1. Microsoft Virtualisation & Management Technologies Steve Lamb & Matt McSpirit Microsoft UK http://blogs.technet.com/steve_lamb http://www.mattmcspirit.co.uk

2. Agenda 09:30 Keynote: Virtualisation, System Center & GreenIT 10:00 Building, Clustering and Managing Hyper-v 11:00 Break 11:15 How to manage Microsoft and VMware estates 12:45 Lunch 13:30 Delivering Apps Virtually #1 (MDOP, VECD & VDI) 15:00 Break 15:15 Delivering Apps Virtually #2 (Terminal Services) 16:00 Ask the Experts 16:30 Close

3. Dependencies Create Complexity Hardware OS Data, User settings Applications Separation Creates Flexibility

4. Virtualisation Solutions... Document redirection Offline files

5. Virtualisation Solutions...

6. Building, Clustering & Managing...

7. Then and now... Virtualisation FeatureVirtual Server 2005 R2Hyper-V 32-bit Virtual MachinesYes 64-bit Virtual MachinesNoYes Multi Processor Virtual MachinesNoYes, 4 core VMs Virtual Machine Memory Support3.6GB per VM64GB per VM Managed by System Center Virtual Machine Manager Yes Support for Microsoft Clustering ServicesYes Host side backup support (VSS)Yes Scriptable / ExtensibleYes, COMYes, WMI User InterfaceWeb InterfaceMMC 3.0 Interface

8. More on Hyper-V... Runs on any Intel-VT or AMD-V system with a “Designed for Windows” logo Native x64 Hypervisor X86 / x64 VMs Up to 1 TB Parent Support Up to 64GB VM Memory Up to 4 CPU VMs 16 core host support Pass-through disk access for VMs New hardware sharing architecture (VSP/VSC) – Disk, networking, input, video Robust networking – VLAN support, NAT, Quarantine

9. Monolithic vs. Microkernelized monolithic hypervisor Simpler than a modern kernel, but still complex Contains its own drivers model microkernelized hypervisor Simple partitioning functionality Increase reliability and minimize TCB No third-party code Drivers run within guests VM 1 (“Admin”) VM 1 (“Admin”) VM 3 Any ‘Designed for Windows’ Hardware * Hypervisor VM 2 (“Child”) VM 2 (“Child”) VM 3 (“Child”) VM 3 (“Child”) Virt. Stack Virt. Stack VM 1 (“Parent”) Hypervisor VM 2 Some Hardware microkernelized hypervisor has an inherently secure architecture with minimal attack surface VMware Hyper-V Drivers * With Intel-VT or AMD-V CPU technology, these are standard in today‘s servers

10. Applications Non- Hypervisor Aware OS Windows Server 2008, 2003 Windows Kernel VSC VMBus Emulation VMBus “Designed for Windows” Server Hardware Windows Server 2008, x64 Windows Kernel Xen-Enabled Linux Kernel Linux VSC Hypercall Adapter Parent PartitionChild Partitions VMBus Hyper-V VSP VM Service WMI Provider VM Worker Processes OS ISV / IHV / OEM Hyper-V MS/ XenSource User Mode Kernel Mode Provided by: Windows Server 2008, x64 Windows Kernel Windows Drivers Windows Drivers Windows Drivers Hyper-V architecture

11. The power of Hyper-V Enlightenment/Para-virtualisation is the key to high performance Allows the Guest OS to understand it’s being virtualised and co-operate to provide the best performance Hyper-V is designed to utilise the virtualisation capabilities of Intel-VT and AMD-V enabled processors Hardware Virtualisation allows high performance virtualisation of the Windows Guest OS – Server 2008, 2003 SP2, 2000 SP4, XP SP2/SP3, Vista SP1 – Certain Xen-Enabled Linux Distributions Novell SUSE SLES 10 SP2 & Red Hat Enterprise for now... The future of virtualisation is Enlightenment/Para- virtualisation with hardware virtualisation assist

12. Hyper-V Storage Options

13. Server Virtualisation Licensing By assigning a copy of WS 03/08 Enterprise: – 4 free running Instances – Cumulative... The same process with WS 03/08 Datacenter: – Unlimited running instances Virtualisation Agnostic

14. Virtualisation Management Depends on Scale: – Smaller - Hyper-V Manager – Mid-Market/Enterprise – SCVMM Virtualisation Management is one part of a much bigger picture...

15. Demo My demo environment -> System Center Virtual Machine Manager 2008

16. Virtualisation Solutions...

17. Performance & Resource Optimisation (PRO) Workload and application aware resource optimisation Extensible through the Operations Manager 2007 MP framework Create policies that VMM acts upon tips automatically or manually Minimise downtime and accelerating time to resolution. Enables partners to deliver value add to our mutual customers

18. Server Management Suite Enterprise Full Application and Server Management (P&V) System Center Pricing & Licensing Virtual machine management is a key component of server management Introducing the System Center Enterprise Server Management License Provides comprehensive management for physical & virtual Windows Server & Storage environments, & includes: – System Center Virtual Machine Manager 2007* – System Center Operations Manager 2007 Enterprise Edition – System Center Data Protection Manager 2007 Enterprise Edition – System Center Configuration Manager 2007 – Unlimited Virtualisation Rights

19. System Center Scenario By assigning an SMSE to the Physical box, it can be: – Patched/Updated (SCCM) – Monitored (SCOM) – Backed Up (SCDPM) – VMM Host (SCVMM) – VMM Server (SCVMM) Retails @ $1200 SMSE grants unlimited virtualisation rights... Virtualisation Agnostic

20. Lunch 45 minutes...

21. Delivering Apps Virtually #1...

22. Desktop Virtualisation: Overview Network Client Server Client Server-Based Virtualisation (VDI) Client-Based Virtualisation LAN Attached ClientsMobile / Outside Perimeter

23. Microsoft VDI Citrix XenDesktop / Quest VAS

24. Demo Windows Fundamentals for Legacy PCs – “Windows Fundamentals for Legacy PCs ("WinFLP") is a thin client operating system from Microsoft, based on Windows XP Embedded, but optimized for older, less powerful hardware. It was released on July 8, 2006. Windows Fundamentals for Legacy PCs is not a full- fledged general purpose operating system. It includes only certain functionality for local workloads such as security, management, document viewing related tasks and the.NET Framework. It is designed to work as a client-server solution with RDP clients or other third party clients such as Citrix ICA.” XenDesktop

25. Licensing VDI –> Vista Enterprise Centralised Desktop http://ladylicensing.spaces.live.com/

26. Desktop Virtualisation: Overview Network Client Server Client Server-Based Virtualisation (VDI) Client-Based Virtualisation LAN Attached ClientsMobile / Outside Perimeter

27. Kidaro? Now becomes: Virtualised applications share the desktop with non-virtual applications. Optional colored borders differentiate virtual from non-virtual. Virtualised applications seamlessly integrated into any node in the start menu. Kidaro client communicates with Kidaro server for user settings and policy enforcement

28. Core Scenarios? Enterprise Application-to-OS Compatibility – Accelerate migration to Vista while supporting legacy applications in a seamless XP environment Increase manageability and usability of corporate laptops – Eliminate historic trade off between IT control and user flexibility Drive business continuity – Rapidly reconstitute corporate desktops on any PC Provide a corporate-managed IT environment on top of third- party PCs (e.g. contractors, offshore, branch offices) – Deliver a Virtual PC image on a DVD or a USB drive (licensing TBD) Control access to Virtual PCs and increase helpdesk effectiveness

29. Solve App-to-OS Conflicts

30. System Center Virtual App Server System Center DEM Operations Manager 2007 Translating software inventory into business intelligence Enhancing group policy through change management Dynamically streaming software as a centrally managed service Proactively managing application and operating system failures Powerful tools to accelerate desktop repair ALERT: Application X has failed App Inventory Assets Manage Group Policies Virtualize and Stream Apps Monitor Crashes Repair Desktops

31. Demo Application Virtualisation 4.5

32. Break 15 minutes...

33. Delivering Apps Virtually #2...

34. TS Core Enhancements Vista: better together – Previous versions: 2 TS clients – Now: 1 integrated client Network Level Authentication & Server Authentication Display Improvements Plug and Play device Redirection Framework Single Sign-On

35. Demo Terminal Services RemoteApp Manager Terminal Services RemoteApp Deployment Terminal Services Web Access Sharepoint 3.0 SP1 Integration

36. Allows secure seamless connection without VPN Tunnels RDP over HTTPS - same as Outlook Place TS behind multiple firewalls without opening multiple firewall ports other than 443 Provides Policy Control over: – Who can access what & optionally enforce smart card use and restrict device redirection Allows access to: Terminal Server Remote Desktops and Programs, Client and Server Remote Desktop When should TS Gateway be used in place of VPN? When no local copy of data is required & when bandwidth or application characteristics makes VPN experience poor Role: Terminal Services Gateway

37. Terminal Services Gateway internet perimeter internal TS Gateway TS Web Access Client XP/Vista Terminal Server Policies 1 1 Client tries to connect to Terminal Servers 1 1 2 2 External firewall strips HTTP & passes RDP to TS Gateway 2 2 3 3 TS Gateway authenticates user / checks health 3 3 4 4 Connection Complete – access to Machines/TS/Web Access 4 4

38. Terminal Services Easy Print 1 1 User opens Microsoft Word running via Terminal Services 2 2 User wants to print the document to the local printer 3 3 TS Easy Print utilizes the client side print drivers, and the full print UI appears 4 4 The document prints to the local printer 1 1 2 2 3 3 4 4

39. Terminal Services Easy Print NO PRINT DRIVER INSTALLATION ON TERMINAL SERVER REQUIRED FOR TS EASY PRINT Guaranteed printer installation in TS session TS Printer are scoped per session & all printer properties available in TS session TS Policy to redirect ONLY default client printer Works transparently between, say, X86 Client and X64 TS Client Requirements: – On Client - XP SP3 +.NET 3.0 SP1, Vista SP1 (Includes.NET 3.0 SP1), IHV Printer Driver – In Future: Native XPS Printers = No IHV Drivers

40. Provided by Microsoft ISV RDP TS Easy Print XPS Driver XPS Spool File XPS Spool File XPS WPF App Win32 App GDI to XPS Conversion Module GDI to XPS Conversion Module TS Easy Print - Server Side

41. .NET Framework 3.0 SP1 Print Processor GDI Printer Driver TS Client (MSTSC) TS Easy Print Plug-in TS Easy Print Plug-in EMF Spool File EMF Spool File XPS Spool File XPS Spool File XPS Printer Driver RDP Provided by Microsoft IHV TS Easy Print - Client Side XPS to GDI Conversion Module XPS to GDI Conversion Module

42. Resolution up to 4096x2048 & span multiple monitors PnP Device Redirection Framework Windows Presentation Foundation (WPF) 32-bit Color & new RDP compression Display Data Prioritization Experience NAP Integration Network Authentication Single Sign-on for domain joined Vista clients Ability to block pre RDP6 client Per session & direct attached device isolation Security Per User CAL Tracking, Per Device CAL revocation Spooler scalability improvements Debug Logging available in all builds New Session Broker capability (Farm Capability), Session Drain Single Unified Win32 & Active X Client – serviced via Windows Update Manageability Investments in Windows and TS to eliminate potential attack vectors Faster Login & Logoff Profile corruption scenarios addressed Leverage UAC for improved application compatibility Platform

43. and to finish... Microsoft delivers end- to-end Virtualization solutions… …System Center provides the tools for integrated Infrastructure Management "Virtualization without good management is more dangerous than not using virtualization in the first place" Thomas Bittman, Gartner

44. Resources Matt’s blog – http://www.mattmcspirit.co.uk Steve’s blog - http://blogs.technet.com/steve_lamb MS Virtualisation – http://microsoft.com/virtualisation System Center - http://www.microsoft.com/systemcenter VECD - http://www.microsoft.com/virtualization/solution- product-vecd.mspx

45. More Resources... MDOP - http://www.microsoft.com/windows/products/wind owsvista/enterprise/benefits/tools.mspx Terminal Services - http://www.microsoft.com/windowsserver2008/en/ us/presentation-terminal.aspx Evaluate WS2008 - http://www.microsoft.com/windowsserver2008/en/ us/try-it.aspx VDI Demo - http://www.microsoft.com/windows/products/wind owsvista/enterprise/vecddemo/default.html

46. Even More Resources... Virtualisation Blog - http://blogs.technet.com/virtualization/ Windows Server Blog - http://blogs.technet.com/windowsserver/ TS Blog - http://blogs.msdn.com/ts/ Perf Tuning for WS2008 - http://www.microsoft.com/whdc/system/sysperf/Pe rf_tun_srv.mspx System Center Blog - http://blogs.technet.com/systemcenter/

47. Ask the Experts...? ?

48. © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Server and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.