1. TechEd 2013
12/8/2018 7:24 PM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Windows Server Work Folders – Overview
12/8/2018 7:24 PM
WCA-B214
Windows Server Work Folders – Overview
Nir Ben Zvi
Fabian Uhse
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Agenda Background and problem space Introduction to Work Folders
Deploying and configuring Work Folders

4. People-centric IT and Corporate data
Information worker: “I need to work from anywhere on my different devices”
IT manager: “I’d like to empower my Information Workers while keeping control of the corporate information”
Today:
Many corporate documents can be found on consumer storage services
IT has no control leading to compliance and leakage issues

5. I Windows File Servers The original Windows Server workload
Exabytes of new storage deployed annually
Rich data security and management ecosystem
Offline Files and Folder Redirection
Windows Server 2012 innovation leaps I

6. Introducing Work Folders on File Servers
Allow information workers to sync their individual user data to all of their devices wherever they are, while remaining in compliance with their organization’s policies
Highlights
Extension of file server functionality
Centralize, protect and manage data
Encryption of data in transit and at rest
Easily separate work and personal data
Simple, intuitive user experience
Not part of Work Folders
Consumer service
Public cloud service
Structured collaboration
Sync arbitrary file shares

7. File Sync Solutions  Team / group work data Consumer / personal data
Individual work data
Team / group work data
Personal devices
Data location
SkyDrive 
Public cloud
SkyDrive Pro
SharePoint / Office 365
Work Folders
File server
Folder Redirection / Client-Side Caching

8. Demo Client Setup And Sync
12/8/2018 7:24 PM
Demo Client Setup And Sync
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Logical component overview
Work Folders Server
File and Storage Services sub-role
An additional access protocol
Consolidated view of sync activity across your server
Multiple Sync Shares per server
Each share maps to a file system location
Users/groups associated with a single share
Policy defined per share
Sync Share
Files stay in sync across all devices
Local changes sync back to server and then to other devices
SMB clients can continue to work directly with server files
User devices

10. Corporate Environment
Server Deployment
Authentication
Kerberos (Windows Auth)
Digest (Windows Auth)
ADFS (OAuth)
Device management policy
File encryption / selective wipe
Require password / device lock
Limit access to registered devices )ADFS(
Active Directory
Contoso.com
File Server
Reverse Proxy
User Devices
Data management
Quotas
File screens
Reporting
Classification
RMS protection
User Devices
Corporate Environment

11. Demo Server Configuration

12. You are ready to use Work Folders
Sync Information Worker corporate data across their devices using an IT controlled File Server as the back-end repository
Already have a solution deployed for domain joined devices using central shares for user data (e.g.: Home folders)  enable sync on non-domain joined user devices to the same user share using non domain joined devices

13. Device deployment options
Opt-in
Settings delivered via Group Policy, SCCM or Intune
User decides if they want to use Work Folders on that device
Mandatory
No user action required
Auto discovery
Auto discovery based on user address
URL based
User provided URL
Triggered by
Group policy / System Center
Initiated by user

14. Corporate Environment
End to end security
Authentication
Kerberos (Windows Auth)
Digest (Windows Auth)
ADFS (OAuth)
Require password
Device lock
File encryption
Selective wipe
Active Directory
Contoso.com
Limit access to registered devices (ADFS seamless two factor auth(
Reverse Proxy
File Server
Secure transport (HTTPS)
User exclusive access
Automated classification
RMS protection
Reporting on sensitive information
Anti Virus protection
User Devices
Corporate Environment

15. Demo Protecting Data

16. Multi-server deployments
Why multiple servers?
Scale-out for capacity
Branch / regional offices
Departmental server management
Separate data stores for compliance
Challenges we need to solve
Finding the right server
Keeping configuration simple for the end user
Make it easy to migrate users between servers

17. Multi-server deployments: Using URLs
How does Joe connect to the right Work Folders server?
Some simple options:
him a URL
Configuration management tools
When we migrate Joe to a different server he needs a new URL…
Active Directory
Contoso.com
Sync1
Reverse Proxy
Sync2
Sync3
Main Office
Branch Office

18. Multi-server deployments: Auto Discovery
Joe enters:
Auto discovery uses: htps://workfolders.contoso.com
Request gets to Sync1.contoso.com which looks up Joe’s sync server in AD
Redirect Joe’s device to Sync3.contoso.com
Sync commences between Joe’s device and Sync3.contoso.com 1
Active Directory
Contoso.com 4 2
Sync1 3 5
Reverse Proxy
Sync2
Sync3
Main Office
Branch Office

19. Key Takeaways Simple to deploy, use and manage
Fully leverage your existing file server investment
Empower employees to be productive
Maintain control of your organization’s data
Get insight into data currently on user devices

20. Related content Breakout Sessions and Hands on labs
12/8/2018 7:24 PM
Related content
Breakout Sessions and Hands on labs
WCA-B204
Active Directory Enables User Productivity and IT Risk Management Strategies Across a Variety of Devices
WCA-B214
Windows Server Work Folders overview – my corporate data on all my devices
WCA-B332
Windows Server Work Folders – a deep dive into the new Windows Server data sync solution
WCA-B333
Enable work from anywhere without losing sleep: remote access with the Web Application Proxy and VPN solutions
WCA-B334
Secure anywhere access to corporate resources such as Windows Server Work Folders using ADFS
Hands on lab
Active Directory Deployment and Management Enhancements
Using Dynamic Access Control to Automatically and Centrally Secure Data
Introduction to DirectAccess in Windows Server 2012
Windows Server 2012 R2 Work Folders
Access & Information Protection Booth
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Resources Learning TechNet msdn http://channel9.msdn.com/Events/TechEd
12/8/2018 7:24 PM
Resources
Learning
Sessions on Demand
Microsoft Certification & Training Resources
TechNet
msdn
Resources for IT Professionals
Resources for Developers
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Evaluate this session Scan this QR code to evaluate this session.
12/8/2018 7:24 PM
Required Slide
*delete this box when your slide is finalized
Your MS Tag will be inserted here during the final scrub.
Evaluate this session
Scan this QR code to
evaluate this session.
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. 12/8/2018 7:24 PM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.