1. Windows 10 management 101 the things you need to know
11/6/ :05 PM
BRK3386
Windows 10 management 101 the things you need to know
Adnan Hendricks
Microspecialist Consulting
@Microspecialist
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. +500M DEVICES RUNNING WINDOWS 10 +60M IN BUSINESS
“For Windows 10, Microsoft went all-out to turn around perceptions among corporate customers…”
Shira Ovide
WSJ
“THE BOTTOM LINE? MICROSOFT IS GOING TO BEND OVER BACKWARDS TO MAKE THE BUSINESS TRANSITION TO WINDOWS 10 AS EASY AS POSSIBLE.”
MARK HARTMAN
PC WORLD
“WINDOWS AS A SERVICE MAKES WINDOWS 10 THE MOST ATTRACTIVE DEVELOPMENT PLATFORM EVER.”
PAUL THURROTT
THURROTT.COM
The Most Compatible Windows Ever

3. Microsoft Edge, and Internet Explorer 11
11/6/ :05 PM
Microsoft Edge, and Internet Explorer 11
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Becoming Agile with Microsoft
PRISM FY16
11/6/ :05 PM
Becoming Agile with Microsoft
Delivering new value, features and capabilities on a faster cadence
Providing unmatched flexibility and control
Continually improving security, reliability, and performance
Simplifying deployment and management
Deeply integrating cloud services, both to add functionality and to simplify the process of staying current
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Long Term Servicing Channel
Simplified feature update model across Windows and Office
Monthly Channel
Semi-Annual Channel
Long Term Servicing Channel
Monthly
2x / year
Every 2-3 years
1 month of support
18 months of support
10 years of support (5+5)
Office
Windows
Release schedules are aligned
Windows 10 and Office 365 ProPlus will release twice per year, targeting March and September Servicing timelines are identical
Windows 10 and Office 365 ProPlus will be serviced and supported for 18 months from the date of release

7. 11/6/ :05 PM
WAAS
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Windows as a service: Deploying Windows
MS Story
11/6/ :05 PM
Windows as a service: Deploying Windows
Unmatched flexibility and control, depending on needs
Windows Insider Preview Branch
Semi-Annual Channel (Targeted)
Semi-Annual Channel
Long Term Servicing Channel
Specific feature and performance feedback
Application compatibility validation
Deploy to appropriate audiences
Test and prepare for broad deployment
Information workers
General population
Specialized systems
Early adopters, initial pilots, IT devices
Deploy for mission critical systems
No need for frequent new features (or any sort of change)
Too expensive for general population
Benefits from new features
Begins broad deployment
Test machines, small pilots
NUMBER OF DEVICES
STAGE
Release
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Windows as a service: timelines
MS Story
11/6/ :05 PM
Windows as a service: timelines
Windows Insider Preview Branch
Specific feature and performance feedback
Application compatibility validation
New Windows 10 Release
Deploy to pilot audiences
Validate and prepare for broad deployment
Deploy to all audiences, in waves to reduce risk
Plan & Prepare
Pilot
Deploy / Use
Grace
6+ months of active development
~4 months
12+ months
60 days
18+ months to pilot, deploy, and use each release
Plan & Prepare
Pilot
Deploy / Use
The process repeats…
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. 11/6/ :05 PM
Analytics
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. What is Windows Analytics?
A cloud-based, telemetry-driven suite of services collecting information from deep within Windows
Focused on providing actionable information to proactively improve your Windows environment
Built on top of Microsoft Operations Management Suite Log Analytics for advanced business intelligence reporting

12. Windows Analytics Suite
Upgrade Readiness
(GA)
Update Compliance
(Public Preview)
Device Health
(Public Preview)
Plan upgrades by identifying devices that are ready, identify and resolve app and driver compatibility blockers
Ensure update and antimalware compliance and pro-actively identify and remediate deployment issues
Reduce support costs by pro-actively identifying and remediating top end-user impacting issues

13. Windows Analytics Data Flow
MSFT, as “IT admin” for consumers, uses telemetry to ensure OS, app and driver releases land with the right level of quality/health/compat
Windows Analytics gives IT telemetry-based insights to their devices, exposed via OMS log analytics
IT controls the level of telemetry collected, which impacts Analytics availability
Telemetry
Service
OMS Log Analytics
MSFT Cloud
Telemetry Upload
GP/SCCM/Intune
Configure
Control
Windows Analytics Data Flow
Value to customer: Reduce TCO via proactive insights
Value to MSFT: Telemetry helps us improve the product, staying current helps our ecosystem

14. Windows Analytics Update Compliance
MS Story
11/6/ :05 PM
Windows Analytics Update Compliance
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Modern Management 11/6/2018 10:05 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. A lot has changed - Improved
11/6/ :05 PM
A lot has changed - Improved
Traditional / Classic Management Vs Modern Management
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Traditional IT Cloud IT Active Directory Domain Join Group Policy
System Center Configuration Manager
Local Activation
Azure AD
Azure AD Join
MDM Policies
Intune or other
MDM
AAD Activation

18. Microsoft 365
A complete, intelligent solution to empower employees to be creative and work together, securely.
Office Windows 10 + Enterprise Mobility + Security

19. Microsoft EMS Enterprise Mobility Currently over
Microsoft Inspire
Microsoft EMS
“Text…”
Enterprise Mobility Currently over
50 million / 55k customers
Enterprise Mobility customers grew 57% Y/Y

20. Right Intune for Any Organization
11/6/ :05 PM
Right Intune for Any Organization
Intune for Enterprises
Intune for Education
Intune for SMBs
Public preview
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Intune for Education
Intune service with a customized IT Pro experience targeting Educators
Simple enrollment
Bring devices under management simply by Azure AD joining
Easy deployment
Full IT service or delegate with USB setup key
Zero touch management
Apps and settings applied to each enrolled device by default
Easier shared device management
Each user can get different settings/apps if required
Designed for education
Easy to use for common school scenarios and settings
Scales to your environment
Easy for part-time IT staff yet integrates with SCCM
Easy to buy
Purchase per-device or per-user
Pre-release simulated screenshot shown, final experience may differ

22. Mobile Device and App Gateway
11/6/ :05 PM
Intune on Azure
Key Benefits:
New administrative console optimized for cross EMS (Azure AD Premium + Intune) workflows, including conditional access and role-based access control
Allows for easy integration and task automation with other IT systems and Microsoft services by offering complete API support through Microsoft Graph
New service platform runs on any browser, on any device with increased scalability and deeper reporting capabilities
Graph API
Admin
Console
(Ibiza)
Mobile Device and App Gateway
Micro-services
Azure Storage
Intune (on Azure)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Simplify Windows 10 management and lower TCO with EMS
Users Apps
11/6/ :05 PM
Simplify Windows 10 management and lower TCO with EMS
Simplified management & security
Embrace cloud-based management and transition at your pace while staying in control.
Always up to date
Deliver the latest features and security.
Cloud updates mean you don’t need to have on-premise update servers.
Microsoft 365
EMS
Agentless
Unified identity, device and O365 ProPlus mgmt.
Office 365
ProPlus MGMT
Integrated
data protection
Control what updates are deployed, to whom and when.
Self-service deployment
Make any new PC enterprise-ready via a simple self-service experience.
Proactive insights
Get ongoing proactive insights to diagnose and fix issues before they happen.
Windows 10
Sign in with contoso.microsoft.com
Contoso Sign in
Corp. Username
Password
Certificate
Automatically configure devices when your users login with their company credentials.
Use cloud intelligence to upgrade Windows 10 and Office 365 ProPlus with confidence.
Next
Microsoft Intune Learn more at microsoft.com/intune
Enterprise Mobility + Security
Learn more at microsoft.com/ems
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Paths to Modern Management
11/6/ :05 PM
Paths to Modern Management
A new organization starting with modern workplace
Cloud-first
Many workloads need to be modernized at the same time
Big Switch Transition
Doesn't address the needs of the full organization
Group by Group Transition
Iteratively move workloads to modern
Iterative (“Co-management”)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Modern is not “all or nothing”
11/6/ :05 PM
Co-Management
A practical way to migrate over time
Modern is not “all or nothing”
Minimize risk
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. 11/6/ :05 PM
Roaming
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Roaming Options Windows 10
11/6/ :05 PM
Roaming Options Windows 10
UE-V
ESR
Roaming Profiles
Deprecated
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Enterprise State Roaming (ESR)
Sync settings to the Azure
Windows Settings
UWP App Settings
Requires Device Registration of Azure AD Join
Configure in AzureAD

30. App-V and UE-V since Windows 10 Anniversary
Microsoft Desktop Optimization Pack
Virtualize
Manage
Restore
Microsoft
App-V
Microsoft
UE-V
Microsoft
AGMP
MBAM
Microsoft
DaRT
Windows 10 Enterprise / Education
Windows Server 2016 Datacenter / Standard
Microsoft
App-V
Microsoft
UE-V
Microsoft
App-V
Microsoft
UE-V

31. App-V and UE-V since Windows 10 Anniversary
Both Agents are still included as part of Windows

32. Settings Location Template
UE-V Components
Settings Store
UE-V Agent
Settings Location Template
UE-V Generator

33. Server Share Desktop Server Share UE-V Agent Identify settings
Settings Location Templates
Windows Settings
Desktop Applications
Windows 10 App List
Windows 10 Apps
Apply settings
Windows Settings
Desktop Applications
Windows 10 Apps
Template Catalog Location
Settings Storage Location
Capture settings
Windows Settings
Registry
Local Files
Desktop Applications
Windows 10 Apps
App setting folder
UE-V Agent
Settings Templates
Settings Packages
Settings Packages
Synchronizes settings
Settings synchronized on event triggers

34. UE-V Implementation Steps
Configure a settings storage location
Prepare Group Policy to manage UE-V agent
Select / create settings location templates
Deploy / manage settings location templates / Windows agent is already included just needs to be enabled!!

35. Package Modernization – Two-Fold Approach
ESD
IT Pro
Sequencer
.APPV
Application Virtualization
Windows
Windows
Store /
Sideloading
ISV / Developers
.APPX
Converter
DAC (Centennial)

36. Management Options Windows 10
11/6/ :05 PM
Management Options Windows 10
Group Policy
MDM/Intune
SCCM Agent
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

37. Manage certain GPO’s thru Mobile Device Management / Intune
11/6/ :05 PM
Manage certain GPO’s thru Mobile Device Management / Intune
(OMA-DM)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

38. Intune Management
Mobile Device Management policies are executed by a Configuration Service Provider (CSP)
The Policy CSP handles ADMX backed policies
GroupPolicySvc is NOT involved
OMA URI prefix:
./Device/Vendor/MSFT/Policy/Config/
./User/Vendor/MSFT/Policy/Config/

39. Example Using Intune: Create a new policy OMA-URI Settings
11/6/ :05 PM
Example Using Intune:
Create a new policy OMA-URI Settings
Enable Clients for SC
Set Data Type List 3
OMA-URI box Value “
“.vendor/MSFT/Policy/Config/Update/BranchReadynesslevel” Value 1
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

40. Modern Deployment 11/6/2018 10:05 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

41. Autopilot 1. Un-box and turn on off-the-shelf Windows PC
2. Transform with little or no user interaction
Device is ready for productive use

42. Windows Autopilot Deployment Program
The golden path:
No need for IT to touch the devices
Simple process for users
Integration in the supply chain
Key technologies:
Windows AutoPilot Deployment Program
Azure Active Directory
Microsoft Intune
Office 365 ProPlus
Cloud-Driven

43. Windows Configuration Designer (WCD)
11/6/ :05 PM
Windows Configuration Designer (WCD)
Create Provisioning Packages
Windows ADK
Store
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

44. Demo

45. Resources Microsoft 365 https://aka.ms/Microsoft365 Give us feedback
11/6/ :05 PM
Resources
Microsoft 365
Give us feedback
Feedback Hub
Windows Analytics and Ready for Windows
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

46. Windows IT Pro Resources
Microsoft Tech Summit FY17
11/6/ :05 PM
Windows IT Pro Resources
Windows IT Center for IT Pros:
IT Pro Insider Newsletter:
Follow us on Twitter:
Windows Insider Program:
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

47. Please evaluate this session
Tech Ready 15
11/6/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.