1. Jumpstart deployment of Microsoft Surface Hub in your enterprise
Microsoft Ignite 2016
10/1/2017 7:58 PM
Jumpstart deployment of Microsoft Surface Hub in your enterprise
Christian Schacht, Partner Technology Strategist
David Stoeckel, Technology Solutions Professional
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Microsoft Worldwide Partner Conference 2016
10/1/2017 7:58 PM
The Microsoft Devices Portfolio
Premium craftsmanship and design
Mobility of experience
(Re-) Inventing categories
Versatile form factors
Visit Us in the Expo Hall, MS
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Session objectives Getting started with Surface Hub in the enterprise
10/1/2017 7:58 PM
Session objectives Getting started with Surface Hub in the enterprise
Learn how to:
Set up Surface Hub from an out-of-box-experience, configuring with Office 365
Manage Surface Hub using tools like config packages and MDM
Integrate Surface Hub with other devices in your organization
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Session agenda Surface Hub out-of-the-box experience
10/1/2017 7:58 PM
Session agenda Surface Hub out-of-the-box experience
Overview
Configure Surface Hub
Managing Surface Hub
Monitoring Surface Hub
Applications
What else?
Q&A
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Microsoft Surface Hub is the first of its kind
Hardware
Software
Services
Microsoft Surface Hub is the first of its kind

6. Fully integrated with your Microsoft environment
Integrates with back-end Microsoft services your enterprise already uses, like Exchange, Active Directory, and Skype for Business
Has its own Exchange Resource Account: it’s a bookable resource
Can place/receive Skype for Business and PSTN calls
OOBE takes minutes after Exchange and Skype for Business accounts are created
Does not need to be domain joined
Supports two factor user authentication
Users can access outside data sources
Manage the device via SCCM and Intune or other MDM providers

7. Configure Surface Hub Christian Schacht Microsoft Ignite 2016
10/1/2017 7:58 PM
Configure Surface Hub
Christian Schacht
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. What are my options to manage Surface Hub?
Out of Box Experience

9. Out of Box Experience (OOBE)
Surface Hub basic configuration is done
through OOBE
OOBE launched upon first start of Surface Hub
Changes to the existing configuration can be done through settings after OOBE
OOBE configurations includes
Device localization
Device Name and Friendly Name
Skype and Exchange configuration
Setting up the device administrator
Import Package for Certificates (optional)

10. Domain join and device administrator
Three options
Azure Active Directory Services
Active Directory Domain services
Local Admin
Joining domain is for admin purposes
Group policies are not applied to the device
Root certificates available in Active Directory are installed (requires AD integrated Certificate Authority)
BitLocker Key can be stored in local AD or Azure AD
How is the local administrator setup ?
Infrastructure Requirements
Which credentials can be used for settings?
Local Admin
None
Local admin credentials created at OOBE
Device is joined to an Active Directory Domain
Organization uses Active Directory
Domain Admin + AD user from specific security group
Device is joined to Azure AD
Organization uses Azure AD Basic
Tenant admins
Organization uses Azure AD Premium
Tenant or device admins + additional specified users/groups

11. Surface Hub account
Surface Hub can be configured to manage the device password
The password will be changed weekly
New password will not be shown
Account format requirements exist
Device Account Topology
Device Account Format in OOBE
Supported
On-premises only
UPN
Yes
DOMAIN\UserName
Online only
N/A
Hybrid online and on- premises No

12. DEMO Out of Box Experience – aka OOBE

13. Managing Surface Hub

14. What are my options to manage Surface Hub?
Out of Box Experience
Local settings

15. local settings Accessible only for admins Familiar Windows 10 Optic
TechReady 23
10/1/2017 7:58 PM
local settings
Accessible only for admins
Familiar Windows 10 Optic
Surface Hub specific settings
Skype / Exchange account settings
Projection / Miracast settings
Monitoring
NEW Skype audio settings
Windows Store access
Etc.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. What are my options to manage Surface Hub?
Out of Box Experience
Local settings
Provisioning packages

17. Provisioning packages
Windows imaging and Configuration Designer
NEW in version Templates for Windows 10 Team edition
During OOBE
Import certificates
Install apps
After OOBE
Skype/Exchange account
OMS join
Update Settings (WSUS, maintenance, etc.)
Many more…

18. DEMO Create ICD – Configuration packages

19. DEMO Use ICD – Configuration packages

20. What are my options to manage Surface Hub?
Out of Box Experience
Local settings
Provisioning packages
Mobile device management

21. MDM discovery 1. 2. 3. 1. 2. 3. DNS Lookup Intune Hub
DNS Lookup is done to CNAME EnterpriseEnrollment.<company domain name>.com
Admin enters address for Workplace Management 1.
CNAME Points to manage.microsoft.com (Intune) 2.
Surface Hub Joins MDM and gets managed 3.

22. Mobile device managment
CSPs supported in Microsoft Surface Hub*
APPLICATION CSP
CertificateStore CSP
ClientCertificateInstall CSP
Defender CSP
DevDetail CSP
DeviceStatus CSP
DevInfo CSP
DiagnosticLog CSP
DMAcc CSP
DMClient CSP
EnterpriseModernAppManagement CSP
HealthAttestation CSP
NodeCache CSP
Policy CSP
Provisioning CSP
RootCATrustedCertificates CSP
SurfaceHub
W4 APPLICATION CSP
w7 APPLICATION CSP
Wi-Fi CSP
*Supported features may vary based on the used MDM Solution

23. DEMO Intune settings, WSUS, homepage, background

24. Management options ICD: PPKG on USB MDM: Intune SCCM/Intune Hybrid
SCCM MDM
PPKG
Surface Hub
SCCM

25. DEMO Monitoring Surface Hub

26. Applications

27. Windows Store TechReady 23 10/1/2017 7:58 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Business Store 1.
Windows Dev Center
Business Store
1a. 2.
2a. 3. 4. 1.
ISV connecting to Windows Dev Center, application submission
2a.
App directly published in the organization inventory
Organization or ISV can directly publish in the Business Store or the organization (authorization requested)
1a. 3.
Purchased licenses added to the organization inventory 2.
App available on Consumer Store. Also available on Business Store for IT purchasers 4.
Apps deployed to internal users according to defined organization policy

29. DEMO Run Win32 apps on your devices
TechReady 23
10/1/2017 7:58 PM
DEMO Run Win32 apps on your devices
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. What else?

31. BitLocker encryption Azure Active Directory joined Surface Hub
TechReady 23
10/1/2017 7:58 PM
BitLocker encryption
Non-domain joined Surface Hubs
Keys need to be saved to USB
Azure Active Directory joined Surface Hub
Keys stored under the account that was used to join the device.
On-prem Active Directory* joined Surface Hub
Keys stored under the computer object in Active Directory, like any other computer does.
*Bitlocker Recovery Password Viewer needs to be installed to be able to search for recovery password
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. Windows and store updates
TechReady 23
10/1/2017 7:58 PM
Windows and store updates
Windows updates
Always check for new updates after first setup, WSUS Server can be used for updates
Feature updates
Defer feature updates for enterprise testing
Windows Store
Always check for new updates after first setup
Settings could be managed locally, via Configuration Packages or MDM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Proxy and Internet Proxy settings Internet / Lan access / Guest Wlans
Surface Hub is capable to use Proxy Servers
Proxy authentication should be avoided
Proxy is not recommended for Office 365 scenarios
Internet / Lan access / Guest Wlans
Wired connections are recommended
OOBE is not capable of web browser authentication

34. Recovery settings Reset device BitLocker Support – collect logs
Will bring back OOBE
BitLocker
Saves BitLocker key to USB
Support – collect logs
Eventviewer
Skype logs
Windows Update
etc.

35. Session objectives and takeaways
Tech Ready 15
10/1/2017
Session objectives and takeaways
Objectives
Know how to setup Surface Hub from an out-of-box-experience, configuring with Office 365
Show how to manage Surface Hub using tools like config packages and MDM
Learn how to integrate Surface Hub with other devices in your organization
Key takeaways
Surface Hub is a new category of device that helps your customer to transform to the modern workspace
Deploying Surface Hub is very easy – if planned accordingly
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. Tech Ready 15
10/1/2017
Additional resources
Surface Virtual Academy
Surface Hub Support Pages
Surface Hub Admin Guide
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

37. Questions

38. Get in the game with Microsoft devices at Ignite
Attend the next Breakout Session
SESSION ID
SESSION TITLE
DATE/TIME
LOCATION
BRK3157
Rock collaboration experience by enabling Skype for Business
with Microsoft Surface Hub
9/30
10:45 – 12:00 B

39. Score a Surface Pro 4! Microsoft Device Promotion We are giving away
The more sessions you attend, the more chances you have to win!
We are giving away
1 device per breakout session
1 device per day for theater sessions
The drawing will be held at the end of this session
MUST BE PRESENT TO WIN

40. Microsoft Worldwide Partner Conference 2016
10/1/2017 7:58 PM
Stay connected after Ignite
JOIN
Qualify to become a Windows & Devices for IT MVP? Visit: mvp.Microsoft.com
Subscribe to the Surface IT Pro Bulletin through TechNet
SEARCH
AskCore Blog #Surface
Surface Blog for IT Pros
Surface Support for Business
SKILL UP
Watch the Surface Playlist on Microsoft Mechanics Youtube
Take Microsoft Devices course on Microsoft Virtual Academy
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. Please evaluate this session
10/1/2017 7:58 PM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

42. Thank you Microsoft Ignite 2016 10/1/2017 7:58 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

43. 10/1/2017 7:58 PM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.