Microsoft announces Secure Productive Enterprise (SPE)-- a licensing option covering OS, productivity apps and mobile device management by bundling Windows 10 Enterprise, Office 365, and Enterprise Mobility + Security (EMS).
Also included is a selection of collaboration and analytics products, as well as the newly announced Windows Defender Application Guard and enhanced Advanced Threat Protection in order to cover the "secure" part of the SPE name. Windows Defender Application Guard uses Hyper-V virtualisation to sandbox web applications, allowing users to visit and use untrusted sites without the risk of malware infections, and stop targeted spear-phisihing attacks.
It creates a Windows instance in hardware, with a separate kernel and the bare minimum of Windows Platform Services required to run Edge. As a result exploitable resources (such as memory and local storage) are blocked, as is access to credentials. Any malware deposited finds nothing to glean or hook to, and once the browser session it is discarded together with the temporary instance.
SPE comes in two plans, E3 and E5. The E3 plan replaces Enterprise Cloud Suite, and includes Windows 10 Enterprise, Office applications, Skype for Business, Intune, Azure Active Directory Premium and Delve. The E5 plan adds PSTN (public switched telephone network) Conferencing and Cloud PBX (private branch exchange) capabilities to Skype for Business, along with Power BI Pro, MyAnalytics, Windows Defender Advanced Threat Protection and enhanced security for Office 365 and Enterprise Mobility + Security.
The Microsoft SPE plans are available now.