CommIT, formerly Informatik ICT Aarau/Baden (IZAB), is a collaboration between the cities of Aarau and Baden to centralize and improve their ICT services. The goal of this partnership, which begins on January 1, 2019, is to provide efficient and high-quality ICT support to the two cities and their partners. The organization consists of two main units: Informatik-Steuerung Aarau-Baden (ISAB), which handles strategic planning and IT fundamentals, and Informatik ICT, which delivers the actual ICT services. Through this collaboration, business processes have been optimized and service delivery has become more efficient.
The situation before baseVISION
Ready for the next step in Mobile Management
Informatik ICT Aarau/Baden successfully implemented an Intune project for iOS and Android last year, taking the first step into Mobile Device Management (MDM) for Android devices. In recent months, new requirements and use cases for Android have emerged, necessitating further measures.
The goal of this follow-up project was to introduce fully managed Android devices for the employees of the daycare center, including specific configurations and apps. Additionally, the customer wanted to register and enroll all Android devices via Samsung Knox Mobile to optimize the user-friendliness of the company’s devices. Furthermore, these Android devices should be integrated into Microsoft Defender to ensure reliable protection.

The vision
Initially, ICT Aarau/Baden wanted to introduce a fully managed Android setup for their employees in the daycare centers. The goal was to provide employees with a device tailored to their needs and requirements. Additionally, baseVISION suggested improving the current mobility situation to optimize device provisioning with Samsung Knox Mobile Enrollment. Furthermore, protection should be enhanced by onboarding mobile devices into Defender for Endpoint.
«Die Zusammenarbeit mit Informatik ICT Aarau/Baden bei diesem Projekt war eine grossartige Gelegenheit, um die allgemeinen Herausforderungen anzugehen, mit denen Unternehmen bei der Verwaltung von Android-Geräten konfrontiert sind. Durch den Einsatz unseres Know-hows waren wir in der Lage, massgeschneiderte Lösungen zu entwickeln, die nicht nur die spezifischen Anforderungen des Unternehmens erfüllen, sondern auch die gesamte IT-Infrastruktur des Unternehmens verbessern. Dieses Projekt ist ein Beispiel dafür, wie strategische Partnerschaften Innovationen vorantreiben und die betriebliche Effizienz verbessern können.»
The transformation
At the beginning, the requirements were developed and implemented together with the customer. The following topics were analyzed and implemented as part of the project.
Daycare center / Daycare employees
First, we analyzed how employees use their phones and what data and apps they need access to. For the right enrollment scenario, it is important to know whether the phones are shared or if there is a 1:1 relationship between phone and employee. We opted for a fully managed scenario.
Bestehende Umgebung und Implementierung<br>
The existing Android scenarios were analyzed, and then apps, policies, and filters for the new scenario were created. Care was taken to ensure that the existing productive environment was not affected. Test devices with the new configuration were rolled out, and the customer was trained accordingly. The customer should then enroll all devices independently.
Defender for Android
Defender for Android was preconfigured, tested, and rolled out to all Android phones together with the customer.
Samsung Knox Mobile Enrollment
Samsung Knox Mobile Enrollment was introduced and connected with Entra ID and Intune to provide users with a better end-user experience and unify device enrollment. Additional time can be saved in the future by purchasing devices through an authorized dealer and pre-registering them.
Summary
With this project, Informatik ICT Aarau/Baden has taken a significant step towards modernizing its IT infrastructure. The daycare centers now have phones tailored to their work needs, ensuring that employees have the necessary tools and access to perform their tasks efficiently. Additionally, all future Android devices will be introduced with Samsung Knox Mobile Enrollment, enabling a streamlined and user-friendly enrollment process. These devices will also be protected by Microsoft Defender, ensuring solid security across all areas. This comprehensive approach not only enhances the user experience but also strengthens the organization’s overall security posture.





































