While much of the focus on Windows 8 and the 8.1 update are of course on consumer-oriented features and experiences, Microsoft isn’t ignoring businesses. And the sheer size of the list of new business-oriented features coming in Windows 8.1 is probably going to surprise most.

Microsoft announced the business-oriented features coming in Windows 8.1 “Blue” at the TechEd 2013 conference in New Orleans. Here’s a complete rundown.

Networking and mobile productivity

NFC tap-to-pair printing. The keynote demo for this one actually failed because of the density of wireless traffic (the printer was Wi-Fi-based) but Windows 8.1 will include NFC tap-to-pair printing: Just add an NFC tag on your existing printers to enable.

Wi-Fi Direct printing. Windows 8.1 adds compatibility for printers with Wi-Fi Direct capabilities.

Miracast wireless display. Windows 8.1-based devices will be able to project their display wirelessly to Miracast-compatible monitors and screens.

Mobile broadband. Windows 8.1 devices can have embedded wireless radios that provide better power savings, longer battery life, and enable thinner form factors and lower cost devices.

Broadband tethering. Any Internet-connected Windows 8.1-based device can be turned into a wireless hotspot with support for up to 10 devices.

VPN improvements. Windows 8.1 will automatically prompt you to sign into the built-in VPN when an app or other resource needs to access a resource that requires that kind of connection. This capability will be extended to third party VPNs as well.

Internet Explorer 11. The next version of IE provides “faster page load times, side-by-side browsing of your sites, 3D graphics, enhanced pinned site notifications, reading view and app settings like favorites, tabs and settings sync across all your Windows 8.1 PCs.”

Device and mobility security

Improvements to access control. Windows 8.1 will support devices with fingerprint-based biometrics and simpler access to multi-factor authentication for virtual smart cards.

Improvements to malware resistance. Windows Defender is being augmented with network behavior monitoring to help detect and stop known and unknown malware before it can run. Internet Explorer 11 will scan binary extensions like ActiveX before potentially harmful code is executed.

Device encryption. The device encryption feature that Microsoft previously provided in Windows RT and Windows Phone 8 is now available to all Windows 8.1 editions so that hardware makers can enable it out of the box and ensure that all data on the device is protected. (You can add real BitLocker on top of that in Windows 8.1 Professional and Enterprise.)

BYOD management capabilities

Smart remote wipe. On today’s devices, a remote wipe action wipes all of the data from a user’s device, including personal data. With Windows 8.1, admins can issues a smart remote wipe so that only corporate data is removed from user’s devices.

Workplace Join. The ability to join an Active Directory domain has been added to the Metro-based PC Settings interface: Just type in your user name and password. You can also optionally enable device management.

Work Folders. Essentially SkyDrive or SkyDrive Pro for your corporate data folders, this feature lets you sync key folders in your servers to you PC so that the contained documents are available when you’re offline.

New policies. Many new group policies have been added so that admins can control such things as the layout of tiles on users’ Start screens, ensure that key apps are available, and prevent users from customizing the Start screen.

Device and mobility control

Assigned Access. This is the ability to run a single Metro-style app in a kiosk mode that I’ve written about previously. Enabling this feature turns on a predefined set of filters that blocks other actions so the user only experiences the specified application and is unable to access system files and other applications, Microsoft says.

Windows 8.1 Embedded 8.1 Industry. A coming version of the Embedded version of Windows will include additional device lockdown capabilities.