Introducing Windows Server 2012 R2 Work Folders:

Introducing Windows Server 2012 R2 Work Folders:
4/15/2017 9:26 PM WCL326B Introducing Windows Server 2012 R2 Work Folders: The New Data Sync Solution Pete Calvert © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Agenda Background & intro Client deployment
System architecture and server deployment Behind the scenes Data protection and security Multi-server deployments and migrations Part of your wider BYOD strategy

Trusted File Servers Original server workload Exabytes deployed
annually Rich ecosystem Simple and efficient

TechEd 2013 4/15/2017 9:26 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Introducing Work Folders
TechEd 2013 4/15/2017 9:26 PM Introducing Work Folders Allow information workers to access their individual data … that is centrally located on a traditional file server … from all of their devices … from wherever they are … while remaining in compliance with policies © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Consumer / personal data
TechEd 2013 4/15/2017 9:26 PM File Sync Solutions Consumer / personal data Individual work data Team / group work data Personal devices Data location SkyDrive  Public cloud SkyDrive Pro SharePoint / Office 365 Work Folders File server Folder Redirection / Client-Side Caching © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Consumer / personal data
File Sync Solutions Consumer / personal data Individual work data Team / group work data Personal devices Data location SkyDrive  Public cloud SkyDrive Pro SharePoint / Office 365 Work Folders File server Folder Redirection / Client-Side Caching

Client deployment Demo 4/15/2017 9:26 PM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Client Deployment Options
Manual Auto-discovery of server URL based on address Explicit entry of sync server URL Opt-in Settings delivered via Group Policy, SCCM or Intune User decides if they want to use Work Folders on that device Mandatory No user action required

Logical System Overview
TechEd 2013 4/15/2017 9:26 PM Logical System Overview File and Storage Services sub-role An additional access protocol Consolidated view of sync activity across your server Work Folders Server Multiple Sync Shares per server Each share maps to a file system location Users/groups associated with a single share Policy defined per share Sync Share User devices Files stay in sync across all devices Local changes sync back to server and then to other devices SMB clients can continue to work directly with server files © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Single Server Deployment
Authentication Kerberos (Windows Auth) Digest (Windows Auth) ADFS (OAuth) Device management policy Limit access to registered devices File encryption / selective wipe Require password / device lock Active Directory Contoso.com File Server Reverse Proxy User Devices Data management Quotas File screens Reporting Classification RMS protection User Devices Corporate Environment

Server deployment Demo 4/15/2017 9:26 PM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

How A File Stays In Sync Local change detected
TechEd 2013 4/15/2017 9:26 PM How A File Stays In Sync Local change detected Initiate sync session with server Upload file to server Server applies change to data dir Sync initiated by second client Download file from server Client applies change to data dir File Server Data directory Version tables Upload staging dir Client limited to 1 partnership per user per device Client always drives sync Change applier responsible for conflict resolution Data directory Version database Download staging dir © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Sync Communications Protocol
TechEd 2013 4/15/2017 9:26 PM Sync Communications Protocol Defaults Clients will only connect over port 443 Requires a signed SSL cert on server to establish trust and encrypt data Terminating SSL at the edge Proxy configured with the same signed SSL cert Internal clients routed through proxy or directly to sync server Allowing http connections Registry setting on client Useful for initial testing © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Backup And Recovery Selective file restore Client recovery
TechEd 2013 4/15/2017 9:26 PM Backup And Recovery Selective file restore Can be performed on client or server Restored file becomes latest version Sync to other devices Client recovery Exclude database from backups Work Folders reconstitutes database Content merged with server content Server recovery VSS writer supports full server restore Database repair is fully automated © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

End-To-End Security Sync Share permission + NTFS permissions
TechEd 2013 4/15/2017 9:26 PM End-To-End Security Sync Share permission + NTFS permissions Secure transport (SSL) File encryption + selective wipe Password + device lock policies Limit to registered devices (seamless MFA) Data leak prevention (FCI/RMS) Anti-malware on server © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Multi-Server Deployments
Why multiple servers? Scale-out for capacity Branch / regional offices Departmental server management Separate data stores for compliance Challenges we need to solve Finding the right server Keeping configuration simple for the end user Make it easy to move users between servers

Multi-Server Deployments
TechEd 2013 4/15/2017 9:26 PM Multi-Server Deployments How does Joe connect to the right Work Folders server? Some simple options: him a URL Configuration management tools When we migrate Joe to a different server he needs a new URL… Active Directory Contoso.com ? DNS Sync1 ? Reverse Proxy Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 4/15/2017 9:26 PM Auto Discovery Client resolves a standard URL: 1 Active Directory Contoso.com DNS Sync1 Reverse Proxy Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 4/15/2017 9:26 PM Auto Discovery Client resolves a standard URL: DNS returns a server address for discovery (Sync1) 1 workfolders.contoso.com A=Sync1 A=Sync2 Active Directory Contoso.com 2 DNS Sync1 Reverse Proxy Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 4/15/2017 9:26 PM Auto Discovery Client resolves a standard URL: DNS returns a server address for discovery (Sync1) Client sends discovery request to server 1 Active Directory Contoso.com 2 DNS 3 Sync1 Reverse Proxy Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 4/15/2017 9:26 PM Auto Discovery Client resolves a standard URL: DNS returns a server address for discovery (Sync1) Client sends discovery request to server Server retrieves user property: MSDS-SyncServerURL (Sync3) 1 Active Directory Contoso.com 2 DNS 4 3 Sync1 SyncServerURL Jill = Sync1 Bob = Sync1 Joe = Sync3 Jen = Sync2 Reverse Proxy Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 4/15/2017 9:26 PM Auto Discovery Client resolves a standard URL: DNS returns a server address for discovery (Sync1) Client sends discovery request to server Server retrieves user property: MSDS-SyncServerURL (Sync3) Client receives and stores its sync server URL for use in all future sync sessions 1 Active Directory Contoso.com 2 DNS 4 3 Sync1 Reverse Proxy 5 Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 4/15/2017 9:26 PM Auto Discovery Client resolves a standard URL: DNS returns a server address for discovery (Sync1) Client sends discovery request to server Server retrieves user property: MSDS-SyncServerURL (Sync3) Client receives and stores its sync server URL for use in all future sync sessions Client syncs with designated server 1 Active Directory Contoso.com 2 DNS 4 3 Sync1 6 Reverse Proxy 5 Sync2 Sync3 Main Office Branch Office © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Migrations Home Folders and Folder Redirection
TechEd 2013 4/15/2017 9:26 PM Migrations Home Folders and Folder Redirection Server-side full interoperability for legacy devices Not advised on same client as Work Folders Map to existing directory structure on server Migrating from another server Server-side data staging Client-side data cleanup and migration Moving users between Work Folders servers Update AD user attribute Move user to a different Sync Share group Auto-discovery kicks in © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Part of your wider BYOD strategy
AD Workplace Join Users join their device to their workplace (Lite domain join), making the device known to the company’s Active Directory for SSO, seamless MFA & authorization Single Sign On (SSO) Users sign-in once to their company from any application and are not be prompted for credentials by every company application when using registered devices. Work From Anywhere Businesses enable users to work from anywhere while adhering to their IT governance policies around risk management Multi-factor Authentication Businesses require additional factors of authentication when business critical resources are accessed or when there is perceived risk Multi-factor Access Control Businesses set conditional access control to resources based on four core pivots: the user, the device used, the user’s network location and use of additional auth factors AD Authentication Library ISVs build enterprise apps that delivery SSO and allow enterprises to set the access control policies based on user, device and network location, and MFA

Key Takeaways Simple to deploy, use and manage
Fully leverage your existing file server investment Empower employees to be productive Maintain control of your organization’s data Adopt as part of a wider BYOD strategy

Other stuff TechEd Australia TechEd North America TechNet Blogs
WCL321 – Windows 8.1 Folders Overview - My Corporate Data on all my Devices ATC334 – The Identity Jigsaw Puzzle HOL-WCL327 Windows Server 2012 R2: Enabling Windows Server Work Folders TechEd North America WCA-B214 – Windows Server Work Folders Overview WCA-B332 – Windows Server Work Folders – Deep Dive TechNet Work Folders Overview - Blogs Work Folders Test Lab Deployment -

Resources Learning TechNet Developer Network
4/15/2017 9:26 PM Resources Learning Sessions on Demand Virtual Academy TechNet Developer Network Resources for IT Professionals Resources for Developers © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/15/2017 9:26 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Introducing Windows Server 2012 R2 Work Folders:

Similar presentations

Presentation on theme: "Introducing Windows Server 2012 R2 Work Folders:"— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

Introducing Windows Server 2012 R2 Work Folders:

Similar presentations

Presentation on theme: "Introducing Windows Server 2012 R2 Work Folders:"— Presentation transcript:

Similar presentations

About project

Feedback