4/6/2019 6:28 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Deploying Windows To Go in the Real World 4/6/2019 6:28 PM Deploying Windows To Go in the Real World Mikael Nystrom MVP – Setup/Deploy TrueSec DC-B317 © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

I… Live in Sweden Work on this planet (mainly) Travel a lot Have been doing Windows deployment since Win 3.x Do training and consulting

To cover… Use cases Domain Join Profiles Activation Remote Access Custom Image with Drivers Creating a WTG device

Use Cases “I need to work from home, but my device back home is not trusted” “I need to travel light” “I need a spare machine in my pocket” “My drive is my PC, not the PC” “I need to access the company on a borrowed PC, now…”

License rules apply To make full use of these features, Software Assurance usage rights are changing too. Any employee with a company PC with a Software Assurance license will also have a corresponding Windows To Go license, so that they can boot a secure, corporate-controlled environment on their home PCs. This can be extended further with Companion Device licenses (for extra cost), allowing employees to access corporate environments through either Windows To Go or VDI on up to four personally-owned systems

Domain Join In reality the WTG needs to be domain joined Activation Policy's Direct Access Access to resources

Domain Join Online: The user joins the computer to the domain manually Offline/Offsite The WTG device is joined before it starts

djoin.exe djoin.exe /provision /domain network.local /savefile D:\temp\tempBLOB.bin /machine PCWTG-001 /machineou "OU=WTG,OU=Computers,OU=Network,DC=network,DC=local" /rootcacerts /policynames "DirectAccess Client Settings"

djoin.exe djoin.exe /requestodj /loadfile D:\temp\tempBLOB.bin /windowspath W:\windows > info.log

Profiles - Redir Use GPO to control Download roaming profiles on primary computers only Requires WS2012 schema update Redirect folders on primary computers only

Primary Computer

$PC= get-adcomputer PCWTG-001 Set-aduser admminy -add @{'msDS-PrimaryComputer'="$PC"}

OU Structure Separate OU for WTG Separate Policy's Separate Management

Activation KMS = OK MAK = Not supported Active Directory Based Activation = Preferred

Remote Access Direct Access is preferred VPN Works, but DA works with djoin.exe VPN Works, but Management and activation issues. No remote = stay in the office…

Custom Image w Drivers Basic Applications Settings Drivers Storage, network, graphics

Create WTG USB Device needs to be “disk” USB 3.0 Require 2 partitions USB 3.0 BIOS support for boot on USB Can be created in UI or Script

SpringBoard is the No:1 Resource

We want to hear from you! Evaluation Complete your session evaluations today and enter to win prizes daily. Provide your feedback at a CommNet kiosk or log on at www.2013mms.com. Upon submission you will receive instant notification if you have won a prize. Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer. Entry details can be found on the MMS website.

Access MMS Online to view session recordings after the event. Resources Access MMS Online to view session recordings after the event. http://channel9.msdn.com/Events

4/6/2019 6:28 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.