1. Microsoft IT Windows as a Service
Microsoft Ignite 2016
6/10/2018 5:47 PM
BRK3143
Microsoft IT Windows as a Service
Robert Van Winkle
Principal Program Manager
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Transitioning to Windows as a Service
Microsoft IT Access Strategy
6/10/2018
Transitioning to Windows as a Service
Custom Solution
MDT and IT Easy
Upgrade experiment
Update
OSD
OSD
Three ways
80% FTE one year
2009
95% FTE eight months
2012
95% FTE three months
2013
95% FTE five weeks
2014
95% FTE nine weeks
2015
95% FTE nine weeks
2015
Same velocity
2016
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Evolving the enterprise adoption approach
Windows 10
November update
Anniversary Update …
Windows XP to
Windows 7

4. Agile enterprise adoption
Windows
Insider
Program (WIP)
Current Branch (CB)
Current Branch
For Business (CBB)
Customers
Proof of concept
Pilot
Broad
deployment
Windows
Insider
Program (WIP)
Internal Selfhost
Microsoft IT
Current Branch (CB)
Proof of concept (POC)
10 to 50 IT pros
Pilot
1,000 to 5,000 users
Broad deployment
All users

5. Agile kanban Demo Microsoft Ignite 2016 6/10/2018 5:47 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Keys to a successful project
Early adopter community
Recognition and leaderboards
Real-time feedback
Scenario validation
Early experimentation
Use for other areas in IT
Support how I want it
Social
Users helping users
Moderators to ensure questions are answered
Early detection system
Mission control
30 minute sync session
Three times a day
Support and IT SMEs
Real-time feedback
Enabling agile remediation

7. Microsoft Elite – Universal Application

8. Feedback Hub

9. Compatibility

10. Feature update compatibility
Microsoft IT Access Strategy
6/10/2018
2,500 Line of Business Application Portfolio
Feature update compatibility
Environment
96 percent of application portfolio is browser-based
1 percent are Universal applications
Edge is the primary browser
Leverage site list for Edge to IE switching
Approach
Only test business critical applications ≈ 250
Remaining ≈ 2,250 applications are tracked through adoption
Business critical apps exercises common code bases and tools used in the environment
Critical
Pass rate
Windows 8
286
97%
Windows 8.1
300
98%
Windows 8.1 Update
138
Windows 10
278
Windows 10 November update
265
100%
Windows 10 Anniversary Update
236
≈ 250 Critical Applications
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Application compatibility VMs
Microsoft Ignite 2015
6/10/2018 5:47 PM
Application compatibility VMs
Enables app teams
Test and re-test on newer builds
Check out new features
VM client farm
Provides over 300 VMs with 10 servers
Processor
Two quad-core processors (2.66 GHz or higher)
RAM
48 GB
System drives
Two 148 GB; 10K RPM, SCSI (SAS), (RAID) 1
Data drives
Six 1.2 TB, 10KB RPM, SAS drives in RAID 5 for VMs
Network adapter
Dual network adapters
Operating system
Windows Server 2012 R2
Virtualization software
Microsoft System Center Virtual Machine Manager 2012 R2
Win 10
Client VMs
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Quality update compatibility
Primary focus
Stopped formal application compatibility testing program in Windows 8 timeframe
Target 20,000 pilot to inform broad deployment
Track issues through listening mechanisms Feedback Hub, Yammer, Pointers, and Helpdesk
Safety valve
If an issue arises allow user to opt out of program and rollback update
Lessons learned
To date, we have not reported application compatibility issues with this approach
Need more real-time insight

13. Windows Upgrade Analytics
MS Story
6/10/2018 5:47 PM
Windows Upgrade Analytics
Allows enterprise IT to quickly identify and focus on the critical issues impeding upgrades; provides data driven insights to plan and manage the upgrade process end-to-end
Workflow visualization from pilot to deployment
Powerful upgrade readiness insights and recommendations about the computers, applications, and drivers
Risk based approach to app rationalization
Microsoft guidance on app and driver compatibility issues
Sign up via
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. User-initiated deployment

15. User-initiated feature updates
Just keep my system up to date
≠ Helpdesk driven update
≠ Hardware refresh event
I want the latest OS, but want to control when it’s installed so it fits my schedule

16. Adopting Anniversary Update
Proof of concept (PoC) Simulating WUfB with WU
ConfigMGR Operating
System Deployment
Windows Update
for Business

17. Delivery optimization
PoC Simulating WUfB with WU
Delivery optimization
Peer-to-peer caching enabled through group policy
Used “Group” setting which limits it to a domain
Content is cached for 24 hours
Works with all WU and WSUS content
Over 76 percent of content came from peer devices versus Internet

18. User initiated Management point Policy request Distribution point
ConfigMGR Operating
System Deployment
User initiated
Management point
Policy request
Distribution point
OSD task sequence
Windows 10 policy
User initiates installation
Policy request is sent to the management point
OSD package downloaded from distribution point
OSD task sequence runs

19. OSD task sequence Recommendation Pre-task sequence Post-task sequence
Microsoft Ignite 2016
6/10/2018 5:47 PM
ConfigMGR Operating
System Deployment
OSD task sequence
Recommendation
Let setup do the work and minimize customization and need for testing
Pre-task sequence
Study-ID for telemetry reporting
Check for know issues and remediate
Temporarily point devices to WU so they get all the Dynamic Update content during setup and allow group policy to point back on first logon
Post-task sequence
Clean up of the deployment working environment
On-failure task sequence
Nothing at this time
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Microsoft IT current architecture
ConfigMGR Operating
System Deployment
Microsoft IT current architecture
Infrastructure
Six primary sites
Thirteen secondary sites
Three hundred distribution points
Five WSUS sites
PCs & devices
~350,000 clients
~125,000 mobile devices (EAS)
Users
~98,000 FTEs
~82,000 vendors
MS Online Directory Sync (DirSync)
Active Directory Federation Server AD
Azure Active Directory
User Discovery
WU/MU
WU/MU Packages
Intune Subscription
Connector Site role
Synchronize Meta Data
Microsoft Intune
Five WSUS sites
350,000 clients
Redmond Site 1
75,000 clients
Redmond Site 2
90,000 clients
North & South America
50,000 clients
Europe, MidEast, Africa
50,000 clients
Australia & Asia
75, 000 clients

21. Set yourself up for success
X86 -> X64
Upgrade doesn’t support architecture conversions
BIOS -> UEFI
Upgrade doesn’t support BIOS conversions
Cross language
Update doesn’t support cross language conversion
Solution: Traditional deployment
Change new device standard configuration to x64 with UEFI
Hardware refresh migration
Clean install with data migration
Solution
Match OS language for feature updates
Use one base OS language with language packs

22. Lessons learned 1 2 3 4 5 User experience
OSD pre-caching the build locally before deployment available in October
OSD user notifications update available in January
WUfB user experience in October for TH2 and inbox for RS1 1
Adopt agile processes
POC->pilot -> broad deployment
Iterate
Build culture to fail fast and move forward “celebrate failures”
Build user community 2
Compatibility
Focus on the critical business apps (that is, top 10 percent)
Leverage Upgrade Analytics
Is there a day where testing is no longer necessary? 3
Windows Setup
Migrates user data, applications and settings
Manages BitLocker and Secure Boot
Graceful return to previous OS on failure - creates Windows.old for recovery activities 4
ConfigMGR and OSD
Let Windows setup do all the heavy lifting
During upgrade temporarily point devices to WU for Dynamic Updates
Ensure ConfigMGR client health and ensure ConfigMGR inventory is up to date
Expire mandatory deployments during significant holidays and peak vacation 5

23. Q&A

24. Other sessions Monday:
BRK3144 – 2:15PM – Enhance Windows 10 deployment: what's new with Windows 10 deployment
Tuesday:
BRK3149 – 9:00AM – Learn what's new with OSD in System Center Configuration Manager and Microsoft Deployment Toolkit
BRK4023 – 12:30PM – Learn about Windows 10 deployment from the experts
Wednesday:
BRK2125 – 9:00AM – Evaluate compatibility in Windows 10 and WaaS using telemetry driven insights
BRK3145 – 10:45AM – Reduce the network impact of Windows 10 feature and quality updates using peer-to-peer tech
BRK3173 – 12:30PM – Upgrade to Windows 10: in depth
BRK2126 – 3:15PM – Develop and support apps in Windows as a Service
BRK3012 – 4:00PM – Enhance Windows 10 security and management with ConfigMgr, Intune, and new cloud services
Thursday:
BRK3136 – 9:00AM – Implement Windows as a Service: understanding how to do it
THR1002 – 12:05PM – Accelerate Windows10 deployments through telemetry driven insights using Upgrade Analytics
BRK3240 – 4:00PM – Ask us almost anything about Windows 10
Friday:
BRK3150 – 9:00AM – Troubleshoot Windows 10 deployment: top 10 tips and tricks

25. Please evaluate this session
6/10/2018 5:47 PM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. 6/10/2018 5:47 PM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.