1. Discover what’s new in Windows management
Microsoft Ignite 2016
9/9/ :28 PM
BRK3332
Discover what’s new in Windows management
Janani Vasudevan
Principal Program Manager Lead
Windows Commercial
Mamta Kumar
Program Manager
Windows Commercial
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Mobility and the cloud is the new normal
9/9/ :28 PM
Mobility and the cloud is the new normal
66%
25%
33%
Employees who use personal devices for work purposes.*
Software that will be available on a SaaS delivery by 2020.**
Employees that typically work on employer premises who also frequently work away from their desks.***
*CEB The Future of Corporate ITL:
**Forrester Application Adoption Trends: The Rise Of SaaS
***CEB IT Impact Report: Five Key Findings on Driving Employee Productivity Q
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Organizations need management to…
Microsoft Build 2016
9/9/ :28 PM
Organizations need management to…
Enable access & productivity for employees
Protect corporate data & resources
Maintain compliance with reporting
Learn how some organizations simplified management directly from them (customer case study) – BRK2108 [Janani et all] – Sep 4PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Windows 10 management options
Microsoft Build 2016
9/9/ :28 PM
Windows 10 management options
Group Policy
System Center Config Mgr
MDM
[Microsoft Intune or
3rd party]
MDM
[Microsoft Intune or
3rd party]
New policies
New configuration policies
New configuration policies
New config via WMI bridge
Azure AD joined
Azure AD account added
Domain joined
COMPANY OWNED
PERSONALLY OWNED
Attend session: BRK2137 Align your Windows 10 management strategy to end-user and IT needs [Jason & Deen] – Sep 4 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. 26.9% Windows 10 & Enterprise Mobility Mgmt
9/9/2018
Windows 10 & Enterprise Mobility Mgmt
26.9%
was the YoY growth of the EMM software market from 2014 to 2015
“…The advent of Windows 10, with its MDM like control & management capabilities, is helping drive EMM platforms as the unified control platform..”
Source: IDC report on Worldwide EMM software market shares 2015
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Our partners that make this possible
Microsoft Ignite 2015
9/9/ :28 PM
Our partners that make this possible
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Management for every Windows device
Microsoft Build 2016
9/9/ :28 PM
Management for every Windows device
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Microsoft HoloLens Commercial Suite
Microsoft Ignite 2016
9/9/ :28 PM
Microsoft HoloLens Commercial Suite
Development Edition + Enterprise features for security and device management
Enterprise Features
Kiosk mode
Mobile Device Management
Azure AD identity & Hello for Business
Windows Update for Business
Data security
Network access – Wifi and VPN
Windows Store for Business
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Windows 10 Manageability – Roadmap & Architecture
9/9/ :28 PM
Windows 10 Manageability – Roadmap & Architecture
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. The road to here Microsoft Ignite 2016 9/9/2018 10:28 PM
Before Windows 10
Windows 10
July 2015
aka TH1
Windows 10
Nov 2015
aka TH2
Windows 10
July 2016
aka RS1
Windows 8.1 MDM (WMI)
Group Policy/Config Mgr+
Converged MDM (Phone, Desktop, IoT, SurfaceHub, HoloLens…)
Common mgmt framework (EAS, provisioning)
Automatic MDM enrollment with AAD join
WMI bridge support for config mgr
MDM/Config Manager+ policies
Group policies+
Phone –Enterprise ready
MDM on Home
Enterprise readiness & gaps – SMIME for outlook, MDM diagnostic, UWP app settings
New MDM/CM policies+ (telemetry, privacy, biometrics, Edge...)
New group policies+ (Hello, telemetry, Defender, Browser…)
WUfB: Defer upgrade, deferral period & EULA accept
WSfB – free apps support
Streamlined self enrollment (user owned)
Platform support for new policy as MDM/group policy +new GP (eg. Allow Camera)
Complete Mgmt. for new features: WIP, WDATP
New MDM/CM config: Reboot, more inventory,, MDM diagnostics report, Kiosk mode updates
AAD Conditional access
WufB: Active hours, Deployment rings, DO
WSfB: paid apps
Windows Phone 8.1 MDM (CSP)
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. What’s on the horizon? Challenges today Where we want to get to
Microsoft Ignite 2015
9/9/ :28 PM
What’s on the horizon?
Challenges today
Where we want to get to
Management complexity
Simplified management
Lesser costs with self-provisioning
User self provisioning is complex
Orgs have choice of cloud mgmt.
Corp network for full PC mgmt.
Attend session: BRK3335 Take the road to modern Enterprise device management [Deen] – Sep 4 PM
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Management Platform – modern & inclusive
Microsoft Ignite 2015
Management Platform – modern & inclusive
9/9/ :28 PM
Group Policy
server
MDM (Intune or 3rd party)
Provisioning
EAS
ConfigMgr
Device
Service/Server
MDM Client
Provisioning Engine
EAS Client
WMI Bridge
Group policy client
Common Device Configurator
Group policy handler
MDM Configuration Service Providers (CSP)
WMI providers
Group policy
User has VPN profile for remote access
User has profile setup in Mail app & gets mails
User is protected with security policies
Common component
(MDM platform)
PC component
PC component
(Other)
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. What’s new in the anniversary update?
9/9/ :28 PM
What’s new in the anniversary update?
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Microsoft Build 2016 9/9/2018 10:28 PM Productive on the go
Existing Windows 10 capabilities
New Capabilities in the Anniversary update
Common VPN platform
Per app VPN & lockdown VPN
App triggered VPN
Destination name based VPN trigger
Passport VPN integration
Certificates – SCEP & PFX, Passport
Wifi connection
Simplified Passport deployment
Health attestation
New security policies
Windows Information Protection
Mgmt. of Windows Defender ATP
Productive on the go
Productive at work
Azure AD enrollment
Bulk MDM enrollment
Easy enrollment
IT provisioning tool updates
Windows Update for Business
Active Hours, Deployment rings, bandwidth optimization
Device & data protected
Device is current
Setup device for work
Retire device
Issue support
Apps from the Enterprise
Easier device unlock; LOB app signing with Ent. cert
Win32 MSI based app deployment
App inventory, app whitelisting, UWP app config
Centennial app mgmt.
Windows Store for Business – paid app (creditcard)
Remote find/wipe
MDM config report
Enhanced logging
Remote reboot
Retire device with server alert
Retire PC when no user logged in
Reliable enterprise config removal
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Easier self provisioning
Microsoft Build 2016
9/9/ :28 PM
Setup device for work
Easier self provisioning
Auto MDM enroll with Azure AD
…Now with a simpler UX
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Demo
Unified Enrollment

17. Productive users anywhere
Microsoft Build 2016
9/9/ :28 PM
Productive at work
Productive users anywhere
Simplified Hello for Business deployment
Management continuity in offline scenarios
Windows IoT enhancements
Lockdown
Desktop kiosk mode
Windows Store for Business – Paid apps (Credit card support)
Look for session: BRK2132: Deploy & Manage Windows Hello for business [Yogesh Mehta] – 4 PM; BRK3238: Dive deeper into Windows Store for Business [Matt Kotler, Jan Kalis] – PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Remote access to company network
Productive on the go
12:38
for business
personal
Auto connect VPN
Always ON
App triggered
Destination name triggered NEW in 1607
Lockdown VPN – all traffic via VPN
AAD VPN (with conditional access) NEW in 1607
XML based profile deployment via MDM NEW in 1607

19. Demo VPN destination name based triggering Microsoft Ignite 2016
9/9/ :28 PM
Demo
VPN destination name based triggering
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. In focus: Windows IoT & Lockdown
Microsoft Build 2016
9/9/ :28 PM
Productive at work
In focus: Windows IoT & Lockdown
Consistent and predictable device lockdown across form factors
AppLocker
Unified Write Filter & HORM
USB Access
Shell Launcher
Assigned Access
Enable a single Universal Windows app experience
Only allow approved USB devices
Easily create read only devices. Improve system uptime
Customize the Start Menu layout for special purpose devices
Block edge swipe gestures
Control which apps can run
Enable a single Win32 app experience
Layout Control
Edge Swipe Policy
Keyboard Filter
Block hotkeys and other key combinations
Purpose built Industry Devices
Ruggedized Devices (tablets, handhelds)
Smart Things
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Demo Desktop Kiosk mode Microsoft Ignite 2016 9/9/2018 10:28 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Keep user devices protected & current!
Microsoft Build 2016
9/9/ :28 PM
Device is current
Keep user devices protected & current!
Device & data protected
Notable security policies (MDM & GP)
Privacy controls
Edge – Extensions, Prompt to open in IE
Miracast projection policies
Windows Update for Business
Active hours
Configure deployment rings
Delivery optimization policies
Look for session: BRK Implementing Windows as a Service: Understanding how to do it [Michael Niehaus et all] – Sep 29, 9 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Manage advanced security features
Microsoft Build 2016
9/9/ :28 PM
Device & data protected
Manage advanced security features
Windows Defender & Advanced threat protection
New policies for Defender PUA
Windows Defender ATP – MDM & Config Manager
Windows Information Protection
Define corporate apps & network boundaries
MDM & Config Manager
Look for sessions: BRK2082 Onboard your Windows 10 endpoints to Windows Defender ATP [Avi et all] – Sep 29, 2 PM, BRKSSSS Keep work and personal data separate and secure using Windows Information Protection in Windows apps [Derek Adam] – Sep ,
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Helping you help users Better Diagnostics Remote Reboot through MDM
Microsoft Build 2016
9/9/ :28 PM
Helping you help users
Issue support
Better Diagnostics
MDM resultant policy report
Additional logging – Phone & PC
Improved tooling
Remote Reboot through MDM
Reliable on-demand wipe for PC
Look for session: BRK331 Reducing Cost of MDM Device Management through better diagnostics tools [Deen King-Smith] – Sep 2PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Configuration service provider reference

26. Resources Windows 10 MDM reference: http://aka.ms/win10mdm
Microsoft Build 2016
9/9/ :28 PM
Resources
Windows 10 MDM reference:
Group policy ADMX for anniv update:
MDM policies with corresponding GP:
What’s new in Windows 10 for MDM:
Powershell scripting with WMI bridge:
Windows Device Provisioning:
Windows 10 Management with Intune:
Windows 10 Management with ConfigMan:
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. I’ll be outside the room for the next 30 mins
More questions that weren’t answered today?
I’ll be outside the room for the next 30 mins
Drop by the Windows and Devices Management booth anytime this week
Send me a mail at

28. Please evaluate this session
9/9/ :28 PM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. 9/9/ :28 PM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.