1. Managing & monitoring Surface Hub
5/17/2018 9:54 PM
THR2303
Managing & monitoring Surface Hub
Anthony Kinney
Tech Solutions Professional
Strider Browning
Tech Solutions
Professional
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Managing & monitoring Surface Hub
5/17/2018 9:54 PM
Managing & monitoring Surface Hub
Anthony Kinney
Tech Solutions Professional
Strider Browning
Tech Solutions
Professional
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. SCCM: Hybrid or on-prem MDM
5/17/2018 9:54 PM
Surface Hub management options
MDM/Intune
MDM: Intune and others
SCCM: Hybrid or on-prem MDM
Surface Hub
WCD: Package on USB
SCCM
PPKG
Local Settings
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Local settings Accessible only for admins Familiar Windows 10 Optic
5/17/2018 9:54 PM
Local settings
Accessible only for admins
Familiar Windows 10 Optic
Surface Hub specific settings
Skype / Exchange account settings
Projection / Miracast settings
Monitoring
Skype audio settings
Windows Store access
Welcome Screen
Disable Sign-In to O365 from Start
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Provisioning packages
5/17/2018 9:54 PM
Provisioning packages
Windows Configuration Designer
Create Provision Packages
Import certificates
Install apps
Skype/Exchange account
OMS join
Update Settings (WSUS, maintenance, etc.)
Many more…
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Bitlocker Encryption Non-domain joined Surface Hubs
5/17/2018 9:54 PM
Bitlocker Encryption
Non-domain joined Surface Hubs
Keys need to be saved to USB
Azure Active Directory joined Surface Hub
Keys stored under the account that was used to join the device
On-prem Active Directory* joined Surface Hub
Keys stored under the computer object in Active Directory (like any other computer does)
*Bitlocker Recovery Password Viewer needs to be installed to be able to search for recovery password
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Session objectives and takeaways
5/17/2018 9:54 PM
Session objectives and takeaways
At the end of this session, you should be better able to…
Learn how to manage the Surface Hub at scale deployments using different tools like configuration packages & MDM (Intune or 3rd party)
Learn how Microsoft Surface Hub integrates in the customer environment
Learn how to monitor the Surface Hub using OMS
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. What are my options to manage Surface Hub?
5/17/2018 9:54 PM
What are my options to manage Surface Hub?
Local
settings
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. 5/17/2018 9:54 PM
Surface Hub Account
Surface Hub can be configured to manage the device password
The password will be changed weekly
New password will not be shown
Account format requirements exist
Environment
Required format for device account
Device account is hosted only online
Device account is hosted only on-premise
DOMAIN\username
Device account is hosted online and on-prem (hybrid)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. What are my options to manage Surface Hub?
5/17/2018 9:54 PM
What are my options to manage Surface Hub?
Local
settings
Provisioning
packages
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Demo
Christian

12. Mobile device management
5/17/2018 9:54 PM
What are my options to manage Surface Hub?
Local
settings
Provisioning
packages
Mobile device management
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Manually enroll in to an MDM
5/17/2018 9:54 PM
Manually enroll in to an MDM 1. 2. 3. 4. 5. 6.
The device is successfully enrolled in Intune and after synchronization is listed in the management portal
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Mobile Device Management
5/17/2018 9:54 PM
Mobile Device Management
Setting
CSP reference
Supported with Intune?
Supported with SCCM?
Supported with SyncML*?
Allow location
System/AllowLocation
Yes
Yes Use a custom setting.
Allow telemetry
System/AllowTelemetry
Allow USB Drives
System/AllowStorageCard
Yes Use a custom policy.
Homepages
Browser/Homepages
Configure device to use WSUS
Update/UpdateServiceUrl
Automatically turn on the screen using motion sensors
InBoxApps/Welcome/AutoWakeSc reen
Requires a pin for wireless projection
InBoxApps/WirelessProjection/PIN Required
Connect to your Operations Management Suite workspace
MOMAgent/WorkspaceID MOMAgent/WorkspaceKey
Welcome screen background image
InBoxApps/Welcome/CurrentBack groundPath
Allow session to resume after screen is idle
Properties/AllowSessionResume
Allow device account to be used for proxy authentication
Properties/AllowAutoProxyAuth
Disable "My meetings and files" feature in Start menu
Properties/DoNotShowMyMeeting sAndFiles
Surface Hub CSP
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Create a Config Profile
5/17/2018 9:54 PM
Create a Config Profile
Configuration Profile Example
Custom Configuration with OMA-URI
Setting Edge Start Page
./Vendor/MSFT/Policy/Config/Browser/ HomePages
Configure Windows Update Server URL
./Vendor/MSFT/Policy/Config/Update/ UpdateServiceUrl
Configuration with Template
Require Pin for wireless projection
Join Microsoft Operations Management Suite
Lockscreen background picture
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. 5/17/2018 9:54 PM
Assigning the profile
How to assign a Device configuration profile 3. 1. 2.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Monitoring Surface Hub

18. Onboarding Surface Hub in OMS
5/17/2018 9:54 PM
Onboarding Surface Hub in OMS
What’s needed?
OMS Workspace
Simply create a new OMS workspace through the Azure portal
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Onboarding Surface Hub in OMS
5/17/2018 9:54 PM
Onboarding Surface Hub in OMS
What’s needed?
OMS Workspace Surface Hub Configuration
Connect your Surface Hub to OMS through the Configuration App as an admin
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Operations Management Suite (OMS)
5/17/2018 9:54 PM
Operations Management Suite (OMS)
Active Surface Hubs
Wireless Projections
Wired Projection
Application Usage
Application Crashes
Sample Queries
Set up Alerts
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Managing Updates

22. Windows Update Windows Update
5/17/2018 9:54 PM
Windows Update
Windows Update
Always check for new updates after first setup; WSUS Server can be used for updates*
Always check for new updates after first setup
Feature updates
Defer feature updates for enterprise testing*
*Settings could be managed locally, via Configuration Packages or MDM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Windows Update for Business
5/17/2018 9:54 PM
Windows Update for Business
Bug
Current Branch (CB)
CB receives feature updates as soon as they are released by Microsoft.
Current Branch for Business (CBB)
Receives feature updates at least four months after they have been initially offered to CB.
Stagger updates to your Surface Hubs
Use rings to control when updates roll out to your Surface Hubs, giving you time to validate them. A ring is a group of devices that have the same deferral settings.
Note: You can use Configuration Manager, Microsoft Intune, or another MDM provider to set up WUfB.
Refresh
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. In review: session objectives and takeaways
5/17/2018 9:54 PM
In review: session objectives and takeaways
Learn how to manage the Surface Hub at scale deployments using different tools like configuration packages & MDM (Intune or 3rd party)
Learn how Microsoft Surface Hub integrates in the customer environment
Learn how to monitor the Surface Hub using OMS
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. 5/17/2018 9:54 PM
Session resources
Surface Virtual Academy
Surface Hub Support Pages
Surface Hub Admin Guide administrators-guide
Microsoft Ready content can be found at
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Q&A
If you have questions, please proceed to the Q&A microphone located in your session room.

27. At Ignite Meet with us Attend sessions Become an Insider
Talk to Surface engineers after sessions and at the booth
Learn more about Surface technology
Stop by the Surface booth to sign up and get SWAG
Attend sessions
Become an Insider

28. Attend the breakout sessions
5/17/2018 9:54 PM
Attend the breakout sessions
Session title
Speaker
Date
Time
Location
Code
Surface product engineering behind the scenes and deep dive on the new Surface Pro
Tim Golick
Tuesday 9/26
4:00 – 5:15 PM
OCCC W304
BRK1059
Surface and LTE: designing for seamless connectivity
Paul Bischof
Tim Golik
Wednesday 9/27
9:00 – 10:15 AM
OCCC W206
BRK2366
Bringing the modern workplace to life with Surface and Microsoft 365
Ryan Gavin
Sonia Dara
10:45 AM – 12:00 PM
OCCC W308
BRK3353
Surface Hub bakeoff: how Surface Hub stacks up against the competition
Frank Buchholz
Mark Hodge
Joe Dalecki
OCCC W307
BRK2368
Service and support for Microsoft Surface: built for the demands of today’s enterprise
Nathan Banks
Faizan Makhiawala
Thursday 9/28
2:00 – 2:45 PM
OCCC W240
BRK2365
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Attend the theater sessions
Session title
Speaker
Date
Time
Location
Code
Realizing the most from Surface and Microsoft 365
Frank Buchholz
David Alexander
Monday 9/25
1:45 – 2:05 PM
OCCC South – Expo Theater #6
THR1117
Microsoft meeting solutions: Skype Room Systems and Surface Hub
Richard Kott
Mark Hodge
Tuesday 9/26
12:05 – 12:25 PM
THR2306R
Unlocking the power of creativity with the Surface portfolio of devices and Microsoft 365
Robert Henry
Jeff Nye
2:10 – 2:30 PM
THR2302
The new Surface Pro and Laptop: an insider’s look for IT Pros
Tim Golick
Brandon Records
Mari Rinta-Piirto
3:35 – 3:55 PM
THR2299
Surface Hub: manageability tools and OMS deep-dive
Strider Browning
Anthony Kinney
5:35 – 5:55 PM
THR2303
Surface Hub what's new (Windows Insiders, Creators features, Microsoft Teams, LOB apps)
Brent Johnson
Arpan Nandani
Wednesday 9/27
10:20 – 10:40 AM
THR2308
Surface connector comparison and designed for Surface accessories
Dave Neff
Craig Tellalian
10:50 – 11:10 AM
THR2304
Surface tools for the enterprise: best practices
Carl Luberti
12:35 – 12:55 PM
OCCC South Building Theater – Level 2
THR2307
THR1117R
THR2306

30. Thank you

31. Please evaluate this session
Tech Ready 15
5/17/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. 5/17/2018 9:54 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.