Cloud-First, Modern Windows Management and Security Microsoft 2016 6/3/2018 9:48 AM THR3036 Cloud-First, Modern Windows Management and Security Jason Roszak Director, Product Management, VMware AirWatch © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Wait for weeks to get your corporate device set up Walk out of a store with a fully set up phone

Windows 10 is Disrupting IT and Business Consumer First Experience Enterprise Ready Security Simpler Lifecycle Management 350M devices on Windows 10 in less than year 4M DoD devices moving to Windows 10 40% orgs. using EMM for portion of Windows Better performance over Windows 7 71% Better security over Windows 7 61% Cost efficient compared to Windows 7 40% Source: SpiceWorks Windows 10 Adoption research

Current PC Management Missing the Mark? Traditional Systems Management Poor User Experience Bog down system performance GPO Policy Servers Limited Visibility Slow to identify non-compliance Software Distribution Servers Compromised Security Multiple points of failure, updated policies pending Unreliable Software Distribution Resource intensive packaging and deployment OS Update Servers Costly, Complex, Restrictive

The New Standard for PC Management Better User Experience Update faster and keep peak performance VMware AirWatch Real-time Visibility Backed by a powerful compliance engine Security Across Networks Update policies in seconds, not months Configuration, Apps, Updates, Security Scalable Software Distribution From the cloud, eliminate physical infrastructure Secure, Lower Cost, Better User Experience

But There are Still Challenges… Limited Win32 software distribution capabilities Thousands of settings in Windows Group Policy Object (GPO) Network constraints prevent using an MDM tool for software distribution Can’t provide inventory data for traditional Win32 apps Using built-in image means incompatibility risk Situations where we cannot use an in-place OS upgrade Application packaging of legacy apps will be a barrier

Dawn of Unified Endpoint Management AirWatch Unified Endpoint Management EMM Client Management

Cloud-First, Modern Windows Management and Security Device & OS Lifecycle Management Application Management & Delivery End-to-end Security Management Configuration Management OS Patch Management Software Distribution Client Health & Security MDM for Windows Co-exist with Systems Management GPOs On or Off the Domain Instant Push Configuration for Policies Granular Updates Management Deploy Updates Off the Network Win32 App Lifecycle Management Win32 App Capture & Delivery Windows Information Protection Adaptive Enrollment into EMM Asset Tracking & Inventory Patch Inventory & Auditing Faster Min-set Provisioning Unified User Catalog & SSO Device Health Compliance Unified Endpoint Management technologies for a simpler, more secure and cost effective PC management.

Device and OS Lifecycle Management Provision Devices Configure Policies Manage OS Updates Don’t image. Just provision. Configure devices over-the-air. Say goodbye to “Patch Tuesdays” Cloud domain join with Azure AD Enroll into management using AirWatch Out-of-the-box experience (ready for work on power ON) Install or remove apps Set up work profiles (email, VPN, Wi-Fi…) Configure IT policies (passwords, OS restrictions…) Stay up to date with in-place OS upgrades OS security and feature patch management Schedule maintenance windows

Application Management and Delivery One-Touch Access to Apps App Distribution and Management Application Inventory No more fragmented app ecosystem. Eliminate cost and complexity of distributing Windows software. Full inventory control, collection, and reporting of Windows apps. Customized company app store Access classic, modern, remote, or web apps from one location Password-less single sign-on (SSO) access to apps Deliver classic desktop and modern apps via cloud Automated workflows for app distribution Optimize app delivery based on network, power conditions Bulk purchase apps for business Assign, reclaim and reuse app licenses Detailed apps inventory and reports

End-to-End Security Management Establish User Trust Ensure Device Health Prevent Data Leakage Safeguard corporate identity. Lock down devices against security threats. Protect work data. Identity driven access to apps Biometrics-based authentication means no more passwords Enforce passcode / biometrics requirements and strength Run only trusted apps Check OS health and compliance in real-time Automated remediation actions on compromised devices Separation of work and personal data on the device Work files are encrypted so only trusted apps can handle these Block or audit copy/paste, drag and drop actions on work data

Analytics to Help Migrate to Windows 10 Systems Management Virtual EMM Systems Management BYOPC Contracted Employees Call Centers Assessment Modern Knowledge Workers Remote Workers User Apps Device Legacy Business Systems Specialized Systems Optimal Desktop Computing Strategy

Demo Microsoft Ignite 2016 6/3/2018 9:48 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session 6/3/2018 9:48 AM Please evaluate this session Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.