Basically, if you’re an overworked sysadmin – or you don’t want an army of IT admins – you can sign up your workforce to use MMD-controlled, cloud-connected machines, and let Microsoft handle the updates, patches, security, and configuration changes. Meanwhile, you define how you want your applications automatically provisioned, and how you want to secure your users’ computers, and it’s all automagically executed across your fleet from Microsoft’s centralized cloud.