Windows 8 - NetCom Learning

advertisement
Migrating from Windows XP
to Windows 7 or 8 / 8.1
Shane Snipes
Rinchen Khampa
NetCom’s Sr. Microsoft Trainer
Marketing Manager
Microsoft Technical Specialist
NetCom’s Average Instructor Rating: 8.7/9
www.NetComLearning.com
NetCom Learning
Agenda
www.netcomlearning.com/webinars
www.NetComLearning.com
Deploying
Windows
Shane Snipes
Sr. Microsoft Technical Trainer
NetCom Learning
Retire
Workstyle 2001
anywhere, anytime expectations
BYOD goes mainstream
dynamic, connected, global environment
businesses at crossroads
Windows XP
Launch
Windows XP SP3
Launch
Windows XP SP3
End of Support
October
2001
April
2008
April 8
2014
Thank you for being a Windows XP Customer!
1
Get Value today. Get Modern.
Windows 7
“Windows 7 has gotten
positive reviews, and many Gartner
clients are now in the midst of their
production deployments.” - Gartner
2
Eliminate Risks of
Windows XP End of Support
3
Deployment is easier
than you think
Windows 8
Organizations that continue to retain a Windows
XP environment not only are leaving themselves exposed to
security risks and support challenges but also are wasting
budget dollars that would be better used in modernizing their IT
investments.” - IDC Whitepaper (May 2012)
Risks
• Lack of support from ISVs and OEMs for the new
applications and PC hardware
• Security and compliance issues running
unsupported software
• Need to purchase expensive custom support
• Office 2013 does not work with Windows XP
• Deployment tools, guidance and best
practices on Springboard /TechNet
• Windows 8 Evaluation edition
Accelerate
1
Get Value today. Get Modern.
Windows 7
“Windows 7 has gotten
positive reviews, and many Gartner
clients are now in the midst of their
production deployments.” - Gartner
2
Eliminate Risks of
Windows XP End of Support
3
Deployment is easier
than you think
Windows 8
Organizations that continue to retain a Windows
XP environment not only are leaving themselves exposed to
security risks and support challenges but also are wasting
budget dollars that would be better used in modernizing their IT
investments.” - IDC Whitepaper (May 2012)
Risks
• Lack of support from ISVs and OEMs for the new
applications and PC hardware
• Security and compliance issues running
unsupported software
• Need to purchase expensive custom support
• Office 2013 does not work with Windows XP
Accelerate
• Springboard Series on TechNet
Make Users Productive
Anywhere
Enhance Security
& Control
Streamline PC
Management
• At their desk
• In a branch
• On the road
• Protect data & PCs
• Built on secure foundation
• Easy migration
• Keep PCs running
• Virtualization
Fast, Responsive, Reliable
Annual Cost
Savings /PC
Service Desk
$22-62
Desktop Management
$25-98
Deployment & Provisioning
$12-61
Power Savings
$3-45
Total Direct IT Costs Savings
Application Management
Best Practices w/ APP-V
$43-268
Up to $82
Up to 20% savings of Direct IT Costs
Up to $350/ PC total direct-cost savings potential
with end user productivity gains of additional $125
annual savings
Devices & Experiences People Love
No Compromise
Business Tablet
New Possibilities in
Mobile Productivity
Business-Grade Solutions
Enhanced End-to-End
Security
Management
and Virtualization
Windows 8: No Compromise Business Tablet
Touch first experience
Cloud connected
Full Mouse &
Keyboard Support
Office and Windows 7
Productivity & LOB Apps
Business Class
Manageability & Security
1
Get Value today. Get Modern.
Windows 7
“Windows 7 has gotten
positive reviews, and many Gartner
clients are now in the midst of their
production deployments.” - Gartner
2
Eliminate Risks of
Windows XP End of Support
3
Deployment is easier
than you think
Windows 8
Organizations that continue to retain a Windows
XP environment not only are leaving themselves exposed to
security risks and support challenges but also are wasting
budget dollars that would be better used in modernizing their IT
investments.” - IDC Whitepaper (May 2012)
Risks
• Lack of support from ISVs and OEMs for the new
applications and PC hardware
• Security and compliance issues running
unsupported software
• Need to purchase expensive custom support
• Office 2013 does not work with Windows XP
Accelerate
• Springboard Series on TechNet
Organizations that continue to retain a Windows XP environment not
only are leaving themselves exposed to security risks and support
challenges but also are wasting budget dollars that would be better
used in modernizing their IT investments.
- IDC Whitepaper (May 2012)
Key Threats
• Internet was just growing
• Mail was on the verge
Key Threats
• Melissa (1999), Love Letter
(2000)
• Mainly leveraging social
engineering
1995
2001
Windows 95
Windows XP
•
•
•
•
•
•
-
Logon (Ctrl+Alt+Del)
Access Control
User Profiles
Security Policy
Encrypting File System (File
Based)
• Smartcard and PKI Support
• Windows Update
Key Threats
• Code Red and Nimda (2001),
Blaster (2003), Slammer
(2003)
• 9/11
• Mainly exploiting buffer
overflows
• Script kiddies
• Time from patch to exploit:
Several days to weeks
Key Threats
• Zotob (2005)
• Attacks «moving up the
stack» (Summer of Office 0day)
• Rootkits
• Exploitation of Buffer
Overflows
• Script Kiddies
• Raise of Phishing
• User running as Admin
2004
Windows XP SP2
• Address Space Layout
Randomization (ASLR)
• Data Execution Prevention
(DEP)
• Security Development
Lifecycle (SDL)
• Auto Update on by Default
• Firewall on by Default
• Windows Security Center
• WPA Support
Key Threats
•
•
•
•
•
2007
Organized Crime
Botnets
Identity Theft
Conficker (2008)
Time from patch to exploit:
days
Key Threats
• Organized Crime, potential
state actors
• Sophisticated Targeted
Attacks
• Operation Aurora (2009)
• Stuxnet (2010)
2009
2012
Windows Vista
Windows 7
Windows 8
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Bitlocker
Patchguard
Improved ASLR and DEP
Full SDL
User Account Control
Internet Explorer Smart
Screen Filter
Digital Right Management
Firewall improvements
Signed Device Driver
Requirements
TPM Support
Windows Integrity Levels
Secure “by default”
configuration (Windows
features and IE)
•
•
•
•
•
•
•
Improved ASLR and DEP
Full SDL
Improved IPSec stack
Managed Service Accounts
Improved User Account
Control
Enhanced Auditing
Internet Explorer Smart
Screen Filter
AppLocker
BitLocker to Go
Windows Biometric Service
Windows Action Center
Windows Defender
•
•
•
•
•
•
•
•
•
•
UEFI (Secure Boot)
Firmware Based TPM
Trusted Boot (w/ELAM)
Measured Boot and Remote
Attestation Support
Significant Improvements
to ASLR and DEP
AppContainer
Windows Store
Internet Explorer 10 (Pluginless and Enhanced Protected
Modes)
Application Reputation
moved into Core OS
BitLocker: Encrypted Hard
Drive and Used Disk Space
Only Encryption Support
Virtual Smartcard
Picture Password, PIN
Dynamic Access Control
Built-in Anti-Virus
8
Billions
6
4
1995
1995
1996
1997
1998
1999
2000
Twitter
Windows
Mobile
Convention on
Cybercrime
2
0
Facebook
Windows
Tablet PC
iPad
YouTube
2001
2001
2002
2003
2004
2004
2005
2006
2007
2007
2008
2009
2009
2010
2011
Ad-hoc internet
connection
Always-on connect
Daily life on Internet
Privacy and
Intellectual property
Anywhere access
Cloud and
multi devices
Windows 95
Windows XP
Windows XP SP2
Windows Vista
Windows 7
Windows 8
• Logon Experience
• Ctrl+Alt+Del
• User Profile
• Encryption
• Windows Update
• Security Development
Lifecycle (SDL)
• Exploit Prevention (ASLR,
DEP)
• Auto Update on by Default
• Firewall on by Default
• Windows Security Center
• Full SDL
• Additional technology to
prevent exploitation
• Disk Encryption (Bitlocker)
• Non-Admin User
• User Account Control
• Internet Explorer Smart
Screen Filter
• Digital Right Management
• Secure “by default”
configuration (Windows
features and IE)
• Full SDL
• Application Control
(AppLocker)
• Bitlocker to Go
• Windows Defender
• Windows Action Center
• Improvements on attack
prevention (ASL, DEP, IPSec)
• Internet Explorer Smart
Screen Filter
2012
2012
• Full SDL
• Secure Boot (UEFI)
• Significant Improvements
on attack prevention (ASLR,
DEP, IPSec)
• Windows Store
• Built-in Anti-Virus
• Internet Explorer 10 (Pluginless and Enhanced
Protected Modes)
• Application Reputation
moved into Core OS
• Improved BitLocker
• Virtual Smartcard
• Picture Password, PIN
Consider moving to Windows 8
Begin investigating Windows 8 opportunities
Prepare your infrastructure for Windows 8
Start your Windows 8 deployment project
Prepare your infrastructure for Windows 8
Continue deploying as long as you are far enough along
Consider coexistence scenarios
Begin investigating Windows 8 opportunities
Prepare your infrastructure for Windows 8
Start your Windows 8 deployment project now!
Prepare your infrastructure for Windows 8
Preparation is key
Application
Management
Create repeatable,
automated processes
The result: A permanent
part of your infrastructure
Infrastructure
Readiness
Project
Management
Office
Image
Engineering
Deployment
Application Compatibility Toolkit
Tools to help
• Application
Compatibility Toolkit
• Microsoft Assessment
and Planning Toolkit
• System Center 2012
Configuration
Manager
• Windows Intune
Categorize
•
•
•
•
Critical
Supported
Unsupported
Blocked
Rationalize
Perfection is
impossible, focus
based on risk
and cost
• Don’t test everything
• Choose when to be
reactive instead of
proactive
Choices
•
•
•
•
Shim
Upgrade
Replace
Eliminate
Application
Management
Simplify the
structured testing
process
Infrastructure
Readiness
Project
Management
Office
Image
Engineering
Gather inventory
Prioritize your
portfolio
Perform testing
when appropriate
Remediate
when needed
Windows 7 applications are compatible with Windows 8
Deployment
Tools to help
• Line-of-business sites
• Third-party internal
sites
• External sites
Categorize
•
•
•
•
Critical
Supported
Unsupported
Blocked
Rationalize
Perfection is
impossible, focus
based on risk
and cost
• Don’t test everything
• Choose when to be
reactive instead of
proactive
Choices
•
•
•
•
Fix
Upgrade
Replace
Eliminate
Application
Management
Simplify the
structured testing
process
Infrastructure
Readiness
Project
Management
Office
Image
Engineering
Gather inventory
Prioritize your
portfolio
Perform testing
when appropriate
Remediate
when needed
Many web site compatibility issues are easy to fix
Deployment
Group policy
Roaming profiles
• Network load
• Disk storage
• Other options
• User data
• Applications
• Images
Activation
Helpdesk
Coexistence
• System Center
Configuration
Manager
• Windows Intune
• Third-party tools
Capacity
Infrastructure
Readiness
• Wireless access
• Proxy configuration
(WPAD)
Management
Bring Your Own
Device
Application
Management
Project
Management
Office
Image
Engineering
Deployment
Repeatable and automated
Install operating
system
Keep it simple
• Strive for a single image
• Include only what is needed for the
majority, or what saves time
• Leverage the deployment process for
per-computer customization
• Don’t get carried away with
configuration
Decide on security settings and
runtime components early
Application
Management
Capture new
image
Configure OS
settings and
default
Install common
applications
Infrastructure
Readiness
Project
Management
Office
Image
Engineering
Apply updates
and patches
Deployment
Application
Management
Infrastructure
Readiness
Project
Management
Office
Image
Engineering
Deployment
Windows 7
Business x64
Windows 8
Business x64
Capture data
and settings
Remove
existing OS
Install new OS
image
Install
applications
Restore data
and settings
Leverages key tools
Easy to implement
Windows Assessment and Deployment
Kit (ADK)
Fully automated by Microsoft
deployment products
• Windows PE
• User State Migration Tool
• Microsoft Deployment Toolkit 2012
• System Center 2012 Configuration Manager
Significantly faster
No gathering is done in the existing Windows 7 OS
Moves entire folders instead of working file-by-file
Leverages NTFS hardlinks to avoid copying files
Some limitations
Windows 7 to Windows 8 only
Only the standard Windows image can be used,
no custom images
No cross-platform upgrades (e.g. x86 to x64)
Something to consider
If you are using our deployment products
If you are using other deployment products
• New model for building
and deploying
applications
• Business can “side load”
line-of-business
applications
• Replacement for legacy
PC BIOS
• Faster startup and resume
• More secure using Secure
Boot and Measured Boot
• Completely new scenario
• Uses USB 3.0 devices with
a “portable” Windows 8
Business installation
• New provisioning process
• Touch screen-only,
no keyboard
• Often with only wireless
networking
• Sillicon-on-chip (SoC) devices
Windows Store apps
Installation
Provisioning
Fast and secure booting with UEFI
Faster
More capable
Secure Boot
Measured Boot
Detects and deters malware
before the OS starts
Business Self-Service (user/IT pro)
Leverages System Center 2012 Configuration Manager SP1
Image is applied to a new certified USB 3.0 device
Provisioning process is completed on the corporate network
Windows 8 Business wizard (admin/IT pro)
Search for “Windows To Go” from Windows 8 Start screen
Specify the WIM image, certified USB 3.0 device to use, BitLocker password
Optionally, add first-boot automation (unattend.xml)
Scripted process (IT pro)
Use PowerShell scripts to provision USB 3.0 devices
Apply image and configure it to boot
Duplicate USB 3.0 device as required (before first boot)
Windows To Go Usage Scenarios
Evaluation and
Testing
Bring Your Own
Device
Contingent Staff
Not intended for full-time, ongoing usage
Windows Store access is not enabled by default
Management tools need to be Windows To Go-aware
Occasional Users
Pre-provisioning
Hardware encrypted disk
drives
Network unlock (with UEFI)
Standard user PIN change
New .NET 4.0 and
PowerShell 3.0 support
Enables BitLocker preprovisioning
New version of the Windows
Automated Installation Kit
New assessment and
performance tools
Enhances existing tools
New Active Directory-based
Activation
KMS and MAK activation are
unchanged from Windows 7
Microsoft Deployment Toolkit 2012 Update 1
Free solution accelerator
http://www.microsoft.com/mdt
Fully supports Windows 8 deployment:
Windows ADK support
Provisioning of Windows Store applications (side loading)
BitLocker Pre-Provisioning
Installation of roles and features
Improved UEFI support
Comprehensive systems management product
Fully supports Windows 8 deployment:
Windows ADK support
Installation of Windows Store applications (side loading)
BitLocker Pre-Provisioning
New UEFI support
Windows 8.1 Quick Guide for Business (for online
distribution)
This 16 page brochure-type quick guide provides a basic introduction to key
Windows 8.1 features and capabilities in business settings – how to get around,
navigate, manage apps, work on desktop, and personalize Windows 8.1. It can be
used as first introduction of Windows 8.1 to business users.
NEW: Windows 8.1 Power User Guide for Business
A 20-page brochure designed for users who want to learn more about the
advanced features of Windows 8.1, such as Taskbar customization, Task
Manager, Internet Explorer 11, Mobility Center, Windows To Go, Miracast, and
File Explorer.
NEW: Advanced Windows 8.1 how-to video tutorials
A series of short videos (~4 minutes each) designed to educate business endusers on advanced Windows 8.1 features and capabilities via guided, step-bystep instruction.
Advanced Desktop (1): Quick link Menu and File Explorer
Advanced Desktop (2): Taskbar, Multiple Monitors, Task Manager
Internet Explorer 11
Exploring PC Settings
Windows 8.1 Quick Guide for Business (raw files for
printing)
This package allows customers to produce their own hard copies of the Windows
8.1 Quick Guide for Business and give it away as training assets to end-users. This
zip file includes the content in PDF, PowerPoint, and Adobe InDesign formats that
customers can use as-is or customize to match the requirements of their
organization.
Windows 8.1 how-to video tutorials (basics)
Meet the new Windows
Get around faster with the charms
Your familiar desktop, only better
Make Windows all about you
Download all of the Windows 8.1 end-user readiness content on
Windows Business site |Resources |Training
Offers
Windows Corporate Buyback Program
Goodbye XP, Hello HP
End of support links
Windows XP and Office 2003 End of Support Page
What does end of support mean to customers
Support Lifecycle policy
Blogs
Infection rates and end of support for Windows XP
Windows 7 resources
Help you successfully deploy Windows 7 in your organization
Deployment resources
Windows 8.1 evaluation
how other companies have benefitted
Microsoft Deployment Toolkit
latest recommended Windows devices
Certified Microsoft Partner
Technical resources
Springboard Series on TechNet
Understanding MDT, WDS, MAP, ACT, SCCM and USMT
Is XP Good Enough Customer Roundtable
App Compat Home Page
Planning and Prepping for Windows 8
Windows Compatability and Migration
Migrating from XP to Windows 7
Windows 8.1 resources
Windows 8.1 Business – Full Deck
Windows 8.1 Core Messaging
What’s New in 8.1
Messaging and Positioning
Customer Presentations
Product Information
How to…Set up Miracast
How to…Set up Assigned Access
Download the Evaluation: Windows 8.1 Business
Get more with Windows 8.1 Enterprise
Enterprise rights are included with Software Assurance for Windows
Enterprise edition use rights are perpetual for the licensed device even after SA
coverage ends
Get 24/7 support and training with Software Assurance for Windows
More in Windows 8.1 Business
Business
Sideloading
Start Screen
Control
Control Start screen
configurations for
different groups
and roles using
Group Policy
Create a corporate
Windows 8.1
environment on a
USB stick
Connected to
corporate networks,
seamlessly
and more securely
Users in the branch
office can
download
documents and
apps faster
Improved end-user
experience
Specify what
software is
allowed to run on
a user's PCs
Deploy Windows 8
apps from outside of
the Windows Store
Staying with Windows XP is a bad idea
Support for Windows XP
ends April 8, 2014
Faster boot times
Longer battery life
Better performance
Implications:
Security risks
Compatibility issues
No one to call
Potential down time
The new Office does not run on
Windows XP.
More secure (Windows
XP is 21 times more
likely to be infected by
malware than Windows
8*)
Easier and more
powerful file explorer
with ribbon UI
Multi-tasking with
desktop snap
Search your PC, web and
SkyDrive from one location
Faster Wi-Fi reconnection
Auto-triggered VPN
SkyDrive integration
Windows store and
modern apps
Improved task manager
Plus all the benefits of Windows 8.1 Pro and the modern
experience…
MCSA
Windows 7 or Windows 8
All Windows 8 Courses Updated | January 2014
• 20687-C: Configuring Windows 8.1
• 20688-C: Supporting Windows 8.1
• 20689-C: Upgrading your skills to MCSA Windows 8 (8.1 update)
MCSA: Windows 8
Exam 70-687
(20687C)
Exam 70-688
(20688C)
Exam 70-689
(20689C)
OR
Configuring
Windows 8.1
Supporting
Windows 8.1
Upgrading
Your Skills to MCSA Windows 8
(8.1 content)
All Windows 8 & Server 2012 Courses & Exams Updated for ‘8.1’ and ‘R2’ - January 2014
www.netcomlearning.com
Special Mention
MCSA: Office 365 Certification
Course 20346: Managing Office 365 Identities and Services
Inaugural Class Dates:
• April 14th – April 18th
• May 19th – May 23rd
Special Promotion for the above course dates:
• 2 Free Exams Vouchers + Second Shot
• Limited Edition Certificate of Completion
http://www.netcomlearning.com/education/specials.phtml
www.netcomlearning.com
Download