How Microsoft deploys Windows 10 and implements Windows as a service 6/1/2018 12:53 AM BRK3047 How Microsoft deploys Windows 10 and implements Windows as a service Robert Van Winkle Principal PM Manager Core Services Engineering © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Agenda Windows as a Service Compatibility Go modern 6/1/2018 12:53 AM Agenda Windows as a Service Compatibility Go modern User-focused marketing © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Transitioning to Windows as a Service Microsoft IT Access Strategy 6/1/2018 Transitioning to Windows as a Service Custom solution MDT and IT easy Upgrade experiment Update OSD 95% adoption eight months 2012 95% adoption three months 2013 95% adoption five weeks 2014 95% adoption nine weeks 2015 80% adoption one year 2009 Three ways Same velocity 2016 2017 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided aadoptionr the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Agile enterprise adoption Microsoft Ignite 2016 6/1/2018 12:53 AM Agile enterprise adoption Customers Insider Preview Semi-Annual Channel Proof of concept Pilot Broad deployment CSE Engineering Builds Semi-Annual Channel Insider Preview Proof of concept (POC) 10 to 50 IT pros Pilot 1,000 to 5,000 users Broad deployment All users © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Our approach Early adopter community User-centric support Microsoft Ignite 2015 6/1/2018 12:53 AM Our approach Early adopter community Early experimentation Recognition and leaderboards Real-time feedback Scenario validation Use for other areas in IT User-centric support Social Users helping users Moderators to ensure questions are answered Early detection system Mission control 30-minute sync session, three times a day Support and IT SMEs Real-time feedback Enabling agile remediation © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

WUfB migration Active Directory and ConfigMGR OSD Active Directory and ConfigMGR WUfB Azure Active Directory and Intune WUfB Enterprise and Pro editions only. Requires 10 packages for five languages and x86/x64 220,000 devices Uses ConfigMGR OSD Enforcement in seven days Growing population of n, s, china, and others editions, including other than the five languages in OSD 5,000 devices Use WUfB controls in ConfigMGR General population of corporate-liable devices in Intune 14,000 devices Enabling co-management requires RS3 devices Use WUfB CSP controls in Intune Last traditional deployment Exercise new enterprise ConfigMGR controls Go modern

Compatibility Microsoft Ignite 2016 6/1/2018 12:53 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Feature update compatibility CSE Access Strategy 6/1/2018 Feature update compatibility Environment 96 percent of application portfolio is browser-based 1 percent are universal applications Edge is the primary browser Use site list for Edge to Internet Explorer switching Approach Only test business critical applications ≈250 Remaining ≈1,650 applications are tracked through adoption Business-critical apps use common code bases and tools Critical Pass rate Windows 8 286 97% Windows 8.1 300 98% Windows 8.1 Update 138 Windows 10 278 Windows 10 November update 265 100% Windows 10 Anniversary Update 236 Windows 10 Creators Update 55 Windows 10 Fall Creators Update 130 In process ≈250 critical applications ≈1,650 applications in business unit portfolios © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Do you need to test quality updates? Microsoft Ignite 2016 6/1/2018 12:53 AM Do you need to test quality updates? Deployment approach Stopped formal application compatibility testing program after Windows 8 20,000-device pilot is used for validation before broad deployment Issues are tracked through telemetry, Feedback Hub, Yammer, and Helpdesk Safety valves Users can opt-out of pilot program If there are issues, the update can be rolled back Lessons learned To date, we haven’t seen application compatibility issues with this approach Need more real-time insights Have a plan in place in to address issues Broad deployment Pilot Pilot 20,000 devices Broad deployment All devices © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

MS Story 6/1/2018 12:53 AM M365 Analytics Upgrade readiness provides powerful insights and recommendations about the computers, applications, and drivers in your organization, at no extra cost and without additional infrastructure requirements Benefits Identify applications and devices with known compatibility issues Track in-house developed apps Prioritize issues for further investigation Prioritize test cases based on data Integrates with Configuration Manager Use for safe device targeting Sign up at https://www.microsoft.com/en-us/WindowsForBusiness/windows-analytics © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Go modern Microsoft Ignite 2016 6/1/2018 12:53 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Exec Retreat 2016 6/1/2018 12:53 AM Vision Users are able to seamlessly access corporate resources from any device and internet connection Device management tasks are transparent to the user IT pros are able to efficiently manage all devices through the cloud using a single console with integrated telemetry and automation have confidence their IP is secure and environment will remain stable © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure Active Directory Microsoft Store for Business 6/1/2018 12:53 AM Revolution ConfigMGR Intune Custom corp image WSUS OEM image Windows Update for Business Traditional Modern Security tools Corpnet connection Advanced Threat Protection (ATP) Any internet connection Active Directory and Azure Active Directory Application stores Azure Active Directory Microsoft Store for Business © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure Active Directory Microsoft Store for Business 6/1/2018 12:53 AM Evolution Co-management ConfigMGR Intune Custom corp image WSUS OEM image Windows Update for Business Azure Active Directory ConfigMGR Intune Traditional Modern Security tools Corpnet connection Advanced Threat Protection (ATP) Any internet connection Active Directory and Azure Active Directory Application stores Allows organizations to take a first step toward Modern Management to build confidence and momentum Intune is primary management solution ConfigMGR is available as contingency Azure Active Directory Microsoft Store for Business © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure Active Directory Any internet connection Evolution Traditional Co-Management Modern Connectivity Corpnet connection Azure Active Directory Any internet connection OEM image ConfigMGR + Intune WSUS + WUfB Security tools Multiple app stores Any internet connection Operating system image Custom corp image OEM image Identity Active Directory and Azure Active Directory Azure Active Directory System Center Configuration Manager (ConfigMGR) Device management Intune Windows Update for Business (WUfB) Updates Windows Server Update Services (WSUS) Security Security tools Security tools Applications Multiple app stores Microsoft Store for Business (MSfB) © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Our migration 100% M3Y3 70% M3Y2 40% M3 11% M2 Early adoption M1 235,000 11% M2 175,000 105,000 Early adoption M1 25,000 5,000 Proof of concept Early adoption autopilot Transition to full modern Migrating the environment Traditional Co-managed Fully Modern Managed Y1 Y5 Y1 H2 Y2 Y3 Y4 *Where apps available through Microsoft Store © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Determine the required policies Microsoft MDM Migration Analysis Tool compares GPOs to Intune CSPs GPOs from user and computer examples Use MDM Migration Analysis Tool Import matches to Intune (optional) Deploy CSPs. Use custom URI where needed. GPOs MMAT CSPs Get MDM Migration Analysis tool at http://aka.ms/MMAT

Demo: View MDM policies on device 6/1/2018 12:53 AM Demo: View MDM policies on device © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Lessons learned 1 2 3 4 5 User experience Microsoft Ignite 2016 6/1/2018 12:53 AM Lessons learned User experience ConfigMGR Operating System Deployment (OSD) pre-caching the build locally before install and improved OSD user notifications update. WUfB user interface to schedule update 1 Adopt agile processes Iterate and use proof of concept > pilot > broad deployment Build culture to fail fast and move forwards Don’t forget the user community 2 Compatibility Focus on the critical business apps (the top 10 percent) Use upgrade analytics Stop testing apps for monthly Quality updates 3 Windows Update for Business Start doing POCs and Pilots to enable broad adoption Use Delivery Optimization to minimize internet egress 4 Go Modern Start evaluating minimum security requirements Build roadmap to adopt using Azure AD, Active Directory and Co-Management 5 © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

User-focused marketing Microsoft Ignite 2016 6/1/2018 12:53 AM User-focused marketing © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

I use AutoVPN to work remotely so I don’t miss important moments with my family. Microsoft Ignite 2016 6/1/2018 12:53 AM microsoft.com/itshowcase © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Ignite 2016 I use an extension in Microsoft Edge that blocks advertisements so I can focus on what matters. 6/1/2018 12:53 AM microsoft.com/itshowcase aka.ms/getwindows10 © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

I use Windows Hello for quick, hands-free sign-in. Microsoft Ignite 2016 6/1/2018 12:53 AM microsoft.com/itshowcase © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Other sessions of interest 6/1/2018 12:53 AM Other sessions of interest Session Description Time BRK3057 Overview: Modern Windows 10 and Office ProPlus management with Enterprise Mobility + Security Tuesday, September 26 9:00 AM - 10:15 AM OCCC West Hall B4 BRK3031 Deploying Windows 10: User-driven cloud deployment with Windows AutoPilot Hyatt Regency Windermere Y BRK3075 Modernize deployment & servicing of Windows 10 & Office ProPlus with Enterprise Mobility + Security 10:45 AM - 12:00 PM OCCC Valencia W415 CD BRK3049 New modern management features for IT pros 2:15 PM - 3:30 PM BRK2043 Architect a modern and secure desktop for your organization Wednesday, September 27 BRK3009 System Center Configuration Manager overview and roadmap 4:00 PM - 5:15 PM OCCC West Hall E1 BRK3076 Transition to cloud-based management of Windows 10 and Office 365 ProPlus with EMS Thursday, September 28 BRK3351 Achieving a modern workplace with Windows 10, Enterprise Mobility + Security, and Office 365 Friday, September 29 12:30 PM - 1:45 PM OCCC W221 © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Ignite 2016 6/1/2018 12:53 AM Resources Microsoft IT Showcase offers a variety of technical resources including case studies, whitepapers, on-demand video, and even live-streaming roundtable sessions with IT experts. microsoft.com/itshowcase “Preparing your organization for a seamless Windows 10 deployment” https://www.microsoft.com/itshowcase/windows10deployment © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session Tech Ready 15 6/1/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6/1/2018 12:53 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.