BRK3143

Microsoft IT
Windows as a Service
Robert Van Winkle
Principal Program Manager
Transitioning to Windows as a Service
MDT and IT Upgrade
Custom Solution Update OSD OSD Three ways
Easy experiment

80% FTE one year 95% FTE eight months 95% FTE three months 95% FTE five weeks 95% FTE nine weeks 95% FTE nine weeks Same velocity
2009 2012 2013 2014 2015 2015 2016
Complexity User Experience Pointers Helpdesk Setup IR
Evolving the enterprise adoption approach

Windows 10

November update
Windows XP
to
Windows 7 Anniversary Update

 Agile enterprise adoption
Windows Current Branch (CB) Current Branch
Customers Insider For Business (CBB)
Program (WIP)

Proof Broad
of Pilot
concept deployment

Windows
Internal Insider
Microsoft IT Selfhost Program (WIP) Current Branch (CB)

Proof of concept (POC) 10 to 50 IT pros Pilot 1,000 to 5,000 users Broad deployment All users
Agile kanban

Demo
Keys to a successful project
Early adopter
community
Recognition and leaderboards
Real-time feedback
Scenario validation
Early experimentation
Use for other areas in IT
Support how
I want it Mission control
Social 30 minute sync session
Users helping users Three times a day
Moderators to ensure questions Support and IT SMEs
are answered
Real-time feedback
Early detection system
Enabling agile remediation
Microsoft Elite Universal Application
Feedback Hub
Compatibility
 Feature update compatibility
Environment
96 percent of application portfolio is browser-based
1 percent are Universal applications Critical Pass rate

Edge is the primary browser Windows 8 286 97%

Leverage site list for Edge to IE switching Windows 8.1 300 98%
Windows 8.1 Update 138 98%
Approach Windows 10 278 98%
Only test business critical applications 250 Windows 10 November update 265 100%
Remaining 2,250 applications are tracked through
Windows 10 Anniversary Update 236 100%
adoption
Business critical apps exercises common code bases and
tools used in the environment

250 Critical Applications

2,500 Line of Business Application Portfolio

Application compatibility VMs
Enables app teams
Test and re-test on newer builds
Check out new features

VM client farm
Provides over 300 VMs with 10 servers

Processor Two quad-core processors (2.66 GHz or higher)

RAM 48 GB

System drives Two 148 GB; 10K RPM, SCSI (SAS), (RAID) 1

Data drives Six 1.2 TB, 10KB RPM, SAS drives in RAID5 for VMs

Network adapter Dual network adapters

Win 10
Client VMs
Operating system Windows Server 2012 R2

Virtualization
Microsoft System Center Virtual Machine Manager 2012 R2
software
Quality update compatibility
Primary focus
Stopped formal application compatibility testing program in
Windows 8 timeframe
Target 20,000 pilot to inform broad deployment
Track issues through listening mechanisms Feedback Hub,
Yammer, Pointers, and Helpdesk

Safety valve
If an issue arises allow user to opt out of program and rollback
update

Lessons learned
To date, we have not reported application compatibility issues
with this approach
Need more real-time insight
Windows Upgrade Analytics
Allows enterprise IT to quickly
identify and focus on the critical
issues impeding upgrades; provides
data driven insights to plan and
manage the upgrade process end-
to-end
Workflow visualization from pilot to
deployment
Powerful upgrade readiness insights and
recommendations about the computers,
applications, and drivers
Risk based approach to app rationalization
Microsoft guidance on app and driver
compatibility issues

Sign up via http://www.microsoft.com/en-us/WindowsForBusiness/upgrade-analytics

User-initiated deployment
User-initiated feature updates

Just keep my system up to I want the latest OS, but want
date to control when its installed
so it fits my schedule

Helpdesk driven update

Hardware refresh event

Adopting Anniversary Update

Proof of concept (PoC)

ConfigMGR Operating Windows Update
Simulating WUfB with
System Deployment for Business
WU
 PoC Simulating

Delivery optimization
WUfB with WU

Peer-to-peer caching enabled through

group policy
Used Group setting which limits it to a
domain
Content is cached for 24 hours
Works with all WU and WSUS content
Over 76 percent of content came from
peer devices versus Internet
 ConfigMGR

User initiated
Operating
System
Deployment

Management
point

Policy request

Distribution
point

OSD task
sequence
Windows 10 policy

User initiates Policy request OSD package OSD task

installation is sent to the downloaded from sequence runs
management point distribution point
 ConfigMGR
Operating

OSD task sequence

System
Deployment

Recommendation
Let setup do the work and minimize customization and
need for testing

Pre-task sequence
Study-ID for telemetry reporting
Check for know issues and remediate
Temporarily point devices to WU so they get all the
Dynamic Update content during setup and allow group
policy to point back on first logon

Post-task sequence
Clean up of the deployment working environment

On-failure task sequence

Nothing at this time
 ConfigMGR

Microsoft IT current architecture

Operating
System
Deployment

Infrastructure Active Directory

Six primary sites Federation Server

Thirteen secondary sites AD Azure Active

Directory
MS Online Directory
Three hundred distribution Sync (DirSync)
User
points
Discovery
Five WSUS sites
WU/MU
Packages Intune
WU/MU
PCs & devices
Subscription

Connector
~350,000 clients Site role
Synchronize
~125,000 mobile Meta Data
devices (EAS) Microsoft
Intune
Users
~98,000 FTEs
~82,000 vendors
Five WSUS sites Redmond Site 1 Redmond Site 2 North & South Europe, Australia & Asia
350,000 clients 75,000 clients 90,000 clients America MidEast, Africa 75, 000 clients
50,000 clients 50,000 clients
Set yourself up for success

X86 -> X64 BIOS -> UEFI Cross language

Upgrade doesnt support Upgrade doesnt support Update doesnt support
architecture conversions BIOS conversions cross language conversion

Solution: Traditional deployment Solution

Change new device standard configuration to x64 with UEFI Match OS language for
feature updates
Hardware refresh migration
Use one base OS language
Clean install with data migration with language packs
Lessons learned
OSD pre-caching the build locally before deployment available in October
1 User experience OSD user notifications update available in January
WUfB user experience in October for TH2 and inbox for RS1

POC->pilot -> broad deployment

Iterate
2 Adopt agile processes
Build culture to fail fast and move forward celebrate failures
Build user community

Focus on the critical business apps (that is, top 10 percent)

3 Compatibility Leverage Upgrade Analytics
Is there a day where testing is no longer necessary?

Migrates user data, applications and settings

Manages BitLocker and Secure Boot
4 Windows Setup
Graceful return to previous OS on failure - creates Windows.old for recovery
activities
Let Windows setup do all the heavy lifting
During upgrade temporarily point devices to WU for Dynamic Updates
5 ConfigMGR and OSD
Ensure ConfigMGR client health and ensure ConfigMGR inventory is up to date
Expire mandatory deployments during significant holidays and peak vacation
Q&A
Other sessions
Monday:
BRK3144 2:15PM Enhance Windows 10 deployment: what's new with Windows 10 deployment
Tuesday:
BRK3149 9:00AM Learn what's new with OSD in System Center Configuration Manager and Microsoft Deployment
Toolkit
BRK4023 12:30PM Learn about Windows 10 deployment from the experts
Wednesday:
BRK2125 9:00AM Evaluate compatibility in Windows 10 and WaaS using telemetry driven insights
BRK3145 10:45AM Reduce the network impact of Windows 10 feature and quality updates using peer-to-peer
tech
BRK3173 12:30PM Upgrade to Windows 10: in depth
BRK2126 3:15PM Develop and support apps in Windows as a Service
BRK3012 4:00PM Enhance Windows 10 security and management with ConfigMgr, Intune, and new cloud services
Thursday:
BRK3136 9:00AM Implement Windows as a Service: understanding how to do it
THR1002 12:05PM Accelerate Windows10 deployments through telemetry driven insights using Upgrade Analytics
BRK3240 4:00PM Ask us almost anything about Windows 10
Friday:
BRK3150 9:00AM Troubleshoot Windows 10 deployment: top 10 tips and tricks
Please evaluate this session
Your feedback is important to us!

From your PC or Tablet visit MyIgnite at

http://myignite.microsoft.com

From your phone download and use the Ignite

Mobile App by scanning the QR code above or
visiting https://aka.ms/ignite.mobileapp
 2016 Microsoft Corporation. All rights reserved.