Day 1: Win10 Pre-Flight Summit
Follow my live tweet for today’s Windows 10 Partner Pre-Flight Summit!
8:30 am to 9:00 am | Welcome and Housekeeping – Steve Adams, The Device Guy |
9:00 am to 9:30 am | Executive Welcome – Pat Schlight – Senior Director, US Channel Development |
9:30 am to 10:00 am | Partnering for the Future – Intel Insights – TBD |
10:00 am to 10:30 am | Break |
10:30 am to 12:00 pm | Windows 10 Setup & Deployment – Wes Keetch, Sr. Support Engineer, CSS |
12:00 pm to 1:00 pm | Lunch |
1:00 pm to 4:30 pm | Windows 10 Management – Dave Field, Lead Partner Consultant |
4:30 pm to 5:00 pm | Closing Notes & Evaluations – Steve Adams, The Device Guy |
Pat Schlight welcomes and refreshes us on the Microsoft Mission and Strategy.
Discusses making a device for every person a reality
Michael Ray, Director of Intel’s National Accounts talks about the changing workplace
Businesses are powered by ideas
How is your current workplace holding you back?
- Limited creativity
- Compromised Collaboration
- Reduced Efficiency
- Decreased Productivity
- Difficulty attracting and keeping top talent
Discussing Intel Core vPro
- 100M install base
- Intel Pro Wireless Display
- Intel Wireless Docking
Windows 10 + Intel better together
- Productivity = Intel Core i3/i5/i7 + Universal Apps & Cortana
- Contextual mapping with Cortana
- Login faster
- Security = Intel Realsense (biometric agent, boot guard/BIOS guard) + Device Guard & Enterprise Data Protection (Windows Hello)
- Secure logins with biometric
- Trusted software
- Separate corp/personal data & encrypt company data as it arrives on the device
- Reduce exposure to viruses and malicious attacks and shutting down suspicious code
- Manageability = Intel vPro + Upgrade/Provisioning & Current branc for businesses
- Continue to deliver best OS
- Managed and secure Windows OS from a single console
- Integrate updates with existing apps, network and management platform
This all equates to getting time back
Break time!
Time to check out a piece of the Berlin Wall
Wes Keetch, Sr. Support Engineer, CSS discusses Windows 10 Setup & Deployment
- Deck and content under NDA, can’t wait until this all goes GA!
- Just know that dynamic provisioning will be key!
- Upgrade is better and more efficient than wipe-and-load, and enterprise ready!
- 8 minutes to upgrade Win7 to Win10 logon!
Windows 10 Management – Dave Field, Lead Partner Consultant
- Managing Windows 10 devices
- Challenges today
- Lack of control for mobile devices
- Different tolls for phone & PC
- Policy conflict
- Inconsistent user experience
- With Windows 10
- Granular mobile device mgmt
- Converged admin controls
- Automatic policy resolution
- …not anymore
- Challenges today
- Managing New Win10 Functionality
- Business Store
- Enterprise Upgrade and Update
- Inbox MDM
- Task Worker Devices (Kiosk Mode)
- Azure Domain Join
- Provisioning Packages
- Device Encryption enforcement
- Enterprise Data protection
- Conditional access
- Passport
- Endpoint Protection
- Management options
- Identity
- AD – Now Azure AD
- Membership
- Domain Join | Workgroup – Azure AD join
- Management
- GPO – New GPO & AGMP
- ConfMgr
- MDM
- Exchange Activesync
- PowerShell | WMI
- Identity
- A single experience across all Windows devices
- Win10 gives you more enroll options
- Auto MDM enroll with AzureAD
- Self MDM enroll
- Bulk enroll
- More policies for granular control
- Security
- Passport PIN policies
- FW & Defender
- Connectivity
- Block sharing internet via Wifi
- Auto connect VPN
- Experience
- Cortana
- Theme background and color
- Hardware
- Camera
- Bluetooth
- System
- Sync settings
- Telemetry and flighting
- Email
- Exchange Activesync policies
- Email profiles
- And much more!
- Security
- Conditional Access
- MDM evaluates compliance
- Device health attestation state (Windows health attestation service)
- You can now manage device updates
- Can communicate and authorize updates for Microsoft Update servers for corp machines
- Control when & how
- Scan & download
- Approval for auto install
- Choose your source
- MS Update
- Company Update Server
- Update compliance
- Can feed into conditional access
- Enterprise data protection
- User friendly work folders
- Can be selectively removed
- Audit intentional data disclosure
- Managing apps has been simplified
- Common platform/store
- All-user apps
- Consistent sideloading
- Applocker
- Acquire store apps through Business store
- Apply VSSP
- Remove all enterprise data with a single action
- No way to do this with Windows 8.1 and prior
- Smarter asset removal
- Certs, VPN, wifi, apps & pp data
- Either admins or users can un-enroll
- Consistent experience
- Capabilities today
- ConfMgr
- ConfMgr 2012 R2 SP1 & ConfMgr 2012 SP2
- Deploy Win10
- Manage Win10
- ConfMgr 2012 R2 SP1 & ConfMgr 2012 SP2
- Intune
- Agent-driven capabilities
- Config Management
- Application Management
- Anti-malware
- Updates
- MDM Capabilities
- User Enrollment
- OMA-DM Policy-based management
- Guidance is still to deploy standalone, ConfMgr features lag
- Migration from hybrid to ConfMgr and vice-versa is PAINFUL
- Agent-driven capabilities
- ConfMgr
- Business Store
- Support for work IDs
- Bulk acquisition
- App mgmt/reuse
- Reclaim/reuse
- Offline usage
- Flexible app distribution
- Familiar experience
- Integrated with store
- Integrated with mgmt tools
- Support for LoB apps