Follow my live tweet for today’s Windows 10 Partner Pre-Flight Summit!

 

Pat Schlight welcomes and refreshes us on the Microsoft Mission and Strategy.
Discusses making a device for every person a reality

Michael Ray, Director of Intel’s National Accounts talks about the changing workplace

Businesses are powered by ideas

How is your current workplace holding you back?

• Limited creativity
• Compromised Collaboration
• Reduced Efficiency
• Decreased Productivity
• Difficulty attracting and keeping top talent

Discussing Intel Core vPro

• 100M install base
• Intel Pro Wireless Display
• Intel Wireless Docking

Windows 10 + Intel better together

• Productivity = Intel Core i3/i5/i7 + Universal Apps & Cortana
  • Contextual mapping with Cortana
  • Login faster
• Security = Intel Realsense (biometric agent, boot guard/BIOS guard) + Device Guard & Enterprise Data Protection (Windows Hello)
  • Secure logins with biometric
  • Trusted software
  • Separate corp/personal data & encrypt company data as it arrives on the device
  • Reduce exposure to viruses and malicious attacks and shutting down suspicious code
• Manageability = Intel vPro + Upgrade/Provisioning & Current branc for businesses
  • Continue to deliver best OS
  • Managed and secure Windows OS from a single console
  • Integrate updates with existing apps, network and management platform

This all equates to getting time back

Break time!

Time to check out a piece of the Berlin Wall

Wes Keetch, Sr. Support Engineer, CSS discusses Windows 10 Setup & Deployment

• Deck and content under NDA, can’t wait until this all goes GA!
• Just know that dynamic provisioning will be key!
• Upgrade is better and more efficient than wipe-and-load, and enterprise ready!
• 8 minutes to upgrade Win7 to Win10 logon!

Windows 10 Management – Dave Field, Lead Partner Consultant

• Managing Windows 10 devices
  • Challenges today
    • Lack of control for mobile devices
    • Different tolls for phone & PC
    • Policy conflict
    • Inconsistent user experience
  • With Windows 10
    • Granular mobile device mgmt
    • Converged admin controls
    • Automatic policy resolution
    • …not anymore
• Managing New Win10 Functionality
  • Business Store
  • Enterprise Upgrade and Update
  • Inbox MDM
  • Task Worker Devices (Kiosk Mode)
  • Azure Domain Join
  • Provisioning Packages
  • Device Encryption enforcement
  • Enterprise Data protection
  • Conditional access
  • Passport
  • Endpoint Protection
• Management options
  • Identity
    • AD – Now Azure AD
  • Membership
    • Domain Join | Workgroup – Azure AD join
  • Management
    • GPO – New GPO & AGMP
    • ConfMgr
    • MDM
    • Exchange Activesync
    • PowerShell | WMI
• A single experience across all Windows devices
• Win10 gives you more enroll options
  • Auto MDM enroll with AzureAD
  • Self MDM enroll
  • Bulk enroll
• More policies for granular control
  • Security
    • Passport PIN policies
    • FW & Defender
  • Connectivity
    • Block sharing internet via Wifi
    • Auto connect VPN
  • Experience
    • Cortana
    • Theme background and color
  • Hardware
    • Camera
    • Bluetooth
  • System
    • Sync settings
    • Telemetry and flighting
  • Email
    • Exchange Activesync policies
    • Email profiles
  • And much more!
• Conditional Access
  • MDM evaluates compliance
  • Device health attestation state (Windows health attestation service)
• You can now manage device updates
  • Can communicate and authorize updates for Microsoft Update servers for corp machines
  • Control when & how
    • Scan & download
    • Approval for auto install
  • Choose your source
    • MS Update
    • Company Update Server
  • Update compliance
    • Can feed into conditional access
• Enterprise data protection
  • User friendly work folders
  • Can be selectively removed
  • Audit intentional data disclosure
• Managing apps has been simplified
  • Common platform/store
  • All-user apps
  • Consistent sideloading
  • Applocker
• Acquire store apps through Business store
  • Apply VSSP
• Remove all enterprise data with a single action
  • No way to do this with Windows 8.1 and prior
  • Smarter asset removal
    • Certs, VPN, wifi, apps & pp data
  • Either admins or users can un-enroll
  • Consistent experience
• Capabilities today
  • ConfMgr
    • ConfMgr 2012 R2 SP1 & ConfMgr 2012 SP2
      • Deploy Win10
      • Manage Win10
  • Intune
    • Agent-driven capabilities
      • Config Management
      • Application Management
      • Anti-malware
      • Updates
    • MDM Capabilities
      • User Enrollment
      • OMA-DM Policy-based management
    • Guidance is still to deploy standalone, ConfMgr features lag
      • Migration from hybrid to ConfMgr and vice-versa is PAINFUL
• Business Store
  • Support for work IDs
  • Bulk acquisition
  • App mgmt/reuse
    • Reclaim/reuse
    • Offline usage
  • Flexible app distribution
    • Familiar experience
    • Integrated with store
    • Integrated with mgmt tools
  • Support for LoB apps