Martin Vittrup Senior Technology Specialist Microsoft Danmark

Microsoft Desktop Optimization Pack for Software Assurance Accelerate the different stages of OS and application deployment and management using application virtualization and streaming Translating software inventory into business intelligence Powerful tools to accelerate desktop repair Enhancing group policy through change management Transform applications into centrally managed services available when and where needed and easily updated with software streaming Windows Vista Enterprise Data Protection with Windows ® BitLocker ™ Drive Encryption Application Compatibility Licensing rights to 4 Virtual OS’es Subsystem for Unix-Based Applications (SUA) Worldwide deployment with Multi-lingual User Interface Packs (MUI) Windows Vista Business Keep business PCs running smoothly Powerful, more effective productivity Connected with customers & partners, efficient for your business Includes all features of Windows Vista Business plus: Four Virtual Operating Systems Windows BitLocker Drive Encryption Multi-lingual User Interface (MUI) Subsystem for Unix-Based Apps (SUA) SoftGrid Application Virtualization Asset Inventory Services Diagnostic & Recovery Toolset Advanced Group Policy Management

The application is not installed on the local OS or file system. The application does execute locally using local resources just like a locally installed application. A virtual environment is loaded for each application. The virtual environment isolates the application from the operating system, protecting the OS from application changes and other applications. Even though the application is not installed, it can interact with the local OS the same way that a locally application does, making direct use of all the system’s peripherals (e.g., local disks, USB devices, network printers, etc.). Only the required pieces of code go onto the client computer (unless a decision is made to pre-cache applications).

Virtual COM Virtual registry Virtual file system Virtual services Virtual.ini Virtual environment variables Virtual fonts

Traditional Install Model Isolated Virtual Application Model

Reduce the size and complexity of images Move closer to the goal of a “single image” for the entire enterprise Repurpose systems without constant re-imaging Before Softricity With Softricity

.VHD.VMC Operating System Virtualization Application Virtualization.SFT.ICO.OSD.SPRJ

On Build Machine:  Start Sequencer  Install Application  Start Application  Restart Application  Stop Sequencer  Clean-up Package  Place Package on Server

When PRE STREAM – before the application is streamed to the client POST STREAM – before the SystemGuard is initialized PRE LAUNCH – before application execution inside the SystemGuard POST LAUNCH – after application execution POST SHUTDOWN – clean-up activity Where How

SoftGrid for Desktops supports Windows 2000, Windows XP and Windows Vista (as of 4.2) SoftGrid for Terminal Services supports Terminal Services Windows 2000 and Windows 2003 The same application can be used directly on the desktop or within a Terminal Services session or both. The “SoftGrid” – A generic grid of computing execution points where any user may access their applications, on-demand, without application pre- population or conflict. Streaming RDP

SoftGrid Extensions for SMS Manage Virtual Apps via SMS The SoftGrid ® Platform The Engine Microsoft SoftGrid Microsoft SoftGrid Dynamically Delivering The Virtual Application Solution Application virtualization On-demand delivery Centralized, policy- based application management

Flexible application deployment: Pre-cached to clients with traditional updates Pre-cached with dynamic updates Pure dynamic delivery Integrated reports and metering Enterprise scale Microsoft SoftGrid Microsoft SoftGrid Integration with Systems Management Server 2003

MMC extensions to GPMC Full change management for Group Policy Infrastructure Offline editing Role based delegation Check-out/Check-in Deployment process Historical track of changes – Date stamp – GPO state – Owner – Settings and Difference reporting Roll-back and Roll-forward

Install server component using gpovents.msi Should be installed on domain server Installation specifics Establish a service account to control the vault License file Establish an administrator for the vault Install using gpoventc.msi Must be installed on computer with GPMC Windows XP SP1 Windows Server 2003

Forest Level Delegation Domain Level Delegation GPO Level Delegation Roles Full Control Approver Editor Reviewer

Must “check-out” GPO to make edits Controlled GPOs use GPOE for editing When GPO is updated, it is “checked-in” Does not put GPO into production Editor can select “Deploy” Does not deploy GPO Sends to Vault Admin Places GPO into “Pending” mode Select “Deploy” for “Pending” GPO Full Control “Approver”

Boots unstable or unbootable systems so you can: Use Wizards to diagnose and repair issues Reset lost Administrator passwords Safely recover deleted files Edit the Windows registry, manage drivers/services Access unbootable machines via the network

Repair Systems, Recover Data, and Diagnose Issues Service and Driver Manager Enable or disable services and drivers Event Log Review System, Security, Application Logs Regedit Edit a dead system’s registry, reset permissions, import and export.REG files System Info See info on OS, service packs, hardware description, etc. Locksmith Change lost and locked-out system passwords Disk Management View logical and physical drive information; partition and format disks on unbootable machines FileRestore Recover lost files in a safer, CD-booted environment Search Locate files and folders by name, extension, size, or date Command Prompt Run batch files or CHKDSK System Compare Compare an unbootable machine’s files, services, and drivers to those of a working machine or image XP System Restore Roll unbootable Windows XP machines back to an existing Restore Point Crash Analyzer Wizard Analyze the cause of a Windows crash dump. File Sharing Copy files to and from unbootable machines via the network Online Help Access full product Help from the desktop of an unbootable machine

Insight for Active Directory Monitor Active Directory LDAP activity in real-time Identify LDAP communication and AD configuration problems Jump to an object for editing or viewing using AD Explorer

Active Directory Explorer Explore Active Directory quickly and easily Create a custom Favorites list for fast navigation Browse, view, add edit or delete any Active Directory Object Just double-click any object to make modifications

Translates inventory data into useful information Efficiently scan systems for software without impacting how machines are running today Check against 430K software titles - dynamically growing knowledge base Understand license types for inventoried applications (ie, fully licensed Adobe Reader vs. Free Adobe Reader) Simplify compliance and disaster recovery Simplify machine restoration by understanding software on each machine Import & compare license entitlement information with deployed/installed software Enable compliance against key industry standards (SOX, HIPAA) Easily administered service Inventory data is securely hosted by Microsoft Secure, browser based reports are easily accessible over the internet (no client or server installation)

Comprehensive Asset Management Installation-less client Intelligent and comprehensive scanning of machine including: Program Files scanning MSI History PIDs Add/Remove Programs Link scanning Referral chasing Data is stored in the cloud as a hosted service. Web reports available online to reconcile Microsoft and third party application license compliance.

SoftGrid Application Virtualization Application virtualization and streaming  Minimize application compatibility issues  Transform applications into centrally managed services available when and where needed  Impact: 80% reduction in app management costs, 30% reduction in help desk costs, 4x increase in user up-time Advanced Group Policy Management Group Policy search, change management, and delegation  Search for conflicting policies or specific objects  Easily roll back group policy changes  Supports delegation, workflow process for changes Asset Inventory Services Advanced inventory scanning and tracking  Efficient scanning of system for MS and 3rd-party software  Matches app headers against 430K software titles  Reports include details on license types Diagnostic & Recovery Toolset Efficient desktop diagnosis and recovery  Recovery instead of reinstallation  Flexible recovery options with less downtime

© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.