Reducing the cost of Engineering, deploying and operating a Windows Client

Table Of Contents Customer situation Vision for a well managed desktop Business Case Deployment Value Customer case studies BDD and ACT Getting started

What Customers Say… Key desktop goals Proactively enable business requests without increasing security risk, IT management requirements or end user support burden for Collaboration Mobility Other team productivity requests Eliminate information overload and improve: Speed of decision making and execution Efficiency of communication and collaboration Quality of customer/partner relationships Minimize the cost of patching and other security responses on a company-wide basis Protect corporate data and enforce policies across a variety of locations, networks and devices Reduce the cost of engineering, deploying and managing corporate PCs company-wide Operational Agility Cost and Complexity Security

Getting Current On The Desktop Deployment Blockers Costs of Engineering, Deployment, and Operate Planning complexity for new deployment projects Proliferation of OS Images impacts operating efficiency Application compatibility testing and packaging is time consuming and costly Weak inventory of HW/SW/MSI scripts Deployment complexity: Migrating user data, deploying images, custom configuration, disconnected users Perceived User ROI “Does the upgrade offer enough employee productivity improvement to justify the costs?”

Tightening security Simplifying deployment Improving application compatibility Windows XP SP2 BDD Solution Accelerator 2.5 App Compat Toolkit 4.0 Virtual PC Solutions Today

Prioritize/Plan Testing and App Compat Image Design and Mgmt Author and Package OS, SP Distribution Application Install User State Migration Compliance/Monitor Security Data Mgmt/Recovery Help, Diagnose, Resolve HW/SW Inventory/Asset Patch Management Desktop Lifecycle Research TCO – “Total Cost of Ownership” recurring indirect and direct costs (e.g., operations, HW, SW) TCA “Total Cost of Acquisition” non-recurring costs (i.e., deployment and app certification) Engineer DeployOperate

Infrastructure Optimization Model BasicStandardizedRationalizedDynamic UncoordinatedManualInfrastructure Centrally Managed IT Infrastructure with some automation Managed and Consolidated IT Infrastructure Fully automated IT Management, DynamicResourceUsage

Microsoft’s Vision For A Well Managed Desktop Security, Networking, and Monitoring Continually monitored network with firewalls/antivirus software on all systems Confident access to network resources from remote and wireless locations Integrated inventory of applications, images, hardware and user rights Identity and Access Management Consistent group policy and security templates Centrally managed user provisioning across all systems Desktop Life Cycle Automated DT reference images, patch management and application compatibility testing Deployment and upgrade for OS and applications with zero touch required Backup and Restore Self managed backup and restore for all Servers and Desktops User state preserved and restored Help desk support via remote assistance

Engineer DeployOperate Desktop Lifecycle Manual Deployment $500 - $1000 per PC Light Touch Deployment ~ $250 per PC Zero Touch Deployment < $100 per PC Design desktop in layers Fewest # images App Certification Infrastructure Optimization

$1,258 $394 $366 $2,017 $1,306 $3,323 $1,406 $734 $428 $2,568 $2,952 $5,520 $1,366 $617 $373 $2,356 $2,450 $4,806 Hardware / Software Operations Administration Total Direct Costs End User Productivity and Downtime (Indirect Cost) Total TCO BasicRationalizedStandardized 16 % 36% 13 % 31% 8% 14% Desktop Operating Costs

5%30%65% Focus On What Matters… Investments in engineering pay off with lower Deployment and Operating Costs “Typical” “Optimal” *Illustrative percentages, size and industry will change what is needed to get to well managed Source: Desktop Engineering* – Design, build, and test the Standard Desktop Desktop Deployment* Operation* 30% 20%50%

Expected overall return: 250%+ with a five-month payback period Reduced the number of images to one Automated imaging Improved productivity by branch personnel Improved security and reliability Solution Accelerator For Business Desktop Deployment SMS 2003 OS Deployment Feature Pack SQL Server 2000 (BDD database), Windows PE 2004, RIS 11,300+ PCs at 408 branches Maintained 20 images, spent on average one wk/mo updating them No way to manage image versions securely and reliably Garanti Bank “By automating our support processes, we can reduce the need for technicians to travel to the branches. This improves the speed and quality of service for our end users and reduces the cost of support.” – Tufan Alatan, Assistant General Manager, Garanti Technology

Expected overall return from BDD: 21% Deployment cost savings of $1.3M ($150/desktop, down from $260) Support cost savings of $1.5M (remote re- imaging) Fewer applications and images: $1.3M Improved productivity by branch personnel: $0.8M Solution Accelerator For Business Desktop Deployment Zero-Touch deployment: SMS 2003 OS Deployment Feature Pack, SQL Server 2000 (BDD database), Windows PE 2005, RIS Zero-Touch provisioning: SharePoint, BizTalk Server 2004, SMS ,000+ PCs (Windows NT4.0) at 1,200 branches 3,000 PCs re-imaged annually on average Goal to lower IT spending by 10% annually to 2009 Wanted to expand the existing automated software distribution to all applications FöreningsSparbanken “We chose to use Microsoft BDD because the products work well together to provide a total desktop management solution.” – Kjell Wahlgren, Production Architect, ForeningsSparbanken IT

Video

Manual Deployment $500 - $1,000 per PC USMT, ACT, WinPE, RIS, PQDI, Ghost Light Touch Deployment ~ $350 per PC Deployment automation with Zero Touch (SMS, MOM) Zero Touch Based Deployment less than $100< per PC BDD Enables Low Cost Deployment

ACT Enables Low Cost Engineering Application Compatibility Tool Kit Application Compatibility Analyzer Inventories all applications and frequency of use from client computers Helps allocate test resources by comparing your application inventory to Microsoft’s online compatibility database Application Verifier Tests applications for common programming mistakes, memory-related issues, and application’s compliance with the Designed for Windows XP Logo Program Compatibility Administrator Selects and applies compatibility fixes to applications

BDD Investments What’s New in BDD 2.5: Application Compatibility Toolkit 4.0 Guidance MOM Reporting Tools Windows x64 guidance for imaging Guidance for building Virtual Server test environment Future Improvements Support for Windows Vista deployment Expand focus to a desktop lifecycle management solution

Architectural Design Session with Microsoft Partner Prepare for Windows Vista Find yourself via the IOM model Familiarize yourself with BDD and ACT Set your priorities How to get started…

© 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Resources Microsoft Windows overview: Windows XP and Vista for IT professionals: Business Desktop Deployment and Application Compatibility Toolkit: Licensing/SA benefits: Microsoft Partner Program:

“Our business does not see financial payback for upgrades.” “We finish one OS deployment and then we immediately start another.” “Our last deployment cost us thousands of dollars per PC – just for deployment.” “Our last deployment ended our previous CIO’s career. I’m not going to risk mine.” “How do I amortize my costs? These deployment project spikes are killing me.” Deployment Conversations… “We went back twice to the business for tens of millions of dollars for our last deployment.”

Finding yourself in the IOM is critical to setting your priorities Security, Networking, and Monitoring Identity and Access Management Desktop Life Cycle Backup and Restore BasicStandardizedRationalizedDynamic

No standard OS image All desktops are unique after deployment Inconsistent patch management Manually deploying and upgrading systems with DVDs or CDs Limited or ad hoc application testing Defined set of standard basic images Multiple desktop OS’ still exist at department level Automated patch management (WU, SUS, SMS) Light touch upgrade and install Departmental application testing Primary desktop OS is WinXP with images defined at corporate level Reference Image managed manually Automated software distribution, management and tracking Zero touch upgrade and install Application certification and compatibility testing Automated reference image system connected to OEM partner Automated patch management extended to servers Automated application compatibility testing BasicStandardizedRationalizedDynamic Desktop Life Cycle

No server-based identity or access management Users operate in admin mode Limited or inconsistent use of passwords at the desktop Minimal enterprise access standards Active Directory for Authentication and Authorization Users have access to admin mode Security templates applied to standard images Desktops not controlled by group policy Active Directory group policy and Security templates used to manage desktops for security and settings Desktops are tightly managed Centrally manage users provisioning across heterogeneous systems BasicStandardizedRationalizedDynamic Identity and Access Management

Antivirus based on OEM image No monitoring or compliance checking Ad hoc firewall adoption Limited HW/SW inventory Lack of standards drives frequent help desk calls and prolonged downtime Antivirus SW on desktops Ad hoc script based compliance monitoring Centralized firewall Internal DNS and DHCP Separate inventories of apps, images, hardware and user data Standards and inventory enable multi-tiered help desk to resolve calls faster Secure server isolation (IPSec) Automated monitoring of servers Automated HW/SW apps inventory systems in place Remote Access available Rigorous standards, integrated inventory and self provisioning password resets result in fewer, shorter calls Firewall on servers and desktops Service level monitoring on desktops Secure wireless networking Help desk supports users via remote assistance BasicStandardizedRationalizedDynamic Security, Networking, and Monitoring

Local user data stored randomly and not backed up to network Any backup happens locally No user state migration available for deployment Standards for local storage in “My Docs” but not redirected or backed up Any backup happens at workgroup level Backup/restore on critical servers Some automation of user state migration available for deployment Users store data to “My Docs” and synched to server Backup managed at company level Backup/restore of all servers with SLAs User state is preserved and restored for deployment Self managed backup and restore on all servers and desktop data with SLAs BasicStandardizedRationalizedDynamic Backup and Restore

What to do next? Why? Basic Investments in Engineering Reduces Deployment and Operational Costs RationalizedStandardized AutomateTesting App Compat CertificationWorkflowCertify Centralize testing and certification process for packages and patches Image and Package Establish reference images Establish packaging standards Reduce Complexity HW standards 3 year HW refresh cycle 1 laptop / yr 1 desktop / 2 yrs Group SLA with Business Owners defined in writing Reduce number of OS standards to 2 (Windows 2000 and Windows XP) Reduce # of apps and images to <5 Group apps by business role and link to AD security groups Link Knowledge SLAs translate into automated Inventory, assets, images, package, and user access Single OS across all users, images <5 Common Engineering Investments

What to do next? Why? BasicRationalizedStandardized Common Deployment Investments BDD Lite Touch Automate reference image Patch management services for desktop Automate post-image app install via scripts Use a user state migration tool Implement SMS/OSD for BDD Zero Touch SMS/OSD to push WIM-based images and patches Automate software and patch installation using SMS Zero Touch Provisioning User self-provisioning and scheduling of OS upgrade User self-provisioning of software applications Zero Touch Deploy Less than $100 per PC Light Touch Deploy ~ $250 per PC Lower Helpdesk costs due to user self service

What to do next? Why? BasicRationalizedStandardized Common Operating Investments Organize Embrace Active Directory for authentication Centralized firewall Apply authentication and verification based security templates to standard image Use My Docs for local data storage, network share for backup Use App Compat Toolkit to create HW and SW inventory Secure SMS 2003 for HW/SW inventory, patch management Leverage AD infrastructure for GP: Apply, enforce, and maintain security templates and application settings MOM for monitoring servers to ensure consistent, reliable user experience Remote access Empower Centrally manage user provisioning Web-based help and user self-recovery MOM for monitoring servers and desktops to ensure consistent, reliable user experience Firewall added to all desktops Moving from Standard to Rationalized saves additional ~$300 per PC per year Moving from Basic to Standardized saves ~$200 per PC per year Dynamic – IT as a business asset