+110 MILLION +12 MILLION
“FOR WINDOWS 10, MICROSOFT WENT ALL-OUT TO TURN AROUND PERCEPTIONS AMONG CORPORATE CUSTOMERS…”
SS H I R A O V I D EW S J
“THE BOTTOM LINE? MICROSOFT IS GOING TO BEND OVER BACKWARDS TO MAKE THE BUSINESS TRANSITION TO WINDOWS 10 AS EASY AS POSSIBLE.”
M A R K H A R T M A NP C W O R L D
“WINDOWS AS A SERVICE MAKES WINDOWS 10 THE MOST ATTRACTIVE DEVELOPMENT PLATFORM EVER.”
PA U L T H U R R OT TT H U R R OT T. C O M
II“Windows 10 on Surface 3 provides the security and management weneed in a highly regulated environment. We made the decision earlyto use Windows 10 and deploy it immediately. Today, it is the mostsecure platform from Microsoft and we didn’t see a need to wait.”
- Jim Jensen, VP Information Services
Gartner Advocates for Windows 10"By 2018, 80% of enterprises will run Windows 10. A year ahead of Windows 7"
"Windows 10 is an inevitable migration for organizations running Windows PCs”…poised to become “the most widely installed version of Windows ever”
“To a large extent, Windows 10 is a cloud-centric operating system”
Investments for business
Windows 10
Be more productiveProtection against modern security
threats
Managed for continuous innovation
Innovative devicesfor your business
Require
Data protection
Identity protection
Threat resistance
Device security
BiometricsHardware-based
multi-factor
Windows HelloMicrosoft Passport
Replace passwords
Hardware-based credential isolation
Credential Guard
Protect corporate identities
Automatic encryptionPersistent protection
Data Separation
Enterprise Data Protection
(coming later)
Protect sensitive corporate data
Only run software you trust
Eliminate Malware on corporate devices
Trusted BootDevice Guard
Protection against modern security threats
Shared secrets
shhh!
Easily mishandled or lost(Hint: The user is the problem)
Easy to deploy two-factor password alternative
Breach, theft, and phish resistant credentials
Single sign-on experience
Convenient enterprise grade security for both enterprises and consumers
Supports PIN and biometric sign-in using Windows Hello
Microsoft Passport and Windows Hello
WINDOWS HELLO
Facial
Hello Chris
Fingerprint Iris
FIDO ALLIANCE
Example Board level members
Pass the Hash (PtH) attacks are the #1 go-to tool for hackers
Used in nearly every major breach and APT type of attack
Credential Guard uses VBS to isolate Windows authentication services and derived credentials
Fundamentally breaks delivered credential theft using MimiKatz, etc
Credential Guard
Use Azure AD to sign-into devices and the Windows store, no Microsoft Account needed
Azure AD is a comprehensive identity and access management solution for the cloud
Supports the use of Microsoft Passport and Windows Hello to access 1000’s of SaS apps
Azure Active Directory
Provides next generation app control and kernel mode protection
Uses signed policies to help prevent users and malware with elevated privilege from changing IT’s app control policies
Protects kernel mode processes and drivers from zero days and vulnerabilities using hardware enforced vulnerability mitigations
Device Guard
Protects data when a device is lost or stolen using full disk encryption
Provides single sign on and protection from cold boot attacks
Easy to deploy and manageable (via MBAM) at scale
Excellent integration, performance, and reliability
Submitted for Common Criteria and FIPS 140-2 certification. Will be supported for HIPPA, PCI DSS, etc scenarios
BitLocker data protection
Delivers user friendly corporate/personal data separation and containment
Ensures only trusted apps can access business data
Helps prevent accidental data leakage through copy and paste scenarios
Integrates with Microsoft Azure Right Management for secure roaming and sharing
Available on mobile and the desktop
Enterprise data protection
Managed for continuous innovation
Move to a single MDM platform for all Windows
10 devices
Mobile Device Management
Simplify device management
Eliminate the heavy lifting and inefficiency
In-place upgradesDynamic Provisioning
App compat
End “wipe-and-replace” deployment
Enterprise-class cloud, universal app model, and
store for business
Azure AD JoinUniversal Apps for WindowsWindows Store for Business
Embrace mobile-first, cloud-first
WINDOWS AS A SERVICE
Intelligent assistants
Get proactive and personalized help
from a true assistant
Cortana
You screen adapts to your device and task
ContinuumContinuum for
Phone
Get the best experience
Every user is a first class citizen
Mouse and keyboardTouch, Pen and Ink
Voice
Interact the way you want
Access your apps and data from any
Windows device
Universal Windows AppsUser state roaming with
Azure AD Join
Always have what you need
Be more productive
Windows 10 works great Windows 7 PCs
In place upgradeHardware
Compatibility
Bring innovation to your current PCs
Support your Line of Business scenarios
Windows 10 IoTGranular UX controlRuggedized devices
Industry strength solutions
Revolutionary new devices
Redefine productivity
Surface HubHoloLens
Range of innovative devices across 2-1s,
tablets, phones
Surface Pro 4Surface Book
Lumia 950, 950 XL3rd party devices
Chose devices that are right for you
Innovative devices for your business
Empower your customers with the Microsoft enterprise cloud
Seamless user access to apps and data from any Windows 10 device, with
Azure AD Join in Windows 10
Reduced deployment complexity with dynamic provisioning delivered via
Azure AD Join and automatic MDM enrollment
Extended protection for your corporate data with
Enterprise Data Protection and Azure Rights
Management (coming later)
Enterprise Data Protection and Azure Rights
Management enablement in Office (coming later);
Exchange Advance Threat Protection
Windows 10 November update
Ready for business
The first major upgrade as we deliver Windows as a Service
Broad enterprise pilots and evalsunderway
Evaluate, pilot and start Windows 10 deployment today
Windows 10 November update
Enhancements to Microsoft Passport
Utilize Microsoft Passport for
your domain accounts on the
corporate network.
(AD/AAD Hybrid mode)
Iris support (Beta)
Windows Store for Business
Centrally acquire, manage and distribute Windows Store apps in your organization.
Create your own private store with your
corporate LOB apps and curated free apps.
Windows Update for Business
Manage deployment to internal groups (rings) in your enterprise for controlled rollout of
Current Branch for Business
(CBB) updates.
Manage updates to align with your business
rhythm (maintenance “no-update” windows).
Enhancements to Azure AD Join
Seamless, secured, roaming of user settings
across Windows 10 deices, via your
Azure cloud.
Enhancements to Telemetry Control
GP/ MDM Controls enabling enterprises
to fully turn telemetry off.
MDM support for BYOD
MDM support for Windows 10 Home for most MDM settings.
User Experience Enhancements
Enhancements to Cortana, Edge,
Continuum, Support for Continuum for Phone
on select Phone devices.
Keeping devices secure and up-to-dateReducing device management costsQuick access to latest security updates
Capabilities
Policy setting example in Windows Update for Business
Time to test and validate feature updates
Summer ‘15
Ability to create internal deployment groups
Fall ‘15
Maintenance windows to align with business rhythmFall ‘15
Peer to peer delivery to optimize for bandwidth
Summer ‘15
Integration with your existing tools like System Center
Coming later
Access to Current branch and Current branch for Business
Summer ‘15
Windows Update for Business
Centrally acquire, manage and distribute Windows Store apps in your organization.
Create your own private store with your corporate LOB apps
and curated free apps.
Sign-up with your organizational account at
http://www.microsoft.com/business-store
Windows Store for Business
Enterprise data protection
Currently tested with select enterprise TAP customers
Will become available via Insider Preview soon
Planned release later in 2016
Deployment Approach with Windows as a Service?
What to deploy
Long Term Servicing Branch*
Deploy for mission critical systems via WSUS
Windows Insider Preview Branch
Specific feature and performance feedback
Application compatibility validation
Ongoing engineering development
Feedback and asks
Stage broad deployment via WU for Business
Current Branch For Business
Deploy to appropriate audiences via WUB
Test and prepare for broad deployment
Current Branch
Lab machines Early adoptersInitial pilotsIT devices
Information workersGeneral population
Specialized systemsFactory floor, point-of-sale, etc.
Windows Insider Preview Branch
Specific feature and performance feedback
Application compatibility validation
Stage broad deployment via WU for Business
Current Branch For Business
Deploy to appropriate audiences via WUB
Test and prepare for broad deployment
Current Branch
Evaluate Pilot Deploy
Pilot
4-8 months of active development
4 months 8 months
Evaluate upcoming features
12 month to test and deploy
When to deploy
Get going with Windows 10
Evaluate Windows 10 November Update
Start Windows 10 Pilot in your organization
Talk to your account team about Accelerate Program
Join Windows Insider Preview for early access to the upcoming capabilities
Migrate to Internet Browser 11
Prepare to testing and adopt Windows 10 Mobile on phones
Appendix
Windows 10 Investments for BusinessEnable continuous innovation with
the platform that keeps your company up to date
End “wipe and replace” deployments of the past with in-place upgrades (app compatibility).
Simplify device management by moving to a single mobile device management platform across all Windows 10 devices, from phones to laptops to Internet-of-Things devices; and from personal BYO devices to corporate systems.
Power your business with the enterprise-class strength of the Azure cloud and Universal Windows Apps. (Azure AD Join, Windows Store for Business, Private Catalog)
Move to the platform that keeps your company up to date, so that you can adopt latest technologies and continuously innovate. (Windows Update for Business, Windows as a service)
Innovative devices for your business
Bring Windows 10 innovation to your existing PC fleet. (hardware compatibly)
Bring industry-strength Windows 10 IoTsolutions to support your Line of Business scenarios (Granular UX control)
Choose devices that are best for your business and your people, from the broad range of innovative Windows devices across 2-in-1s, tablets, laptops and phones. (Surface Pro 4, Surface Book, Lumia 950, 950XL)
Redefine productivity with revolutionary new windows devices, such as Surface Hub and HoloLens.
Deliver experience your users will love, make them more productive
Get he best experience no matter what screen you’re using by running in desktop or tablet mode, using typing or touch inputs, or use your phone like a desktop – so the best screen is always the one your are on. (Start Menu, Continuum, Continuum for Phones)
Windows 10 is familiar, and every user is a first class citizen –whether using mouse and keyboard, touch, pen & ink or voice
Anywhere, anytime access to users’ apps and data from any Windows device (Universal Windows Apps, user state roaming w/Azure AD Join)
Proactive and personalized help from Cortana, who can integrate with company’s LOB systems.
Protect your company against modern security threats
Replace passwords with more secure options, such as biometrics and hardware- based multi factor credentials (Windows Hello and Microsoft Passport)
Protect your corporate identity with hardware-based credential isolation (Credential Guard)
Protect your corporate data, no matter where that data is, with the automatic encryption (Enterprise Data Protection –coming later)
Eliminate malware on your corporate devices by ensuring that only the software you trust can run (Trusted Boot, Device Guard)
Windows 10 November update: MDM support for BYOD
Windows 10 has been the easiest Windows upgrade. Our plan was to finish by the end of December, but the ease of upgrade let us complete it in only two months -three months ahead of schedule!
Christopher RhodaThomas CollegeVice President for Information Services and CIO
Surface
Empower your customers with the Microsoft