Windows for the Enterprise Boris Ulík Technology Solutions Professional Microsoft Slovakia

Why Windows 8.1?

What’s new in Windows 8.1 Start button Boot to desktop Start screen sync Multiple tile sizes Enhanced Search Reading List Take calls from lock screen Flexible window sizes Multi-monitor improvements Improved built in apps (incl. Mail) Automatic app updates Improved touch keyboard UI enhancements 7-10” tablet support SkyDrive integration InstantGo devices MiraCast support Personal hotspot Assigned access (kiosk) Tap to print (NFC) Auto triggered VPN Device Encryption Improved fingerprint log in support Mobile device mgmt. (MDM) Remote business data removal Platform enhancements

Familiar Desktop Security Windows 8.1 – better than Windows 7 Faster boot times Newer Windows 8 certified PCs can boot up to 36% faster. Better battery life Users upgrading Windows 8 certified scan experience up to 13% longer battery life. Advanced security Windows 8 is 21 times less likely to be infected by malware than Windows XP, and 7 time less likely than Windows 7. Better overall performance Windows 8 uses fewer system resources, resulting in up to 22% less memory usage than Windows 7. Familiar desktop The desktop you're used to is still here and better than ever

Support for Windows XP ends April 8, Implications: Security risks Compatibility issues No one to call Potential down time Staying with Windows XP is a bad idea Faster boot times Longer battery life Better performance Easier and more powerful file explorer with ribbon UI Improved task manager Search your PC, web and SkyDrive from one location Faster Wi-Fi reconnection Auto-triggered VPN Skype call from lock screen Windows store and modern apps Office 365 Beautiful devices

BYOD goes mainstream changing security landscape enabling mobility critical for success anywhere, anytime expectations

At home At work

Devices for Different Customer Needs Tablets For those always out and about Two-in-Ones and Convertibles For the virtual mobile professional Laptops For the specialty user All-in-Ones and Desktops For those who need power and style Example Customer Profiles: Sales representative Insurance or real estate agent Home repair/contractor Law enforcement Inflight crew Retail Example Customer Profiles: Executive Office worker Business Consultant Presenter/Speaker Shop owner Example Customer Profiles: Doctor/healthcare professional Manufacturing Delivery service Example Customer Profiles: Advertising agency Design shop Engineer/Software developer Financial services Office manager Home office

Outlook 2013 RT Support for 3 rd party MDM solutions Workplace join and work folders Inbox 3 rd party VPN clients Windows 8.1 on ARM

Full Packaged Product (FPP) OEM – PC Preinstalled Volume Licensing Windows 8.1 Editions

Paths from Windows 8 to Windows 8.1 Windows 8 Windows 8 Pro No Active SA Active SA OEM/FPP Customers VL Customers Windows 8.1 Windows 8.1 Pro Windows 8.1 Enterprise Free update through the Windows Store Free update through the Volume License Service Center (VLSC)

Why Software Assurance?

Microsoft Desktop Optimization Pack Microsoft Application Virtualization (App-V) Virtually any application, anywhere Microsoft User Experience Virtualization (UE-V) Change your device, keep your experience Microsoft Enterprise Desktop Virtualization (MED-V) Enable your Windows XP-based apps on Windows 7

Windows 8.1 Enterprise Enterprise Sideloading Create a corporate Windows 8.1 environment on a USB stick Connected to corporate networks, seamlessly and more securely Users in the branch office can download documents and apps faster Improved end-user experience Specify what software is allowed to run on a user's PCs Deploy Windows 8 apps from outside of the Windows Store Start Screen Control Control Start screen configurations for different groups and roles using Group Policy

Transparent direct connection to corporate resources – no user interaction is required Windows 8.1 / Windows Server 2012 R2 do not require:  Two consecutive public IPv4 addresses (DirectAccess servers can be deployed behind NAT device)  IPv6 deployed within internal corporate network (integrated NAT64 / DNS64)  PKI (certificates) deployed at the domain-joined computers (can employ Kerberos Proxy functionality)  Consider “computer-only” scenario Windows 8.1 Devices with TPM chip can benefit from Virtual Smart Cards Support for “Metered Internet Connections” DirectAccess Productivity

Windows 8.1 on Certified USB drive  USB 3.0, capable of 2 partitions at least (“Basic Disk”) Supports various scenarios  VPN replacement, Vendors, BYOD, … Secured with encryption (BitLocker) Connected via VPN or DirectAccess Managed by Group Policies, SCCM, Windows Intune Applications can be installed or loaded via App-V Windows To Go Productivity

Enables documents caching within subnets interconnected over unreliable WAN Centralized / Distributed modes  Centralized mode requires Windows Server OS deployed on the local subnet  Centralized mode is configurable for Cache Preloading GPO / Self-configuration of branch office computers Support for SMB, HTTP, FTP BranchCache Productivity

Software Assurance includes VDA license Windows Server Remote Desktop Services scenarios:  Session based (Full desktop / RemoteApps)  Virtual Machine based (Personal Desktop / Desktop Pool) Requires only HTTP(S) / RDP  Enables BYOD / Contingent staff / VPN replacement scenarios  RDP client with RemoteFX Virtual Desktop Infrastructure Productivity

Enables virtualization of applications  Applications run within App-V agent as if locally installed  Ability to run different versions of the same software Includes all components for various scenarios  From standalone deployment to full infrastructure (integrated with SCCM) Ability to load and cache / pre-cache software to the client  Windows To Go / VDI (Desktop Pool) Ability to track and manage license usage App-V (MDOP) Productivity

Apps and OS personalization settings roam across Windows Synchronization is smart – logins are fast Based on GP configuration via Templates  Template Generator is included / Microsoft Gallery Ability to roll back settings to initial state Integrated with existing tools  Active Directory Group Policies, MDT, SCCM UE-V (MDOP) Productivity

Device enrollment  Device equipped with certificate – not managed, yet, not “unknown”  Leverage Windows Intune Manage access to corporate data  Integrate with Work Folders Support for iOS Workplace Join Productivity

Enables a single Windows Store app experience on the device User only experiences the specified app Unable to access system files and other apps Windows Embedded 8.1 Industry  Broader set of device lockdown capabilities (ATM, etc.) Assigned Access Productivity

Available also in Windows 8(.1) Pro Consider for Data Leakage / OS Integrity scenarios Windows 8(.1) / Windows Server 2012 (R2) BitLocker enhancements:  Encryption of only “used” disk space  Network unlock capability Employ TPM chip with PIN, whenever possible BitLocker to Go protects removable media  Enforced via GPO BitLocker & BitLocker to Go Security

Ability to deploy rules for using (and / or potentially installing) applications  Separate rules for Applications, Installers, and Scripts Enables control Modern UI Apps from Microsoft Store as well Support for “Application Whitelisting” scenarios within corporations Ability to protect from Portable Applications Managed via Group Policies AppLocker Security

UEFI Trusted / Measured boot process Early Loading of Anti-Malware (ELAM) Windows Defender integrated with anti-virus capabilities Picture Passwords Virtual Smart Cards Selective Wipe of Corporate Data Other Improvements Security

Simplifies the BitLocker provisioning process Report on device encryption compliance and audit access to keys Self-service Web Portal for users to recover devices Users can initiate PIN resets and volume encryption tasks MBAM prevents reuse of BitLocker recovery keys MBAM (MDOP) Management

Set of tools for Diagnostics and Recovery  Bootable WIM, ISO, USB Transparent UEFI machine boot integration Tools for troubleshooting  Memory scanning, Disk Scans, Antivirus analysis  Memory Dump “Reader”  Data Recovery from BitLocker Protected Drive DaRT (MDOP) Management

Support for 3 rd party MDM solutions Enterprise side-loading / SCCM Application Catalog Booting from VHD(X) Other Improvements Management

Unique access to Windows 8 Enterprise Virtualize, Manage, Restore with MDOP Work from any device with more Flexible Licensing Solid business foundation in Windows 8 Pro SA foundation Use rights, Technology, Support

Call to action Consider Windows 8.1 Download and evaluate Windows 8.1 Start developing Windows apps for your business Evaluate Windows 8.1 tablets for all your tablet deployments Target Windows 8.1 for adoption across all PC form factors in your company Deploying Windows 7 today? Continue your deployment, bring in Windows 8 tablets side by side Target Windows touch devices for hardware refresh