account. The computing device then assigns the second policy to the client device.

Abstract: Disclosed are various examples for network printer detection and authentication for managed device deployment. In one example, a computing environment can access a listing of network printers received from a printer discovery service executed in an enterprise device in an intranet behind a firewall. A user group associated with a client device enrolled with a management service can be identified as well as at least one of the network printers assigned to the user group. The client device can be remotely configured to access the at least one of the network printers assigned to the user group.

Abstract: Social media and data sharing controls may be provided. Upon receiving a request to transmit an element of data to a recipient, a determination may be made as to whether the recipient is appropriate to receive the element of data. In response to determining that the recipient is appropriate to receive the element of data, the element of data may be transmitted. In response to determining that the recipient is not appropriate to receive the element of data, at least one remedial action may be performed.

Abstract: Disclosed are various examples for facilitating the detection of conditions associated with an automatic reply associated with an email account. The automatic reply capability associated with an email account can be automatically activated in response to a condition associated with a client device, an email message, or an event stored in the user's calendar. An automatic reply message can be activated automatically or overridden by a user.

Abstract: Disclosed are various examples for single-sign on by way of managed mobile devices. For example, an identity provider service can receive a request for an identity assertion from an application executed in a client device. The identity provider service can then detect a platform associated with the client device. A response to the request can be sent based at least in part on the platform, where the response requests authentication by a management credential. Data generated by the management credential is received from the client device, and the management credential is determined to be valid for the identity assertion. The identity assertion is then sent to the client device in response to determining that the management credential is valid for the identity assertion.

Abstract: Methods and an apparatus are provided for securely authorizing access to remote resources. For example, a method is provided that includes receiving a request to determine whether a user device communicatively coupled to a resource server is authorized to access at least one resource hosted by the resource server and determining whether the user device communicatively coupled to the resource server is authorized to access the at least one resource hosted by the resource server based at least in part on whether the user device communicatively coupled to the resource server has been issued a management identifier. The method further includes providing a response indicating that the user device communicatively coupled to the resource server is authorized to access the at least one resource hosted by the resource server in response to a determination that the user device communicatively coupled to the resource server is authorized to access the at least one resource hosted by the resource server.

Abstract: Disclosed are various approaches for providing authentication of a user and a client device. A user's credentials can be authenticated by an identity provider. In addition, a device posture assessment that analyzes the device from which the authentication request originates is also performed. An authentication request can be authenticated based upon whether the device posture assessment reveals that device to be a managed device that is in compliance with compliance rules.

Abstract: On-demand activation of a security policy may be provided. Upon receiving a selection of a link, a profile identified by a security policy associated with the link may be activated and the link may be opened according to the security policy. In some embodiments, opening the link according to the security policy may comprise redirecting the opening of the link from a first application to a second application.

Abstract: Examples relate to devices being managed based on their locations relative to a facility. In some examples, the location of a client device can be determined relative to a facility. An organizational group can be associated with the location. The client device can be associated with the organizational group. Whether the client device complies with a compliance policy associated with the organizational group can be determined.