1. Windows as a Service Michael Niehaus @mniehaus
blogs.technet.com/mniehaus

2. Michael Niehaus Redmond, WA, USA @mniehaus
20 years with SMS/ConfigMgr
12 years with Microsoft
3 years with Windows product management
Director of Product Marketing
com/mniehaus
#MMSMOA

3. Windows as a Service
What is it?

4. What customers are telling us
4/25/2017
What customers are telling us
My users need access to their apps and data anywhere, anytime
Passwords are no longer sufficient
How do I protect my corporate data
We want more transparency and an open dialogue with Microsoft
We need to be adopting new technologies as fast as our customers
No more big deployments
Security of our mobile devices is a top concern
IT Budgets are under pressure. Show us how we can cut IT costs
Too many tools and too much fragmentation
We want to talk to you about how you can take advantage of these trends AND be ready for the challenges.
Security comes as a top concern –We’re hearing from customers that:
- Passwords are no longer sufficient
- And they need to protect their corporate data in the cloud first, mobile first world
We are also hearing:
• Handling complexity with multiple tools and solutions they have and fragmented environments
• Adopting new technology as fast as their customers and their users
• Supporting their mobile users, ensuring their have access to their apps and data everywhere, to stay productive
• Cutting costs; driving efficiency with their IT investments
At the same time -- Customers are also telling us they do not want big complex deployments and that ongoing dialog with Microsoft and transparency on our future roadmap is essential
The promise of Windows 10 is addressing these concerns of today – while bringing our customers forward to a compelling future – the future of More Personal Computing
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

5. AGILITY CONTROL Your adoption needs DVD PCMCIA Agili Parallel
4/25/2017 6:37 PM
Your adoption needs
DVD
Parallel
Agili
AGILITY
Access to new technology
Microsoft to quickly implement your feedback
Transparency on the roadmap
Enterprise-grade capabilities to help you address the latest trends in the market
Flexibility for mixed environments
PCMCIA
CONTROL
Stability
Fewer upgrades
Long support lifecycle
Ample time to test and certify
Predictability
ISVs’ statement of Support
TENSION
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Delivering Windows as a service
4/25/2017 6:37 PM
Delivering Windows as a service
Caught in the middle?
Business users
Special systems
Examples: Air Traffic Control, Emergency Rooms
Consumer devices
Many consumers today expect their devices to receive ongoing feature updates without having to take an action. However, we understand that businesses require more control in how updates are delivered, and at what pace.
For example, systems powering hospital emergency rooms, air traffic control towers, financial trading systems, factory floors, just to name a few, may need very strict change management policies, for prolonged periods of time. To support Windows 10 devices in these mission critical customer environments we will provide Long Term Servicing branches at the appropriate time intervals. On these branches, customer devices will receive the level of enterprise support expected for the mission critical systems, keeping systems more secure with the latest security and critical updates, while minimizing change by not delivering new features for the duration of mainstream (five years) and extended support (five years). On Long Term Servicing branches, customers will have the flexibility to deliver security updates and fixes via Windows Server Update Services (WSUS) which allows full control over the internal distribution of updates using existing management solutions such as System Center Configuration Manager or to receive these updates automatically via Windows Update.
We also learned from customers that while having control of mission critical environments is important; they also have many end user devices that are not necessarily mission-critical. Managing those devices as mission critical systems results in significant, unnecessary costs and complexity, while additionally depriving business users of access to the latest functionality. Many IT organizations have told us they would like to get out of the business of managing end-user devices. They are looking for ways to keep devices up to-date with more discretion than simply treating them the same way they treat consumer devices.
Updates installed via Windows Update as they arrive
Keeping hundreds of millions of consumers up to date
Large and diverse user base helps drive quality of the OS updates
No new functionality on long term servicing branch
Regular security updates
Control with WSUS
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Market driven quality: external and internal
4/25/2017
Market driven quality: external and internal
Customer Internal Ring I
Customer Internal Ring II
Customer Internal Ring III
Customer Internal Ring IV
Engineering builds
Microsoft
Insider Preview Branch
Broad Microsoft internal validation
Current Branch
Current Branch for Business
Hundreds
of millions
Several Million
10’s of
thousands
Users
Slide 8 - before we get into Current Branch, it would be great to indicate that the sections before that are when the product is in pre-release phase - we can do with a divider or a different color for the blocks.
Time
4 to 6 months
4 months
8 months
*Conceptual illustration only
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

8. Why Windows as a service?
4/25/2017
Why Windows as a service?
Consumer devices
Business users
Specialized systems
Customers choose the mix of models that is right for them
Up to date with feature and security updates as they arrive
Faster access to new technology with time to test and deploy in a business environment
Enterprise class support for your mission critical systems keeping you in control
They need to support three primary user scenarios – so we are delivering options for each.
With Windows as a service, BYOD clients will always be up to date with the latest innovations.
But many enterprises have specialized, mission-critical environments -- where tight control is crucial.
For example, shop floor automation or air traffic control systems.
You will still have the ability to lock down these specialized systems where it is required.
In the middle are the vast majority of knowledge workers.
These devices no longer need to be tightly managed.
With Windows as a service these users will get the latest features – while at the same time, the innovation is delivered at the pace the customer prefers.
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

9. Costs for deployment

10. Windows as a Service
Choices: What to Deploy

11. Thinking through deployment strategy
4/25/2017 6:37 PM
Thinking through deployment strategy
Windows Insider Preview Branch
Current Branch
Current Branch for Business
Long Term Servicing Branch
Deploy to appropriate audiences
Test and prepare for broad deployment
Specific feature and performance feedback
Application compatibility validation
Information workers
General population
Specialized systems
Early adopters, initial pilots, IT devices
Deploy for mission critical systems
Stage broad deployment
Test machines, small pilots
NUMBER OF DEVICES
STAGE
Release
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Configuring to receive feature upgrades via CBB
4/25/2017 6:37 PM
Configuring to receive feature upgrades via CBB
Settings-> Update and Security-> Windows Update -> Advanced Options
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update
If you are using WSUS or ConfigMgr, the setting doesn’t really matter. Affects Windows Update.
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. What to deploy Microsoft Windows 10 Enterprise
App compat will work on LTSB…
Microsoft Windows 10 Enterprise
(Current Branch, Current Branch for Business)
Microsoft Windows 10 Enterprise 2015 LTSB

14. Servicing and Edition Summary
Comparison
Servicing Model for Windows 10 Releases
Current Branch
Current Branch for Business
Long-Term Servicing Branch
Supported Editions
Windows 10 Home
Windows 10 Pro
Windows 10 Education
Windows 10 Enterprise
Windows 10 Enterprise LTSB
Recommended Scenarios
General Use,
Early Adopter Businesses
General Business Use
Specialty Uses
Serviced life-span
~4 months
~ 8 months
10 years (Servicing Updates Only)
Latest Build (Including Apps) Required for Servicing Updates
Yes No
(Receives Up To 10 Years of Servicing Updates)
Windows Update Support
WSUS/WUFB/SCCM Support
(Excludes Home)
Supports Windows 32 Versions of Microsoft Office
1st Party Browsers Included
Microsoft Edge, Internet Explorer 11
Internet Explorer 11
Notable Windows System Apps Removed
None
Microsoft Edge, Windows Store Client, Cortana (Limited Search Available)
Notable Windows Universal Apps Removed
Outlook Mail/Calendar, OneNote, Weather, News, Sports, Money, Photos, Camera, Music, Clock

15. Windows Insider Preview Branch Current Branch For Business
4/25/2017
When to deploy
Windows Insider Preview Branch
Specific feature and performance feedback
Application compatibility validation
Stage broad deployment via WU for Business
Current Branch For Business
Deploy to appropriate audiences via WUB
Test and prepare for broad deployment
Current Branch
Evaluate
Pilot
Deploy
4-8 months of active development
4 months (minimum)
8 months (minimum)
12 month deployment (minimum)
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

16. 4/25/2017
When to deploy
Evaluate
Pilot
Deploy
Evaluate
Pilot
Deploy
Evaluate
Pilot
Deploy
There will be two supported CBB releases in the market at all times
Be prepared to jump from one release to the next
Don’t try to skip one, as it compresses the deployment timeline too much
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

17. Windows as a Service
Choices: How to stay up to date

18. Staying up to date with Windows 10
Windows Update
Cloud
Upgrades installed as they are released (subject to throttling)
Delivery optimization for peer-to-peer distribution
Only option for Windows 10 Home
Windows Update for Business
Upgrades can be deferred
Uses Windows Update for content
Windows Server Update Services
On-Prem
Upgrades are deployed when you approve them
Content distributed from WSUS servers
Requires KB
System Center Configuration Manager
Choice of task sequence-based upgrades or (with vNext) software update capabilities
Content distributed from ConfigMgr DPs

19. Introducing Windows Update for Business
4/25/2017
Introducing Windows Update for Business
Keeping devices secure and up-to-date
Reducing device management costs
Quick access to latest security updates
Capabilities
Time to test and validate feature updates
Ability to create internal deployment groups
Maintenance windows to align with business rhythm
Peer to peer delivery to optimize for bandwidth
Integration with your existing tools like System Center
Access to Current Branch and Current Branch for Business
An important feature of Windows as a service is Windows Update for Business.
With Windows Update for Business, you will be able to keep your systems secure and up to date – and reduce device management costs.
You will have the ability to defer feature updates for up to eight months – so you have time to test and validate in your environment.
You can also define maintenance windows that specify when a specific device should – or should not – receive updates.
You can control when groups within your enterprise are updated – and roll things out in the way that makes the most sense for each group.
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

20. Configuring Windows Update for Business
4/25/2017 6:37 PM
Configuring Windows Update for Business
Step 1. Point all computers to Windows Update directly (no WSUS or SUP)
Step 2. Create policies (GPO) or settings (MDM) to specify how long groups of machines should defer.
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update
Step 3. Target policies or settings to different groups of PCs.
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Passive Update Management
Windows Update for Business
Windows Update
Win10 Clients: No Deferrals
Deployment Group 1
Win10 Clients: Updates deferred 1 week
Deployment Group 2
Win10 Clients: Updates deferred 2 weeks
Deployment Group 3

22. Passive Update Management
Windows Update for Business
Windows Update
Win10 Clients: No Deferrals
Deployment Group 1
Win10 Clients: Updates deferred 1 week
Deployment Group 2
Win10 Clients: Updates deferred 2 weeks
Deployment Group 3

23. Passive Update Management
Windows Update for Business
Windows Update
Win10 Clients: No Deferrals
Deployment Group 1
Win10 Clients: Updates deferred 1 week
Deployment Group 2
Win10 Clients: Updates deferred 2 weeks
Deployment Group 3

24. Passive Update Management
Windows Update for Business
Windows Update
Win10 Clients: No Deferrals
Deployment Group 1
Win10 Clients: Updates deferred 1 week
Deployment Group 2
Win10 Clients: Updates deferred 2 weeks
Deployment Group 3

25. Passive Update Management
Windows Update for Business
Windows Update
Win10 Clients: No Deferrals
Deployment Group 1
Win10 Clients: Updates deferred 1 week
Deployment Group 2
Win10 Clients: Updates deferred 2 weeks
Deployment Group 3

26. 4/25/2017 6:37 PM
Configuring WSUS
Step 1. Point all computers to WSUS server (Windows Server 2012 or 2012 R2 with KB ). Ensure that “Upgrade” classifications are selected.
Step 2. Create groups of computers in the WSUS console, with auto- approval for the first group. Manually place computers in groups, or use client-side targeting.
Step 3. Manually approve upgrades for other computer groups when ready.
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Active Update Management
WSUS
Windows Update
Win10 Clients: Automatic approval rules set
Deployment Group 1
Win10 Clients: Manual administrator approval
Deployment Group 2
Win10 Clients: Manual administrator approval
Deployment Group 3

28. Active Update Management
WSUS
Windows Update
Win10 Clients: Automatic approval rules set
Deployment Group 1
Win10 Clients: Manual administrator approval
Deployment Group 2
Win10 Clients: Manual administrator approval
Deployment Group 3

29. Active Update Management
WSUS
Windows Update
Win10 Clients: Automatic approval rules set
Deployment Group 1
Win10 Clients: Manual administrator approval
Deployment Group 2
Win10 Clients: Manual administrator approval
Deployment Group 3

30. Active Update Management
WSUS
Windows Update
Win10 Clients: Automatic approval rules set
Deployment Group 1
Win10 Clients: Manual administrator approval
Deployment Group 2
Win10 Clients: Manual administrator approval
Deployment Group 3

31. Active Update Management
WSUS
Windows Update
Win10 Clients: Automatic approval rules set
Deployment Group 1
Win10 Clients: Manual administrator approval
Deployment Group 2
Win10 Clients: Manual administrator approval
Deployment Group 3

32. For More Information

33. Discuss…
Ask your questions-real world answers!
Plenty of time to engage, share knowledge.
Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS!
Session Title: Deploying Windows 10 in the Enterprise
SPONSORS