153
Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Embed Size (px)

Citation preview

Page 1: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Ahead of the GameTechnical SeriesSharon BennettSMB Product Technology AdvisorOctober 15, 2014

Page 2: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Be Lean, Stay Leanwith the Microsoft Cloud

Page 3: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Introduction

About this Course

Delivery Schedule Objectives

Page 4: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Logistics and introductions• Class hours• Rest rooms• Meals• Internet - https://cloud.holsystems.com/ModernBiz

- The access code is MBVC2825

Azure Pass

Presenter introduction

Page 5: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

About this courseAudience: IT Pros, Consultants, Partners

Objectives: Identify opportunities for partners to enable small and medium size

businesses (SMBs) to increase efficiency and productivity, while reducing IT operating

expenses (OPEX) by implementing hybrid cloud scenarios using Microsoft Azure services

and become proficient in designing and implementing Azure technologies and services for

SMB customers.

Topics covered:

• Overview of Microsoft Azure, Partner Opportunities, SMB trends, Transacting Microsoft

Azure, Reselling Azure services, Azure in Open Licensing

• Azure Backup, Azure Storage, Azure Web Sites

• Azure Virtual Machine workloads – Infrastructure as a Service (IaaS)

• Azure Application Workloads – Platform as Service (PaaS), and Applications on Azure

VMs

• Azure Virtual Machine Networks (VMNet)

• Azure Active Directory and Identity Management

Level: 200-300

Duration: 8 hours

Page 6: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

9:00 – 9:30 Class Introduction, Partner Opportunities, SMB Trends

9:30 – 10:00 Module 1: Azure Backup, Storage and Web sites

10:00 – 10:15 Hands-on Lab: Azure Backup, Storage and Web sites

10:15 – 10:30 Morning Break

10:30 – 11:15 Module 2: Azure Virtual Machine Workloads

11:15 – 12:00 Hands-on Lab: Azure Virtual Machine Workloads

12:00 – 1:00 Lunch Break

1:00 – 1:30 Module 3: Azure Virtual Machine Networks

1:30 – 2:00 Hands-on Lab: Azure Virtual Machine Networks

2:00 – 2:15 Module 4: Planning and Deploying Workloads to Azure

2:15 – 2:45 Hands-on Lab: Deploying Applications to Azure

2:45 – 3:00 Afternoon Break

3:00 – 4:00 Module 5: Azure Active Directory, Identity Management and Office 365

4:00 – 4:30 Hands-on Lab: Azure Active Directory and Identity Management

4:30 – 5:00 Wrap up and Q&A

3:15 – 3:45 Module 5: SQL Server 2014 Tools and Manageability

Delivery schedule

Page 7: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 1: Azure Backup, Storage, and Web SitesTopics• Overview of IaaS and PaaS.• Pricing out Consumption-Based Services.• Azure Backup.• Azure Storage Accounts and BLOB storage.• Azure Web Sites.

Page 8: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Topics• Provisioning Azure Virtual Machine Workloads.• Managing Azure Virtual Machine Workloads.• Sizing and Capacity.• Importing Virtual Machines.• Monitoring Virtual Machines.• Pricing out Virtual Machines.

Module 2: Azure Virtual Machine Workloads

Page 9: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 3: Azure Virtual Machine Network and Traffic Manager

Topics • Windows Azure Virtual Network (VNET).• Virtual IP Addresses and Dynamic IP Addresses (VIPs and DIPs).• Inbound Traffic – Software Load Balancer (SLB).• Supporting multiple VNETs within a subscription.• Controlling inter-VNET communications.• Site-to-Site (On-premises to Azure) Communications.

Page 10: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 4: Planning and Deploying Workloads to Azure Virtual Machines and ServersTopics• Azure SQL Server Database Service.• Azure SQL Server Virtual Machines.

Page 11: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 5: Azure Active Directory and Identity Management

Topics include:• Azure Active Directory (Azure AD).• Password Sync/DirSync.• Office 365 integration and Single Sign-on.• Third Party Cloud Services Support for Azure AD Authentication.

Page 12: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

With Microsoft, you’re in control of how you want to deploy:

Why the cloud?The cloud is enabling compelling new business models for Microsoft partners

Consumption-based billing

Global availability

Elastic scale

Fast time to market

Reduce capital expense1

2

3

4

5

Cloud

VirtualizationPhysicalserver

Microsoft Azure

Page 13: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

The game is changing for resellersSMBs are looking for partners who can translate business needs into technology solutions

How do I support my mobile employees and keep them productive?

Am I ready for a disaster? Will I lose my data?

Partner role

Resellers are shifting to a more consultative role• Gaining a deeper understanding of the

customer’s business

• Helping customers make the right strategic decisions

• Assisting customers to evaluate which technologies and services to purchase and deploy

How do I ensure uptime for my applications?

How do I save money on infrastructure? Do I need the cloud?

Page 14: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Partner opportunity with Microsoft cloud in SMB

Microsoft Azure

Office 365

Microsoft Dynamics

Windows Intune

Page 15: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Growing your business with Microsoft AzureMicrosoft helps you expand your role as a service provider and business advisor

• Enables partners to differentiate by bundling their own IP alongside other cloud offerings.

• Cloud software is easier to develop, test, and take to market.

• Lowers the barriers to entry to offer managed services.

• Reach new customers.• Upsell to existing customers. • Cross sell within a single

platform. • Enable and advise your

customers as they evolve their business in the cloud.

• Recurring revenues establish long-term relationships with your customers.

• Margins increase as partners learn how to offer fixed-fee engagements with optimized delivery and higher levels of services.

• Efficiently sell into SMBs leveraging the skills that you already have.

Page 16: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Azure

App services

Network

Storage

Compute

Caching IdentityService

bus Media CDNIntegratio

n HPC Analytics

Virtual machines Websites

Cloud services

Mobile services

SQL database HDInsight Tables

Blob storage

ConnectVirtual

networkTraffic

manager

Usage-based services• Build applications

using any language, tool, or framework.

• Integrate public cloud solution with the existing IT environment.

• 99.95% monthly SLA.

• Automatic operating system and service patching.

An open and flexible cloud platform that enables you to quickly build, deploy, and manage solutions across a global network of Microsoft-managed datacenters.

Page 17: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Data Backup in the Cloud Deploy Applications within VMs Host Websites

Key Azure scenarios

Provide easy, scalable data backup in the cloud• A range of applications: file

servers, SharePoint, SQL Server, Exchange.

• Encrypted backups, Global Geo-redundant datacenters.

• Quickly and easily provision more storage for your customers as needed.

 

Leverage Microsoft Azure to quickly deploy customer applications inthe cloud• Cut infrastructure costs and

Reduce IT management burden.

• Deploy Microsoft Workloads (SharePoint Servers, SQL Server, Domain Controllers) as well as third party business applications.

 

SharePoint

SQL Server

Databases

Orders

Product

AP

Business Application

s

CRM AcctHR

Virtual Machines

Grow your business helping customers move their websites to the cloud with Microsoft Azure• Quickly build, deploy, and

manage websites on an open and flexible cloud platform.

• Offer the peace of mind from hosting on a global network of Microsoft-managed data centers.

Page 18: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Local currencies

Global datacenters

Global support

24 x 7 x 365 support Over 1 billion customers, 20 million businesses 90 markets worldwide 280 years of combined industry experience in infrastructure, security, product dev, and global ops

Local account teams

₩ ¥

€ руб

$

$

Rp

TL

chf

krkr

$R$

$

Microsoft Azure

Page 19: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure purchasing options

Pay As You Go

Zero upfront, cancel anytime.

No long-term commitment.

6- or 12-months

Monetary Commitments starting at $500/month.

Longer-term

Offers additional discounts and terms as part of a deeper commitment to the platform.

Direct on azure.Microsoft.com Enterprise Agreement

12-months

Flexibility with Volume Licensing through a familiar vehicle for SMBs.

Opportunity for partners to earn margins, incentives.

Open Licensing Programs

Page 20: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

One Monetary Commitment SKU, available in unlimited quantities.

Customers can purchase additional credit for Azure services at any time.

Can be used against any Azure service* within 12 months from the date of activation.

Available in countries with Open Volume Licensing program partners and that offer Azure Direct.

23* eligible for Monetary commitments

Azure in Open licensing – the details

Page 21: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure and Office 365 in Open – comparison

SKU Structure Single SKU used for any eligible pay-as-you-go Azure ServiceUnique SKUs for each Office 365 Plan, as well as Add-ons

Monetary Commitment that expires 12 months from activation

Customers pre-pay for 12 months of service

Aligned to cloud channel incentives for managed partners and distributor margin (The FY15 guide will be released in June for the Global Channel Incentives Guide)

All Online Services in Open follow existing business processes

Leverage existing Distributor and VAR reporting constructs

• Single SKU provides flexible ‘building blocks’ to scale partner business or customer services.

• Top up and upsell opportunity for additional services.• Partners drive consumption with ongoing customer

engagement.

• Specific SKUs purchased for each service offering.

• Renewal motions have annual anniversary.• Incremental seats added shift customer end

dates.

Commitment

Margin Structure

Business Processes

Reporting

Channel Impact

Page 22: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure in Open: setup and portal experience

Renewal process (preferred)

Customertops up account using credit card.

Clicks on “recharge now” in Azure portal and credit card option is available.

Reseller recommends renewal

Distributor

Order is

placed

Reseller/customer receives email with link to VLSC and Azure portal

Customer obtains 5x5 token key from VLSC

Customer adds key under “Recharge now” in Azure portal

Customer completes verification process.

Reseller or customer activates credit with token from VLSC.

Reseller or customer views account status and sets up balance alerts.

VERIFICATION ACTIVATION MANAGEMENTReseller or customer renews when 12-month period ends or balance is consumed.

RENEWAL

1 2 3 4

Purchase order

EDI/ MOET

For Emergencies

Page 23: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Why Azure in Open?

Low barrier of entry with no investments in complex billing systems.

A consistent, familiar licensing option for cloud services along with your on-premises solutions.

A flexible, consumption-basedpurchasing model.

New opportunities to grow margins and deepen customer relationships.

Capitalize on the opportunity to incorporate the cloud into your solutions and services

Page 24: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 1: Microsoft Azure overview, Azure backup, storage and web sites

Microsoft Azure Overview

Microsoft Azure Backup

Azure Web Sites Azure Tools

Page 25: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Azure IaaS at a glance

Customer managed

O/S

Middleware

Runtime

Data

Applications

Networking

Storage

Servers

Virtualization

Networking

Storage

Servers

Virtualization

Page 26: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Azure PaaS at a glance

Customer managed

O/S

Middleware

Runtime

Data

Applications

Networking

Storage

Servers

Virtualization

O/S

Middleware

Runtime

Networking

Storage

Servers

Virtualization

Page 27: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Azure VMs overview

Deploy applications to the cloud.

Extend your environment.

Best platform for SharePoint and SQL Server development and test.

Scalable on-demand infrastructure.

Best in class price-performance and

end-to-end support.

Infrastructure services – build it or bring it, we run it

Remote workers

Microsoft Azure

On-premises

Virtual machines

Page 28: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

On-premises

Provide scalable data backup in the cloud

A range of applications: SQL Server,

file servers, SharePoint, Exchange.

Encrypted backups and global, geo-redundant datacenters.

Consumption-based pricing. No hardware and backup media costs.

Intuitive management with familiar tools across on-premises and cloud.

Provision more storage for your customers as needed.

Data backup in the cloud overview

Microsoft Azure

Microsoft SQL Server

Page 29: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

On-premises

Externalworkers

Microsoft Azure

Hosting websites in the cloud overviewGrow your business – help customers move their websites to the cloud

Web servers

Build, deploy, and manage websites on a flexible cloud platform.

Deliver peace of mind hosting on a global network of managed datacenters.

Offer a scalable cloud infrastructure for seasonal applications or defined lifecycle websites.

Manage your customers’ websites using familiar tools across on-premises and cloud environments.

Provision a production web applicationin minutes.

Page 30: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

On-premises

Microsoft Azure

Identity and access management overviewEnable single sign-on between on-premises and cloud identities

Windows Server Active Directory

Azure Active Directory (AAD)

Consumer identity providers

PCs and devices

Microsoft apps

Third-party cloud/hosting

Enable single sign-on across multiple cloud and on-premises applications with ADFS.

Integrate cloud with on-premises Active Directory with Active Directory Synchronization.

Create and manage identities in the cloud.

Help secure access to on-premises and cloud apps with Microsoft Azure Multi-Factor Authentication. Use AAD to manage Office 365 along with other Microsoft and external cloud services.

Page 31: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Scenario: How much is your IT costing?

Two servers and operating system$10,00

0per server

CALs$10,000

Two years of facility operating

costs$10,000

On-premises backup solution with support for cloud archiving

$2,800with agents

TotalCosts:

about $32,800 / 24 months = ~$1333.33 /month for two datacenter caliber serversmonth for two datacenter caliber servers. With 7 small virtual machines, this comes out to ~ $1,90.47 per virtual machine per month

Page 32: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Pricing out solutionsBecome an expert at pricing out consumption based services

Microsoft Azure Cost Calculator: http://azure.microsoft.com/en-us/pricing/calculator/ • The ability to create accurate pricing

proposals is a common concern for new Azure partners, so there are tools to help.

• Consumption-based services means fluctuating bills.

Page 33: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Azure

cost calculator

Page 34: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Data protection challenges

• Data rates are growing at over 40% per year.

Rapid data growth It’s expensive to protect all that data.

Some data may go without protection.

• Storage costs growing.• Backup costs scale with

data.• Management complexity of

storage, backup, and offsite protection all scale with data.

Operational challenges

Page 35: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Azure backup

Simple and reliable server backup to the cloud

Reliable offsite data protection

• Convenient offsite protection.

• Safe data with geo-replication.

• Encrypted backups.

A simple and integrated solution

• Familiar interface.• Microsoft Azure integration.

Efficient backup and recovery

• Efficient use of bandwidth and storage.

• Flexible configuration.• Flexibility in recovery.• Cost-effective and

metered by usage.

Page 36: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

When to choose Microsoft Azure backup

Suitable for any workload.

Already using System Center Data Protection Manager? Microsoft Azure Backup integrates easily.

Small business or branch office? Microsoft Azure Backup integrates with the in-box Windows Server backup tool or you can download the free Windows Azure Backup Tool.

Protected ServerSystem Center

DPM

File Server

SQL

Exchange

or

Page 37: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure Backup pricing

• First 5 GB free• $0.22 per GB after 5 GB• Azure Backup Tool is free

200 GB of Backup for $43.00/ month

AD DS, VMs, Data, Mail, System State for two servers

Page 38: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Creating the Azure Backup vault

Recovery services

You have no vaults create one to get started

Page 39: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Download Azure Backup agent

Page 40: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Windows 8.1 SDK to get MakeCert.exe tool

Page 41: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Making the encryption certificate Run the following command, replacing

CertificateName with the name of your

certificate and specifying the actual expiration

date of your certificate after -e: 

makecert.exe -r -pe -n CN=CertificateName -

ss my -sr localmachine -eku 1.3.6.1.5.5.7.3.2

-len 2048 -e 01/01/2016 CertificateName.cer

Page 42: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Upload the certificate to the Azure Backup vault

Page 43: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Install the Windows Azure Backup agent

Page 44: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Register the server and connect to the vault

Page 45: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Start or schedule backups

Page 46: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Scenario: Simple cloud backup

Contoso has invested over

$2,500 in software to operate third-party backup tools

Contoso pays between $100- $150 per month for online storage.

Contoso’s data is backed up and encrypted on-premises, also it is encrypted over the wire during the transfer and it is encrypted

in Azure

Contoso is the only owner of the encryption key.

Microsoft Azure Backup tool is free and supports all of the applications

It’s very easy to find out what the monthly costs will be for the storage by using the Azure Calculator.

Page 47: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Microsoft Azure backup

Page 48: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

A powerful self service platform for developersA flexible hosting solution for IT

FlexibleWeb hosting your way with choice of language, framework, database and platform.

ScalableScale out or up in seconds on a load balanced, always up to date, global infrastructure.

Enterprise Grade Availability with support for SSL and AD DS authentication.

Secure

Microsoft Azure Web Sites is a scalable, secure and flexible platform for building powerful web applications to run your business, drive your brand or reach new customers.

Platform as a service for the web

Page 49: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure Web Sites is ready for business

Enterprise grade

Secure with SSL

Access to other Azure services

Page 50: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure Web Sites has access to other services

Caching Media Big dataCDN

Analytics

Mobile

Integration

Service bus

Web sitesSQL database noSQL DB

Blob storage

Cloud services

Virtual Machines

Identity

Page 51: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Load balanced

Always up to date Easily scale Economical

Web scale, world wide

Page 52: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure Web Sites is load-balanced by defaultTwo or more servers can handle inbound requests by spreading out the load between them.

Page 53: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Easily scaling of Azure Web Sites

Scale upScale outAutomatic scaling

Page 54: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Scenario: Web hosting with Azure

Contoso currently has:• A company intranet• Several ASP.NET applications• Several WordPress sites - Including a WordPress blog hosted in Internet Information Server (IIS). The sites are hosted on two web servers which are not load-balanced which causes downtime.

Contoso wants to implement a BI solution with SQL Server 2014 Reporting Services but is concerned about the growing number of applications that need to be accessed remotely by users with a variety of different mobile devices.

Contoso may be willing to migrate its on-premises web sites to Azure.As part of the pilot, Contoso and its Microsoft partner will work closely to create and manage a Word Press Blog, and ASP.NET website which accesses SQL Server databases in Azure as well as on-premises SQL Server data.

With this new capability, Contoso can reduce the number of on-premises servers needed to develop and run production web content, as well as provide users with easy, secure access to corporate data by integrating Azure AD with on-premises AD.

Page 55: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Azure Web Sites

Page 56: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Hands-on Lab 1Calculating Azure costs

Azure backup

Azure Web Sites

Page 57: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 2: Provisioning and managing Azure Virtual Machine workloads

Microsoft Azure VM Overview

Azure VM Affinity Groups

Provisioning VMs

Managing and Monitoring VM Workloads

Page 58: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Your datacenter

Microsoft Azure

Scalable on-demand infrastructure in the cloud.

Growing list of validated and Microsoft supported workloads.

Secure private network connection to on-premises.

Connect with on-premises Active Directory and domains.

Use what you know, manage with System Center.

Integrates with Microsoft Azure app, data and storage services.

Virtual Machines

Windows Server

Import VHDs

VHD

your app in the public

cloud

Linux

Azure Infrastructure as a Service (IaaS)

Page 59: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Growing gallery of open source Linux images

Licensed & supported by the community

Integrated with Microsoft Azure Management Portal for easy deployment

Working with Open Source

Page 60: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Contoso expects to implement 10+ new virtual machines this year

Aging hardware will need to upgraded and new hardware will need to be purchased to support the new machines

As the number of workloads and hosts grow, servicing the virtual machines and hosts becomes a more complex and manual process

Contoso will SAVE approximately 40 %

}of the IT costs of running the on-premises servers by migrating their virtual machines to Azure.

Scenario: Azure IaaS

Page 61: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft® Virtual Machine Converter

Microsoft Azure Virtual Machines

VMware® vCenter™ vSphere Hypervisor™

Microsoft Hyper-V Hypervisor

PowerShellVMDK

VHD

Open to all apps

Page 62: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft BizTalk ServerMicrosoft Dynamics AXMicrosoft Dynamics GPMicrosoft Dynamics NAVMicrosoft Forefront Identity ManagerMicrosoft HPC Pack Microsoft Project ServerMicrosoft SharePoint ServerMicrosoft SQL ServerMicrosoft System CenterMicrosoft Team Foundation Server

Servers supported on Azure virtual machines

Page 63: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Active Directory Domain ServicesActive Directory Federation ServicesActive Directory Lightweight Directory ServicesApplication ServerDNS ServerFile ServicesNetwork Policy and Access ServicesPrint and Document ServicesRemote Access (Web Application Proxy)Remote Desktop Services*Web Server (IIS)Windows Server Update Services

Server role support on Azure virtual machines

Page 64: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Persistent Virtual Machines with Geo-Replication

Microsoft Azure Storage

Page 65: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Other Service

Providers

VHD

VHD VHD

Your Datacenter

VHD VHD

Microsoft Azure

VHD VHD

VHD VHD

Flexibility and portability of VHD

VHD

VHD

Page 66: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Fault Domain

Rack

IIS1

SQL1

Fault Domain

Rack

IIS2

SQL2

Web Availability Set

SQL Availability Set

Availability sets

Get SLA by deploying multiple instances in availability sets.

Ensure availability during updates and maintenance.

Continue to architecture availability into the application.

Page 67: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Affinity groups

Closely locate your compute, network and storage resources in the same datacenter.

Get better performance.

Get lower latency.

Reduce egress costs.

AffinityGroup

Page 68: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Import VHD

Scalable, on-demand infrastructure for your apps

Apps with public Web front ends, variable traffic sitting in a perimeter network.

Existing custom apps, specialty servers with batch processing patterns.

No app changes – same VHD format.

Manage with tools you know.

On-premises

Microsoft Azure

Business Users

Internet

Virtual Machines

Business Users

Business Application

Windows ServerActive Directory

SQL Server

Microsoft Server

Windows ServerActive Directory

System CenterOperations Manager

You bring it - we run it

Page 69: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Contoso is ready to move several production workloads to Azure VMs

The on-premises environment will remain unchanged to avoid the risk of downtime

2-3 on-premises virtual machines will be imported into Azure to gain confidence and comfort with the VHD import tools

Once communications and access is tested, application deployment, virtual networking, and Active Directory integration testing will begin. Contoso wants to ensure a smooth

transition using a phased approach of integrating Azure and on-premises IT resources

Contoso will work with an experienced cloud-integration partner to create the on-premises integration with Azure IaaS services

The solution will allow Contoso to expand and converge infrastructure as needed to keep up with demands and save costs.

Scenario: Migrating virtual machines to Azure

Page 70: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Enable innovation with test and developmentlabs in the cloud

Cost effective.

Improved developer agility.

Ship tested in realistic scale.

Use existing development tools and languages.

Access on-premises resources if necessary.

On-premises

Microsoft Azure

Lab Sandbox

Developer

Virtual Machines

Virtual Machines

Virtual Machines

SQL ServerWindows Server

VHD

Visual Studio

> PowerShell

Build, test, deploy

Page 71: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

82

OS SKUService Pack

Architecture

Windows Server 2012 R2

All editions

N/A x64

Windows Server 2012

All editions

N/A x64

Windows Server 2008 R2

All editions

SP1 x64

• The Add-AzureVHD cmdlet, which is part of the Microsoft Azure PowerShell module, is required to upload the VHD

• The VHDX format is not supported in Microsoft Azure. You can convert the disk to VHD format using Hyper-V Manager or the Convert-VHD cmdlet.

• The following Windows Server versions are supported:

How to Upload the VHD file to Azure

Page 72: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Create Virtual Machine based on VHD-file• Virtual Machine is a Hyper-V Virtual Machine

• Azure runs thousands of physical Hyper-V servers

• VHD-file (disk) can be:

• Provided by Azure (= "image")

• Provided by customer (= "uploaded vhd-file")

Getting started with VMs

Page 73: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

• The VM is connected to the Internet.• RDP inbound is enabled by default.• RDP port 3389 cannot be used.• A strong password should be used.• The VM has unlimited outbound network access.• Who can control VM?

Security considerations

Page 74: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Charge Rate by the Minute• Microsoft charges for virtual machines by the minute.• Prices are listed as hourly rates and are billed based on total number of

minutes when the virtual machines run for a partial hour.

Basic Compute Tier• New tier of compute instances.• Similar in configuration to the Standard tier with lower prices.• Does not include load balancer and auto-scaling.• Well-suited for single instance production applications, development

workloads, test servers and batch processing applications that might not require these features.

Standard Compute Tier• This tier of compute instances provides an optimal set of compute, memory

and IO resources for running a wide array of applications.• These instances include both auto-scaling, load balancing, and internal

load balancing capabilities at no additional cost.• Internal load balancing feature is currently in preview.

Virtual machine charge rates and tiers

Page 75: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Size CPU cores

Memory Disk sizes – virtual machine Max 1TB Disks

Max. IOPS

(300 per disk)

A0 Shared (0.25)

768 MB OS = 127 GB, Temporary = 20 GB

1 1x300

A1 1 1.75 GB OS = 127 GB, Temporary = 40 GB

2 2x300

A2 2 3.5 GB OS = 127 GB, Temporary = 60 GB

4 4x300

A3 4 7 GB OS = 127 GB, Temporary = 120 GB

8 8x300

A4 8 14 GB OS = 127 GB, Temporary = 240 GB

8 8x300

Basic tier virtual machine sizes

Page 76: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Size CPU cores

Memory

Disk sizes – virtual machine Max. data disks(1 TB each)

Max. IOPS(500 per

disk) A0 Share

d768 MB

OS = 127 GB, Temporary = 20 GB

1 1x500

A1 1 1.75 GB

OS = 127 GB, Temporary = 70 GB

2 2x500

A2 2 3.5 GB OS = 127 GB, Temporary = 135 GB

4 4x500

A3 4 7 GB OS = 127 GB, Temporary = 285 GB

8 8x500

A4 8 14 GB OS = 127 GB, Temporary = 605 GB

16 16x500

A5 2 14 GB OS = 127 GB, Temporary = 135 GB

4 4X500

A6 4 28 GB OS = 127 GB, Temporary = 285 GB

8 8x500

A7 8 56 GB OS = 127 GB, Temporary = 605 GB

16 16x500

A8 8 56 GB OS = 127 GB, Temporary = 382 GB

16 16x500

A9 16 112 GB

OS = 127 GB, Temporary = 382 GB

16 16x500

Standard tier virtual machine sizes

Page 77: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Provisioning and

managing

virtual machines

Page 78: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Hands-on Lab 2Provision a new virtual

machine

Monitoring virtual

machines

Controlling virtual

machines

Page 79: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 3: Azure VM networks

VMNet Overview

Site-to-Site Communications

Partner / Appliance Landscape VPN Support

Page 80: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Contoso has decided that migrating to Azure is a cost savings move. In addition, it will improve productivity by allowing employees to access commonly used intranet data and applications from the road using mobile devices.

The next challenge is setting up virtual networking on the Azure side, and connect the on-premises users and resources to the Azure cloud.

As part the pilot rollout of Azure VMs, the virtual IP Addresses (VIPs) will be set up and the Dynamic IP Address (DIPs) configured.

Scenario: Virtual IP addressing in the cloud

Page 81: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Extending your infrastructure

On-premises

Subnets in Microsoft Azure

GatewayVPN Device

Set up virtual private networks in the cloud.

Manage as extensions of on-premises datacenters.

Logical isolation with network configuration options.

Create subnets, private IP addresses.

Bring your own DNS.

Microsoft AzureVirtual Network

Page 82: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

On-premises

Your datacenter

Individual computers behind corporate firewall

Point-to-Site VPN

Hardware VPN or Microsoft RRAS

Microsoft Azure

Virtual NetworkVPN

Gateway

<subnet 1>

<subnet 2>

<subnet 3>

DNS Server

VPN Gateway

Remote workers

Site-to-SiteVPN

Point-to-site and Site-to-Site virtual network

Page 83: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

• IKE v1, IKE v2

• AES 128, 256

• SHA1, SHA2

Generic VPN devices must support

• Windows Server

• Routing and Remote Access Service (RRAS)

New: Software-based VPN gateway

More options for getting your virtual network started

Page 84: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Your “virtual” branch office ordatacenter in the cloud• Extend your Enterprise Networks into Azure networking

on-ramp for migrating existing apps and services to Windows Azure.

• Enables “hybrid” apps that span cloud and their premises.

A protected private virtual network in the cloud

• Set up secure private IPv4 networks fully contained within Windows Azure .

• IP address persistence.• Inter-service DIP-to-DIP communication.

Windows Azure virtual network

Page 85: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Contoso is concerned about the complexities and IP addressing challengest of connecting Azure public cloud services with on-premises IT infrastructure.

Connecting the office to the Azure public cloud to the on-premises resources is a fairly simple process that takes place on the Azure side by setting up an encrypted connection to the server using IPSEC.

The process will start with a pilot for a limited number of users and resources using the existing RAS/VPN services.

If the pilot is successful, Contoso will invest in a new VPN appliance that will offer better performance, monitoring, and logging.

Scenario: Site-to-site connectivity

Page 86: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

There are multiple ways to access a virtual machine by IP address:VIP – Virtual IP address• An internet-facing IP address that is not bound to a specific computer or network

interface card.• The cloud service that the virtual machine sits within is assigned the VIP.• You can have multiple virtual machines in a cloud service. They share the same

VIP.

DIP – Dynamic IP address• This IP address is dynamically assigned (via DHCP) to your virtual machine by

Windows Azure. You rely on DHCP – Do NOT statically configure your IP address. Even for DCs.

• The IP address lease directly equates to the lifetime of the virtual machine. • If you create a virtual network, the virtual machine will receive its DIP from that

range.

IP addressing in Azure virtual networks

Page 87: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Quick Create VNet

Custom Create VNet

Creating a virtual network in the Management Portal

Page 88: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Individual computers behind corporate firewall

On-p

rem

ises

data

cente

r

VPN

Securely connect to Virtual Network from anywhere.

Uses VPN client in Windows operating system.

Traverses firewalls and proxies.

Remote workers

Site-to-Site VPN

Point-to-Site VPN

Windows Azure datacenter

VPN

Extending your infrastructure

Page 89: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Azure Virtual

Networks

Page 90: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure DNS (IDNS)• You can create your own hostnames.• You don’t need to configure anything.• Resolves VMs by hostname within the same cloud service.• Resolves VMs by FQDN within the same virtual network.• Machine names are modeled explicitly and registered in the

DNS service.• Standard DNS lookups are supported.

Bring your own DNS (BYODNS)• Name resolution between cloud services.• Multiple hostnames for the same virtual machine.• Cross-premises name resolution.• Reverse lookups (PTR).• Wins and NetBIOS name resolution.

User Azure DNS or bring your own DNS

Page 91: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure Traffic Manager

Build high performing cloud applications

Planning for disaster recovery

Upgrade Cloud Applications seamlessly

DNS-based service load balancing

Direct user traffic to services running across Windows Azure datacenters based on policy:

Performance/latency

Round-robin

DR / Failover

Page 92: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

1. User requests info using the company domain name.

2. The DNS RR for the company domain points to a Traffic Manager domain in Windows Azure Traffic Manager. This is done by using a CNAME record.

3. The Traffic Manager domain is part of the Traffic Manager profile that you create. You also create rules within this profile. The rules you select dictate the load balance method you want to use and what you want to monitor for health.

4. Traffic Manager processes the rules and returns the DNS name of the cloud service, which is later resolved to the IP address.

5. The User contacts the service directly, by IP address. This information is cached on the client’s computer. Thus, the client will continue to interact with the selected service until that TTL expires.

How does Traffic Manager work?

Page 93: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

You can configure Traffic Manager in the Management Portal.1. Create a Traffic Manager Profile.2. Add endpoints.3. Configure the DNS TTL.4. Select the Load Balancing Method.

• Round Robin• Performance• Failover. Be sure to adjust the failover order.

5. Configure Monitoring. • You can either monitor ‘/’ (default directory of the services) or create

a file with the same name in each cloud service and allow Traffic Manager to perform an http(s) GET on the file. Then specify in Traffic Manager.

6. Save your changes.

How do I configure Traffic Manager?

Page 94: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Hands-on Lab 3Create and Azure virtual network

Assign virtual machines

Connect on-premises to Azure

Page 95: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 4: Planning and deploying workloads to Azure VMs

Azure AD Service

SQL Server VMs SharePoint VMs

Page 96: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Virtualization

O/S

Hardware

Network

Data

Applications

Firewall

Focus on Application

Windows AzureTraditional Datacenter

Web Applications

Data

Web Sites

Applications

Firewall Rules

Data

Virtual Network

Cloud Services

Virtual Network

Data

Applications

Firewall Rules

O/S

Virtual Machines

Mobile Applications

Data

Mobile Services

Page 97: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Contoso is ready to start its application testing and authentication to Azure VMs and applications from devices running in-house.

Deployment of a replica domain controller, a SharePoint 2010 Foundation Server, and a SQL Server 2014 Standard Edition Server

Contoso users can access applications from their desktops in the office and can access the intranet website using the private

IP address space used for in-house resources

Once the final phase of the testing is completed, the rollout will be to integrate the on-premises AD DS environment with the Azure AD infrastructure to ensure a single sign-on experience for users.

Scenario: Deploying applications

Page 98: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Business Drivers:

• Support for pre-requisites for existing applications, such as SharePoint.

• High Availability Solutions for SQL Server Databases using Always-On Availability Groups.

• Disaster Recovery solution for branch offices and a limited set of virtual machines.

• Dev/Test Workloads.

Active directory on an Azure VM

Page 99: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure VM considerations for DCs

Do not sysprep the Domain ControllerFrom an existing physical machine • P2V a physical machine and move to Windows Azure

• Move the Domain Controllers VHD file to Windows Azure

• Create the virtual machine from the VHD

Starting with a new virtual machine• Build a new virtual machine and replicate directory to Windows Azure

Page 100: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure VM considerations for DCs (cont’d.)

Attach a data disk (caching turned off)• Do not use D:\ ( temporary physical disk)

Put logs and account DB on attached disk to avoid data loss

Page 101: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure VM considerations for DCs (cont’d.)IP Addressing • Windows Azure VMs require use of a DHCP leased IP address.

• The lease is an infinite ‘dynamic’ lease, but not the same as ‘static assigned’

address that you would expect to use in and on-premises environment.

• The leased IP address is routable for the duration of the lease, which is

determined by the life time of the service (or virtual machine).

• Don’t try to assign a static IP to your virtual machine. You will lose

communication to it.

Page 102: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure VM considerations (cont’d.)

Deploy DNS on the Domain Controller• The Windows Azure DNS does not cover the AD DNS records needed.• Register the DNS server in the virtual network.

Page 103: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Common Azure SQL Server scenarios

• Full production environment• Development and test environments• Cloud-based backup of on-premises data• SQL Server Always On with cloud-based secondary's

Page 104: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

In-Memory Built-InAverage 10x faster for new and existing SQL Server apps.

Multi-tenant ManagementEnterprise scale using Windows Server and effective resource management with IO Resource Governor.

Scalability & DensityEnterprise scale using Windows Server.

Partner Opportunity & BenefitWhat’s New with SQL Server 2014

• High performance and scalable DBaaS for business critical applications

• Offer reliable cloud-based database platform (DBaaS) for developers

• Cost efficiency with enhanced density and effective management

DBaaS services with performance and scalability

Page 105: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

PRIMARY SECONDARY WITNESS

SYNCHRONOUS COMMIT

Availability Set: SQLAVSET

Windows Azure Virtual Network

SQL Availability Group

Active Directory

Up to 4 ReplicasCan be read only

Replica AuthenticationActive Directory

DependenciesActive DirectoryVirtual NetworkAvailability SetAutomatic failover with listener (secure with ACL)

HA - SQL Always On Availability Groups

Page 106: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

SQL backup and restore using Blob storage

• Back up or restore using Windows Azure Storage.• Highly Available and Durable with 3 Local Copies of all Blobs.• Enable Geo-Replication for 3 additional copies in a remote region.• SQL can be on-premises or cloud-based.

SQLVM

West USWindows Azure Storage

Backup DB

Restore DB

Page 107: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

SQL Server (IaaS)

Windows Azure SQL Database (PaaS)

Development Migrate Existing or Build New Apps

Develop New Apps

Management Full Control Managed Service

Compatibility Full SQL Server Capabilities Based on SQL Server Technology

Shared TechnologyNetwork transport (Tabular Data Stream)SQL dialect (Transact-SQL)Data access APIs (ADO.NET, ODBC, JDBC)Development tools (SQL Server Data Tools)Management tools (SQL Server Management Studio)More Information: http://blogs.msdn.com/b/windowsazure/archive/2013/02/14/choosing-between-sql-server-in-windows-azure-vm-amp-windows-azure-sql-database.aspx

SQL Server versus Windows Azure SQL Database

Page 108: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Product support• SharePoint Server 2010 and 2013 supports the hosted

virtualization solution of Microsoft, as well as required technologies, such as Microsoft SQL Server, when these products and technologies are deployed on the Windows Azure platform.

FAST Search support• Do not support Microsoft FAST Search Server 2010 for

SharePoint deployments on Windows Azure.

SharePoint support on Windows Azure

Page 109: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

SharePoint Architecture TipsIOPS Most Important Factor

• Optimize SQL Server storage. • Only SharePoint is on the C: drive.

Scale Out Not Up• Move content databases to separate SQL Servers.• Move search databases to separate SQL Servers.• Add more WFE for scaling SharePoint services.• Add dedicated Search servers and SQL Server.

Page 110: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Single virtual machines template

AD/DC/DNSWEB/APP SQL

Cloud Service

Virtual Network

Windows Azure

Web/App Tier1 x Large

(4 Cores & 7 GB)

Data Tier1 x A6

(4 Cores & 28 GB)

Identity Tier1 Small

(1 Core & 1.75 GB)

LB

80

20000Admin

AVETSPWE

B

AVSET

SQL

AVSETDCSET

Page 111: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Highly available templateAD/DC/DNS

LBWEB SQLAPP

80

20000Admin

Cloud Service

Virtual Network

Windows Azure

AVSET

SPWEB

AVSET

SPAPP

AVSETSQLHA

AVSET

DCSET

Web Tier2 x Large

(4 Cores & 7 GB)

App Tier2 x Large

(4 Cores & 7 GB)

Data Tier2 x A6

(4 Cores & 28 GB)

1 x Small (Quorum)

(1 Core & 1.75 GB)

Identity Tier2 Small

(1 Core & 1.75 GB)

Page 112: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Deploy a

Database

to Azure

Page 113: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Hands-on Lab 4Deploy a SQL Server virtual

machine

Deploy a domain controller in Azure

Page 114: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Module 5: Azure AD and identity management

Azure AD DirSync and Password Sync

Third Party SaaS Support and Office 365 Integration

Page 115: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Public identity as the control point

PCs and devices

Microsoft apps

Non-MS cloud-based apps

Custom LOB apps

ISV/CSVapps

Active Directory

Other Directories

Active Directory

Page 116: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

A comprehensive identity and access management cloud solution.

It combines directory services, advanced identity governance, application access management and a rich standards-based platform for developers.

Azure Active Directory Premium is an advanced offering that includes IAM capabilities for on-premises, hybrid and cloud environments.

What is Azure Active Directory?

Page 117: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Cloud app discovery

AD Agent

Logs Active DirectoryCloud App Discovery

Page 118: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Connect and sync on-premises directories with Azure.

Active Directory

Other Directories

LDAP v3

Windows PowerSh

ell SQL (ODBC)

Web Services ( SOAP, JAVA, REST) *Coming soon

*

Single set of credentials

Page 119: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

1200+ Preintegrated popular SaaS apps.

Connect and Sync on-premises directories with Azure.

Your Directory on the cloud

SaaS apps

Active Directory

Other Directories

Page 120: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Preintegrated SaaS apps in the application gallery

Page 121: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

SaaS appsCentralized access

administration for preintegrated SaaS apps and other cloud-based apps.

Secure business processes with advanced access management capabilities.

Comprehensive identity and access management console.

Centrally managed identities and access

Your cloud apps are ready when you are.

IT professional

SaaS apps

Page 122: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

A stand-alone Azure Identity and Access management service also included in Azure Active Directory Premium.

Prevents unauthorized access to both on-premises and cloud applications by providing an additional level of authentication.

Trusted by thousands of enterprises to authenticate employee, customer, and partner access.

What is Azure multi-factor authentication?

Page 123: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Mobile apps Phone calls Text messages

ALERT

1 4 5 6 7 6

How MFA works

Page 124: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

On-Premises Apps

RADIUSLDAPIIS

RDS/VDI

Multi-FactorAuthenticationServer

Multi-FactorAuthenticationService

Cloud Apps

SAML

Users must also authenticate using their phone or mobile device before access is granted.

2

.NET, Java, PHP…

Users sign in from any device using their existing username and password.

1

Windows Server AD or Other LDAP

Active Directory

Page 125: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

MFA for Office 365/Azure

Administrators

Azure Multi-Factor Authentication

Administrators can Enable/Enforce MFA to end-users

Use Mobile app (online and OTP) as second authentication factorUse Phone call as second authentication factor

Use SMS as second authentication factor

Application passwords for non-browser clients (e.g. Outlook, Lync)Default Microsoft greetings during authentication phone calls

Custom greetings during authentication phone calls

Fraud alert

MFA SDK

Security Reports

MFA for on-premises applications/ MFA Server.

One-Time Bypass

Block/Unblock Users

Customizable caller ID for authentication phone calls

Event Confirmation

Azure MFA versus MFA for Office 365

Page 126: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Directory Sync

• Synchronizes users, groups, and contacts to Windows Azure AD.

• Users will have a different password in Windows Azure AD than they have for the on-premises AD.

Page 127: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Password Sync versus Single Sign-On

Password Sync Single Sign-On (ADFS)

Same password to access resources X X

Control password policies on-premises X X

Support for multi-factor authentication X * X

No password re-entry if on premises X

Authentication occurs in on-premises directory X

Client access filtering X

* Limited Support

Page 128: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Preparing for DirSync

From the Windows Azure Management Portal

Page 129: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure AD sync tool

• Formerly known as Dirsync, this tool has been updated to allow for the synchronization of local Active Directory passwords to Azure Active Directory.

• Also synchronizes users, groups and contacts. 

• This new feature will allow for same user sign in with Microsoft cloud services such as Office 365 Education powered by Azure Active Directory since the username and the password from local AD will be synced up to Azure AD.

Page 130: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Demo Installing and running DirSync

Page 131: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Hands-on Lab 5Set up Azure AD

install and run DirSync

Page 132: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Wrap up and Q&A

Page 133: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

The Benefits of Selling Azure

Increase profitabilitywith new lines of business in the cloud

Deliver the right solutions and servicesto your customers

Build and deployquickly on a familiar platform

$

The best path to capitalizing on the major new business opportunities enabled by cloud computing.

Page 134: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Why Microsoft

Microsoft offers compelling competitive differentiation to customers Single vendor across clouds – private, public and hosting

provider.

Single point of support for infrastructure, OS, services, and applications.

Tenured experience and enterprise credibility.

Single vendor for Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS).

SharePoint, SQL Server, and Windows Server run best on Microsoft Azure.

Page 135: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Next steps

Take advantage of available resources. Grow your skills. Aim at getting the relevant competencies.

Define your logical service to offer. Create and implement your readiness plan.

Take advantage of marketing and sales resources. Drive wins in server and cloud, mobility, and BI.

Page 136: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Partner Network benefits overview Action Pack subscription

Silver competency

Gold competency

Microsoft logo Silver competency logo Gold competency logo

Partner Incentives Cloud incentivesLicensing, solution and

cloud incentivesLicensing, solution and

cloud incentives

Internal Use SoftwareUp to 10

product licensesUp to 25

product licensesUp to 100

product licenses

MSDN Subscriptions 3 MSDN 5 MSDN 10 MSDN

Microsoft Pinpoint Marketplace listing Priority listing Premier listing

Partner Support Community

n n n

Partner Advisory Hours Varies by subscription

type20 hours 50 hours

Marketing Tools,Microsoft Financing,Sales Tools

n n n

Active partners can download a benefits summary to understand the benefits available to them and maximize their usage. http://aka.ms/usmpnbenefits

Page 137: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Internal use rights licenses that are part of Cloud Essentials or Cloud Accelerate entitlements must be deployed by Microsoft Partner Network Integration launch in January. The end date for all Internal Use Rights will be June 30, 2014. Must sign MOSPA + CSA agreements in order to qualify for CRM Online IURS.*Please refer to the Disclosure Document for full details. Core benefits are available to all partners in all competencies. **Partners will be able to earn additional licenses of Microsoft Dynamics CRM Online and Windows Azure through specific competencies and competency tracks. Partners are eligible to earn an additional 20 seats of Microsoft Dynamics CRM Online by attaining either a Customer Relationship Management (CRM) competency or an Enterprise Resource Planning (ERP) competency.***Partners can earn additional Office365 licenses by selling Microsoft Online Services. Partners are eligible to receive an additional five seats of Office 365 after selling 25 seats of Office 365 within the previous 12 months.

Internal Use Rights (IUR) Core Benefits* Integrating Microsoft Online Services and Windows Azure

Promoting the

power of choice

Cloud Service

SKUGold

Benefit**Silver

Benefit**MAPS

Benefit***Comments

Office365

E3 100 seats 25 seats 5 seats

Each seat of O365 used in exchange for 1 on-premises Client Access License (CAL) - (SharePoint, Exchange, and Lync).

CRM Online

CRMOL Pro

60 seats 15 seats 5 seatsEach seat of CRM Online used in exchange for 1 on-premises CAL of Dynamics CRM .

Windows Intune

Cloud Service Only

100 licenses 25 licenses 5 licenses

Up to 5 devices per license. Each license of Windows Intune used in exchange for 1 on-premises CAL of System Center Device Manager.

Azure N/A$100

Monthly Credit

$100 Monthly Credit

$100 Monthly Credit

Azure credit is additional to existing on-premises IURs.

Partners can deploy Internal Use licenses via Microsoft Online Services or on-premises software.

Page 138: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Start testing Azure now – using IURs

What to Test? Azure Scenarios for SMB

Why?

Develop expertise now in a controlled environment

using $100 of monthly Azure credits at no charge

Azure Benefits through MPN (MAPS)

Azure Benefits through MSDN

Find out more: http://Aka.ms/azureiur

Where to Start?

Partner Programs, Azure Technical Scenario 101s

Azure 101’s

Azure Backup – Virtual Machines – Active Directory –

Websites

  

Page 139: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Single, universal Action Pack subscription leading with cloudSix resource centers aligned to partner practices (partners can choose 1 or more)

New benefits• Internal Use Rights (IURs): including both on-

premises and Cloud products and services.

• Technical support: Access to telephone support for pre-sales, technical, and deployment issues related to Microsoft Cloud Services.

• Training: access to over 2,000 training courses on selling, configuring, and implementing Microsoft products and services plus discounts on Microsoft Certified Professional exams.

• Developer tools: access to world-class Visual Studio developer tools to support development across Microsoft platforms, including desktop, phone, server, and Web.

• Bing credits: $600 Bing Ads Credit ($100 for partners, $500 for their customers) to market products, services, and solutions.

• Campaigns: exclusive access to Ready-To-Go Marketing Campaigns for Microsoft products and services.

Application design and development

Reselling Professional services

Hosting Managed services

Microsoft Action Pack Subscription – Update

Device design and development

Page 140: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Ahead of the Game Technical SeriesGet additional hands-on technical training on building solutions for small and midsize organizations:

Learn more about the on-demand courses at: http://aka.ms/smblearningpath

Be Lean, Stay Lean with Virtualization and CloudMaster the key technologies for helping SMBs virtualize, and where appropriate, to deploy to the cloud.

Be Lean, Stay Lean with the Data Platform Learn to leverage the power of SQL Server 2014 to deliver database solutions both on-premises and in the cloud.

Be Lean, Stay Lean with the Microsoft Cloud Learn about Azure cloud solutions and reselling Azure through the Open licensing channel.

Business AnywhereGain the skills to provide solutions to SMB customers in for key mobility and remote access scenarios.

Tap Your Data GoldmineLearn how to deliver powerful business intelligence solutions to your SMB customers using familiar tools.

Page 141: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Partner Learning Paths

The Microsoft Partner Learning Paths site is the key resource for all competency related training. Specifically:

• Sales Specialist assessments.• Pre Sales Technical assessments.• Technical assessments.• Technical Certification courses that align to competency.

For more info on the Learning Paths click here.

Microsoft Partner Learning Paths

The Learning Paths site allows you to build learning plans for resources within your organization.

Create plans by product, competency, or partner type and track your progress!

Click here for a demo!

Page 142: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Training Certifications and Accreditations

Microsoft Technical CertificationsMicrosoft Solutions Associate (MCSA)Microsoft Solutions Expert (MCSE)

Microsoft Sales Specialist AccreditationDesigned for individuals, who support the initial stage of the sales process at Microsoft partner organizations, and require only a high-level overview of technical product features and benefits. Microsoft Pre Sales Technical AccreditationDesigned for technical professionals, who support sales teams with value demonstrations and proof-of-concept development to close deals on solutions built on Microsoft technologies.

Get more information at Microsoft Learning

Get more information on Sales Specialist training and accreditation

Get more information on Pre-Sales Technical training and accreditation

Page 143: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Become a Microsoft Cloud PartnerWhen you become a Microsoft Cloud Partner, you receive a set of core benefits to help you start and build your cloud practice, including:

• Internal-use software rights.• Tailored training.• Prioritized exposure in Microsoft marketing and

product directories.

Members of the Microsoft Partner Network Cloud Essentials program receive monthly credits of $100 of Windows Azure at no charge.For details, visit:http://www.windowsazure.com/en-us/offers/ms-azr-0051p/

Page 144: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Provide monthly reporting and payment.

Join the MicrosoftPartner Network.

Sign the Microsoft Business and Services Agreement.

Join the MicrosoftHosting Community.

Contact your SPLA-Disti for further assistance.

Build your offer and start selling to customers.

1 2 3

4 5 6

• Rented Virtual Servers Shared or Dedicated

• Disaster Recovery

• Rented virtual database servers

• Database-as-a-Service

• Lync, SharePoint, Exchange, Dynamics

• CRM, ERP, LOB apps• Custom LOB apps

• Ecommerce sites • Company websites• Gaming &

entertainment

• Windows desktops for students or call centers

• Mobile sales team apps

VM HostingDatabase Hosting

Application Hosting Web Hosting Desktop Hosting

Exam

ple

s

Ser

vice

O

ffer

ings

&

Man

aged

Ser

vice

s

To become an authorized SPLA hosting provider, follow these 6 easy steps:

Microsoft hosting solutions—based on one common platform (Windows Server, System Center & SQL Server)

For full detail requirements, please see the SPLA Program Guide

Host your own solutions to rent out to your customers with SPLA

Page 145: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Learn more about SPLAPlan

Take advantage the momentum. Plan and expand your service offerings on Microsoft Cloud OS

• Download and Try: Windows Server 2012 R2, System Center 2012 R2, Windows Azure Pack.

• Learn more about Cloud OS.

• TechNet Virtual Labs.

• Hosting Resources on MS.COM/hosting.

• Microsoft Partner Network Hosting Community.

Optimize and Build

Build and optimize your services offerings by leveraging new capabilities

• Data Center and Data Platform Hosting Competency..

• Technical Deployment Camp: Cloud Infrastructure and SQL Server.

• Hosting Days Events.

• Cloud OS Hosting Service Provider Programs: Hyper-V Ignite, COSN, Cloud OS Network

• Technical Reference Architecture.

Sell

Expand your reach with investments in marketing and sales

• Microsoft Services Provider License Agreement (SPLA).

• License Mobility through Software Assurance.

• Microsoft Partner NetworkResources .

• Partner Marketing CenterHosting Service Provider Campaign.

Page 146: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Microsoft Virtual Academy (MVA) offers online Microsoft training delivered by experts to help technologists continually learn, with hundreds of courses, in 11 different languages. Learn the latest technology, build skills, and advance your careers.

1.Create a Microsoft Virtual Academy profile.

2.Watch courses or attend a live event to build your skills.

3.Track your progress and get recognized.

Microsoft Virtual AcademyFree Microsoft Training Delivered by Experts

173

Register today! Visit http://www.microsoftvirtualacademy.com

Page 147: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

With more than 5 million IT pros, Spiceworks is where people go to share and find info on all-things-IT.

Spiceworks

Visit today! http://www.spiceworks.com/

Free AppDownload the Spiceworks app to get network inventory, network monitoring, help desk software, and more!

Free CommunitySpiceworks has all the IT resources you need to make smart IT decisions, including product reviews, vendor ratings, IT help, how-tos, and discussions.

Free Career ToolsTake your career wherever you want it to go by creating a portfolio, searching job listings, and browsing helpful tips and resources.

Page 148: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Be Lean, Stay LeanUnderstand how virtualization opens the door to value-added services and offerings.

Business AnywhereFind out how you can support the expanding SMB remote and mobile workforce.

Tap Your Data GoldmineHelp SMBs use data to their advantage in three easy steps.

Ahead of the game campaign resourcesLeverage Server and Cloud Solutions to dramatically increase margin and keep SMB customers ahead of the game

Get started today! Visit http://aka.ms/AheadoftheGame to find the marketing materials and sales tools you need get SMB customers ahead of the game.

Page 149: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Next steps

Microsoft Partner Network

https://mspartner.microsoft.com/

Ahead of the Game Technical Series

http://aka.ms/smblearningpath

Ramp Up Virtual Summit

http://aka.ms/rampup

Azure in Open FAQ, decks and datasheets

http://aka.ms/AzureVAR

Join the Cloud Partner Community group on Yammer

Page 150: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Summary of partner resources

Ahead of the Game Marketing Content

http://aka.ms/AheadoftheGame

Competencies http://partner.Microsoft.com

Microsoft Virtual Academy

http://www.microsoftvirtualacademy.com/

Partner Learning Center:

https://mspartner.microsoft.com/en/us/Pages/Training/partner-learning-center.aspx

ISV Upgrade Support

Email [email protected] with app name and name of ISV

Page 151: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Page 152: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Appendix

Page 153: Ahead of the Game Technical Series Sharon Bennett SMB Product Technology Advisor October 15, 2014

Azure Migration Strategy