View
1.737
Download
2
Tags:
Embed Size (px)
DESCRIPTION
Discover what’s new in Windows 8.1 regarding interface, settings, deployment, security, … How will Windows 8.1 fit in your enterprise? How do you upgrade? All answers are here!
Citation preview
Microsoft NDA Confidential
Microsoft NDA Confidential
Lock Screen changes
Start Screen enhancements
Search
New Store Layout
And yes,… the Start Button
Microsoft NDA Confidential
Microsoft NDA Confidential
Boot to Desktop
Show Desktop Background on Start
Replace CMD with Powershell
Presentation of AppsUser Configuration \ Administrative Templates \Windows Components \Edge UI
Microsoft NDA Confidential
CopyProfile still exists
Provision Startmenu layout
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral"
versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance”>
<CopyProfile>true</CopyProfile>
</component>
</settings>
%windir%\system32\Sysprep\Sysprep.exe /oobe /generalize /shutdown /unattend:f:\unattend.xml
Export-startlayout –path \\path\file.xml –as xml (or “-as bin”)
Microsoft NDA Confidential
Pin Apps to start when installed
Based on AppIDs
AppIDs can be found via Powershell
get-startapps
Put AppIDs in a GPO
Microsoft NDA Confidential
Not available in Preview
Microsoft NDA Confidential
Cannot be removed, you can disable though
Microsoft NDA Confidential
Windows Modern AppsTraditional Desktop Apps
Setup.exe installers
Windows Installer (MSI)
OneClick (.NET)
App-V, Click-to-Run
Can be installed silently (usually)
Typically requires admin rights, usually installs per
machine
Still used in Windows 8 (unchanged)
New packaging mechanism
Very simple installation mechanism
Always installs quietly
Does not require admin rights, always installs per user (if form
the store)
New in Windows 8, essentially unchanged in Windows 8.1
Microsoft NDA Confidential
Install via an “Enterprise App Store” using: Provision using the Microsoft Deployment Toolkit 2012 or DISM
ProvisioningInstallation
Microsoft NDA Confidential
DISM /Online /Add-ProvisionedAppxPackage /PackagePath:C:\App1.appx /SkipLicense
Make sure your reference Image has no Apps from the store
Apps need to be provisioned in your image
Add-AppxProvisionedPackage -Online -FolderPath C:\Appx
Use ConfigMgr for Installation on demand
Microsoft NDA Confidential
Windows Store Apps cannot be installed via a TS
No native support for provisioning apps during a TS
Deep Link Support but a Microsoft ID is required
You need ConfigMgr 2012 R2 for FULLFULLFULLFULL Windows 8.1 support (or-and MDT 2013)
http://blogs.technet.com/b/configmgrteam/archive/2013/09/16/support-questions-about-win-8.1-and-winsvr-2012-r2-for-configmgr-and-endpoint-protection.aspx
Microsoft NDA Confidential
It’s all about the performance of the OS
Suspend <> Terminate Apps
Something changed when trying to close an app…
Microsoft NDA Confidential
Hardware requirements are unchanged
Desktop AppCompat is excellent
Windows Store Apps are compatible
Internet Explorer 11 compatibility (support back to IE6)
Microsoft NDA Confidential
The goal is to migrate very fast from Win8 to Win8.1
Consumers initiate the update through the Windows Store
Enterprises deploy the
update themselves
using a software distribution tool, e.g.
System Center
Microsoft NDA Confidential
Microsoft NDA Confidential
Capture data and settings
Remove existing
OS
Install new OS image
Install apps
Restore data and settings
Capture data
settings, and apps
Remove existing
OS
Install new OS image
Restore data,
settings, and apps
Windows Setup
USMT USMTDISM
Deployment Tools (MDT, ConfigMgr)
Refresh:
Update:
Microsoft NDA Confidential
Microsoft NDA Confidential
Windows AIK
• Windows PE 3.x
• USMT 4.0
• Windows System Image Manager
• DISM
• ImageX
ADK 8.1
• Windows PE 5.0
• USMT “6.3”
• Windows System Image Manager
• DISM
• ImageX*
• Application Compatibility Toolkit
• Volume Activation Management Tool
• Windows Performance Toolkit
• Windows Assessment Toolkit
Microsoft NDA Confidential
Windows XP Windows Vista Windows 7 Windows 8 Windows 8.1
Windows XP USMT 3 USMT 4 USMT 4, 5 USMT 5 Not supported
Windows Vista Not supported USMT 4 USMT 4, 5 USMT 5 Not supported
Windows 7 Not supported Not supported USMT 4, 5, “6.3” USMT 5, “6.3” USMT “6.3”
Windows 8 Not supported Not supported Not supported USMT 5, “6.3” USMT “6.3”
Windows 8.1 Not supported Not supported Not supported Not supported USMT “6.3”
You might need different versions
Support for Office 2013 (hotfix added to USMT 5.0)
http://blogs.technet.com/b/configmgrteam/archive/2013/09/12/how-to-migrate-user-data-from-win-xp-to-win-8-1-with-system-center-2012-r2-configmgr.aspx
Microsoft NDA Confidential
Windows 7
• Image size:
• 1.97GB image (WIM), 7.87GB expanded
• Installation time (new):
• 15 minutes
• Upgrade time (from Vista):
• 30 minutes
Windows 8
• Image size:
• 1.96GB image (WIM), 7.76GB expanded
• Installation time (new):
• 10 minutes
• Upgrade time (from Windows 7):
• 20 minutes
Windows 8.1
• Image size:
• 2.13GB image (WIM), 7.65GB expanded
• Installation time (new):
• ~10 minutes
• Upgrade time (from Windows 8):
• ~20 minutes
Microsoft NDA Confidential
4 Goals
� Struggle to enter credentials on touch devices
� Built-in Windows Experience
� Introduce new “touch” fingerprint sensors
� Move from traditional to modern
Microsoft NDA Confidential
Microsoft NDA Confidential
Microsoft NDA Confidential
IT can publish access to corporate resources with the Web Application Proxy based on device awareness and the user’s identity.; multi-factor authentication can be used through Windows Azure Active Authentication (formerly PhoneFactor)
Users can register BYO devices for single sign-on and access to corporate data with Workplace Join. As part of this, a certificate is installed on the device
Users can enroll devices that configure the device for management with Windows Intune; the user can then use the Company Portal for easy access to corporate applications
As part of the registration process, a new device object is created in Active Directory, establishing a link between the user and their device
Data from Windows Intune is in sync with Configuration Manager, which provides unified management across both on-premises and in the cloud
Microsoft NDA Confidential
Data managementQuotasFile screensReportingClassificationRMS protection
Device management policyFile encryption / selective wipeRequire password / device lock
Limit access to registered devices (ADFS)
AuthenticationKerberos (Windows Auth)Digest (Windows Auth)
ADFS (OAuth)
https://workfolders.contoso.com
Microsoft NDA Confidential
Microsoft NDA Confidential
Windows 8.1 Client Hyper-v
Support of UEFI and Secure Boot (Gen 2)
Also in WS12R2
Windows To Go
Store is not longer disabled by default
NFC Support
NFC tagging
Miracast Wireless Display
Pair with a Miracast-enabled display and project wire free
Microsoft NDA Confidential
http://technet.microsoft.com/en-us/windows/dn140266
Release Notes: http://www.microsoft.com/en-us/download/confirmation.aspx?id=40244