9 Years in Consulting. Broad experience in Microsoft Infrastructure solutions. Specialised in Windows 10 & Surface familly

Transcription

1

2 About 9 Years in Consulting Broad experience in Microsoft Infrastructure solutions Specialised in Windows 10 & Surface familly

3

4

5 We know Windows XP Windows 7 wasn t easy It often took between 3-7 years!

6 5 major Migration Painpoints

7 HW Model 2 HW Model 1 Extend your information base HW1 Won t Win10 upgrade! ready? Drivers 1 X86 App1 Windows 7 X86 App2 Drivers 1 X86 App1 Win10 ready? ready! Needs Win10 ready? Attention! X86 App2 Win10 ready? ready! IT Tim (IT admin) Drivers 2 X86 App1 Windows 7 X86 App3 Drivers 2 X86 App3 Needs Win10 ready? Attention! Win10 ready? ready! Enterprise devices HW2 Win10 ready? ready! Consumer devices

8 Devices Ready To Pilot And Deploy

9 Clients Win10 Readiness Status Type=UAComputer measure count() by UpgradeAssessment

10 Apps by Issue Type=UAApp IsRollup=true RollupLevel=Granular measure count() as AppCount by Issue

11 Apps blocking Upgrade Type=UAApp IsRollup=true RollupLevel=Granular Issue="Blocking upgrade" sort TotalInstalls desc select AppVendor, AppName, AppVersion, TotalInstalls, MonthlyActiveComputers, PercentActiveComputers, Guidance, ReadyForWindows

12 Driver Win10 Readiness Status Type=UADriver measure count() by Issue Type=UADriver Issue="Driver will not migrate to new OS" measure count() by UpgradeAssessment

13 Upgrade Analytics Deployment Steps telemetry data collected

14 Upgrade Analytics FAQ

15

16 Feature rich deployment Rapid deployment Security Management Productivity Devices Evaluate new capabilities against business needs Deploy Windows 10 Familiar tools and capabilities Deploy Windows 10 Windows 10

17 Wipe-and-Load Traditional process Capture data and settings Deploy (custom) OS image Inject drivers Install apps Restore data and settings Still an option for all scenarios In-Place Let Windows do the work Preserve all data, settings, apps, drivers Install (standard) OS image Restore everything Must use standard WIM, but can lay down custom apps after Recommended for existing devices (Windows 7/8/8.1) Provisioning Configure new devices Transform into an Enterprise device Remove extra items, add organizational apps and config New capability for new devices covered in subsequent slides App, web and device compatibility

18

19 PROTECT, DETECT & RESPOND PRE-BREACH POST-BREACH Device protection Threat resistance Identity protection Information protection Breach detection investigation & response Device integrity Health Device attestation control Device Guard Device Control Security policies SmartScreen Windows AppLocker Firewall Microsoft Device Guard Edge Windows Device Defender Guard Windows Network/Firewall Defender Windows Built-in Hello 2FA ;) Account Credential lockdown Guard Credential Guard Microsoft Passport Windows Hello ;) Device BitLocker protection and / Drive BitLocker encryption to Go Enterprise Windows Data Information Protection Conditional Protection access Windows Conditional Defender Access Windows ATP Defender ATP

20 Windows WINDOWS 7 7 WINDOWS 10 Windows 10 Windows Secure Boot Windows Hello for Business Credential Guard Device Guard Windows Information Protection Windows Defender ATP

21 Y YY With Windows 7 and 8, servicing choices added complexity and cost, increased fragmentation, and reduced quality What we are testing What customers are running Windows 7 Test Lab PC: Fully Patched Typical Windows 7 PC: Selectively Patched

22 Traditional deployment (every 3-5 years) Apps Infra Imaging Deploy Service Packs Windows as a service (twice per year) Apps Infra Imaging Deploy WaaS Prep

23 Windows Windows Windows Windows Plan & Prepare Pilot Broad 18 months for each release

24 State Insider Preview Semi Annual Channel (Targeted) Semi Annual Channel 6 months approx. 4 months 18 months approx. 14 months Windows OS Release Ready for Broad Deployment Phase Plan & Prepare Targeted Deploy Broad Deploy

25 State Insider Preview Semi Annual Channel (Targeted) Semi Annual Channel 6 months approx. 4 months approx. 14 months User IT Test User IT Validators Project Team IT Department App Holder App Test User Project Team Targeted Production Users Broad Users Special Machines First uncompliant Broad Users Uncompliant Broad Users Phase Plan & Prepare Targeted Deploy Broad Deploy State Proactive Testing Reactive Testing & Production Upgrade Workflow Preparation Validation of new Features Feature Closings Setting Infrastructure Requirements Proactive LoB Testing Upgrade Testing Upgrade Testing Proactive LoB Testing ADMX / GPOs SCCM TS / Reports Integrate and validate new Features Feedback Management Pilot Deployment Targeting all Apps, OUs and network segments Feedback Management Broad Deployment Knowledge- Management Broad Use Close to Upgrade Upgrading first Machines Upgrade Compliance Cleanup Reinstall

26

27 Identity Management Updates Infrastructure Ownership Active Directory Group Policy Windows Update On-premises Corporate-owned Azure Active Directory System Center Configuration Manager 3rd party PC management Windows Update for Business Windows Server Update Services (WSUS) In the cloud CYOD BYOD Intune Intune 3rd party MDM 3rd party MDM

28 Classic IT Modern IT Single Device Business Owned Corporate Network & Legacy Apps Manual Reactive High-touch & Multiple Devices User and Business Owned Cloud Managed & SaaS Apps Automated Proactive Self-Service

29 Customized Windows 10 set up experience through Windows Store for Business Windows 10 device can be directly shipped or handed to the end user Employee sets up the device with a streamlined flow Employee account without admin privileges Windows 10 automatically enrolls in MDM* and initiates additional config steps including settings and apps

30 LitWare Azure Cloud SaaS Apps Intune WSfB Hardware Vendor Azure AD Upload Device IDs Device IDs Configure Profile Harvest Device IDs Existing Devices Self Deploy Mobile Device, Application and Computer Mgmt. IT Admin Ships new Windows 10 Devices Deliver direct to Employee Employee unboxes device, self-deploys

31

32

33 Continue in English? English Next Would you like to continue in English?

34 Let s start with region. Is this right? United Arab Emirates United Kingdom United States Yes

35 Is this the right keyboard layout? US United States-Dvorak for left hand DVORAK L United States-Dvorak for right hand DVORAK R United States-International QWERTY Albanian QWERTZ Yes

36 Want to add a second keyboard layout? Add layout Skip

37 Let s connect you to a network MyHomeNetwork Connect automatically Connect HalHome5GWiFi Secured Sammashed Secured Network4 Open Skip for now

38 Enter your password MyHomeNetwork Enter the network security key You can also connect by pushing the on the router. Cancel HalHome5GWiFi Secured Skip for now

39 Enter your password MyHomeNetwork. Enter the network security key You can also connect by pushing the on the router. Next Cancel HalHome5GWiFi Secured Skip for now

40 Great, you re connected! MyHomeNetwork Properties Disconnect HalHome5GWiFi Secured Sammashed Secured Network4 Open Skip for now

41 Alright, you re connected. Just a moment

42 Now we ll check for any updates

43 Sign in with Contoso.com This device is registered to Contoso.com. Enter your contoso.com address Change account Next

44 Just a moment

45 We re getting everything ready for you.

46 This might take several minutes

47

48 Introducing Microsoft 365 A complete, intelligent, secure solution to empower employees. Office 365 Windows 10 Enterprise Enterprise Mobility + Security

49