Transcript Client Management approach

Enterprise Management - managing Windows 8 devices
Alun Rogers
15:03:13
Client management
approach
App management
Case References &
Questions
Examples
Influencing
Microsoft
Client Management approach
Governance
System Center Configuration Manager
Infinite Tweaking
Exchange ActiveSync, VPN Policies
Simple Primitives
IT Owns the Device and sets all of the
rules
Personal
Devices
IT uses system of least control
Hardware, Apps, OS’s
Heterogeneous
Systems
PC, Mobile, Slate, Laptop
Of apps, patches, configurations
Pull
Self Service, App Stores
Constraints
Conditional access to Network,
Applications and Data
Protected Data
Variable device trust level, data must be
directly protected
Devices, applications, configurations
Systems enforce device standards to Protect
data (Bitlocker, OS/Patch Level, Applications)
Cloud only - Windows Intune
Mobile Device
Microsoft Surface
Windows RT
Windows Phone 8
Windows Phone 7
iPad and iPad2, iPhones, iPod Touch
Android-based phones and mobile devices
Operating System
Windows RT
Windows RT
8.0
7.0 or later
iOS 4.0 or later
Android 2.1 or later
MDM Method
Direct
Direct
Direct
EAS
Direct
EAS
Hybrid – SCCM and Intune
Managing Windows 8
PXE Boot, USB install, Wipe and Load, Side by side, prestaged Media
Admin with Windows 8 is able to control traffic:
Block network impactful client management activities
Avoid being unpleasantly surprised with their network bill
Scenarios: Contractors, Bring Your Own Device, Travel Light, Shared PCs
Provision: Admin can push deploy WTG to a removable device, End User
can pull provision WTG
Manage: Updated and managed same as a physical laptop/desktop, Admin
can determine if device is WTG or not
Your data and apps on any device
Configuration Manager
App-V 5.0 and U-EV (MDOP),
Folder Redirection
User Settings + Apps + Data
BitLocker Drive Encryption
RDS/VDI
User Settings+ Apps + Data
BitLocker Drive Encryption
Windows 8 apps
• Benefits:
– Runs across x86 and ARM
– Inherently more secure
– Easier and faster to deploy
• Software distribution
updated:
Windows Store
IT
Self-Service
Portal (SSP)
FIREWALL
– New object
– Same deployment process
– Similar management
functionality
Sideloading
• End users installation same
as today
Windows 8 (x86)
Sideloading
Windows RT device
Deep link apps
• Software Distribution updated:
– New type of software
– Same process
• Administrators do not need to
repackage applications
• End Users have one location
for all Enterprise Applications
Redirects
Windows Store
Self-Service
Portal (SSP)
Using Windows Intune
Building on the cloud
InTune
VM role
Azure network
AppController
Virtual
machines
Case References &
Examples
[email protected] | [email protected] | @alunrogers | @risual | risualblogs.com |www.risual.com