1. 4/6/2019 6:28 PM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Deploying Windows To Go in the Real World
4/6/2019 6:28 PM
Deploying Windows To Go in the Real World
Mikael Nystrom
MVP – Setup/Deploy
TrueSec
DC-B317
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. I… Live in Sweden Work on this planet (mainly) Travel a lot
Have been doing Windows deployment since Win 3.x
Do training and consulting

4. To cover… Use cases Domain Join Profiles Activation Remote Access
Custom Image with Drivers
Creating a WTG device

5. Use Cases
“I need to work from home, but my device back home is not trusted” “I need to travel light” “I need a spare machine in my pocket” “My drive is my PC, not the PC” “I need to access the company on a borrowed PC, now…”

6. License rules apply
To make full use of these features, Software Assurance usage rights are changing too. Any employee with a company PC with a Software Assurance license will also have a corresponding Windows To Go license, so that they can boot a secure, corporate-controlled environment on their home PCs. This can be extended further with Companion Device licenses (for extra cost), allowing employees to access corporate environments through either Windows To Go or VDI on up to four personally-owned systems

7. Domain Join In reality the WTG needs to be domain joined Activation
Policy's
Direct Access
Access to resources

8. Domain Join Online: The user joins the computer to the domain manually
Offline/Offsite
The WTG device is joined before it starts

9. djoin.exe
djoin.exe /provision /domain network.local /savefile D:\temp\tempBLOB.bin /machine PCWTG-001 /machineou "OU=WTG,OU=Computers,OU=Network,DC=network,DC=local" /rootcacerts /policynames "DirectAccess Client Settings"

10. djoin.exe
djoin.exe /requestodj /loadfile D:\temp\tempBLOB.bin /windowspath W:\windows > info.log

11. Profiles - Redir Use GPO to control
Download roaming profiles on primary computers only
Requires WS2012 schema update
Redirect folders on primary computers only

12. Primary Computer

13. $PC= get-adcomputer PCWTG-001
Set-aduser admminy

14. OU Structure
Separate OU for WTG Separate Policy's Separate Management

15. Activation KMS = OK MAK = Not supported
Active Directory Based Activation = Preferred

17. Remote Access Direct Access is preferred VPN Works, but
DA works with djoin.exe
VPN Works, but
Management and activation issues.
No remote = stay in the office…

18. Custom Image w Drivers Basic Applications Settings Drivers
Storage, network, graphics

19. Create WTG USB Device needs to be “disk” USB 3.0
Require 2 partitions
USB 3.0
BIOS support for boot on USB
Can be created in UI or Script

20. SpringBoard is the No:1 Resource

21. We want to hear from you! Evaluation
Complete your session evaluations today and enter to win prizes daily.
Provide your feedback at a CommNet kiosk or log on at
Upon submission you will receive instant notification if you have won a prize.
Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer.
Entry details can be found on the MMS website.

22. Access MMS Online to view session recordings after the event.
Resources
Access MMS Online to view session recordings after the event.

23. 4/6/2019 6:28 PM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.