Managing & monitoring Surface Hub 5/17/2018 9:54 PM THR2303 Managing & monitoring Surface Hub Anthony Kinney Tech Solutions Professional Strider Browning Tech Solutions Professional © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Managing & monitoring Surface Hub 5/17/2018 9:54 PM Managing & monitoring Surface Hub Anthony Kinney Tech Solutions Professional Strider Browning Tech Solutions Professional © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

SCCM: Hybrid or on-prem MDM 5/17/2018 9:54 PM Surface Hub management options MDM/Intune MDM: Intune and others SCCM: Hybrid or on-prem MDM Surface Hub WCD: Package on USB SCCM PPKG Local Settings © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Local settings Accessible only for admins Familiar Windows 10 Optic 5/17/2018 9:54 PM Local settings Accessible only for admins Familiar Windows 10 Optic Surface Hub specific settings Skype / Exchange account settings Projection / Miracast settings Monitoring Skype audio settings Windows Store access Welcome Screen Disable Sign-In to O365 from Start © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Provisioning packages 5/17/2018 9:54 PM Provisioning packages Windows Configuration Designer Create Provision Packages Import certificates Install apps Skype/Exchange account OMS join Update Settings (WSUS, maintenance, etc.) Many more… © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Bitlocker Encryption Non-domain joined Surface Hubs 5/17/2018 9:54 PM Bitlocker Encryption Non-domain joined Surface Hubs Keys need to be saved to USB Azure Active Directory joined Surface Hub Keys stored under the account that was used to join the device On-prem Active Directory* joined Surface Hub Keys stored under the computer object in Active Directory (like any other computer does) *Bitlocker Recovery Password Viewer needs to be installed to be able to search for recovery password © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Session objectives and takeaways 5/17/2018 9:54 PM Session objectives and takeaways At the end of this session, you should be better able to… Learn how to manage the Surface Hub at scale deployments using different tools like configuration packages & MDM (Intune or 3rd party) Learn how Microsoft Surface Hub integrates in the customer environment Learn how to monitor the Surface Hub using OMS © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What are my options to manage Surface Hub? 5/17/2018 9:54 PM What are my options to manage Surface Hub? Local settings © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/17/2018 9:54 PM Surface Hub Account Surface Hub can be configured to manage the device password The password will be changed weekly New password will not be shown Account format requirements exist Environment Required format for device account Device account is hosted only online username@contoso.com Device account is hosted only on-premise DOMAIN\username Device account is hosted online and on-prem (hybrid) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What are my options to manage Surface Hub? 5/17/2018 9:54 PM What are my options to manage Surface Hub? Local settings Provisioning packages © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Christian

Mobile device management 5/17/2018 9:54 PM What are my options to manage Surface Hub? Local settings Provisioning packages Mobile device management © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Manually enroll in to an MDM 5/17/2018 9:54 PM Manually enroll in to an MDM 1. 2. 3. 4. 5. 6. The device is successfully enrolled in Intune and after synchronization is listed in the management portal © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Mobile Device Management 5/17/2018 9:54 PM Mobile Device Management Setting CSP reference Supported with Intune? Supported with SCCM? Supported with SyncML*? Allow location System/AllowLocation Yes Yes Use a custom setting. Allow telemetry System/AllowTelemetry Allow USB Drives System/AllowStorageCard Yes Use a custom policy. Homepages Browser/Homepages Configure device to use WSUS Update/UpdateServiceUrl Automatically turn on the screen using motion sensors InBoxApps/Welcome/AutoWakeSc reen Requires a pin for wireless projection InBoxApps/WirelessProjection/PIN Required Connect to your Operations Management Suite workspace MOMAgent/WorkspaceID MOMAgent/WorkspaceKey Welcome screen background image InBoxApps/Welcome/CurrentBack groundPath Allow session to resume after screen is idle Properties/AllowSessionResume Allow device account to be used for proxy authentication Properties/AllowAutoProxyAuth Disable "My meetings and files" feature in Start menu Properties/DoNotShowMyMeeting sAndFiles Surface Hub CSP © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Create a Config Profile 5/17/2018 9:54 PM Create a Config Profile Configuration Profile Example Custom Configuration with OMA-URI Setting Edge Start Page ./Vendor/MSFT/Policy/Config/Browser/ HomePages Configure Windows Update Server URL ./Vendor/MSFT/Policy/Config/Update/ UpdateServiceUrl Configuration with Template Require Pin for wireless projection Join Microsoft Operations Management Suite Lockscreen background picture © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/17/2018 9:54 PM Assigning the profile How to assign a Device configuration profile 3. 1. 2. © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Monitoring Surface Hub

Onboarding Surface Hub in OMS 5/17/2018 9:54 PM Onboarding Surface Hub in OMS What’s needed? OMS Workspace Simply create a new OMS workspace through the Azure portal © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Onboarding Surface Hub in OMS 5/17/2018 9:54 PM Onboarding Surface Hub in OMS What’s needed? OMS Workspace Surface Hub Configuration Connect your Surface Hub to OMS through the Configuration App as an admin © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Operations Management Suite (OMS) 5/17/2018 9:54 PM Operations Management Suite (OMS) Active Surface Hubs Wireless Projections Wired Projection Application Usage Application Crashes Sample Queries Set up Alerts © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Managing Updates

Windows Update Windows Update 5/17/2018 9:54 PM Windows Update Windows Update Always check for new updates after first setup; WSUS Server can be used for updates* Always check for new updates after first setup Feature updates Defer feature updates for enterprise testing* *Settings could be managed locally, via Configuration Packages or MDM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows Update for Business 5/17/2018 9:54 PM Windows Update for Business Bug Current Branch (CB) CB receives feature updates as soon as they are released by Microsoft. Current Branch for Business (CBB) Receives feature updates at least four months after they have been initially offered to CB. Stagger updates to your Surface Hubs Use rings to control when updates roll out to your Surface Hubs, giving you time to validate them. A ring is a group of devices that have the same deferral settings. Note: You can use Configuration Manager, Microsoft Intune, or another MDM provider to set up WUfB. Refresh © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

In review: session objectives and takeaways 5/17/2018 9:54 PM In review: session objectives and takeaways Learn how to manage the Surface Hub at scale deployments using different tools like configuration packages & MDM (Intune or 3rd party) Learn how Microsoft Surface Hub integrates in the customer environment Learn how to monitor the Surface Hub using OMS © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/17/2018 9:54 PM Session resources Surface Hub @ Virtual Academy https://aka.ms/SurfaceHubTraining Surface Hub Support Pages https://aka.ms/SurfaceHubSupport https://www.microsoft.com/surface/support/surface-hub Surface Hub Admin Guide https://aka.ms/SurfaceHubAdminGuide https://technet.microsoft.com/en-us/itpro/surface-hub/surface-hub- administrators-guide Microsoft Ready content can be found at https://digital.microsoftready.com/ © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Q&A If you have questions, please proceed to the Q&A microphone located in your session room.

At Ignite Meet with us Attend sessions Become an Insider Talk to Surface engineers after sessions and at the booth Learn more about Surface technology Stop by the Surface booth to sign up and get SWAG Attend sessions Become an Insider

Attend the breakout sessions 5/17/2018 9:54 PM Attend the breakout sessions Session title Speaker Date Time Location Code Surface product engineering behind the scenes and deep dive on the new Surface Pro Tim Golick Tuesday 9/26 4:00 – 5:15 PM OCCC W304 BRK1059 Surface and LTE: designing for seamless connectivity Paul Bischof Tim Golik Wednesday 9/27 9:00 – 10:15 AM OCCC W206 BRK2366 Bringing the modern workplace to life with Surface and Microsoft 365 Ryan Gavin Sonia Dara 10:45 AM – 12:00 PM OCCC W308 BRK3353 Surface Hub bakeoff: how Surface Hub stacks up against the competition Frank Buchholz Mark Hodge Joe Dalecki OCCC W307 BRK2368 Service and support for Microsoft Surface: built for the demands of today’s enterprise Nathan Banks Faizan Makhiawala Thursday 9/28 2:00 – 2:45 PM OCCC W240 BRK2365 © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Attend the theater sessions Session title Speaker Date Time Location Code Realizing the most from Surface and Microsoft 365 Frank Buchholz David Alexander Monday 9/25 1:45 – 2:05 PM OCCC South – Expo Theater #6 THR1117 Microsoft meeting solutions: Skype Room Systems and Surface Hub Richard Kott Mark Hodge Tuesday 9/26 12:05 – 12:25 PM THR2306R Unlocking the power of creativity with the Surface portfolio of devices and Microsoft 365 Robert Henry Jeff Nye 2:10 – 2:30 PM THR2302 The new Surface Pro and Laptop: an insider’s look for IT Pros Tim Golick Brandon Records Mari Rinta-Piirto 3:35 – 3:55 PM THR2299 Surface Hub: manageability tools and OMS deep-dive Strider Browning Anthony Kinney 5:35 – 5:55 PM THR2303 Surface Hub what's new (Windows Insiders, Creators features, Microsoft Teams, LOB apps) Brent Johnson Arpan Nandani Wednesday 9/27 10:20 – 10:40 AM THR2308 Surface connector comparison and designed for Surface accessories Dave Neff Craig Tellalian 10:50 – 11:10 AM THR2304 Surface tools for the enterprise: best practices Carl Luberti 12:35 – 12:55 PM OCCC South Building Theater – Level 2 THR2307 THR1117R THR2306

Thank you

Please evaluate this session Tech Ready 15 5/17/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/17/2018 9:54 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.