Windows 10 management 101 the things you need to know 11/6/2018 10:05 PM BRK3386 Windows 10 management 101 the things you need to know Adnan Hendricks Microspecialist Consulting @Microspecialist © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

+500M DEVICES RUNNING WINDOWS 10 +60M IN BUSINESS “For Windows 10, Microsoft went all-out to turn around perceptions among corporate customers…” Shira Ovide WSJ “THE BOTTOM LINE? MICROSOFT IS GOING TO BEND OVER BACKWARDS TO MAKE THE BUSINESS TRANSITION TO WINDOWS 10 AS EASY AS POSSIBLE.” MARK HARTMAN PC WORLD “WINDOWS AS A SERVICE MAKES WINDOWS 10 THE MOST ATTRACTIVE DEVELOPMENT PLATFORM EVER.” PAUL THURROTT THURROTT.COM The Most Compatible Windows Ever

Microsoft Edge, and Internet Explorer 11 11/6/2018 10:05 PM Microsoft Edge, and Internet Explorer 11 © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Becoming Agile with Microsoft PRISM FY16 11/6/2018 10:05 PM Becoming Agile with Microsoft Delivering new value, features and capabilities on a faster cadence Providing unmatched flexibility and control Continually improving security, reliability, and performance Simplifying deployment and management Deeply integrating cloud services, both to add functionality and to simplify the process of staying current © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Long Term Servicing Channel Simplified feature update model across Windows and Office Monthly Channel Semi-Annual Channel Long Term Servicing Channel Monthly 2x / year Every 2-3 years 1 month of support 18 months of support 10 years of support (5+5) Office Windows Release schedules are aligned Windows 10 and Office 365 ProPlus will release twice per year, targeting March and September Servicing timelines are identical Windows 10 and Office 365 ProPlus will be serviced and supported for 18 months from the date of release

11/6/2018 10:05 PM WAAS © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows as a service: Deploying Windows MS Story 11/6/2018 10:05 PM Windows as a service: Deploying Windows Unmatched flexibility and control, depending on needs Windows Insider Preview Branch Semi-Annual Channel (Targeted) Semi-Annual Channel Long Term Servicing Channel Specific feature and performance feedback Application compatibility validation Deploy to appropriate audiences Test and prepare for broad deployment Information workers General population Specialized systems Early adopters, initial pilots, IT devices Deploy for mission critical systems No need for frequent new features (or any sort of change) Too expensive for general population Benefits from new features Begins broad deployment Test machines, small pilots NUMBER OF DEVICES STAGE Release © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows as a service: timelines MS Story 11/6/2018 10:05 PM Windows as a service: timelines Windows Insider Preview Branch Specific feature and performance feedback Application compatibility validation New Windows 10 Release Deploy to pilot audiences Validate and prepare for broad deployment Deploy to all audiences, in waves to reduce risk Plan & Prepare Pilot Deploy / Use Grace 6+ months of active development ~4 months 12+ months 60 days 18+ months to pilot, deploy, and use each release Plan & Prepare Pilot Deploy / Use The process repeats… © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/6/2018 10:05 PM Analytics © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What is Windows Analytics? A cloud-based, telemetry-driven suite of services collecting information from deep within Windows Focused on providing actionable information to proactively improve your Windows environment Built on top of Microsoft Operations Management Suite Log Analytics for advanced business intelligence reporting

Windows Analytics Suite Upgrade Readiness (GA) Update Compliance (Public Preview) Device Health (Public Preview) Plan upgrades by identifying devices that are ready, identify and resolve app and driver compatibility blockers Ensure update and antimalware compliance and pro-actively identify and remediate deployment issues Reduce support costs by pro-actively identifying and remediating top end-user impacting issues

Windows Analytics Data Flow MSFT, as “IT admin” for consumers, uses telemetry to ensure OS, app and driver releases land with the right level of quality/health/compat Windows Analytics gives IT telemetry-based insights to their devices, exposed via OMS log analytics IT controls the level of telemetry collected, which impacts Analytics availability Telemetry Service OMS Log Analytics MSFT Cloud Telemetry Upload GP/SCCM/Intune Configure Control Windows Analytics Data Flow Value to customer: Reduce TCO via proactive insights Value to MSFT: Telemetry helps us improve the product, staying current helps our ecosystem

Windows Analytics Update Compliance MS Story 11/6/2018 10:05 PM Windows Analytics Update Compliance © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Modern Management 11/6/2018 10:05 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

A lot has changed - Improved 11/6/2018 10:05 PM A lot has changed - Improved Traditional / Classic Management Vs Modern Management © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Traditional IT Cloud IT Active Directory Domain Join Group Policy System Center Configuration Manager Local Activation Azure AD Azure AD Join MDM Policies Intune or other MDM AAD Activation

Microsoft 365 A complete, intelligent solution to empower employees to be creative and work together, securely. Office 365 + Windows 10 + Enterprise Mobility + Security

Microsoft EMS Enterprise Mobility Currently over Microsoft Inspire Microsoft EMS “Text…” Enterprise Mobility Currently over 50 million / 55k customers Enterprise Mobility customers grew 57% Y/Y

Right Intune for Any Organization 11/6/2018 10:05 PM Right Intune for Any Organization Intune for Enterprises Intune for Education Intune for SMBs Public preview © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Intune for Education Intune service with a customized IT Pro experience targeting Educators Simple enrollment Bring devices under management simply by Azure AD joining Easy deployment Full IT service or delegate with USB setup key Zero touch management Apps and settings applied to each enrolled device by default Easier shared device management Each user can get different settings/apps if required Designed for education Easy to use for common school scenarios and settings Scales to your environment Easy for part-time IT staff yet integrates with SCCM Easy to buy Purchase per-device or per-user Pre-release simulated screenshot shown, final experience may differ

Mobile Device and App Gateway 11/6/2018 10:05 PM Intune on Azure Key Benefits: New administrative console optimized for cross EMS (Azure AD Premium + Intune) workflows, including conditional access and role-based access control Allows for easy integration and task automation with other IT systems and Microsoft services by offering complete API support through Microsoft Graph New service platform runs on any browser, on any device with increased scalability and deeper reporting capabilities Graph API Admin Console (Ibiza) Mobile Device and App Gateway Micro-services Azure Storage Intune (on Azure) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Simplify Windows 10 management and lower TCO with EMS Users Apps 11/6/2018 10:05 PM Simplify Windows 10 management and lower TCO with EMS Simplified management & security Embrace cloud-based management and transition at your pace while staying in control. Always up to date Deliver the latest features and security. Cloud updates mean you don’t need to have on-premise update servers. Microsoft 365 EMS Agentless Unified identity, device and O365 ProPlus mgmt. Office 365 ProPlus MGMT Integrated data protection Control what updates are deployed, to whom and when. Self-service deployment Make any new PC enterprise-ready via a simple self-service experience. Proactive insights Get ongoing proactive insights to diagnose and fix issues before they happen. Windows 10 Sign in with contoso.microsoft.com Contoso Sign in Corp. Username Password Certificate email@contoso.com Automatically configure devices when your users login with their company credentials. Use cloud intelligence to upgrade Windows 10 and Office 365 ProPlus with confidence. Next Microsoft Intune Learn more at microsoft.com/intune Enterprise Mobility + Security Learn more at microsoft.com/ems © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Paths to Modern Management 11/6/2018 10:05 PM Paths to Modern Management A new organization starting with modern workplace Cloud-first Many workloads need to be modernized at the same time Big Switch Transition Doesn't address the needs of the full organization Group by Group Transition Iteratively move workloads to modern Iterative (“Co-management”) © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Modern is not “all or nothing” 11/6/2018 10:05 PM Co-Management A practical way to migrate over time Modern is not “all or nothing” Minimize risk © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/6/2018 10:05 PM Roaming © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Roaming Options Windows 10 11/6/2018 10:05 PM Roaming Options Windows 10 UE-V ESR Roaming Profiles Deprecated © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise State Roaming (ESR) Sync settings to the Azure Windows Settings UWP App Settings Requires Device Registration of Azure AD Join Configure in AzureAD

App-V and UE-V since Windows 10 Anniversary Microsoft Desktop Optimization Pack Virtualize Manage Restore Microsoft App-V Microsoft UE-V Microsoft AGMP MBAM Microsoft DaRT Windows 10 Enterprise / Education Windows Server 2016 Datacenter / Standard Microsoft App-V Microsoft UE-V Microsoft App-V Microsoft UE-V

App-V and UE-V since Windows 10 Anniversary Both Agents are still included as part of Windows

Settings Location Template UE-V Components Settings Store UE-V Agent Settings Location Template UE-V Generator

Server Share Desktop Server Share UE-V Agent Identify settings Settings Location Templates Windows Settings Desktop Applications Windows 10 App List Windows 10 Apps Apply settings Windows Settings Desktop Applications Windows 10 Apps Template Catalog Location Settings Storage Location Capture settings Windows Settings Registry Local Files Desktop Applications Windows 10 Apps App setting folder UE-V Agent Settings Templates Settings Packages Settings Packages Synchronizes settings Settings synchronized on event triggers

UE-V Implementation Steps Configure a settings storage location Prepare Group Policy to manage UE-V agent Select / create settings location templates Deploy / manage settings location templates / Windows 10 1607 agent is already included just needs to be enabled!!

Package Modernization – Two-Fold Approach ESD IT Pro Sequencer .APPV Application Virtualization Windows Windows Store / Sideloading ISV / Developers .APPX Converter DAC (Centennial)

Management Options Windows 10 11/6/2018 10:05 PM Management Options Windows 10 Group Policy MDM/Intune SCCM Agent © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Manage certain GPO’s thru Mobile Device Management / Intune 11/6/2018 10:05 PM Manage certain GPO’s thru Mobile Device Management / Intune (OMA-DM) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Intune Management Mobile Device Management policies are executed by a Configuration Service Provider (CSP) The Policy CSP handles ADMX backed policies GroupPolicySvc is NOT involved OMA URI prefix: ./Device/Vendor/MSFT/Policy/Config/ ./User/Vendor/MSFT/Policy/Config/ https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider#admx-backed-policies

Example Using Intune: Create a new policy OMA-URI Settings 11/6/2018 10:05 PM Example Using Intune: Create a new policy OMA-URI Settings Enable Clients for SC Set Data Type List 3 OMA-URI box Value “ “.vendor/MSFT/Policy/Config/Update/BranchReadynesslevel” Value 1 © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Modern Deployment 11/6/2018 10:05 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Autopilot 1. Un-box and turn on off-the-shelf Windows PC 2. Transform with little or no user interaction Device is ready for productive use

Windows Autopilot Deployment Program The golden path: No need for IT to touch the devices Simple process for users Integration in the supply chain Key technologies: Windows AutoPilot Deployment Program Azure Active Directory Microsoft Intune Office 365 ProPlus Cloud-Driven

Windows Configuration Designer (WCD) 11/6/2018 10:05 PM Windows Configuration Designer (WCD) Create Provisioning Packages Windows ADK Store © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo

Resources Microsoft 365 https://aka.ms/Microsoft365 Give us feedback 11/6/2018 10:05 PM Resources Microsoft 365 https://aka.ms/Microsoft365 Give us feedback Feedback Hub Windows Analytics and Ready for Windows https://www.microsoft.com/en-us/windowsforbusiness/windows-analytics http://www.readyforwindows.com © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows IT Pro Resources Microsoft Tech Summit FY17 11/6/2018 10:05 PM Windows IT Pro Resources Windows IT Center for IT Pros: https://it.windows.com IT Pro Insider Newsletter: https://aka.ms/WindowsITProInsider Follow us on Twitter: https://twitter.com/MSWindowsITPro Windows Insider Program: https://insider.windows.com/ © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session Tech Ready 15 11/6/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.