Windows 8: Windows To Go Overview Zvezdan PavkovicTanya Koval Senior ConsultantArchitect WCL333
Unique Work styles Contingent Staff BYOD Ultra Mobile Current mobility solutions while effective can be costly and require high bandwidth connectivity
Windows To Go, Your Portable Workspace A consistent Windows 8 experience on any device with Windows To Go BENEFITS Consistent Windows 8 Experience* Works online or offline Easy to use and personalize Local data is protected Easy to deploy and manage Booting from Internal hard drive FIREWALL App-V Folder Redirection BitLocker Booting from External USB drive App-V Folder Redirection App-V Folder Redirection * on any device certified for use with Windows 7 or Windows 8 Systems Management Tools
Cost Effective and Lightweight Solution Travel Light Bring Your Own Device Contingent staffFree Seating
Windows To Go capabilities SecureManageableEasy To Use
Secure: Protects Corporate Data Supports BitLocker drive encryption New Password Key Protector Pre-OS password to unlock Windows To Go Protection with Trusted Boot Protects Windows boot process and anti- malware software
Secure: Prevents Data Leakage Separation from host PCs internal hard drive Makes the host’s internal hard drive offline Utilizes SAN policy Can be controlled by Group Policy Host PC’s internal Hard Drive not visible
demo Boot from USB
Easy To Use: Enabling Boot from USB Windows To Go Start up Options Allows host PCs to automatically boot from USB 2 Easy Steps in Windows 8 Search for “Windows To Go Startup options” Select “Yes”
Easy To Use: Full fidelity experience High performance Full native hardware access on the host machine Same peripheral support as Windows 8 Touch enabled, mouse and keyboard aware Top USB vendors to offer Windows To Go drives Certified through the Windows 8 Hardware Certification Kit USB 3.0 drives with SSD & high random Read/Write speed Reports as fixed media Some vendors to offer Hardware Encryption
SSD Based Flash USB Drives optimized for Windows To Go
demo Full Fidelity Experience
Easy To Use: Resilient to unintended removal
Resilient to unintended removal from host device Resumes workspace when USB is put back on within 60 seconds Protects data by enforcing system shut down after 60 seconds User removes USB during a running session USB Boot disc removal is detected by the USB stack USB Drive is returned to host PC within 60 seconds The system freezes, the stack waits 60 seconds for the USB drive to return System will resume System is turned off Yes No
demo Unintended Removal Mitigation
Easy To Use: Redefine Mobility Work Across Multiple PCs On a new PC drivers are installed on first boot Identifies computer from characteristics of machine firmware Stores configuration to boot faster on previously used PCs Work Across system Firmware Can be configured to boot on both UEFI and Legacy BIOS Both sets of boot components are placed on a system partition Doesn’t solve architecture incompatibility
Centrally Managed and Deployed IT scripts the creation of multiple drives ( Duplicator or USB Hub) Users pick up Windows To Go stick from central location Users boot at work to join to domain and enable BitLocker Windows To Go is ready to use User Self-Provisioning System Center Configuration Manager 2012 SP1
IT Admin Experience Uses existing Windows 8 deployment for Windows To Go Creates prestaged media Creates a package with self service tool Deploys the Windows To Go package to the appropriate users User Experience Browse the ConfigMgr Software Catalog Receives a UI that walks through basic inputs Reboots on CorpNet and completes the provisioning process
Standard Enterprise Software Distribution Tools System Center Configuration Manager or third party Inventory software Deploy applications, patches and updates ConfigMgr 2012 SP1 can identify the device as Windows To Go Configure user and system settings with Group Policy Group Policies introduced specific to Windows To Go Stay connected to corpnet with DirectAccess Supports Microsoft Desktop Virtualization
Evaluation: Self Provision with the Creator Tool Windows To Go Creator in Windows 8 Enterprise Provision single drive with an Enterprise Image only Need admin access Can be custom WIM or pointed at media Can enable BitLocker
Certified USB Drive
Provides more MobilityEasy To UseSecure & Manageable