Microsoft IT Windows as a Service Microsoft Ignite 2016 6/10/2018 5:47 PM BRK3143 Microsoft IT Windows as a Service Robert Van Winkle Principal Program Manager © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Transitioning to Windows as a Service Microsoft IT Access Strategy 6/10/2018 Transitioning to Windows as a Service Custom Solution MDT and IT Easy Upgrade experiment Update OSD OSD Three ways 80% FTE one year 2009 95% FTE eight months 2012 95% FTE three months 2013 95% FTE five weeks 2014 95% FTE nine weeks 2015 95% FTE nine weeks 2015 Same velocity 2016 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Evolving the enterprise adoption approach Windows 10 November update Anniversary Update … Windows XP to Windows 7

Agile enterprise adoption Windows Insider Program (WIP) Current Branch (CB) Current Branch For Business (CBB) Customers Proof of concept Pilot Broad deployment Windows Insider Program (WIP) Internal Selfhost Microsoft IT Current Branch (CB) Proof of concept (POC) 10 to 50 IT pros Pilot 1,000 to 5,000 users Broad deployment All users

Agile kanban Demo Microsoft Ignite 2016 6/10/2018 5:47 PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Keys to a successful project Early adopter community Recognition and leaderboards Real-time feedback Scenario validation Early experimentation Use for other areas in IT Support how I want it Social Users helping users Moderators to ensure questions are answered Early detection system Mission control 30 minute sync session Three times a day Support and IT SMEs Real-time feedback Enabling agile remediation

Microsoft Elite – Universal Application

Feedback Hub

Compatibility

Feature update compatibility Microsoft IT Access Strategy 6/10/2018 2,500 Line of Business Application Portfolio Feature update compatibility Environment 96 percent of application portfolio is browser-based 1 percent are Universal applications Edge is the primary browser Leverage site list for Edge to IE switching Approach Only test business critical applications ≈ 250 Remaining ≈ 2,250 applications are tracked through adoption Business critical apps exercises common code bases and tools used in the environment Critical Pass rate Windows 8 286 97% Windows 8.1 300 98% Windows 8.1 Update 138 Windows 10 278 Windows 10 November update 265 100% Windows 10 Anniversary Update 236 ≈ 250 Critical Applications © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Application compatibility VMs Microsoft Ignite 2015 6/10/2018 5:47 PM Application compatibility VMs Enables app teams Test and re-test on newer builds Check out new features VM client farm Provides over 300 VMs with 10 servers Processor Two quad-core processors (2.66 GHz or higher) RAM 48 GB System drives Two 148 GB; 10K RPM, SCSI (SAS), (RAID) 1 Data drives Six 1.2 TB, 10KB RPM, SAS drives in RAID 5 for VMs Network adapter Dual network adapters Operating system Windows Server 2012 R2 Virtualization software Microsoft System Center Virtual Machine Manager 2012 R2 Win 10 Client VMs © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Quality update compatibility Primary focus Stopped formal application compatibility testing program in Windows 8 timeframe Target 20,000 pilot to inform broad deployment Track issues through listening mechanisms Feedback Hub, Yammer, Pointers, and Helpdesk Safety valve If an issue arises allow user to opt out of program and rollback update Lessons learned To date, we have not reported application compatibility issues with this approach Need more real-time insight

Windows Upgrade Analytics MS Story 6/10/2018 5:47 PM Windows Upgrade Analytics Allows enterprise IT to quickly identify and focus on the critical issues impeding upgrades; provides data driven insights to plan and manage the upgrade process end-to-end Workflow visualization from pilot to deployment Powerful upgrade readiness insights and recommendations about the computers, applications, and drivers Risk based approach to app rationalization Microsoft guidance on app and driver compatibility issues Sign up via http://www.microsoft.com/en-us/WindowsForBusiness/upgrade-analytics © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

User-initiated deployment

User-initiated feature updates Just keep my system up to date ≠ Helpdesk driven update ≠ Hardware refresh event I want the latest OS, but want to control when it’s installed so it fits my schedule

Adopting Anniversary Update Proof of concept (PoC) Simulating WUfB with WU ConfigMGR Operating System Deployment Windows Update for Business

Delivery optimization PoC Simulating WUfB with WU Delivery optimization Peer-to-peer caching enabled through group policy Used “Group” setting which limits it to a domain Content is cached for 24 hours Works with all WU and WSUS content Over 76 percent of content came from peer devices versus Internet

User initiated Management point Policy request Distribution point ConfigMGR Operating System Deployment User initiated Management point Policy request Distribution point OSD task sequence Windows 10 policy User initiates installation Policy request is sent to the management point OSD package downloaded from distribution point OSD task sequence runs

OSD task sequence Recommendation Pre-task sequence Post-task sequence Microsoft Ignite 2016 6/10/2018 5:47 PM ConfigMGR Operating System Deployment OSD task sequence Recommendation Let setup do the work and minimize customization and need for testing Pre-task sequence Study-ID for telemetry reporting Check for know issues and remediate Temporarily point devices to WU so they get all the Dynamic Update content during setup and allow group policy to point back on first logon Post-task sequence Clean up of the deployment working environment On-failure task sequence Nothing at this time © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft IT current architecture ConfigMGR Operating System Deployment Microsoft IT current architecture Infrastructure Six primary sites Thirteen secondary sites Three hundred distribution points Five WSUS sites PCs & devices ~350,000 clients ~125,000 mobile devices (EAS) Users ~98,000 FTEs ~82,000 vendors MS Online Directory Sync (DirSync) Active Directory Federation Server AD Azure Active Directory User Discovery WU/MU WU/MU Packages Intune Subscription Connector Site role Synchronize Meta Data Microsoft Intune Five WSUS sites 350,000 clients Redmond Site 1 75,000 clients Redmond Site 2 90,000 clients North & South America 50,000 clients Europe, MidEast, Africa 50,000 clients Australia & Asia 75, 000 clients

Set yourself up for success X86 -> X64 Upgrade doesn’t support architecture conversions BIOS -> UEFI Upgrade doesn’t support BIOS conversions Cross language Update doesn’t support cross language conversion Solution: Traditional deployment Change new device standard configuration to x64 with UEFI Hardware refresh migration Clean install with data migration Solution Match OS language for feature updates Use one base OS language with language packs

Lessons learned 1 2 3 4 5 User experience OSD pre-caching the build locally before deployment available in October OSD user notifications update available in January WUfB user experience in October for TH2 and inbox for RS1 1 Adopt agile processes POC->pilot -> broad deployment Iterate Build culture to fail fast and move forward “celebrate failures” Build user community 2 Compatibility Focus on the critical business apps (that is, top 10 percent) Leverage Upgrade Analytics Is there a day where testing is no longer necessary? 3 Windows Setup Migrates user data, applications and settings Manages BitLocker and Secure Boot Graceful return to previous OS on failure - creates Windows.old for recovery activities 4 ConfigMGR and OSD Let Windows setup do all the heavy lifting During upgrade temporarily point devices to WU for Dynamic Updates Ensure ConfigMGR client health and ensure ConfigMGR inventory is up to date Expire mandatory deployments during significant holidays and peak vacation 5

Q&A

Other sessions Monday: BRK3144 – 2:15PM – Enhance Windows 10 deployment: what's new with Windows 10 deployment Tuesday: BRK3149 – 9:00AM – Learn what's new with OSD in System Center Configuration Manager and Microsoft Deployment Toolkit BRK4023 – 12:30PM – Learn about Windows 10 deployment from the experts Wednesday: BRK2125 – 9:00AM – Evaluate compatibility in Windows 10 and WaaS using telemetry driven insights BRK3145 – 10:45AM – Reduce the network impact of Windows 10 feature and quality updates using peer-to-peer tech BRK3173 – 12:30PM – Upgrade to Windows 10: in depth BRK2126 – 3:15PM – Develop and support apps in Windows as a Service BRK3012 – 4:00PM – Enhance Windows 10 security and management with ConfigMgr, Intune, and new cloud services Thursday: BRK3136 – 9:00AM – Implement Windows as a Service: understanding how to do it THR1002 – 12:05PM – Accelerate Windows10 deployments through telemetry driven insights using Upgrade Analytics BRK3240 – 4:00PM – Ask us almost anything about Windows 10 Friday: BRK3150 – 9:00AM – Troubleshoot Windows 10 deployment: top 10 tips and tricks

Please evaluate this session 6/10/2018 5:47 PM Please evaluate this session Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6/10/2018 5:47 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.