About

9 Years in Consulting

Broad experience in Microsoft

Infrastructure solutions

Specialised in Windows 10 &

Surface familly

Windows XP Windows 7 wasn’t easy

It often took between 3-7 years!

We know…

5 major

Migration

Painpoints

Windows 7

Drivers

1

X86

App1

X86

App2

HW

Mo

del 1

Windows 7

Drivers

2

X86

App1

X86

App3

HW

Mo

del 2

Drivers

1

X86

App1

X86

App2

Drivers

2

X86

App3

Win10 ready?

Win10 ready?

Win10 ready?

Win10 ready?

Win10 ready?

HW1

HW2

Win10 ready?

Win10 ready?Consumer devices

Enterprise devices

Won´t upgrade!

Win10 ready!

Win10 ready!

Needs Attention!

Win10 ready!

Win10 ready!

Needs Attention!IT Tim

(IT admin)

Extend your

information

base

Devices Ready

To Pilot And

Deploy

Clients Win10

Readiness

Status

Type=UAComputer | measure count() by UpgradeAssessment

Apps by Issue Type=UAApp IsRollup=true RollupLevel=Granular | measure

count() as AppCount by Issue

Apps blocking

UpgradeType=UAApp IsRollup=true RollupLevel=Granular

Issue="Blocking upgrade" | sort TotalInstalls desc | select

AppVendor, AppName, AppVersion, TotalInstalls,

MonthlyActiveComputers, PercentActiveComputers,

Guidance, ReadyForWindows

Driver Win10

Readiness

Status

Type=UADriver | measure count() by Issue

Type=UADriver Issue="Driver will not migrate to new OS" |

measure count() by UpgradeAssessment

Upgrade Analytics Deployment Steps

telemetry data collected

Upgrade Analytics FAQ

Rapid deployment

Familiar tools and capabilities

Deploy Windows 10

Feature rich deployment

Evaluate new capabilities against business needs

Deploy Windows 10

Security

Management

Productivity

Devices

Windows 10

Wipe-and-Load

Traditional process

• Capture data and settings

• Deploy (custom) OS image

• Inject drivers

• Install apps

• Restore data and settings

Still an option for all scenarios

In-Place

Let Windows do the work

• Preserve all data, settings,

apps, drivers

• Install (standard) OS image

• Restore everything

• Must use standard WIM, but can

lay down custom apps after

Recommended for existing

devices (Windows 7/8/8.1)

Provisioning

Configure new devices

• Transform into an Enterprise

device

• Remove extra items, add

organizational apps and config

New capability for new

devices – covered in

subsequent slides

App, web and device compatibility

PROTECT, DETECT & RESPOND

PRE-BREACH POST-BREACH

Windows Defender ATP

Breach detection

investigation &

response

Device protection

Device Health attestation

Device Guard

Device Control

Security policies

Information protection

Device protection / Drive encryption

Enterprise Data Protection

Conditional access

Threat resistance

SmartScreen

AppLocker

Device Guard

Windows Defender

Network/Firewall

Built-in 2FA

Account lockdown

Credential Guard Microsoft Passport

Windows Hello ;)

Identity protection

Breach detection

investigation &

response

Device protection

Information protection

Threat resistance

Conditional Access

Windows Defender ATP

Device integrity

Device control

BitLocker and BitLocker to Go

Windows Information Protection

SmartScreen

Windows Firewall

Microsoft Edge

Device Guard

Windows Defender

Windows Hello ;)

Credential Guard

Identity protection

Windows 7 Windows 10

Windows Secure Boot

Windows Hello for Business

Credential Guard

Device Guard

Windows Information Protection

Windows Defender ATP

WINDOWS 7 WINDOWS 10

With Windows 7 and 8, servicing choices added complexity and cost, increased fragmentation, and reduced quality

Typical Windows 7 PC:

Selectively Patched

Windows 7 Test Lab PC:

Fully Patched

What customers

are running

What we

are testing

Y

YY

2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015

Traditional deployment (every 3-5 years)

Apps Infra Imaging Deploy Service Packs

2017 2018 2019 2020 2021 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030

Windows as a service (twice per year)

Apps Infra Imaging Deploy WaaS Prep

Pilot Broad

2017 2018 2019 2020

18 months for each release

Windows 10 1709

Plan & Prepare

Windows 10 1803

Windows 10 1809

Windows 10 1703

Phase Broad DeployPlan & Prepare

Insider PreviewState

6 months 18 months

Windows 10 1803

Semi Annual Channel (Targeted) Semi Annual Channel

approx. 4 months approx. 14 months

Targeted Deploy

OS Release Ready for Broad Deployment

• IT Test User

• IT Validators

• Project Team

• IT Department

• App Holder

• App Test User

• Project Team

• Uncompliant

Broad Users

• Broad Deployment

• Knowledge-

Management

• Preparation

• Validation of

new Features

• Feature Closings

• Setting Infrastructure

Requirements

• Proactive LoB Testing

• Upgrade Testing

• Upgrade Testing

• Proactive LoB Testing

• ADMX / GPOs

• SCCM – TS / Reports

• Integrate and

validate new

Features

• Feedback

Management

Phase Plan & Prepare

Insider Preview Semi Annual Channel (Targeted) Semi Annual Channel

• Upgrade

• Compliance

Cleanup

• Reinstall

State

User

Workflow

• Broad Users• Targeted

Production

Users

• Pilot

Deployment

• Targeting all

Apps, OUs

and network

segments

• Feedback

Management

Upgrade

• Special Machines

• First uncompliant

Broad Users

• Broad Use

• Close to Upgrade

• Upgrading first

Machines

Reactive Testing & Production

Targeted Deploy Broad Deploy

6 months approx. 4 months approx. 14 months

Proactive TestingState

Identity Management Updates Infrastructure Ownership

Active Directory

Azure Active Directory

Group Policy

System Center

Configuration

Manager

3rd party PC

management

Intune

3rd party MDM

Windows Update

Windows Update

for Business

Windows Server

Update Services

(WSUS)

Intune

3rd party MDM

On-premises

In the cloud

Corporate-owned

CYOD

BYOD

Single Device

Business Owned

Corporate Network & Legacy Apps

Manual

Reactive

High-touch

Classic IT

Multiple Devices

User and Business Owned

Cloud Managed & SaaS Apps

Automated

Proactive

Self-Service

Modern IT

&

Customized Windows 10 set

up experience through

Windows Store for Business

Windows 10 device can be

directly shipped or handed to

the end user

Employee sets up the device

with a streamlined flow

Employee account without

admin privileges

Windows 10 automatically

enrolls in MDM* and initiates

additional config steps

including settings and apps

LitWare Azure Cloud

Hardware Vendor

Harvest Device IDs

Upload

Device IDs

Configure Profile

Employee unboxes device, self-deploys

Ships new Windows 10 Devices Deliver direct to Employee

Self

Deploy

IT Admin

Existing Devices

Device IDs

Intune

Azure AD

SaaS Apps

WSfB

Mobile Device, Application

and Computer Mgmt.

Continue in English?

English

Next

Would you like to continue in English?

United Arab Emirates

United Kingdom

United States

Let’s start with region. Is this right?

Yes

Is this the right keyboard layout?

US

United States-Dvorak for left hand DVORAK L

United States-Dvorak for right hand DVORAK R

United States-International QWERTY

Albanian QWERTZ

Yes

SkipAdd layout

Want to add a second keyboard layout?

Skip for now

Network4

Open

HalHome5GWiFi

Secured

MyHomeNetwork

Connect

Connect automatically

Sammashed

Secured

Let’s connect you to a network

HalHome5GWiFi

Secured

MyHomeNetwork

Enter the network security key

Cancel

You can also connect by pushing the on the router.

Enter your password

Skip for now

HalHome5GWiFi

Secured

MyHomeNetwork

Cancel

Enter the network security key

Next

You can also connect by pushing the on the router.

Enter your password

Skip for now

……….

Great, you’re connected!

Network4

Open

HalHome5GWiFi

Secured

MyHomeNetwork

Properties

Sammashed

Secured

Skip for now

Disconnect

Alright, you’re connected. Just a moment…

Now we’ll check for any updates…

Next

Email

Sign in with Contoso.com

This device is registered to Contoso.com. Enter your contoso.com email address

Change account

Just a moment…

We’re getting everything ready for you.

This might take several minutes

A complete, intelligent, secure

solution to empower employees.

Microsoft 365 Introducing

Office 365

Windows 10 Enterprise

Enterprise Mobility + Security