Microsoft TechNet Seminar 2006 Windows® 7 Deployment & Management Andrew Driver Title: Script: Seminar Name

Make Users Productive Anywhere Enhance Security and Control Agenda Make Users Productive Anywhere Enhance Security and Control Streamline PC Management Microsoft® Desktop Optimization Pack Title: Script:

Streamline PC Management Windows PowerShell 2.0 Application Compatibility Windows Troubleshooting Platform Problem Steps Recorder technet.com/windows Title: Key Message: Script Additional Information Links:

Windows PowerShell 2.0 Graphical User Interface over Windows PowerShell Command Line and Graphical User Interface (GUI) GUI teaches command line Standardizes access to managed elements Production Scripting Easy to use Safe to operate Easy to share and support Universal Code Execution Model In the foreground or background on one or more machines In restricted or unrestricted environments Initiated by user input or by events Community Feedback Enhance the language Tweak the engine Add and enhance cmdlets

Application Compatibility Application Compatibility Toolkit (ACT) 5.5 Shims

Windows Troubleshooting Platform Windows Vista® Introduced Troubleshooting To Address Common Issues In-box diagnostics based on Windows PowerShell scripts for low-overhead, flexible development Authoring tools to create and package troubleshooting packages Additional troubleshooting packages available on-demand from Microsoft for users to browse and search, managed by Group Policy, delivered via Web services Run troubleshooting remotely Windows 7 Delivers a Comprehensive and Extensible Troubleshooting Platform Automatically run maintenance tasks Enable end-user to execute common troubleshooting tasks before calling Help Desk Provide Help Desk with tools to quickly resolve issues Diagnostics can grow in complexity as IT requires Customer Value Network Connectivity Proactive Disk Protection Memory Analysis

Enhanced Security and Control BitLocker ToGo User Account Control (UAC) Refinements Windows Internet Explorer® 8 Title: Key Message: Script Additional Information Links:

BitLocker ToGo Drive Type Unlock Methods Recovery Methods Management Other requirements Removable data drives For example: USB flash drives External hard drives Passphrase Smart card Automatic unlocking Recovery password Recovery key Active Directory backup of recovery password Data Recovery Agent Robust and consistent group policy controls Ability to mandate encryption before granting write access File systems: NTFS FAT FAT32 ExFAT

Microsoft TechNet Seminar 2006 Protecting a USB Drive with BitLocker ToGo Title: Key Message: Script Additional Information Links: Seminar Name

Microsoft Confidential: Preliminary Information: NDA Only User Account Control Windows Vista Windows 7 Streamlined UAC System works for standard user All users, including administrators, run as standard user by default Administrators use full privilege only for administrative tasks or applications Reduce the number of operating system applications and tasks that require elevation Refactor applications into elevated/non-elevated pieces Flexible prompt behavior for administrators User provides explicit consent before using elevated privilege Disabling UAC removes protections, not just consent prompt Challenges Users can do even more as a standard user Administrators will see fewer UAC elevation prompts Customer Value

Microsoft TechNet Seminar 2006 Managing UAC Title: Key Message: Script Additional Information Links: Seminar Name

In-Private Browsing Phishing Filter Smart-Screen Filter Internet Explorer 8 In-Private Browsing Phishing Filter Smart-Screen Filter Compatibility View

Microsoft TechNet Seminar 2006 Internet Explorer 8 – Compatibility View Title: Key Message: Script Additional Information Links: Seminar Name

Making Users Productive Anywhere UI enhancements Libraries Search Federation BranchCacheTM Direct Access Title: Key Message: Script Additional Information Links:

UI Enhancements Jump Lists Aero Shortcut Management

Microsoft TechNet Seminar 2006 Windows 7 UI Enhancements and Search Federation Title: Key Message: Script Additional Information Links: Seminar Name

BranchCacheTM Situation Today Windows 7 Solution BranchCache not in TM list yet—can’t check BranchCache™ Application and data access over WAN is slow in branch offices Slow connections hurt user productivity Improving network performance is expensive and difficult to implement Caches content downloaded from file and Web servers Users in the branch can quickly open files stored in the cache Frees up network bandwidth for other uses

BranchCache Benefits End User Benefits Improve application responsiveness and reduce file transfer wait time Combined with other SMB offerings enhance the user experience on remote shares Optimize network utilization: Recommended for HTTP and HTTPS-based intranet traffic Performs well for SMB (and signed SMB) shares on the read path Support network security protocols (SSL, Ipsec) Reduce the cost of managing WAN IT Pro Benefits

DirectAccess – Supporting Mobile Workers Microsoft Confiential: Preliminary Information: NDA Only DirectAccess – Supporting Mobile Workers Situation Today Same experience accessing corporate resources inside and outside the office Seamless connection increases productivity of mobile users Easy to service mobile PCs and distribute updates and polices DirectAccessTM Difficult for users to access corporate resources from outside the office Challenging for IT to manage, update, patch mobile PCs while disconnected from company network Windows 7 Solution DirectAccess isn’t yet in the TM list, so I couldn’t check accuracy of this mark. One of the goals of Windows 7 is to enable users to access the information that they need whether they are in or out of the office. In the past few years, Microsoft has made getting to email from outside the office easier.  First we had Outlook Web Access, so we could access email through the web. Then we introduced RPC over HTTP, which just requires and internet connection to connect to the Exchange server. But users still have a challenge when accessing resources that are inside the corporate network. For example users cannot open the links to an internal Web site or share included in an email. The most common method to access these resources is VPN. VPN can be hard to use for users because it takes time and multiple steps to initiate the VPN connection and wait for the PC to be authenticated from the network. Hence, most remote users try to avoid VPN’ing as much as possible and stay disconnected from corporate network as much as they can. At this point we run into a chicken-egg problem: Since remote users are disconnected IT cannot service them while away from work – remote users stay more out of date and it gets harder and harder to access corporate resources… With the capabilities Windows 7 enables, users who have internet access will be automatically connected to their corporate network. A user who is sitting on a coffee shop can open his laptop, connect to the internet using the wireless access of the coffee shop and start working as if he is in the office. The user in this case will be able to not only use outlook, but also work with intranet sites, open corporate shares, use LOB applications, and basically have full access to corporate resources. Direct Access solution is also very appealing to IT Professionals: Servicing mobile users have been an issue since they could be disconnected from the corporate network for a long time. With Direct Access, as long as they have internet connectivity, users will be on corporate network. Servicing mobile users becomes (such as distributing updates and policies) is easier since they can be accessed more frequently. Deploying Windows 7 will not automatically enable this type of Work access connection. You will have the choice to enable it or not and it will require changes to your backend network infrastructure, including having some servers running Windows Server 2008 R2. But after it is implemented the solution will have a major impact on the way your mobile employees work.

Microsoft Application Virtualization for Desktops (App-V) MDOP Microsoft Application Virtualization for Desktops (App-V) Microsoft Enterprise Desktop Virtualization (Med-V) Title: Key Message: Script Additional Information Links:

App-V Applications to users at log on Centralized permissions Same slide as in Jamies deck Microsoft Application Virtualization for Desktops Runs on local desktop Consolidate & standardize images Build business continuity for applications Applications can be taken offline Applications can be accessed via the Internet Applications can interact as defined by the administrator Applications to users at log on Centralized permissions Sandboxed applications Microsoft Application Virtualization for Desktops Runs on Terminal Server Enable Server Consolidation Mitigate Roaming Profile Issues Transform Terminal Server into a dynamic system Designed for low bandwidth Microsoft Application Virtualization for Terminal Services *Application Virtualization CAL for Terminal Services is available and sold separately from MDOP

Med-V OK to abbreviate? These kinds of names are often not abbreviated. Enhances deployment, management and user experience for Virtual PC images in an enterprise environment Minimize application-to-operating system compatibility conflicts Enable legacy applications run in a virtual Windows XP environment Simplify virtual images life-cycle - versioning, testing, delivery and update Provision images, usage policies and data transfer permissions based on user affiliation Provide a seamless end-user experience Publish applications from the virtual machine through the Start menu Define Web sites that are automatically redirected to the virtual machine browser Centrally manage and monitor active users Applications Operating System Virtual PC OS

Technet.com/windows Resources for Windows 7 Access the latest news and resources on Windows 7 Windows Vista and Windows XP Technet.com/windows

Everyday Tasks Are Faster and Easier Session Summary Everyday Tasks Are Faster and Easier Built on Windows Vista Security Foundation Designed to Protect Users and Infrastructure Easier to Deploy and Manage Title: Key Message: Script Additional Information Links: