Migrating from Windows XP to Windows 7 or 8 / 8.1 Shane Snipes Rinchen Khampa NetCom’s Sr. Microsoft Trainer Marketing Manager Microsoft Technical Specialist NetCom’s Average Instructor Rating: 8.7/9 www.NetComLearning.com NetCom Learning Agenda www.netcomlearning.com/webinars www.NetComLearning.com Deploying Windows Shane Snipes Sr. Microsoft Technical Trainer NetCom Learning Retire Workstyle 2001 anywhere, anytime expectations BYOD goes mainstream dynamic, connected, global environment businesses at crossroads Windows XP Launch Windows XP SP3 Launch Windows XP SP3 End of Support October 2001 April 2008 April 8 2014 Thank you for being a Windows XP Customer! 1 Get Value today. Get Modern. Windows 7 “Windows 7 has gotten positive reviews, and many Gartner clients are now in the midst of their production deployments.” - Gartner 2 Eliminate Risks of Windows XP End of Support 3 Deployment is easier than you think Windows 8 Organizations that continue to retain a Windows XP environment not only are leaving themselves exposed to security risks and support challenges but also are wasting budget dollars that would be better used in modernizing their IT investments.” - IDC Whitepaper (May 2012) Risks • Lack of support from ISVs and OEMs for the new applications and PC hardware • Security and compliance issues running unsupported software • Need to purchase expensive custom support • Office 2013 does not work with Windows XP • Deployment tools, guidance and best practices on Springboard /TechNet • Windows 8 Evaluation edition Accelerate 1 Get Value today. Get Modern. Windows 7 “Windows 7 has gotten positive reviews, and many Gartner clients are now in the midst of their production deployments.” - Gartner 2 Eliminate Risks of Windows XP End of Support 3 Deployment is easier than you think Windows 8 Organizations that continue to retain a Windows XP environment not only are leaving themselves exposed to security risks and support challenges but also are wasting budget dollars that would be better used in modernizing their IT investments.” - IDC Whitepaper (May 2012) Risks • Lack of support from ISVs and OEMs for the new applications and PC hardware • Security and compliance issues running unsupported software • Need to purchase expensive custom support • Office 2013 does not work with Windows XP Accelerate • Springboard Series on TechNet Make Users Productive Anywhere Enhance Security & Control Streamline PC Management • At their desk • In a branch • On the road • Protect data & PCs • Built on secure foundation • Easy migration • Keep PCs running • Virtualization Fast, Responsive, Reliable Annual Cost Savings /PC Service Desk $22-62 Desktop Management $25-98 Deployment & Provisioning $12-61 Power Savings $3-45 Total Direct IT Costs Savings Application Management Best Practices w/ APP-V $43-268 Up to $82 Up to 20% savings of Direct IT Costs Up to $350/ PC total direct-cost savings potential with end user productivity gains of additional $125 annual savings Devices & Experiences People Love No Compromise Business Tablet New Possibilities in Mobile Productivity Business-Grade Solutions Enhanced End-to-End Security Management and Virtualization Windows 8: No Compromise Business Tablet Touch first experience Cloud connected Full Mouse & Keyboard Support Office and Windows 7 Productivity & LOB Apps Business Class Manageability & Security 1 Get Value today. Get Modern. Windows 7 “Windows 7 has gotten positive reviews, and many Gartner clients are now in the midst of their production deployments.” - Gartner 2 Eliminate Risks of Windows XP End of Support 3 Deployment is easier than you think Windows 8 Organizations that continue to retain a Windows XP environment not only are leaving themselves exposed to security risks and support challenges but also are wasting budget dollars that would be better used in modernizing their IT investments.” - IDC Whitepaper (May 2012) Risks • Lack of support from ISVs and OEMs for the new applications and PC hardware • Security and compliance issues running unsupported software • Need to purchase expensive custom support • Office 2013 does not work with Windows XP Accelerate • Springboard Series on TechNet Organizations that continue to retain a Windows XP environment not only are leaving themselves exposed to security risks and support challenges but also are wasting budget dollars that would be better used in modernizing their IT investments. - IDC Whitepaper (May 2012) Key Threats • Internet was just growing • Mail was on the verge Key Threats • Melissa (1999), Love Letter (2000) • Mainly leveraging social engineering 1995 2001 Windows 95 Windows XP • • • • • • - Logon (Ctrl+Alt+Del) Access Control User Profiles Security Policy Encrypting File System (File Based) • Smartcard and PKI Support • Windows Update Key Threats • Code Red and Nimda (2001), Blaster (2003), Slammer (2003) • 9/11 • Mainly exploiting buffer overflows • Script kiddies • Time from patch to exploit: Several days to weeks Key Threats • Zotob (2005) • Attacks «moving up the stack» (Summer of Office 0day) • Rootkits • Exploitation of Buffer Overflows • Script Kiddies • Raise of Phishing • User running as Admin 2004 Windows XP SP2 • Address Space Layout Randomization (ASLR) • Data Execution Prevention (DEP) • Security Development Lifecycle (SDL) • Auto Update on by Default • Firewall on by Default • Windows Security Center • WPA Support Key Threats • • • • • 2007 Organized Crime Botnets Identity Theft Conficker (2008) Time from patch to exploit: days Key Threats • Organized Crime, potential state actors • Sophisticated Targeted Attacks • Operation Aurora (2009) • Stuxnet (2010) 2009 2012 Windows Vista Windows 7 Windows 8 • • • • • • • • • • • • • • • • • • • • • Bitlocker Patchguard Improved ASLR and DEP Full SDL User Account Control Internet Explorer Smart Screen Filter Digital Right Management Firewall improvements Signed Device Driver Requirements TPM Support Windows Integrity Levels Secure “by default” configuration (Windows features and IE) • • • • • • • Improved ASLR and DEP Full SDL Improved IPSec stack Managed Service Accounts Improved User Account Control Enhanced Auditing Internet Explorer Smart Screen Filter AppLocker BitLocker to Go Windows Biometric Service Windows Action Center Windows Defender • • • • • • • • • • UEFI (Secure Boot) Firmware Based TPM Trusted Boot (w/ELAM) Measured Boot and Remote Attestation Support Significant Improvements to ASLR and DEP AppContainer Windows Store Internet Explorer 10 (Pluginless and Enhanced Protected Modes) Application Reputation moved into Core OS BitLocker: Encrypted Hard Drive and Used Disk Space Only Encryption Support Virtual Smartcard Picture Password, PIN Dynamic Access Control Built-in Anti-Virus 8 Billions 6 4 1995 1995 1996 1997 1998 1999 2000 Twitter Windows Mobile Convention on Cybercrime 2 0 Facebook Windows Tablet PC iPad YouTube 2001 2001 2002 2003 2004 2004 2005 2006 2007 2007 2008 2009 2009 2010 2011 Ad-hoc internet connection Always-on connect Daily life on Internet Privacy and Intellectual property Anywhere access Cloud and multi devices Windows 95 Windows XP Windows XP SP2 Windows Vista Windows 7 Windows 8 • Logon Experience • Ctrl+Alt+Del • User Profile • Encryption • Windows Update • Security Development Lifecycle (SDL) • Exploit Prevention (ASLR, DEP) • Auto Update on by Default • Firewall on by Default • Windows Security Center • Full SDL • Additional technology to prevent exploitation • Disk Encryption (Bitlocker) • Non-Admin User • User Account Control • Internet Explorer Smart Screen Filter • Digital Right Management • Secure “by default” configuration (Windows features and IE) • Full SDL • Application Control (AppLocker) • Bitlocker to Go • Windows Defender • Windows Action Center • Improvements on attack prevention (ASL, DEP, IPSec) • Internet Explorer Smart Screen Filter 2012 2012 • Full SDL • Secure Boot (UEFI) • Significant Improvements on attack prevention (ASLR, DEP, IPSec) • Windows Store • Built-in Anti-Virus • Internet Explorer 10 (Pluginless and Enhanced Protected Modes) • Application Reputation moved into Core OS • Improved BitLocker • Virtual Smartcard • Picture Password, PIN Consider moving to Windows 8 Begin investigating Windows 8 opportunities Prepare your infrastructure for Windows 8 Start your Windows 8 deployment project Prepare your infrastructure for Windows 8 Continue deploying as long as you are far enough along Consider coexistence scenarios Begin investigating Windows 8 opportunities Prepare your infrastructure for Windows 8 Start your Windows 8 deployment project now! Prepare your infrastructure for Windows 8 Preparation is key Application Management Create repeatable, automated processes The result: A permanent part of your infrastructure Infrastructure Readiness Project Management Office Image Engineering Deployment Application Compatibility Toolkit Tools to help • Application Compatibility Toolkit • Microsoft Assessment and Planning Toolkit • System Center 2012 Configuration Manager • Windows Intune Categorize • • • • Critical Supported Unsupported Blocked Rationalize Perfection is impossible, focus based on risk and cost • Don’t test everything • Choose when to be reactive instead of proactive Choices • • • • Shim Upgrade Replace Eliminate Application Management Simplify the structured testing process Infrastructure Readiness Project Management Office Image Engineering Gather inventory Prioritize your portfolio Perform testing when appropriate Remediate when needed Windows 7 applications are compatible with Windows 8 Deployment Tools to help • Line-of-business sites • Third-party internal sites • External sites Categorize • • • • Critical Supported Unsupported Blocked Rationalize Perfection is impossible, focus based on risk and cost • Don’t test everything • Choose when to be reactive instead of proactive Choices • • • • Fix Upgrade Replace Eliminate Application Management Simplify the structured testing process Infrastructure Readiness Project Management Office Image Engineering Gather inventory Prioritize your portfolio Perform testing when appropriate Remediate when needed Many web site compatibility issues are easy to fix Deployment Group policy Roaming profiles • Network load • Disk storage • Other options • User data • Applications • Images Activation Helpdesk Coexistence • System Center Configuration Manager • Windows Intune • Third-party tools Capacity Infrastructure Readiness • Wireless access • Proxy configuration (WPAD) Management Bring Your Own Device Application Management Project Management Office Image Engineering Deployment Repeatable and automated Install operating system Keep it simple • Strive for a single image • Include only what is needed for the majority, or what saves time • Leverage the deployment process for per-computer customization • Don’t get carried away with configuration Decide on security settings and runtime components early Application Management Capture new image Configure OS settings and default Install common applications Infrastructure Readiness Project Management Office Image Engineering Apply updates and patches Deployment Application Management Infrastructure Readiness Project Management Office Image Engineering Deployment Windows 7 Business x64 Windows 8 Business x64 Capture data and settings Remove existing OS Install new OS image Install applications Restore data and settings Leverages key tools Easy to implement Windows Assessment and Deployment Kit (ADK) Fully automated by Microsoft deployment products • Windows PE • User State Migration Tool • Microsoft Deployment Toolkit 2012 • System Center 2012 Configuration Manager Significantly faster No gathering is done in the existing Windows 7 OS Moves entire folders instead of working file-by-file Leverages NTFS hardlinks to avoid copying files Some limitations Windows 7 to Windows 8 only Only the standard Windows image can be used, no custom images No cross-platform upgrades (e.g. x86 to x64) Something to consider If you are using our deployment products If you are using other deployment products • New model for building and deploying applications • Business can “side load” line-of-business applications • Replacement for legacy PC BIOS • Faster startup and resume • More secure using Secure Boot and Measured Boot • Completely new scenario • Uses USB 3.0 devices with a “portable” Windows 8 Business installation • New provisioning process • Touch screen-only, no keyboard • Often with only wireless networking • Sillicon-on-chip (SoC) devices Windows Store apps Installation Provisioning Fast and secure booting with UEFI Faster More capable Secure Boot Measured Boot Detects and deters malware before the OS starts Business Self-Service (user/IT pro) Leverages System Center 2012 Configuration Manager SP1 Image is applied to a new certified USB 3.0 device Provisioning process is completed on the corporate network Windows 8 Business wizard (admin/IT pro) Search for “Windows To Go” from Windows 8 Start screen Specify the WIM image, certified USB 3.0 device to use, BitLocker password Optionally, add first-boot automation (unattend.xml) Scripted process (IT pro) Use PowerShell scripts to provision USB 3.0 devices Apply image and configure it to boot Duplicate USB 3.0 device as required (before first boot) Windows To Go Usage Scenarios Evaluation and Testing Bring Your Own Device Contingent Staff Not intended for full-time, ongoing usage Windows Store access is not enabled by default Management tools need to be Windows To Go-aware Occasional Users Pre-provisioning Hardware encrypted disk drives Network unlock (with UEFI) Standard user PIN change New .NET 4.0 and PowerShell 3.0 support Enables BitLocker preprovisioning New version of the Windows Automated Installation Kit New assessment and performance tools Enhances existing tools New Active Directory-based Activation KMS and MAK activation are unchanged from Windows 7 Microsoft Deployment Toolkit 2012 Update 1 Free solution accelerator http://www.microsoft.com/mdt Fully supports Windows 8 deployment: Windows ADK support Provisioning of Windows Store applications (side loading) BitLocker Pre-Provisioning Installation of roles and features Improved UEFI support Comprehensive systems management product Fully supports Windows 8 deployment: Windows ADK support Installation of Windows Store applications (side loading) BitLocker Pre-Provisioning New UEFI support Windows 8.1 Quick Guide for Business (for online distribution) This 16 page brochure-type quick guide provides a basic introduction to key Windows 8.1 features and capabilities in business settings – how to get around, navigate, manage apps, work on desktop, and personalize Windows 8.1. It can be used as first introduction of Windows 8.1 to business users. NEW: Windows 8.1 Power User Guide for Business A 20-page brochure designed for users who want to learn more about the advanced features of Windows 8.1, such as Taskbar customization, Task Manager, Internet Explorer 11, Mobility Center, Windows To Go, Miracast, and File Explorer. NEW: Advanced Windows 8.1 how-to video tutorials A series of short videos (~4 minutes each) designed to educate business endusers on advanced Windows 8.1 features and capabilities via guided, step-bystep instruction. Advanced Desktop (1): Quick link Menu and File Explorer Advanced Desktop (2): Taskbar, Multiple Monitors, Task Manager Internet Explorer 11 Exploring PC Settings Windows 8.1 Quick Guide for Business (raw files for printing) This package allows customers to produce their own hard copies of the Windows 8.1 Quick Guide for Business and give it away as training assets to end-users. This zip file includes the content in PDF, PowerPoint, and Adobe InDesign formats that customers can use as-is or customize to match the requirements of their organization. Windows 8.1 how-to video tutorials (basics) Meet the new Windows Get around faster with the charms Your familiar desktop, only better Make Windows all about you Download all of the Windows 8.1 end-user readiness content on Windows Business site |Resources |Training Offers Windows Corporate Buyback Program Goodbye XP, Hello HP End of support links Windows XP and Office 2003 End of Support Page What does end of support mean to customers Support Lifecycle policy Blogs Infection rates and end of support for Windows XP Windows 7 resources Help you successfully deploy Windows 7 in your organization Deployment resources Windows 8.1 evaluation how other companies have benefitted Microsoft Deployment Toolkit latest recommended Windows devices Certified Microsoft Partner Technical resources Springboard Series on TechNet Understanding MDT, WDS, MAP, ACT, SCCM and USMT Is XP Good Enough Customer Roundtable App Compat Home Page Planning and Prepping for Windows 8 Windows Compatability and Migration Migrating from XP to Windows 7 Windows 8.1 resources Windows 8.1 Business – Full Deck Windows 8.1 Core Messaging What’s New in 8.1 Messaging and Positioning Customer Presentations Product Information How to…Set up Miracast How to…Set up Assigned Access Download the Evaluation: Windows 8.1 Business Get more with Windows 8.1 Enterprise Enterprise rights are included with Software Assurance for Windows Enterprise edition use rights are perpetual for the licensed device even after SA coverage ends Get 24/7 support and training with Software Assurance for Windows More in Windows 8.1 Business Business Sideloading Start Screen Control Control Start screen configurations for different groups and roles using Group Policy Create a corporate Windows 8.1 environment on a USB stick Connected to corporate networks, seamlessly and more securely Users in the branch office can download documents and apps faster Improved end-user experience Specify what software is allowed to run on a user's PCs Deploy Windows 8 apps from outside of the Windows Store Staying with Windows XP is a bad idea Support for Windows XP ends April 8, 2014 Faster boot times Longer battery life Better performance Implications: Security risks Compatibility issues No one to call Potential down time The new Office does not run on Windows XP. More secure (Windows XP is 21 times more likely to be infected by malware than Windows 8*) Easier and more powerful file explorer with ribbon UI Multi-tasking with desktop snap Search your PC, web and SkyDrive from one location Faster Wi-Fi reconnection Auto-triggered VPN SkyDrive integration Windows store and modern apps Improved task manager Plus all the benefits of Windows 8.1 Pro and the modern experience… MCSA Windows 7 or Windows 8 All Windows 8 Courses Updated | January 2014 • 20687-C: Configuring Windows 8.1 • 20688-C: Supporting Windows 8.1 • 20689-C: Upgrading your skills to MCSA Windows 8 (8.1 update) MCSA: Windows 8 Exam 70-687 (20687C) Exam 70-688 (20688C) Exam 70-689 (20689C) OR Configuring Windows 8.1 Supporting Windows 8.1 Upgrading Your Skills to MCSA Windows 8 (8.1 content) All Windows 8 & Server 2012 Courses & Exams Updated for ‘8.1’ and ‘R2’ - January 2014 www.netcomlearning.com Special Mention MCSA: Office 365 Certification Course 20346: Managing Office 365 Identities and Services Inaugural Class Dates: • April 14th – April 18th • May 19th – May 23rd Special Promotion for the above course dates: • 2 Free Exams Vouchers + Second Shot • Limited Edition Certificate of Completion http://www.netcomlearning.com/education/specials.phtml www.netcomlearning.com