techcamp 2013 dublin - what's new in windows 8.1 for the enterprise

Keynote @ 9am in Main Hall

First Session in this hall is after the Keynote

Windows 8.1 Enterprise Ready

Damian Flynn, MVP

info@DamianFlynn.comwww.DamianFlynn.com

@damian_flynn www.petri.co.il/author/damian-flynn

Damian FlynnSystems Architect, Corporate IT Infrastructure, Lionbridge

Damian Flynn is the Infrastructure Architect. His current focus is on Software Defined Networks (SDN) with “Windows Azure Pack”, with perspective on Orchestration of repeatable processes in “Dev/Ops” scenarios. He has a keen interest in Cloud Computing from both a business strategy and technical viewpoint and presents sessions on building and managing Private/Hybrid Clouds at a number of industry events. Damian authored the Cloud chapters on two books, is active in many MS Programs, blogs at www.damianflynn.com & www.petri.co.il, tweets at @damian_flynn, and has published a number of white papers and technical articles.

MVP - Cloud and Data Center Management

BYOD goes mainstream

enabling mobile professional

dynamic, connected, global environment

anywhere, anytime expectationsDevices and Experiences users love

Enterprise grade solutions businesses require

Windows 8.1Free Upgrade from Windows 8

Available NOW!

Building on the Windows 7 and Windows 8 foundation

High interest in Windows tablet solutions

Businesses taking advantage of new Windows apps

Windows To Go enabling new customer scenarios

Windows 8 security and virtualization advancements address needs of IT

New class of devices

Businesses adopting and developing for Windows 8

Hardware Requirements Unchanged

Supports all applications previously validated on Windows 8

Supports both Windows Desktop Applications and new Windows Application Interface

Windows 8.1 Compatibility

Windows 8.1 investments for the enterprise

Best business tablet and more

Mobility for the enterprise

Empower BYOD

Enterprise grade security

Windows apps for business

29% of global workforce can be characterized as “anywhere, anytime” information workers, up from 23% in 2011

Forrester’s 2013 Mobile Workforce adoption trends:

Nearly 80% of workers spend at least some portion of their time working out of the office

According to ZDNet and TechRepublic’s BYOD Business Strategy Survey, 62% of companies either already have Bring Your Own Device allowances in place, or plan to by the end of 2013

Feature Windows 8 Windows 8Pro

Windows 8 Enterprise

BitLocker® and BitLocker To Go® X XBoot from virtual hard disk (VHD) X X

Client Hyper-V X X

Domain Join X X

Encrypting File System X X

Group Policy X X

AppLocker® X

BranchCache® X

DirectAccess X

Side-load Windows RT apps X

Virtualization through RemoteFX® X

Windows To Go X

Windows 8.1: UI enhancements

Start Screen improvements

See the desktop only when you need it

Leave the desktop only when you want to

Windowing and improved multi-monitor support

New search experience

Force a specific background and accent colorForce a specific Start backgroundPrevent enabling lock screen cameraPrevent enabling lock screen slide showStart Screen LayoutRestrict delegation of credentials to remote serversConfigure Group Policy CachingConfigure Logon Script DelayDo now sync start settingsSign-in last interactive user automatically after a system-imitated restartAlways automatically restart at the schedule timeForce automatic setup for all usersDefault App Default SearchMulti MonitorsPin Apps to Start when installedSort

Set the time Quiet Hours begins each daySet the time Quiet Hours ends each dayTurn off calls during Quiet HoursTurn off Quiet HoursApp switchingCharmsWinXAllow Microsoft service to provide enhance suggestions as the user types in the Address barAllow Internet Explore to use the SPDY/3 network protocolTurn off sending UTF-8 query strings for URLsTurn on 64-bit tab processes when running in Enhance Protected Mode on 64-bit version of WindowsDon’t run antimalware programs against ActiveX controlsTurn off phone number detection

Group Policy Objects New in 8.1

Windows Apps for Business

Enables a single Windows Store app experience on the device

User only experiences the specified app

Unable to access system files and other apps

Windows Embedded 8.1 Industry: broader set of device lockdown capabilities (ATMs, etc.)

Windows 8.1:Assigned Access

App Opportunity for Your Company

Engage your customers

Increase employee productivity

Minimize development efforts

Windows Apps Ready for your Business

• Apps share screen

•Multi-monitor support

•Higher DPI support

•New contracts for apps

•High-precision touchpad

Apps for your business

Public WP8 Apps Internal LOB WP8 Apps

Install from Windows Store

Install from Windows Phone Store

Management solution

Self-Service Company Portal

Distribute LOB apps internally

Public W Apps

Internal LOB W Apps

Windows Apps Deployment Simplified

Mobility: Productive and connected

Work anywhere on any Windows device

Access your data and apps on any Windows device

Connect to your networks on the go

Your PC in your pocket with Windows To Go

Wirelessly connect to peripherals

CORPORATE NETWORKINTERNET

Mobility Productive and connected

Windows 8.1: Connectivity

Business class VPN features

Corporate network

Microsoft VPN client

LOB App Internal site

DirectAccess

Inbox Third party VPN clients

Auto-triggered

User initiated

Windows 8.1

Any Device, Any Location Direct Access

FIREWALL

Mobile BroadbandWi-Fi

DirectAccess

SkyDrive

Lync

SharePointSkyDrive Pro

Data servers

Exchange

*Internet access required*Internet access required

LOB App

Any Device, Any Location Business Class VPN

Platform extended to support VPN partners

Built into Windows• Works out of box with minimal configuration

Secure and stable• Runs in a sandbox and only in user context

Performance with no compromise• System controls the interface and process

lifetime

Integrated experience• User experience blends with Windows.

Enhanced VPN Infrastructure and support

Windows 8.1: Connectivity

Business class VPN features

Native Miracast wireless display

Integrated wireless printing

Demonstration NFC Printer Binding & WiDi

Windows 8.1: Connectivity

SoC-integrated mobile broadband

Business class VPN features

Native Miracast wireless display

Integrated wireless printing

Your PC as a personal WiFi hotspot

Manufacturer Storage size

Kingston® DataTraveler® Workspace

www.kingston.com/wtg 32, 64, 128 GB

Manufacturer Storage size

Super Talent RC4

www.supertalent.com/wtg 32, 64, 128, 256 GB

Imation IronKey® Workspace W300

www.imation.com/wtg 32, 64, 128 GB

Imation IronKey® Workspace W500

www.imation.com/wtg 32, 64, 128 GB

Super Talent Express RC8

www.supertalent.com/wtg 32, 64, 128 GB

SPYRUS Portable Workplace™

www.spyruswtg.com 32, 64, 128 GB

WD My Passport Enterprise

www.wd.com/wtg 500 GB

SPYRUS Secure Portable Workplace™

www.spyruswtg.com 32, 64, 128 GB

Optimized for operation and downloading Windows 8.1 Enterprise for equipment certified for use Windows 7 and later operating systems Windows.

*Microsoft only supports certified drives.

Windows To Go Certified Devices

* Any device certified for use with Windows 7 or Windows 8. Software Assurance (SA) for Windows required

01100111110100111100100110001001

Booting from Internal hard drive

FIREWALL

App-VUE-V

Folder Re-Direct

01100111110100111100100110001001

Booting from External USB drive

App-VUE-VFolder

Re-Direct

App-VUE-V

Folder Re-Direct

BitLocker

Windows To Go Consistent Cross Device Experience

Pro

Replacement deviceUser settings onreplacement device

Work folders or

Windows device

Lost or damaged device User data on replacement device

Applications and Data Always With YOU

Empower BYOD

Exchange ActiveSync

Mobile Device Management via OMA-DM

Enterprise Management

Governance

Full control

Windows 8.1 provides choicesChoose by device based on scenario or capabilities needed

Consider employee versus organization-owned, BYOD, connectivityOrganizations may choose the options that works the best for them

Managing Windows Devices

Based on open standardsUses Open Mobile Alliance Device Management protocols Secure communication with cloud-based management No additional agent required in Windows 8.1 and Windows RT 8.1

Implemented by multiple ISVsMicrosoft (Windows Intune)AirWatchMobile Iron

Open protocol enables implementation by additional vendors

MDM Mobile Device Management

Access data from anywhere on different devices

Windows 8.1: Work Folders

Work Folders

Demonstration Enabling and Subscribing to Work Folders

Manage access to company data

Register personal devices

Simple for the employee

Device enrollment with Windows Intune

Windows 8.1: Workplace join

Work Place Join

Demonstration Enabling and Subscribing to Workplace Join

Outlook 2013 RT

Support for 3rd party MDM solutions

Workplace join and work folders

Inbox 3rd party VPN clients

Windows 8.1 on ARM

Touch-first, fast and fluid user experience

Remote desktop

* Software Assurance (SA) for Windows required. Internet required.

BranchOffice

Home Library/Coffee house

CorporateOffice

FIREWALL

Microsoft VDI: Powered by Windows Server 2012

1 platform | 1 experience | 3 deployment choices

Desktop Sessions

Pooled VMs

PersonalVMs

RemoteFX

Remote Desktops Maximize VDI Investment

* Windows 8 Pro required

Windows 8 VM

Windows 7 VM

Windows Server VM

Linux VM

Run multiple operating systems on a single Windows 8 PC

Multiple Desktops Client Hyper-V multiple OS

Publish web applications to users to access from anywhere on any device

Web application proxy

Limited accessNo IT Control

Device at work with IT governance & controlled access to apps

Company owned device with full IT

control & full access

Active Directory

Not Joined to AD Workplace joined Domain joined

Web Application Proxy Exhibiting Services Securely

Enterprise Grade Security

Modern access control

Secure corporate data

Malware resistance

Secured system start-upCore system hardeningSandboxed Windows Store apps Built-in anti-malware solutionReal time anti-phishing protection

Trustworthy hardware

Windows 8 Security Capabilities

Modern access control

Secure corporate data

Malware resistance

Secured system start-upCore system hardeningSandboxed Windows Store apps Built-in anti-malware solutionReal time anti-phishing protection

Corporate encryption enforcementIP protection with Office IRMCorporate compliance with Lync

Trustworthy hardware

Windows 8 Security Capabilities

Modern access control

Multifactor authentication, virtual smartcard supportDynamic access control

Secure corporate data

Malware resistance

Secured system start-upCore system hardeningSandboxed Windows Store apps Built-in anti-malware solutionReal time anti-phishing protection

Corporate encryption enforcementIP protection with Office IRMCorporate compliance with Lync

Trustworthy hardware

Windows 8 Security Capabilities

Modern access control

Secure corporate data

Malware resistance

Secured system start-upCore system hardeningSandboxed Windows Store apps Built-in anti-malware solutionReal time anti-phishing protection

Improved Windows DefenderImproved browser securityImproved system hardeningProvable PC health

Trustworthy hardware

Corporate encryption enforcementIP protection with Office IRMCorporate compliance with Lync

Multifactor authentication, virtual smartcard supportDynamic access control

Windows 8.1 Security Capabilities

Modern access control

Secure corporate data

Malware resistance

Multifactor authentication, virtual smartcard supportDynamic access control

Secured system start-upCore system hardeningSandboxed Windows Store apps Built-in anti-malware solutionReal time anti-phishing protectionImproved Windows DefenderImproved browser securityImproved system hardeningProvable PC health

Trustworthy hardware

Corporate encryption enforcementIP protection with Office IRMCorporate compliance with Lync

Device Encryption all editionsRemote Business Data Removal

Windows 8.1 Security Capabilities

Modern access control

Modern access control

Secure corporate data

Malware resistance

Multifactor authentication, virtual smartcard supportDynamic access control

Secured system start-upCore system hardeningSandboxed Windows Store apps Built-in anti-malware solutionReal time anti-phishing protection

Corporate encryption enforcementIP protection with Office IRMCorporate compliance with Lync

Improved Windows DefenderImproved browser securityImproved system hardeningProvable PC health

BiometricsImproved multifactor authentication TPM key attestation Certificate reputation

Device Encryption all editionsRemote Business Data Removal

Trustworthy hardware

Windows 8.1 Security Capabilities

Windows 8.1 investments for the enterprise

Best business tablet and more

Mobility for the enterprise

Empower BYOD

Enterprise grade security

Windows apps for business

Rights are included with Software Assurance for Windows

Enterprise edition use rights are perpetual for the licensed device even after SA coverage ends.

How to License

Windows To Go Creator

DirectAccess

BranchCache

Virtual Desktop Infrastructure AppLocker

Enterprise Sideloading

Create a corporate Windows 8.1 environment on a USB stick

Connected to corporate networks, seamlessly and more securely

Users in the branch office can download documents and apps faster

Improved end-user experience

Specify what software is allowed to run on a user's PCs

Deploy Windows 8 apps from outside of the Windows Store

Start Screen Control

Control Start screen configurations for different groups and roles using Group Policy

Windows 8.1 Enterprise Edition Features

Questions?

Download TWO Free Whitepaper’s on SCVMM

THANK YOU!Damian Flynn MVP System Center Cloud and Datacentre