What's up with all these Windows 10 options? Presented by: Sulabh Upadhyaya, PMP, MCITP Practice Architect – Desktop Operations @kraftkennedy www.kraftkennedy.com/blog www.linkedin.com/company/kraft-kennedy New York | Washington DC | Texas | California | Chicago

Premier Technology Partner 28+ Years of Experience ILTA Platinum Sponsor/ALA Sponsor Experienced, Highly Trained & Certified Consultants 100+ Windows 7/8/10 & Office 2010/13/16 Projects, 90,000+ Seats 70+ SCCM 2012 Projects 100+ Exchange 2010/2013/2016 Projects, 100,000+ Seats Technology Assessments Project Management and Legal Process Management Security Assessments, Digital Forensics and eDiscovery Security Projects for 10,000+ users Premier Technology Partner

Areas of Practice Information Security & Governance Enterprise Client Systems Support Practice Group Legal Process Management Areas of Practice Infrastructure Enterprise Systems Project Management Management Consulting

Complete Deployment Automation: Manage Outsourced Monitoring, Patching Asset Management Application Lifecycle Management Light-touch Management (Intune) SCCM | Citrix | VMware Build Complete Deployment Automation: HW-independent OS installation BitLocker activation Application Packages Task Sequence Development User Setup w/ Group Policy User-state Portability (UE-V) User Data Migration (USMT) QA Testing | User Acceptance Testing Presentation by VDI or Server-based Assess Best Practices | Issue Resolution | Use Case Definition Mobility Strategy | Application Portfolio Rationalization Organizational Readiness Design and Plan 1 to 3 day Workshops: Business Strategy & IT Project Alignment Pain Points & Goals Current Practices | Tools & Team Skills Features of Latest Technology Consensus on Direction agenda available on request Secure Patching (SCCM/WSUS, 3rd Party Tools) Compliance (SCCM w/ reporting) Encryption (BitLocker/MBAM) User Privilege Control ( UAC) Windows Firewall | Endpoint Protection Advanced Threat Protection Law Firm Managed Desktop Life Cycle Deploy Management | Staging (PC Vendor) Pre-delivery Imaging (PC Vendor) “white-glove” deployments Classroom, Web and 1-on-1 Training

Better, Stronger and Leaner ! What's up with all these Windows 10 options? Better, Stronger and Leaner !

Things to Think On Lessons Learned from early Kraft Kennedy Windows 10 Deployments Selecting the right OS Branch for your enterprise Review where Kraft Kennedy has found efficiencies

Disk imaging got us this far, why stop now? YOU Have to Look Back to Go Forward Disk imaging got us this far, why stop now?

The OlD Option Monolithic Image Core App Core App Core App Core App Role App Core App Device App Device Driver Package Microsoft Patching Device Driver Package Domain Join Device Driver Package Device Driver Package Disk Encryption Operating System

YOU Have to Look Back to Go Forward Disk imaging got us this far, why stop now? Now there are Microsoft tools, but not sure what more we can do.

The Next New Old option Maybe I am just using this as my imaging tool Maybe I am missing features to add to the task sequence My deployment was fast before, now it is slow Maybe I have a lot of "post-deployment" steps

Deployment Automation is Alive  MANTRA @ KRAFT KENNEDY Imaging is dead  Deployment Automation is Alive 

YOU Have to Look Back to Go Forward Disk imaging got us this far, why stop now? Now there are Microsoft tools, but not sure what more we can do. Automation is already our trusted friend.

User Experience Virtualization (UE-V) OPTIOns To Consider for youR Next Deployment Task Sequence Group Policy Microsoft Patching User Settings Role App Computer Settings Role App User Preferences Core App Profile Management Core App Core App User Experience Virtualization (UE-V) Device App Device App Folder Redirection Domain Join Device Affinity Home Directory Driver Injection Desktop Disk Encryption Favorites Operating System

Current Branch for Business Windows as Service, Ready? Engineering Builds Broad Microsoft Internal Validation Windows Insider Preview Branch Current Branch Current Branch for Business Contoso Internal Ring 4 Hundreds of millions Contoso Internal Ring 3 Several Million Contoso Internal Ring 2 10’s of thousands Contoso Internal Ring1 Time

Windows 10 – future Proof Windows 10 Upgrade via Software Update Group Policy Microsoft Patching / Servicing Microsoft Patching User Settings Role App Computer Settings Role App User Preferences OR Core App Profile Management Core App Core App User Experience Virtualization (UE-V) Upgrade via Task Sequence Device App Apply Upgrade Device App *BIOS to UEFI Conversion Folder Redirection Domain Join Device Affinity Driver Injection Home Directory Driver Injection Download Windows WIM Desktop Disk Encryption Microsoft Readiness Check Favorites Operating System

Feel Secure?

Now I know what I can Do, how get it done? Configure Hardware Leverage vendor tools – Lenovo, Dell, Microsoft Activate Secure Boot, TPM security chip Install Windows Reconcile drivers - one task sequence for all hardware, injecting only needed drivers Pre-provision BitLocker encryption, manage with GPO, monitor with MBAM Install Applications Determine Core and Secondary Applications. Develop Task Sequence – automate Windows 10, Server 2012/2016, Citrix XenApp / XenDesktop Automation + Standardization = Reliability Configure Users Configure Windows 10 Tiles, Metro applications, file associations with scripts Automate 90+% of User Setup with Group Policy Roam User Settings Capture user experience at application close, load at application launch (U-EV) Use XML templates to track common user customizations Test Test with QA scripts for all packaged applications Manage structured user acceptance testing, pilot testing, issue tracking, remediation Deploy Provide hands-on deployment Provide classroom, 1-on-1 and web training In Place Upgrade Provide in place upgrades of Windows 10 Testing applications with latest versions and leveraging newer features as they become available Manage Exploit SCCM - software distribution, patching (MS and 3rd party apps), reporting Enable compliance reporting with SCCM and MBAM (BitLocker Administration)

Sulabh Upadhyaya, PMP, MCITP Thank you Sulabh Upadhyaya, PMP, MCITP Practice Architect – Desktop Operations upadhyaya@kraftkennedy.com info@kraftkennedy.com