Download presentation
Presentation is loading. Please wait.
1
Accelerate deployment of Windows 10 at scale
4/25/2017 9:56 PM Accelerate deployment of Windows 10 at scale Speaker name Speaker title © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
2
Session objectives and takeaways
Understand how to: Choose the best deployment method for your organization to get to Windows 10 Keep Windows 10 up to date Manage Windows 10 security features and enhance productivity
3
What's driving change? IT Users Devices Apps Data Employees Customers
Business partners
4
New deployment options
Windows 10 Investments for business Protect your intellectual property and corporate secrets Built into Windows with no additional deployment requirements Broad threat intelligence on attacks Incident response solutions, including actionable and correlated alerts Real-time visibility into the issue Expert human APT hunters Protection against modern security threats Managed for continuous innovation Enhanced productivity Innovative devices for your business MDM Windows as a Service New deployment options
5
Enterprise Mobility Suite (EMS)
Easily manage identities across on-premises and cloud. Single sign-on and self-service for corporate resources. Azure Active Directory Premium Unify identity Manage apps and devices Protect data Microsoft Intune & System Center Configuration Manager Azure Rights Management Manage and protect corporate apps and data on almost any device with MDM and MAM. Encryption, identity, and authorization policies to secure corporate files and across phones, tablets, and PCs. Microsoft Enterprise Mobility Suite is the only enterprise mobility solution designed to help manage and protect users, devices, apps (PC or mobile), and data. Unify identity: Give users single sign-on and self-service password management for any corporate resource and easily manage identities across on-premises and cloud – Azure Active Directory Premium. Manage and protect corporate apps and data: on virtually any device with Microsoft's mobile device management (MDM) and mobile application management (MAM) solution – Microsoft Intune. Protect data: Stay in control of your corporate data even when it’s shared with others, inside or outside of your organization. Encryption, identity, and authorization policies to secure corporate files and across phones, tablets, and PCs. Microsoft Enterprise Mobility Suite (EMS)
6
Enhancing Windows 10 experiences with EMS
System Center Marketing 4/25/2017 Enhancing Windows 10 experiences with EMS Simplify deployment Azure AD Join with Intune auto enrollment Provisioning packages and profiles for bulk enrollment In-place upgrade to Windows 10 with ConfigMgr Configure Windows 10 Expanded MDM settings Per-app VPN Microsoft Passport policies and certificates Windows Universal and Win32 apps Support volume purchase of apps User IT Unify device management Intune integration with ConfigMgr to manage all devices in the environment New in ConfigMgr: Faster and easier ConfigMgr updates Windows 10 servicing On-premises MDM Manage and protect Corporate data leakage prevention through enterprise data protection (EDP) policies RMS integration for securing shared documents/files Device Guard and AppLocker policies Advanced conditional access policies Integration with Windows Health Attestation Service (HAS) Intune enables organizations to manage devices throughout the entire lifecycle from device enrollment and provisioning to management and protection – through to retirement of the device when an employee leaves the company or in the unfortunate event when a device is lost or stolen – all using Intune’s web console. The end-users also has the ability to enroll their own devices, install recommend company apps and perform a selective wipe from Intune’s self-service Company Portal which we’ll talk more about shortly. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
7
Flexible deployment and management options
4/25/2017 9:56 PM Flexible deployment and management options Intune standalone (cloud only) ConfigMgr integrated with Intune (hybrid) Mobile devices and PCs Intune web console ConfigMgr console System Center Configuration Manager The Power of a Flexible Architecture ConfigMgr and Intune together provides unified agent-based management and MDM management of Windows 10 ConfigMgr provides rich and proven tools to get your existing clients TO Windows 10 MDM through provides an integrated solution to modern management of Windows 10 MDM MDM IoT/Kiosk devices MDM or agent Agent Domain-joined PCs Mobile devices © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
8
What we hear from you… How should I deploy Windows 10?
How do I keep Windows up to date? How can I secure and improve productivity in Windows 10? Enabling users to be productive is critical for organization to stay competitive in the modern world, but organizations also need to ensure that their corporate data is protected while their employees are on-the-go..
9
How should I deploy and manage Windows 10?
4/25/2017 9:56 PM How should I deploy and manage Windows 10? Deployment and mgmt. strategy On-ramp to the cloud over time Existing Windows 7, 8, 8.1 Win32 Apps ConfigMgr agent Upgrade to Windows 10 with ConfigMgr Preserve apps and configuration Maintain management processes and principles of today New Windows 10 device Enroll into Intune (Azure AD Join/provision) Manage via MDM Universal apps (Store/LOB) Basic MSI support © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
10
Getting to Windows 10 Existing devices Refresh Existing devices
4/25/2017 Getting to Windows 10 Improved Modern Traditional Existing devices Refresh Use if significant changes are needed, such as OS architecture change x86 versus x64 Traditional process Capture data and settings Deploy (custom) OS image Inject drivers Install apps Restore data and settings Existing devices Upgrade Let Windows and ConfigMgr do the work Preserve all data, settings, apps, and drivers Install (standard) OS image Restore everything Recommended for existing devices (Windows 7/8/8.1) New devices IT Pro Provisioning Windows Image and Configuration Designer (WICD) Transform into an enterprise device Provisioning profile with ConfigMgr User Provisioning Azure AD Join with Intune auto enrollment ConfigMgr/MDT ConfigMgr/WICD/Intune/Azure AD © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
11
In-place upgrade with ConfigMgr
Preserve applications, drivers, user data, and settings Compared to refresh, in-place upgrade is… Faster: 30 to 60 minutes, on average, to upgrade Smaller: file size is default OS Media, no applications More robust rollback capabilities on failure to functional down-level OS Zero dependencies on Windows ADK; supplemental to existing deployment scenarios Another tool in the OS deployment toolbox Refresh, replace, and bare metal Reduce upfront testing and deployment preparation
12
Upgrade versus refresh
Continue to use refresh (wipe-and-load) when… Configuration drift/change Domain membership Local administrators Bulk application swap Fundamental change Disk partitioning BIOS -> UEFI x86 -> x64 Base OS language Custom requirements WinPE offline operation Custom base image Third-party disk encryption
13
System Center Configuration Manager @ Microsoft IT
Infrastructure 6 Primary Sites 13 Secondary Sites 300 Distribution Points PCs and Devices ~350,000 clients ~125k mobile devices (EAS) Users ~98k FTEs ~82k Vendors MS Online Directory Sync Active Directory Federation Server Azure Active Directory User Discovery Intune subscription Connector site role Show hybrid scenario in real world show flexible deployment option First, used 2012 R2 task sequence to deploy early builds of Win10 Then started using TPs and new upgrade functionality in ConfigMgr For small hotfixes, using the WSUS patch-mgmt. They use ConfigMgr client and soon WMI bridge for MDM features Hybrid deployment with Intune To connect to WiFi you need a cert, and device needs to be enrolled to Intune first Soon we will implement CA MSIT will provide device upgrade numbers Deploying upgrades around the world based on OS language Microsoft Intune Device Mgmt. Site ~15K devices Redmond Site 1 75k Clients Redmond Site 2 90k Clients North & South America 50k Clients Europe, MidEast, Africa 50k Clients Australia & Asia 75k Clients
14
Windows deployment of the future
Microsoft IT Access Strategy 4/25/2017 Windows deployment of the future Custom Solution MDT & IT Easy Upgrade Experiment Update Upgrade 80% FTE 1 Year 95% FTE 8 Months 95% FTE 3 Months 95% FTE 5 Weeks 95% FTE 5 Weeks 2009 2012 2013 2014 2015 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
15
Demo ConfigMgr admin console – upgrade
4/25/2017 9:56 PM Demo ConfigMgr admin console – upgrade © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
16
Modern Deployment Options
4/25/2017 Modern Deployment Options IT-driven, using new tools User-driven, from the cloud Create provisioning package using Windows Imaging and Configuration Designer with needed settings: Change Windows SKU Apply settings Install apps and updates Provisioning profile with Intune and ConfigMgr: Enroll a device for ongoing management (just enough to Bootstrap) Deploy manually, add to images Company-owned devices: Azure AD join, either during OOBE or after from settings BYOD devices: “Add a work account” for device registration Automatic MDM enrollment as part of both MDM policies pushed down: Change the Windows SKU Apply settings Install apps © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
17
Provisioning package and profile
Windows Imaging and Configuration Designer Initial setup Edition upgrade Certificates Connectivity profiles Management enrollment Modern applications Win32 applications Enterprise policies Offline content Browser settings Start menu customization Assigned access Apply during: At OOBE (out-of-box experience) During runtime (.PPKG file) Embedded in the image (ConfigMgr OSD, MDT, and WDS) Provisioning profile with Intune and ConfigMgr: A lifeline profile – Wi-Fi, enrollment
18
4/25/2017 9:56 PM Demo Provisioning – Windows Image Configuration Designer and ConfigMgr profiles © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
19
Windows 10 Azure AD Joined Devices
Apps in Azure 3rd party apps & clouds Azure AD Join for Windows 10 Azure AD Join makes it possible to connect work-owned Windows 10 devices to your company’s Azure Active Directory. With Azure AD Join, you can auto enroll devices in Microsoft Intune for management. Azure Active Directory Microsoft Intune Windows 10 Azure AD Joined Devices Intune/MDM auto-enrollment Intune auto-enrollment Enterprise-compliant services Support for hybrid environments Single sign-on from the desktop to cloud and on-premises applications with no VPN On-premises apps One of the new enrollment options that is available both for BYOD and CYOD scenarios when using Windows 10 is Azure AD join which makes it possible to connect work-owned Windows 10 devices to your company’s Azure Active Directory. With Azure AD Join, you can auto enroll devices in management with Microsoft Intune or a 3rd party MDM. This means that a user can use his or her device and use the corporate credentials to preform Azure AD join and get access to corporate resources in the cloud and on-premises as well as gain benefits such as SSO and auto-enrollment to Intune.
20
Demo Azure AD Join with Intune auto-enrollment
4/25/2017 9:56 PM Demo Azure AD Join with Intune auto-enrollment © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
21
What we hear from you… How should I deploy Windows 10?
How do I keep Windows up to date? How can I secure and improve productivity in Windows 10? Enabling users to be productive is critical for organization to stay competitive in the modern world, but organizations also need to ensure that their corporate data is protected while their employees are on-the-go..
22
Windows as a Service Consumer devices Business users Special systems
4/25/2017 9:56 PM Windows as a Service Consumer devices Keeping hundreds of millions of consumers up to date Large and diverse user base helps drive quality of the OS updates BYOD devices are up to date and secure Business users Update their devices after features are validated in the market Special systems Examples: air traffic control, emergency rooms No new functionality on Long Term Servicing Branch Regular security updates Many consumers today expect their devices to receive ongoing feature updates without having to take an action. However, we understand that businesses require more control in how updates are delivered, and at what pace. For example, systems powering hospital emergency rooms, air traffic control towers, financial trading systems, factory floors, just to name a few, may need very strict change management policies, for prolonged periods of time. To support Windows 10 devices in these mission critical customer environments we will provide Long Term Servicing branches at the appropriate time intervals. On these branches, customer devices will receive the level of enterprise support expected for the mission critical systems, keeping systems more secure with the latest security and critical updates, while minimizing change by not delivering new features for the duration of mainstream (five years) and extended support (five years). On Long Term Servicing branches, customers will have the flexibility to deliver security updates and fixes via Windows Server Update Services (WSUS) which allows full control over the internal distribution of updates using existing management solutions such as System Center Configuration Manager or to receive these updates automatically via Windows Update. We also learned from customers that while having control of mission critical environments is important; they also have many end user devices that are not necessarily mission-critical. Managing those devices as mission critical systems results in significant, unnecessary costs and complexity, while additionally depriving business users of access to the latest functionality. Many IT organizations have told us they would like to get out of the business of managing end-user devices. They are looking for ways to keep devices up to-date with more discretion than simply treating them the same way they treat consumer devices. © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
23
Windows as a Service – rings
4/25/2017 Windows as a Service – rings Customer internal ring I Customer internal ring II Customer internal ring III Customer internal ring IV Engineering builds Broad Microsoft internal validation Microsoft Insider Preview Branch Current Branch Current Branch for business Keep Windows up to date: New features as they are ready Security updates Predictable release timing Reduce device management and operational costs Deployment flexibility Time to test and deploy Standardize ecosystem Users Tens of thousands Several Million Hundreds of millions *Conceptual illustration only © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION
24
Thinking through deployment strategy
4/25/2017 9:56 PM Thinking through deployment strategy Windows Insider Preview Branch Current Branch Current Branch for Business Long Term Servicing Branch Deploy to appropriate audiences Test and prepare for broad deployment Specific feature and performance feedback Application compatibility validation Information workers, general population Specialized systems Early adopters, initial pilots, IT devices Deploy for mission critical systems Stage broad deployment Test machines, small pilots NUMBER OF DEVICES STAGE Release © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
25
The new System Center Configuration Manager
Simplify the upgrade experience: in-place upgrade from Configuration Manager 2012 and R2 to latest product version Support faster paced updates for Windows 10 and Intune: new updates and servicing nodes deliver periodic updates for new features, bug fixes, and extensions for hybrid deployments using Intune Intune updates monthly—keep ConfigMgr on pace Listen and respond quickly to customer feedback: foundational improvements made in latest version of the product allow us to respond to customer feedback more quickly
26
Direct customer engagements
SCCM vNext Customer feedback UserVoice MVP Hackathon Direct customer engagements MSIT Indiana University British Telecom Boeing USAF Daimler S&N Flight to MSIT/TAP RTM Develop Test Esc Tech previews So – we took our learnings and experiences from the services side of the business and applied them to our product Ship tech previews to customers every month, and an update every 4 months Feedback from Partners, Customers, Telemetry, and Direct Engagements Talk to the tools that make this possible: Telemetry, Data Drive, Feature Lifecycle, and CUTTING Switch to show tenant viewer tool Partners Telemetry/Usage
27
Windows 10 management with upcoming releases of Configuration Manager
Product version Release vehicle Availability Windows 10 features supported Support Windows Servicing Model supported System Center Configuration Manager Current Branch Generally available Q4 CY2015 with updates released periodically throughout the year New features, security updates, and bug fixes Can defer updates for up to 12 months before you must deploy updates to maintain support Windows 10 Current Branch, Current Branch for Business, and Long Term Servicing Branch System Center Configuration Manager Long Term Servicing Branch Generally available CY2016 in alignment with System Center 2016 Support for existing features included in latest Windows LTSB at point of release; newer features will not be supported. Security updates released as needed 10 years of support: mainstream + 5 extended Windows 10 Long Term Servicing Branch Current Branch (version 1511) System Center Configuration Manager Current Branch (version yymm) Long Term Servicing Branch System Center Configuration Manager FALL WINTER SUMMER
28
Is ConfigMgr LTSB the right choice for me?
Customer environment ConfigMgr LTSB? All Windows 10 clients in my organization are on Current Branch (CB) or Current Branch for Business (CBB) No. In order to be in support on the latest Windows CB/CBB, you need the Current Branch of ConfigMgr Some Windows 10 clients in my organization are on CB/CBB, but some are on the Long Term Servicing Branch (LTSB) No. The Current Branch of ConfigMgr will support Windows CB/CBB as well as LTSB My hierarchy is completely disconnected; I cannot connect any servers to the web No. The ConfigMgr updates and servicing model allows a completely offline mode I use ConfigMgr in a hybrid environment with Intune No. In order to get the latest updates for MDM/MAM, including platform updates, you must use the Current Branch of ConfigMgr I cannot install multiple updates a year; I need more time for my change process No. The Current Branch of ConfigMgr allows you to defer updates for up to 12 months I will probably need support for future releases of SQL server, WSUS, or other components that ConfigMgr has a dependency on No. Only the Current Branch of ConfigMgr will support the latest releases of these components My environment cannot accept any updates; I do not need new functionality or platform support in the foreseeable future Yes. LTSB is the right choice for you
29
ConfigMgr (Current Branch) vs. ConfigMgr 2016
Type of support/Feature System Center Configuration Manager (Current Branch) System Center Configuration Manager (Long Term Servicing Branch) Request to change product design and features (e.g. Critical DCRs) New product features Security updates Non-security update support (e.g. critical bug fixes) Windows 10 (Current Branch) Windows 10 (LTSB) Support for new Windows 10 Enterprise features MDM (Intune) MDM (On Premise) AppCompat support for major upgrades (e.g. SQL v.Next, App-V v.Next, etc.)
30
Windows 10 management with older versions of Configuration Manager
Product version Release vehicle Availability Windows 10 features supported Support System Center ConfigMgr SP2 AND System Center 2012 R2 ConfigMgr SP1 Service packs May 2015 Support for existing features included in latest Windows LTSB at point of release. Newer features will not be supported Windows 10 Long Term Servicing Branch (LTSB), Current Branch (CB), and Current Branch for Business (CBB): will provide support for July 2015 LTSB + Windows CB and CBB releases through February * Cumulative updates As needed System Center ConfigMgr Compatibility pack September 2015 Support for existing features included in latest Windows LTSB at point of release (management only, no OSD). Newer features will not be supported Windows 10 July 2015 Long Term Servicing Branch * Customers using Windows 10 Current Branch (CB) or Current Branch for Business (CBB) with Configuration Manager 2012 R2 SP1 or Configuration Manager 2012 SP2 will need to migrate to the Current Branch of System Center Configuration Manager after this time for continued support.
31
4/25/2017 9:56 PM Demo Updates and servicing node Servicing dashboard Configuring update rings in admin console © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
32
What we hear from you… How should I deploy Windows 10?
How do I keep Windows up to date? How can I secure and improve productivity in Windows 10? Enabling users to be productive is critical for organization to stay competitive in the modern world, but organizations also need to ensure that their corporate data is protected while their employees are on-the-go..
33
Conditional access control with EMS
4/25/2017 9:56 PM Conditional access control with EMS User attributes User identity Group memberships Auth strength (MFA) Conditional access control with EMS Devices Managed by Intune or ConfigMgr Compliant with Intune or ConfigMgr policies Domain joined Conditional Access provides customers a way to gate access to corporate resources, like VPN and Office based on device compliance and management state Flexible deployment options with support for domain joined clients, ConfigMgr agent-based, Hybrid MDM, Intune MDM With a Hybrid configuration and EMS licenses you can enable conditional access across ConfigMgr Agent- based Windows 10 clients, and Intune MDM managed devices covering all your whole Windows 10 client ecosystem Application Business sensitivity Azure AD Other Network location On-premises applications © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
34
“Enterprise data protection” for Windows 10
Configure and manage EDP policies with Intune and Azure Rights Management Microsoft Intune & Azure Rights Management Separate personal and corporate data with limited impact on employees’ day-to-day activities Control app access to corporate data and prevent copy- and paste-related data leaks Apply policies User File share Save Protect Data at Rest wherever it may roam* Note: The Windows 10 “enterprise data protection” capabilities shown on this slide are still in development. These capabilities could be modified before commercially released. With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data disclosure through apps and services that are outside of the enterprise’s control like , social media, and the public cloud. Many of the existing solutions try to address this issue by requiring employees to switch between personal and work containers and apps, which can lead to a less than optimal user experience. The Windows 10 feature code-named Enterprise Data Protection (EDP) offers a better user experience, while helping to better separate and protect enterprise apps and data against disclosure risks across both company and personal devices, without requiring changes in environments or apps. Additionally, EDP when used with Azure Rights Management (RMS) can help to protect your enterprise data locally, persisting the protection even when your data roams or is shared. With Intune, IT admins can manage EDP policies to protect corporate data (this is similar to the Intune MAM capabilities for iOS and Android). Additional management capabilities for data protection and separation are also available with Windows 10. Note: With EDP, you can protect Windows 10 apps and data without the need for an App Wrapping Tool or App SDK. Secure content collaboration through integration with Azure Rights Management Save Personal storage Share files and enforce policies Corporate network * Some roaming scenarios use Azure Right Management
35
Enhanced end-user experiences
Unified end-user portal Consistent look and feel as the company portal One-stop shop for all apps Convergence of software center and app catalog Device compliance Microsoft Passport Ability to deploy certificates and Passport policies for simplified authentication Offline Universal Windows apps Deploy Universal Windows apps that are built internally (line-of-business apps) Deploy offline apps and licenses from the Windows Business Store
36
4/25/2017 9:56 PM Demo Enterprise data protection Windows Store for Business and end-user portal © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
37
4/25/2017 9:56 PM Summary © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
38
How should I deploy and manage Windows 10?
4/25/2017 9:56 PM How should I deploy and manage Windows 10? Deployment and mgmt. strategy On-ramp to the cloud over time Existing Windows 7, 8, 8.1 Win32 Apps ConfigMgr agent Upgrade to Windows 10 with ConfigMgr Preserve apps and configuration Maintain management processes and principles of today New Windows 10 device Enroll into Intune (Azure AD Join/provision) Manage via MDM Universal apps (Store/LOB) Basic MSI support © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
39
Session objectives and takeaways
Understand how to: Choose the best deployment method for your organization to get to Windows 10 Keep Windows 10 up to date Manage Windows 10 security features and enhance productivity
40
Next steps To explore To do Q&A Try Enterprise Mobility now
4/25/2017 9:56 PM Next steps To explore Try Enterprise Mobility now To do Rate the session Q&A © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
41
4/25/2017 9:56 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.