Devices and Deployment Management & Security Identity Cloud

My Personal Applications My Personal Settings My Personal Data My Personal Identity My Corporate Identity

80% FTE 1 Year95% FTE 8 Months95% FTE 3 Months 95% FTE 5 Weeks

In-Place Upgrade Apps Operating System Device

Operating System DeviceApps  BIOS  UEFI  Disk layout  Custom WinPE  New device  Architecture  Base language  Domain Change  Local Admins  Configuration drift  <Windows 7 RTM  Custom image  Bulk app change Refresh

Take off-the-shelf hardware Apply a provisioning package Device is ready for productive use

My Personal Applications My Personal Settings My Personal Data My Personal Identity

Cloud Services  Azure Active Directory  Azure RMS  Microsoft Intune  Windows Store Server Software  System Center Configuration Manager  Microsoft Desktop Optimization Pack (MDOP) Windows Server  Active Directory  Group Policy  Windows Server Update Services (WSUS) Windows Client  Windows Management Instrumentation (WMI)  Windows Remote Management (WinRM)  Windows Update  Group Policy Client  Mobile Device Management (MDM) Agent  PowerShell  AppLocker

MDM Client Common Device Configurator WMI providers Provisioning Engine MDM Configuration Service Providers (CSP’s) EAS ClientWMI Bridge DEVICE/OS SERVICE/SERVER EAS Provisioning MDM (Intune) ConfigMgr Common componentPC component

ProductSupports Windows 10 Management? Supports Windows 10 Deployment? System Center Configuration Manager 2007 System Center 2012 Configuration Manager System Center 2012 R2 Configuration Manager System Center Configuration Manager v.Next Support for the new ADK for Windows 10 (2012 and above) Upgrade task sequence (v.Next)

 In-Place Upgrade  vNext Technical Preview  All current System Center 2012 Configuration Manager R2 functionality for Windows 10  vNext  System Center Configuration Manager 2007 compatibility pack (no OSD or client deployment)

Cloud Identity Independent cloud identity Synchronized Identity Single identity, enabling a same sign-on experience with password hash sync Federated Identity Single federated identity, enabling single sign-on in some scenarios and additional flexibility

Configuration Service Provider A CSP is an interface to read, set, modify, or delete configuration settings on the device SyncML File with all information to configure CSP

OMA-URI Open Mobile Alliance Uniform Resource Uniform Resource Identifier SyncML SyncHeader SyncBody Value Device

Server Software  Microsoft Desktop Optimization Pack  DaRT  System Center 2012 R2 Configuration Manager *  Upgrade possible  Update to support upgrade, deploy, manage Windows Server  Active Directory 2008 or later  Group Policy  ADMX Update  Windows Server Update Services  Windows Update  Activation  Windows Update Windows Image  In-Place Upgrade *  Windows 10 Image  MDT Update  Architecture  Configuration Device  Firmware  Disk Layout

Deployment  Provisioning  New Windows ADK  WICD  MDM service Management  CM vNext  MDM  New feature management and configuration Identity  Microsoft Passport  Windows Hello  Azure AD  Azure AD Connect  PKI  Schema/DCs Security  Virtualization-based security  Device Guard  Enterprise Data Protection  Secure Boot  Trusted Boot Device  UEFI or later  TPM 1.2 or later  Virtualization Extensions  Biometric Reader

Enterprise-ready Current Branch for Business Long Term Servicing Branch Current Branch Hundreds of millions Broad External Flights Several million Limited External Flights 100’s of thousands Broad Internal Validation 10’s of thousands Engineering Builds # Users Time