1. Windows for the Enterprise Boris Ulík Technology Solutions Professional Microsoft Slovakia

2. Full Packaged Product (FPP) OEM – PC Preinstalled Volume Licensing Windows 8.1 Editions

3. Paths from Windows 8 to Windows 8.1 Windows 8 Windows 8 Pro No Active SA Active SA OEM/FPP Customers VL Customers Windows 8.1 Windows 8.1 Pro Windows 8.1 Enterprise Free update through the Windows Store Free update through the Volume License Service Center (VLSC)

4. Why Software Assurance?

5. Microsoft Desktop Optimization Pack Microsoft Application Virtualization (App-V) Virtually any application, anywhere Microsoft User Experience Virtualization (UE-V) Change your device, keep your experience Microsoft Enterprise Desktop Virtualization (MED-V) Enable your Windows XP-based apps on Windows 7

6. Windows 8.1 Enterprise Enterprise Sideloading Create a corporate Windows 8.1 environment on a USB stick Connected to corporate networks, seamlessly and more securely Users in the branch office can download documents and apps faster Improved end-user experience Specify what software is allowed to run on a user's PCs Deploy Windows 8 apps from outside of the Windows Store Start Screen Control Control Start screen configurations for different groups and roles using Group Policy

7. Transparent direct connection to corporate resources – no user interaction is required Windows 8.1 / Windows Server 2012 R2 do not require:  Two consecutive public IPv4 addresses (DirectAccess servers can be deployed behind NAT device)  IPv6 deployed within internal corporate network (integrated NAT64 / DNS64)  PKI (certificates) deployed at the domain-joined computers (can employ Kerberos Proxy functionality)  Consider “computer-only” scenario Windows 8.1 Devices with TPM chip can benefit from Virtual Smart Cards Support for “Metered Internet Connections” DirectAccess Productivity

8. Windows 8.1 on Certified USB drive  USB 3.0, capable of 2 partitions at least (“Basic Disk”) Supports various scenarios  VPN replacement, Vendors, BYOD, … Secured with encryption (BitLocker) Connected via VPN or DirectAccess Managed by Group Policies, SCCM, Windows Intune Applications can be installed or loaded via App-V Windows To Go Productivity

9. Enables documents caching within subnets interconnected over unreliable WAN Centralized / Distributed modes  Centralized mode requires Windows Server OS deployed on the local subnet  Centralized mode is configurable for Cache Preloading GPO / Self-configuration of branch office computers Support for SMB, HTTP, FTP BranchCache Productivity

10. Software Assurance includes VDA license Windows Server Remote Desktop Services scenarios:  Session based (Full desktop / RemoteApps)  Virtual Machine based (Personal Desktop / Desktop Pool) Requires only HTTP(S) / RDP  Enables BYOD / Contingent staff / VPN replacement scenarios  RDP client with RemoteFX Virtual Desktop Infrastructure Productivity

11. Enables virtualization of applications  Applications run within App-V agent as if locally installed  Ability to run different versions of the same software Includes all components for various scenarios  From standalone deployment to full infrastructure (integrated with SCCM) Ability to load and cache / pre-cache software to the client  Windows To Go / VDI (Desktop Pool) Ability to track and manage license usage App-V (MDOP) Productivity

12. Apps and OS personalization settings roam across Windows Synchronization is smart – logins are fast Based on GP configuration via Templates  Template Generator is included / Microsoft Gallery Ability to roll back settings to initial state Integrated with existing tools  Active Directory Group Policies, MDT, SCCM UE-V (MDOP) Productivity

13. Device enrollment  Device equipped with certificate – not managed, yet, not “unknown”  Leverage Windows Intune Manage access to corporate data  Integrate with Work Folders Support for iOS Workplace Join Productivity

14. Enables a single Windows Store app experience on the device User only experiences the specified app Unable to access system files and other apps Windows Embedded 8.1 Industry  Broader set of device lockdown capabilities (ATM, etc.) Assigned Access Productivity

15. Available also in Windows 8(.1) Pro Consider for Data Leakage / OS Integrity scenarios Windows 8(.1) / Windows Server 2012 (R2) BitLocker enhancements:  Encryption of only “used” disk space  Network unlock capability Employ TPM chip with PIN, whenever possible BitLocker to Go protects removable media  Enforced via GPO BitLocker & BitLocker to Go Security

16. Ability to deploy rules for using (and / or potentially installing) applications  Separate rules for Applications, Installers, and Scripts Enables control Modern UI Apps from Microsoft Store as well Support for “Application Whitelisting” scenarios within corporations Ability to protect from Portable Applications Managed via Group Policies AppLocker Security

17. UEFI Trusted / Measured boot process Early Loading of Anti-Malware (ELAM) Windows Defender integrated with anti-virus capabilities Picture Passwords Virtual Smart Cards Selective Wipe of Corporate Data Other Improvements Security

18. Simplifies the BitLocker provisioning process Report on device encryption compliance and audit access to keys Self-service Web Portal for users to recover devices Users can initiate PIN resets and volume encryption tasks MBAM prevents reuse of BitLocker recovery keys MBAM (MDOP) Management

19. Set of tools for Diagnostics and Recovery  Bootable WIM, ISO, USB Transparent UEFI machine boot integration Tools for troubleshooting  Memory scanning, Disk Scans, Antivirus analysis  Memory Dump “Reader”  Data Recovery from BitLocker Protected Drive DaRT (MDOP) Management

20. Support for 3 rd party MDM solutions Enterprise side-loading / SCCM Application Catalog Booting from VHD(X) Other Improvements Management

21. Unique access to Windows 8 Enterprise Virtualize, Manage, Restore with MDOP Work from any device with more Flexible Licensing Solid business foundation in Windows 8 Pro SA foundation Use rights, Technology, Support

22. Call to action Consider Windows 8.1 Download and evaluate Windows 8.1 Start developing Windows apps for your business Evaluate Windows 8.1 tablets for all your tablet deployments Target Windows 8.1 for adoption across all PC form factors in your company Deploying Windows 7 today? Continue your deployment, bring in Windows 8 tablets side by side Target Windows touch devices for hardware refresh