Overview of some of the most compelling features which have been added to Windows 8.1; focusing on the in box features which finally offer a catalyst for truly beginning to embrace the ideas of Bring Your Own Device, using Work folders, Work Place Join and Web Application Proxy

1. Keynote @ 9am in Main
Hall
First Session in this hall is after the Keynote

2. Windows 8.1 Enterprise
Ready
Damian Flynn, MVP

3. @damian_flynn
www.DamianFlynn.com
www.petri.co.il/author/damian-flynn
Damian Flynn is the Infrastructure Architect. His current focus is on Software
Defined Networks (SDN) with “Windows Azure Pack”, with perspective on
Orchestration of repeatable processes in “Dev/Ops” scenarios.
He has a keen interest in Cloud Computing from both a business strategy and
technical viewpoint and presents sessions on building and managing Private/Hybrid
Clouds at a number of industry events. Damian authored the Cloud chapters on two
books, is active in many MS Programs, blogs at www.damianflynn.com &
www.petri.co.il, tweets at @damian_flynn, and has published a number of white
papers and technical articles.
info@DamianFlynn.com

4. anywhere,and Experiences users love
Devices anytime expectations
BYOD goes mainstream
dynamic, connected, global environment
Enterprise grade solutions businesses
enabling mobile professional
require

5. Building on the Windows 7
and Windows 8 foundation
Windows 8.1
Free Upgrade from Windows 8
Available NOW!

6. Businesses adopting and
developing for Windows 8
High interest in Windows tablet solutions
Businesses taking advantage
of new Windows apps
Windows To Go enabling new customer
scenarios
Windows 8 security and virtualization
advancements address needs of IT
New class of devices

7. Windows 8.1
Compatibility
Hardware Requirements Unchanged
Supports all applications previously
validated on Windows 8
Supports both Windows Desktop Applications and new
Windows Application Interface

8. Windows 8.1 investments for the enterprise
Best business tablet
and more
Windows apps
for business
Enterprise
grade security
Empower
BYOD
Mobility for
the enterprise

9. Forrester’s 2013 Mobile Workforce adoption trends:
29% of global workforce can be characterized as
“anywhere, anytime” information workers, up from 23% in 2011
Nearly 80% of workers spend at least some portion
of their time working out of the office
According to ZDNet and TechRepublic’s BYOD Business
Strategy Survey, 62% of companies either already have Bring
Your Own Device allowances in place, or plan to by the end of
2013

10. Feature
BitLocker® and BitLocker To Go®
Boot from virtual hard disk (VHD)
Windows 8
Windows 8
Pro
X
X
Windows 8
Enterprise
X
X
Client Hyper-V
X
X
Domain Join
X
X
Encrypting File System
X
X
Group Policy
X
X
AppLocker®
X
BranchCache®
X
DirectAccess
X
Side-load Windows RT apps
X
Virtualization through RemoteFX®
X
Windows To Go
X

11. Windows 8.1: UI enhancements
Start Screen improvements
See the desktop only
when you need it
Leave the desktop only
when you want to
Windowing and improved
multi-monitor support
New search experience

12. Group Policy Objects New in 8.1
Force a specific background and accent
color
Force a specific Start background
Prevent enabling lock screen camera
Prevent enabling lock screen slide show
Start Screen Layout
Restrict delegation of credentials to remote
servers
Configure Group Policy Caching
Configure Logon Script Delay
Do now sync start settings
Sign-in last interactive user
automatically after a system-imitated
restart
Always automatically restart at the schedule
time
Force automatic setup for all users
Default App
Default Search
Multi Monitors
Pin Apps to Start when installed
Sort
Set the time Quiet Hours begins each day
Set the time Quiet Hours ends each day
Turn off calls during Quiet Hours
Turn off Quiet Hours
App switching
Charms
WinX
Allow Microsoft service to provide enhance
suggestions as the user types in the Address
bar
Allow Internet Explore to use the SPDY/3
network protocol
Turn off sending UTF-8 query strings for URLs
Turn on 64-bit tab processes when running in
Enhance Protected Mode on 64-bit version of
Windows
Don’t run antimalware programs against
ActiveX controls
Turn off phone number detection

13. Windows
Apps for
Business

14. Windows 8.1:
Assigned Access
Enables a single Windows Store
app experience on the device
User only experiences the
specified app
Unable to access system files
and other apps
Windows Embedded 8.1 Industry:
broader set of device lockdown
capabilities (ATMs, etc.)

15. Windows Apps Ready for your Business
App Opportunity for Your Company
Engage your customers
Increase employee
productivity
Minimize development
efforts

16. • Apps share screen
• Multi-monitor support
• Higher DPI support
• New contracts for apps
• High-precision touchpad

17. Windows Apps Deployment Simplified
Install from Windows Store
Distribute LOB apps internally
Internal LOB W Apps
Public W Apps
Install from Windows Phone
Store
Public WP8 Apps
Management
solution
Internal LOB WP8 Apps

18. Mobility:
Productive
and
connected

19. Mobility Productive and connected
Work anywhere on any Windows device
INTERNET
CORPORATE
NETWORK
Connect to your networks
on the go
Your PC in your pocket
with Windows To Go
Access your data and apps
on any Windows device
Wirelessly connect
to peripherals

20. Windows 8.1:
Connectivity
Business class VPN features

21. Any Device, Any Location Direct Access
Corporate
network
LOB App
Internal site
User initiated
Auto-triggered
Inbox Third party VPN clients
Microsoft VPN client
Windows 8.1
DirectAccess

23. Any Device, Any Location Business Class VPN
LOB App
Data servers
Lync
FIREWALL
SkyDrive
DirectAccess
Mobile Broadband
Wi-Fi
*Internet access required
*Internet access required
Exchange
SharePoint
SkyDrive Pro

24. Platform extended to support VPN partners

25. Enhanced VPN Infrastructure and support
Built into Windows
• Works out of box with minimal configuration
Secure and stable
• Runs in a sandbox and only in user context
Performance with no compromise
• System controls the interface and process lifetime
Integrated experience
• User experience blends with Windows.

26. Windows 8.1:
Connectivity
Business class VPN features
Native Miracast wireless display
Integrated wireless printing

27. Demonstration NFC Printer Binding & WiDi

28. Windows 8.1:
Connectivity
Business class VPN features
Native Miracast wireless display
Integrated wireless printing
SoC-integrated mobile broadband
Your PC as a personal WiFi hotspot

29. Windows To Go Certified Devices
Optimized for operation and downloading Windows 8.1 Enterprise for equipment certified
for use Windows 7 and later operating systems Windows.
Manufacturer
Storage size
Kingston® DataTraveler® Workspace
www.kingston.com/wtg
32, 64, 128 GB
*Microsoft only supports certified drives.
32, 64, 128, 256 GB
www.spyruswtg.com
32, 64, 128 GB
SPYRUS Secure Portable Workplace™
32, 64, 128 GB
Super Talent Express RC8
www.supertalent.com/wtg
www.supertalent.com/wtg
SPYRUS Portable Workplace™
Imation IronKey® Workspace W500
www.imation.com/wtg
Storage size
Super Talent RC4
32, 64, 128 GB
Imation IronKey® Workspace W300
www.imation.com/wtg
Manufacturer
www.spyruswtg.com
32, 64, 128 GB
WD My Passport Enterprise
32, 64, 128 GB
www.wd.com/wtg
500 GB

30. Windows To Go Consistent Cross Device Experience
App-V
UE-V
Folder
Re-Direct
FIREWALL
App-V
UE-V
Folder
Re-Direct
App-V
UE-V
Folder Re-Direct
01100111
11010011
11001001
10001001
01100111
11010011
11001001
10001001
Booting from
Internal hard drive
* Any device certified for use with Windows 7 or Windows 8. Software Assurance (SA) for Windows required
Booting from
External USB drive
BitLocker

31. Applications and Data Always With YOU
Work folders or
LostWindows device
or damaged device
Pro
UserUser settings on
data on replacement
Replacement device
replacement device
device

32. Empower
BYOD

33. Managing Windows Devices
Governance
Exchange
ActiveSync
Full control
Mobile Device Management
via OMA-DM
Enterprise
Management
Windows 8.1 provides choices
Choose by device based on scenario or capabilities needed
Consider employee versus organization-owned, BYOD, connectivity
Organizations may choose the options that works the best for them

34. MDM Mobile Device Management
Based on open standards
Uses Open Mobile Alliance Device Management protocols
Secure communication with cloud-based management
No additional agent required in Windows 8.1 and Windows RT 8.1
Implemented by multiple ISVs
Microsoft (Windows Intune)
AirWatch
Mobile Iron
Open protocol enables implementation
by additional vendors

35. Windows 8.1:
Work Folders
Access data from anywhere on
different devices

36. Demonstration Enabling and Subscribing to Work Folders
Work Folders

37. Windows 8.1:
Workplace join
Manage access to company data
Register personal devices
Simple for the employee
Device enrollment with Windows
Intune

38. Demonstration Enabling and Subscribing to Workplace Join
Work Place Join

39. Windows 8.1
on ARM
Outlook 2013 RT
Support for 3rd party MDM solutions
Workplace join and work folders
Inbox 3rd party VPN clients

40. Touch-first, fast and fluid user
experience

41. Remote Desktops Maximize VDI Investment
Microsoft VDI: Powered by Windows Server 2012
Corporate
Office
Desktop
Sessions
Branch
Office
* Software Assurance (SA) for Windows required. Internet required.
Personal
VMs
1 platform | 1 experience | 3 deployment choices
FIREWALL
Home
Pooled
VMs
Library/Coffee
house

42. Multiple Desktops Client Hyper-V multiple OS
Windows 8 VM
Windows 7 VM
Windows Server VM
Linux VM
Run multiple operating systems on a single Windows 8 PC
* Windows 8 Pro required

43. Publish web applications to users
to access from anywhere on any
device

44. Web Application Proxy Exhibiting Services Securely
Not Joined to AD
Workplace joined
Domain joined
Active Directory
Limited access
No IT Control

45. Enterprise
Grade
Security

46. Windows 8 Security Capabilities
Malware resistance
Secure corporate
data
Secured system start-up
Core system hardening
Sandboxed Windows Store apps
Built-in anti-malware solution
Real time anti-phishing protection
Trustworthy hardware
Modern access
control

47. Windows 8 Security Capabilities
Malware resistance
Secure corporate
data
Secured system start-up
Core system hardening
Sandboxed Windows Store apps
Built-in anti-malware solution
Real time anti-phishing protection
Corporate encryption enforcement
IP protection with Office IRM
Corporate compliance with Lync
Trustworthy hardware
Modern access
control

48. Windows 8 Security Capabilities
Malware resistance
Secure corporate
data
Modern access
control
Secured system start-up
Core system hardening
Sandboxed Windows Store apps
Built-in anti-malware solution
Real time anti-phishing protection
Corporate encryption enforcement
IP protection with Office IRM
Corporate compliance with Lync
Multifactor authentication, virtual
smartcard support
Dynamic access control
Trustworthy hardware

49. Windows 8.1 Security Capabilities
Malware resistance
Secure corporate
data
Modern access
control
Secured system start-up
Improved Windows Defender
Core system hardening
Improved browser security
Sandboxed Windows Store apps
Improved system hardening
Built-in anti-malware solution
Provable anti-phishing protection
Real timePC health
Corporate encryption enforcement
IP protection with Office IRM
Corporate compliance with Lync
Multifactor authentication, virtual
smartcard support
Dynamic access control
Trustworthy hardware

50. Windows 8.1 Security Capabilities
Malware resistance
Secured system start-up
Core system hardening
Sandboxed Windows Store apps
Built-in anti-malware solution
Real time anti-phishing protection
Improved Windows Defender
Improved browser security
Improved system hardening
Provable PC health
Secure corporate
data
Modern access
control
Device Encryption all editions
Remote Business Data Removal
Corporate encryption enforcement
IP protection with Office IRM
Corporate compliance with Lync
Multifactor authentication, virtual
smartcard support
Dynamic access control
Trustworthy hardware

51. Windows 8.1 Security Capabilities
Malware resistance
Secure corporate
data
Secured system start-up
Core system hardening
Sandboxed Windows Store apps
Built-in anti-malware solution
Real time anti-phishing protection
Improved Windows Defender
Improved browser security
Improved system hardening
Provable PC health
Corporate encryption enforcement
IP protection with Office IRM
Corporate compliance with Lync
Device Encryption all editions
Remote Business Data Removal
Trustworthy hardware
Modern access
Modern access
control
control
Biometrics
Multifactor authentication, virtual
Improved multifactor authentication
smartcard support
TPM key attestation
Dynamic access control
Certificate reputation

52. Windows 8.1 investments for the enterprise
Best business tablet
and more
Windows apps
for business
Enterprise
grade security
Empower
BYOD
Mobility for
the enterprise

53. Windows 8.1 Enterprise Edition Features
Enterprise
Sideloading
Start Screen
Control
Control Start screen
configurations for
different groups and
roles using Group
Policy
Create a corporate
Windows 8.1
environment on a
USB stick
How to License
Connected to
corporate networks,
seamlessly
and more securely
Users in the branch
office can download
documents and apps
faster
Improved end-user
experience
Specify what
software is allowed
to run on a user's PCs
Deploy Windows 8
apps from outside of
the Windows Store
Rights are included with Software Assurance for Windows
Enterprise edition use rights are perpetual for the licensed device even after
SA coverage ends.

54. Questions?
Download TWO Free

55. THANK YOU!
Damian Flynn MVP
Cloud and Datacentre
System Center