Asif Jinnah Field Desktop Services Enabling a Flexible Workforce, an insider’s view

Microsoft Confidential The Microsoft Environment Over 150,000 Windows 7 Clients 90,000 Office 2007 & 80,000 Office 2010 clients 350,000+ SharePoint Sites First and Best Customer 6 data centers 8,819 production servers 106 countries 648 buildings 272,000+ SMS managed computers 741,000+ devices 196,988 end users Enterprise Infrastructure 73,000,000+ internal IMs per month 111,000+ user mailboxes 1,200,000+ remote connections per month High Scale Processes

Microsoft Confidential Innovative IT as an Enabler..

Microsoft Confidential Why Go into the Office?

Microsoft Confidential Flexible Working – Anywhere - Anytime Reduce Business Travel Reduce travel time & lost productivity Reduce Commuting with Unified Communications & Teleworking Improve employee satisfaction & retention Reduce Office Buildings and Space Innovation & productivity More flexible work space Increase Flexibility & Security

Microsoft Confidential Preparing the Workforce - Readiness Windows Online Training, Help and Support Work Smart Productivity Training Proactive Role for IT 33,685 Employees Attended 627,000 hours in productivity $40 Mil return (Soft ROI)

Microsoft Confidential Microsoft UK Cost Savings 50% £3.6m ($5.7m) In Microsoft UK, the Sales & Marketing and Support Group has seen average cost reductions of over 50% in both T&E and Telecoms, generating savings of £3.6m ($5.7m) saving year on year (over the period from November 2008 to Oct 2009 compared to the previous 12 months) (£3.3m or $5.2m) T&E costs savings are 51% T&E (£3.3m or $5.2m) (£320k or $505k) Telecom costs savings are 54% Telecoms (£320k or $505k) The cost savings are due to the adoption of Unified Communication and Live Meeting and changes in the travel policy. The travel policy changes resulted in many business meetings being hosted online and therefore business continued as before.

Microsoft Confidential Securing a Flexible Workforce ApplicationsandData X X X Trusted, compliant machine; with malware Trusted, compliant, healthy machine Untrusted machine Trusted, non-compliant machine Compliant but Untrusted machine SSL VPN – Granular Access Access to data and applications is restored once NAP remediates the client

Microsoft Confidential Secure Web and Remote Access Architecture Benefits Secure access to external facing applications Secure remote access to corporate applications externally Secure corporate and branch connectivity Offering Components Secure Web Access Services – ISA Server 2006 Secure VPN Services and Branch – ISA Server 2006 Secure Remote Application Publishing Services – IAG 2007 Active Directory ISA Cluster Active Directory Application Server ISA Cluster IAG Secure Web and Remote Access Enablement Secure Remote Application Publishing Services Secure Web Access Services Secure VPN Services (Client) Secure VPN Services (Branch) External Corporate Users www Servers

Microsoft Confidential Enterprise Network Protection Architecture NAP Server Certificate Authority Remediation Server Critical Server SQL Cluster Unhealthy Client Critical Server Healthy Client Active Directory Enterprise Network Protection Offering Components Policy-Based Network Access Services Network Access protection (NAP) IPSec enforcement x enforcement Wireless integrated Network Isolation Services – IPSec + Group Policy Benefits Protection of wired and wireless network traffic Managed isolation of critical server infrastructure Reduction of unmanaged devices connecting to corporate resources Enforcement of health polices Critical Server Healthy Client Network Policy Server Group Policy Network Isolation Services Policy based Network Access Services Secure Wireless Services

Microsoft Confidential Direct Access – Windows 7 & Server 2008 R2 Best Practices and Benefits Require two-factor authentication with smart cards when using DirectAccess Use encryption on all communication to and from DirectAccess clients IC0-1 - $250k Saving/Office Use NAP to enforce client health and compliance

Microsoft Confidential Update Management Best Practices Assess environment to be patched 1. Assess 2. Identify 4. Deploy 3. Evaluate and Plan Identify new updates Deploy the update Evaluate and plan update deployment Microsoft Operations Framework

Microsoft Confidential Maintaining a Flexible Workforce IPsec boundary Creates Secure Net environment Remote access clients/dial-up Workgroups Labs All Devices ~330,000 Unique management challenges Secure Net Devices ~270,000 Devices managed through SMS/SCCM ~265,000 ~16,000 servers IPsec 13

Microsoft Confidential © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.