Windows Devices. Device Capabilities. Premium. Entry

Size: px

Start display at page:

Download "Windows Devices. Device Capabilities. Premium. Entry"

Hugo Ramsey
5 years ago
Views:

3 Windows Devices $ Premium Entry Device Capabilities

4 Windows 10 IoT $ Premium Windows 10 IoT Enterprise Desktop Shell, Win32 apps, Universal Windows Apps and Drivers 1 GB RAM, 16 GB Storage X86 Windows 10 IoT Mobile Enterprise Modern Shell, Universal Windows Apps and Drivers 512 MB RAM, 4 GB storage ARM Windows 10 IoT Core No Shell, Universal Windows Apps and Drivers 256MB RAM, 2GB storage X86 or ARM Entry Device Capabilities

5 Windows Assessment and Deployment Kit ( ADK) Windows Assessment Toolkit Windows Performance Toolkit NEW Windows Imaging and Configuration Designer

8 Unified Write Filter (UWF) Create read only devices Protect system against write operations Improve system up-time Reduce IT support & improve compliance

9 Restrict Access to USB Devices Group Policy or ICD Prevent installation of all devices Allow users to install only authorized devices Prevent installation of prohibited devices Control read and write permissions on removable media

10 Granular UX Control Group Policy, ICD or SIM Fully customize the Start Menu, Start Screen taskbar to a desired layout Suppress toast notifications

11 AppLocker Eliminate unwanted/unknown applications in your network Enforce application standardization within your organization Easily create and manage flexible rules using Group Policy

12 Shell Launcher Classic Windows apps Launch Classic Windows apps as a custom shell Different shells for different user groups

14 Device Guard The Parts to the Solution Hardware security Configurable code integrity Virtualization based security Protects critical parts of the OS against admin/kernel level malware Manageability via GP or PowerShell

Code Integrity Secure Boot Includes Secure

Kernel Mode Code Integrity (KMCI) User Mode

Anti-Malware AppLocker Platform Secure Boot

Bootloader s Native UEFI Windows OS Loader

15 Code Integrity Secure Boot Includes Secure Firmware Updates and Platform Secure Boot Kernel Mode Code Integrity (KMCI) User Mode Code Integrity (UMCI) Early Launch Anti-Malware AppLocker Platform Secure Boot UEFI Secure Boot KMCI UMCI AppLocker ROM/Fuses Bootloader s Native UEFI Windows OS Loader Windows Kernel and Drivers 3 rd Party Drivers User mode code (apps, etc.)

16 Virtualization Based Security Provides a new trust boundary for system software Leverage platform virtualization to enhance platform security Limit access to high-value security assets from supervisor mode (CPL0) code Provides a secure execution environment to enable: Protected storage and management of platform security assets Enhanced OS protection against attacks (including attacks from kernel-mode) A basis for strengthening protections of guest VM secrets from the host OS Windows 10 services protected with virtualization based security LSA Credential Isolation (Local Security Authority) vtpm (server only) Kernel Mode Code Integrity (KMCI)

17 Local Security Auth Service Virtual TPM Hyper-Visor Code Integrity Code Integrity protected by VSM Apps Virtual Secure Mode (VSM) Windows

18 Lets switch to a short introduction to Windows 10 IOT tools and setting

22 Options to control update behavior OEMs and Enterprises have several options to control update behavior Define update behavior through policy and maintenance windows Control download, install and reboot Devices can connect directly to Windows Update (WU) Enterprises can further control update through Windows Server Update Services (WSUS)

23 Activation Options for Windows 10 IoT Enterprise OA3.0 5x5 Multi Activation key (epkea) 5x5 Single Activation key (PKEA) 5x5 Multi Activation key (epkea) 5x5 Single Activation key (PKEA) Flexibility creating devices with online and deferred activation options

24 Activation States for Windows 10 IoT Enterprise Differed Activation

25 Windows 10 IoT Enterprise Activation UI Device has never connected to the Internet Device has Internet connectivity

26 Windows is not Activated - Personalization

27 Windows 10 IOT Enterprise highlights One product key epkea for 50,000 installations Devices not connected to the Internet - remain in a deferred activation state

28 Microsoft Azure IoT Services Devices Device Connectivity Storage Analytics Presentation & Action Event Hubs SQL Database Machine Learning App Service Service Bus Table/Blob Storage Stream Analytics Power BI External Data Sources { } DocumentDB HDInsight Notification Hubs External Data Sources Data Factory Mobile Services BizTalk Services

29 Thank you for your attention

Desktop features placemat

Desktop features placemat Home Pro Enterprise Existing Differentiated Features in Win7 /Win8.1 Domain Join and Group Policy Management Existing Win7 / Win 8.1 Enterprise features Windows 10: Management