Newness and Coolness in Configuration MANAGER Dune Desormeaux Program Manager II Microsoft Avi Prasad Program Manager Microsoft

Dune Desormeaux Avi Prasad @DuneConfigured @TheAviPrasad Program Manager, Configuration Manager product team Program Manager II on the SCCM Team 9 months with Microsoft and SCCM product team 2 years on the team Poutine, guacamole Known to wear only black shirts

What’s new in current branch 1702

Microsoft Service Enablement Windows 10 and Office Software Updates Microsoft Service Enablement Simplification and Performance The Customer Voice

1702 | Windows 10 and Office

Windows creators update support SCCM supports the N-1 version of Windows, and releases an update every 4 months. For RS2 this translates to: -1702 fully supports RS2, including new management features -SCCM 1610 will have AppCompat support for the Windows RS2 Creators Update -SCCM 1610 and 1702 will be providing full support for the Windows RS1 Anniversary Update (1607) Avi

Device Guard Simplify deployment of Device Guard policies to clients with its native integration in 1702. Device Guard policies will lock down clients with Code Integrity so that only trusted Binaries can be executed Avi

Device Guard Demo

Office 365 installer Configure Office 365 installation settings, download files for Office Content Delivery Networks (CDNs), and deploy the files and as an application in Configuration Manger from the Office 365 Client Management dashboard. Avi

Office 365 Installer Demo

1702 | Software Updates

Windows Fragmentation With Windows 7 and 8, servicing choices added complexity and cost, increased fragmentation, and reduced quality What we are testing What customers are running Y YY Windows 7 Test Lab PC: Fully Patched Typical Windows 7 PC: Selectively Patched

Windows as a service update types Quality Updates Feature Updates A single cumulative update each month Security fixes, reliability fixes, bug fixes, etc. Supersedes the previous month’s update No new features Targeting twice per year with new capabilities Very reliable, with built-in rollback capabilities Simple deployment using in-place upgrade, driven by existing tools Try them out with Insider Preview

Express Updates Illustrated Month n Month n+1 Month n+2 Month n+3 Month n+4 KB1001 KB1002 KB1003 KB1004 KB1005 WSUS Server Older deltas New deltas Older deltas New deltas Older deltas New deltas Older deltas New deltas Older deltas New deltas New deltas New deltas New deltas New deltas New deltas Client PC ~100MB ~100MB ~100MB ~100MB ~100MB

Express updates The size of cumulative updates keeps increasing over time. A big concern for customers. Express updates allows clients to download only the delta between the current month’s updates and the previous month’s updates on the client. Using express installation files provides for smaller downloads and faster installation times on clients The size of the Express update is multiple times larger than the cumulative updates. Lighter on clients, heavier on the Distribution point

1702 | Microsoft Service Enablement

Azure Active Directory As a first step towards enabling Azure Active Directory, AAD will now receive its own top-level node in Configuration Manager. In 1702, IT Pros can now use AAD to configure user policies for Cloud Management Gateway.

Windows Store for Business Online licensed apps can be deployed to ConfigMgr managed devices, to complete the Windows Store for Business app support

Windows store for business Support Matrix Full Client Hybrid Free offline licensed app 1606 User/device collections For both required and available install via Software Center Required install in 1606 Available install in 1610 via new Company Portal Free online licensed app 1702 Paid offline licensed app No Paid online licensed app 1610

1702 | Simplification & Performance Dune

Pre-Cache Task Sequence Content 9/21/2018 8:57 PM Pre-Cache Task Sequence Content Clients download content prior to running task sequences Streamlined user experience, reduced dependency on real-time network connection 1702: support for in-place upgrade task sequences © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Boundary Group Improvements 9/21/2018 8:57 PM Boundary Group Improvements 1610: More control over fallback behavior Control how long the client should try and connect to DPs in its boundary group, in a controlled set of fallback boundary groups, and finally in any other boundary group 1702: Software Update Points also supported Post 1702: Management Points © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Investments in console Experience 9/21/2018 8:57 PM Investments in console Experience 1702: Search the current node OR all subfolders Persist which folder search option is selected New column for object path Dune © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Search all sub-folders demo

1702 | Customer Voice

Handling Running .exe During Application Deployment 9/21/2018 8:57 PM Handling Running .exe During Application Deployment A user-friendly experience to close applications that block a deployment Widely requested Admins can specify files they know will block installation of an app Support for both user-initiated and required deployments © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Feature One Demo

Additional highly voted features 9/21/2018 8:57 PM Additional highly voted features Task Sequence enhancements Support for a "Previous" option in task sequences Select multiple apps in Install App step Configurable timeout for Auto Apply Driver task sequence step Customize Software Center Warnings Determine whether an OSD task sequence is considered “high-risk” and customize the warning that the user sees at installation time Software updates on cloud-based DPs Use a cloud-based distribution point to host a software update package UEFI in Hardware Inventory In 1702: Learn which systems are configured for secure UEFI through hardware inventory Post 1702: Built in reports © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

A brief look at user voice Last Year Today Open Ideas 502 1600 Planned 5 16 Started or Completed 4 161

Perhaps the most important takeaway from today… ConfigurationManager.UserVoice.com WE LOVE USER VOICE!!!

Technical Previews Post 1702 Dune

Nested Task Sequences!! 1704 Technical Preview 9/21/2018 8:57 PM Nested Task Sequences!! 1704 Technical Preview New TS step to let you run another Task Sequence Only one level of “nesting” supported, but more than one “Run Task Sequence” step is supported per parent TS Great for modularizing, consolidating © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Nested Task Sequence Demo

Software Center Deep-links Demo

Parting Words Configuration Manager is the single best tool in the market to manage your enterprise Keep upgrading as fast as possible Give us feedback – we listen.

Related MMS Sessions from the Microsoft product group How We Ship Current Branch (Today @10am) ConfigMgr High Availability (Part 1 today @ 1pm) Managing Windows 10 with Configuration Manager (Tomorrow @ 8am) The Changing of the Guard (Tomorrow @ 10am) Cloud Management Gateway Deepdive (Tomorrow @ 1pm) Hackathoooon!