Deploy the new OneDrive sync client a practical guide Microsoft Ignite 2016 7/22/2018 7:57 AM BRK3081 Deploy the new OneDrive sync client a practical guide Tony East & Patricia Hendricks OneDrive PM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Overview Microsoft Ignite 2016 7/22/2018 7:57 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Sync Unlocks OneDrive and SharePoint Value Microsoft Ignite 2016 7/22/2018 7:57 AM Sync Unlocks OneDrive and SharePoint Value Productivity still primarily on PC’s Sync gets files “off” PC’s & shares & fulfills promise of the cloud Doesn’t require user behavior change © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Three phases of deployment Microsoft Ignite 2016 7/22/2018 7:57 AM Three phases of deployment Prep for rollout Installing OneDrive Monitor initial sync © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7/22/2018 7:57 AM Prep for rollout © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Understanding your company’s file ecosystem Think about your users’ habits Where do your users work every day? Where do they put their files? Do your users already have files in OneDrive? Think about content generation across your company Where are the bulk of the files being generated today? Do you have GBs, TBs of content already?

Sync Network Utilization Pattern Load Initial Sync Operation & Organic Usage Growth Time

Let’s learn how OneDrive installs 7/22/2018 7:57 AM Let’s learn how OneDrive installs Patricia Hendricks © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What to know before you deploy TechReady 23 7/22/2018 7:57 AM What to know before you deploy The OneDrive client already comes installed with all Win10 devices! OneDriveSetup.exe is included in all Office2016 builds OneDrive is deployed as an .exe, not an MSI But wait, my organization deploys MSIs, not .exes! Don’t worry, we’ll show you how. OneDriveSetup.exe must run with elevation This is so we can access the local machine registry and install icon overlays. OneDriveSetup.exe installs only on the current logged on user That’s a pain. Why can’t we install once per machine? OneDrive is installed under a user’s %localappdata%\Microsoft folder, not C:\Program files. Installing per user lets the OneDrive client seamlessly receive updates without requiring elevation. This ensure users have the highest quality builds and access to new features. We’ll show you how you can install per user with SCCM. OneDrive.exe must run in the user context OneDrive.exe runs in the context of the user in which is was invoked. If OneDrive.exe is launched with elevation, Windows is going going to run as if it were the admin. Which is a problem if the current user isn’t the admin! © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechReady 23 7/22/2018 7:57 AM Here’s a real example Let’s see how we can use SCCM to deploy the OneDrive sync client For a detailed walkthrough, check out this great blog post by Paulo Dias https://aka.ms/onedrivesccmdeployment © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Step 1: Create a script based application TechReady 23 7/22/2018 7:57 AM Step 1: Create a script based application Manually specify the application information Create a new application and select “Manually specify the application information.” After giving your application a cool name, select “Manually specify your deployment type information” and select “Script Installer” as your deployment type. © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Step 2: Set your install and uninstall programs TechReady 23 7/22/2018 7:57 AM Step 2: Set your install and uninstall programs Download the latest OneDriveSetup.exe. Save it to an accessible content location. Note: if you’ve installed Office 2016, you will already find OneDriveSetup.exe under C:\Program Files (x86) Set your install and uninstall programs Set your install program to “OneDriveSetup.exe /silent” Set your uninstall program to “OneDriveSetup.exe /uninstall” © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Why use /silent? Without /silent With /silent TechReady 23 7/22/2018 7:57 AM Why use /silent? Without /silent Users are shown installation UI And launched directly into the OneDrive Setup Wizard on completion With /silent No installation UI You control of when you want to show the OneDrive setup wizard to your users. We’ll show you how. © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Step 3: Adding your OneDrive detection logic TechReady 23 7/22/2018 7:57 AM Step 3: Adding your OneDrive detection logic Wait, what is this step for? In the next step, you’ll see that we’ll set the deployment to run on user logon. By logon, this means every user logon. In this step, we add a script that 1) checks whether OneDrive is already installed for that current user, and 2) launches the deployment only for users who don’t have OneDrive installed. Use the instructions from https://aka.ms/onedrivesccmdeployment to sign and copy/paste the custom detection logic your Configuration Manager console. Credit to PowerShell guru Herbert Fuchs for the detection logic. Why is this step important? This step prevents multiple installs of OneDriveSetup.exe. While not harmful, this multiple installs result in multiple version folders under %localappdata%\Microsoft\OneDrive. To maintain good file system hygiene, we recommend adding this detection logic. © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Step 4: Important! Set the logon requirement TechReady 23 7/22/2018 7:57 AM Step 4: Important! Set the logon requirement Install for System Installing for system provides the elevation needed for OneDriveSetup.exe to access HKLM. Only when user is logged on Installing only when a user is logged on provides a target user for install. Without it a logged on user, OneDriveSetup.exe will add itself to C:\Program Files, but will not install under %localappdata%\ of the current user. Allow user to view and interact with program installation Super important. This impersonates the current user. Without it, OneDrive again will only install for system under C:\Program Files, but not the logged on user. This is important …but this is most important © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechReady 23 7/22/2018 7:57 AM Bonus We’ve created an application package for you to import directly into SCCM Grab it at https://aka.ms/onedrivesccmpackage Reference: https://aka.ms/onedrivesccmdeployment by Paulo Dias © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Prepping the desktop Patricia Hendricks 7/22/2018 7:57 AM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Ramping your deployment Start small Find your groove ;)

Mac Standalone Package 7/22/2018 7:57 AM Mac Standalone Package © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

OneDrive sync client Mac Standalone Features Deployable package with all languages included Automatic updater (invisible to user) Creates Finder Shortcuts to your synced folders Automatically turns on Finder extension for sync status overlays Open at login enabled by default Configurable Options Run at login Disable personal accounts Set default folder location and/or disable change location Hide dock icon Coming soon: Automatic upload bandwidth allocation

Deploying OneDrive on Mac Microsoft Ignite 2016 7/22/2018 7:57 AM Deploying OneDrive on Mac Tony East © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Securing Your Deployment 7/22/2018 7:57 AM Securing Your Deployment © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Controlling access to data Microsoft Ignite 2016 7/22/2018 7:57 AM Controlling access to data User Group memberships Auth strength (MFA) Risky behavior Device Managed Compliant App Mobile App is managed Mobile App reputation SaaS app sensitivity Conditional access with EMS Other Network location Breach detected © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Conditional Access (CA) TechReady 23 7/22/2018 7:57 AM Conditional Access (CA) Built on AAD “ADAL” Auth Stack Ensures machine policy compliance before establishing the sync relationship i.e. “Require Domain Join” Policies enforced at account configuration time © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

OneDrive & Windows Information Protection Integrated with the Windows 10 WIP platform Enables users to safely sync “corporate” and “personal” data on a single device IT can monitor, warn or block Helps prevent accidental data leakage The OneDrive sync client is “enlightened” Enterprise data is encrypted and protected from accidental exposure Should give IT more comfort allowing personal/work mix on machine You can start using it today with Windows 10 AU Universal Office supports it (U Outlook/W/X/P/OneNote) already in the store and coming soon for Windows desktop apps IT decides if user can change ownership Right-click allows user to change ownership

Conditional Access & WIP Tony East

A word on automatic updates… Microsoft Ignite 2016 7/22/2018 7:57 AM A word on automatic updates… The OneDrive sync client automatically updates itself This ensure you always have the latest bug fixes and most reliable builds! What if my organization isn’t ready for the latest features? Client updates don’t always imply availability of the latest features. You control when your organization enables large, disruptive features! © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7/22/2018 7:57 AM Wrap Up © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Deployment & Operational Tools Microsoft Ignite 2016 7/22/2018 7:57 AM The Journey OneDrive everywhere with your user’s Documents, Pictures and Desktop in sync OneDrive Sync Team Sites Sync Document Redirection Unattended Setup Deployment & Operational Tools © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

File access and sharing sessions at Ignite Tuesday BRK2118 – Explore OneDrive for Business key features and roadmap BRK1011 – Drive productivity with OneDrive and SharePoint file collaboration BRK2119 – Understand the sync and desktop integration options for OneDrive and SharePoint Thursday BRK1010 – Explore the mobile options for OneDrive for Business and SharePoint files Wednesday BRK3081 – Deploy the new OneDrive sync client—a practical guide BRK3228 – Protect your OneDrive and SharePoint files on mobile devices Friday BRK3082 – Build solutions and apps with Microsoft OneDrive API and Microsoft Graph API

Q&A

Deploy, ramp-up on new services and onboard new users with Microsoft FastTrack: http://fasttrack.microsoft.com/

Join the Microsoft Tech Community to collaborate, share, and learn from the experts: http://techcommunity.microsoft.com

Please evaluate this session 7/22/2018 7:57 AM Please evaluate this session Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7/22/2018 7:57 AM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.