Windows Store Apps: Enterprise LOB App Deployment Scenarios Michael NiehausSenior Product Marketing ManagerMicrosoft

DC-B320

First, let’s agree on some terms

Windows Store appsModern, full-screen applications written to the WinRT API that run on Windows 8 and Windows RT.Sometimes also called WinRT apps, modern apps, Windows 8 apps, and the “M” word.

Microsoft AccountAn online account, formerly called a Live ID.

Windows StoreAn online store for acquiring Windows Store apps, and an application by the same name on Windows 8 and Windows RT for accessing the online store. Requires a Microsoft account to install new apps (but not to install updates).

First, let’s agree on some terms

Appx filesA self-contained packaging format for Windows Store apps, effectively a zip file containing all the necessary components for the application, except for dependencies (which would also be Appx files).

SideloadingThe process of installing or provisioning Windows Store apps without going through the Windows Store. There are specific requirements to enable this.

LOB AppsLine of business applications developed, developed and used by enterprises, although sometimes used as a substitute for “sideloaded app”.

Windows Store apps

Install via an “Enterprise App Store” using:• System Center 2012 Configuration

Manager SP1• Windows Intune

Provision using the Microsoft Deployment Toolkit 2012 or DISM• Include in sysprepped image• Customize Start screen layout

ProvisioningInstallation

Register the application for the userAlways per-userDoes not require administrator rightsSide load or from the Windows Store

Register application on the computerInstall automatically for each userSide load onlyRequires administrator rights

Enterprise side loading requirements• Windows 8 Enterprise, domain joined or with a separate side load product key • Windows 8 Pro or Windows RT, with a separate side load product key

Demo

Doing it the manual (hard) way

The manual wayThings to Remember

Prerequisites must be met:Set the Allow All Trusted Apps policyImport any needed trusted root certificatesEnable sideloading (automatic with Windows 8 Enterprise when domain joined)

PowerShell and DISM commands do the workSee http://technet.microsoft.com/library/hh852635.aspx for more information

Demo

Deploying and managing apps with Configuration Manager

Using ConfigMgrThings to Remember

Windows Store apps install per userCannot be installed via a task sequenceNo native support for provisioning apps, but this can be done using standard software distribution and custom command linesUse the App Catalog web site to enable self-service installation of Windows Store apps“Deep links” can be used, but the user must still log in with a Microsoft Account and click “Install”

Requires ConfigMgr 2012 SP1

Demo

Deploying and managing apps with Windows Intune

Using Windows IntuneThings to Remember

Enables self-service app installationPublish apps to the Company App Portal (Windows Store app)Users can “pull” apps from the cloud, but no IT-driven “push”Requires setting up DirSync, best with single sign-on

Requires Windows Intune wave D (January release)

Demo

Provisioning apps with the Microsoft Deployment Toolkit

Using Microsoft Deployment ToolkitThings to Remember

Focuses on image creation scenariosProvisioning apps in the image (Windows limit of 24 apps)See http://technet.microsoft.com/library/jj134269.aspx and http://blogs.technet.com/b/deploymentguys/archive/2012/10/26/start-screen-customization-with-mdt.aspx for more informationRemember, you can’t install apps from the Windows Store before sysprepping

Requires MDT 2012 Update 1

Demo

Deploying and managing apps with other solutions

Using Other SolutionsThings to Remember

Anyone can build an app storeWinRT APIs for installing and upgrading apps are fully supported and documentedSee http://companystore.codeplex.com/ for an example, created by Antoine Journaux Antoine.Journaux@microsoft.com (PFE)

Any software distribution tool can install and provision appsUsing PowerShell or DISM commandsRunning as the user, for installationRunning as admin, for provisioning

FAQ’s

Can I customize the Start screen layout?Yes, see http://technet.microsoft.com/en-us/library/jj134269.aspx for the basic process.

Can I get the .appx files for <insert Microsoft app here>?Presently, there are no plans to provide any appx files for Office (OneNote MX, Lync MX), Windows (updated versions of the in-box apps), etc. Third parties may provide these.

Can I prevent users from installing <insert Windows Store app>?You can disable the Windows Store completely (which also prevents installing updated in-box apps), or you can use AppLocker to whitelist or blacklist Windows Store apps.

FAQ’s

Why is the Windows Store disabled on Windows To Go?There could be licensing issues if the Windows To Go device is attached to too many different PCs. You can configure a policy to enable this if you want.

Where can I get a sideload product key?These are available to SA customers through the Volume Licensing Service Center, http://www.microsoft.com/licensing/servicecenter.

FAQ’s

Can I use the Mail app without a Microsoft ID?No, you must specify a Microsoft ID even if you are going to be using Exchange or third-party IMAP for e-mail.

Can I programmatically install an app from the Windows Store?While you can specify a “deep link” URL to navigate directly to a specific Windows Store app, you cannot initiate the installation. The user will need to click the “Install” button.

Why can’t the Windows Store apps find my proxy server?These apps don’t use the Internet Explorer proxy settings. There are also issues with authenticating proxy servers. See http://support.microsoft.com/kb/2777643 and http://support.microsoft.com/kb/2778122, acknowledging the issues and suggesting workarounds. See this doc on http://windows8ready for more information: http://infopedia/docstore/pages/kcdoc.aspx?DocId=191045

Evaluation

Complete your session evaluations today and enter to win prizes daily. Provide your feedback at a CommNet kiosk or log on at www.2013mms.com.Upon submission you will receive instant notification if you have won a prize. Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer. Entry details can be found on the MMS website.

We want to hear from you!

Resources

http://channel9.msdn.com/Events

Access MMS Online to view session recordings after the event.

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.