Microsoft NDA Confidential

Microsoft NDA Confidential

Lock Screen changes

Start Screen enhancements

Search

New Store Layout

And yes,… the Start Button

Microsoft NDA Confidential

Microsoft NDA Confidential

Boot to Desktop

Show Desktop Background on Start

Replace CMD with Powershell

Presentation of AppsUser Configuration \ Administrative Templates \Windows Components \Edge UI

Microsoft NDA Confidential

CopyProfile still exists

Provision Startmenu layout

<settings pass="specialize">

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral"

versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance”>

<CopyProfile>true</CopyProfile>

</component>

</settings>

%windir%\system32\Sysprep\Sysprep.exe /oobe /generalize /shutdown /unattend:f:\unattend.xml

Export-startlayout –path \\path\file.xml –as xml (or “-as bin”)

Microsoft NDA Confidential

Pin Apps to start when installed

Based on AppIDs

AppIDs can be found via Powershell

get-startapps

Put AppIDs in a GPO

Microsoft NDA Confidential

Not available in Preview

Microsoft NDA Confidential

Cannot be removed, you can disable though

Microsoft NDA Confidential

Windows Modern AppsTraditional Desktop Apps

Setup.exe installers

Windows Installer (MSI)

OneClick (.NET)

App-V, Click-to-Run

Can be installed silently (usually)

Typically requires admin rights, usually installs per

machine

Still used in Windows 8 (unchanged)

New packaging mechanism

Very simple installation mechanism

Always installs quietly

Does not require admin rights, always installs per user (if form

the store)

New in Windows 8, essentially unchanged in Windows 8.1

Microsoft NDA Confidential

Install via an “Enterprise App Store” using: Provision using the Microsoft Deployment Toolkit 2012 or DISM

ProvisioningInstallation

Microsoft NDA Confidential

DISM /Online /Add-ProvisionedAppxPackage /PackagePath:C:\App1.appx /SkipLicense

Make sure your reference Image has no Apps from the store

Apps need to be provisioned in your image

Add-AppxProvisionedPackage -Online -FolderPath C:\Appx

Use ConfigMgr for Installation on demand

Microsoft NDA Confidential

Windows Store Apps cannot be installed via a TS

No native support for provisioning apps during a TS

Deep Link Support but a Microsoft ID is required

You need ConfigMgr 2012 R2 for FULLFULLFULLFULL Windows 8.1 support (or-and MDT 2013)

http://blogs.technet.com/b/configmgrteam/archive/2013/09/16/support-questions-about-win-8.1-and-winsvr-2012-r2-for-configmgr-and-endpoint-protection.aspx

Microsoft NDA Confidential

It’s all about the performance of the OS

Suspend <> Terminate Apps

Something changed when trying to close an app…

Microsoft NDA Confidential

Hardware requirements are unchanged

Desktop AppCompat is excellent

Windows Store Apps are compatible

Internet Explorer 11 compatibility (support back to IE6)

Microsoft NDA Confidential

The goal is to migrate very fast from Win8 to Win8.1

Consumers initiate the update through the Windows Store

Enterprises deploy the

update themselves

using a software distribution tool, e.g.

System Center

Microsoft NDA Confidential

Microsoft NDA Confidential

Capture data and settings

Remove existing

OS

Install new OS image

Install apps

Restore data and settings

Capture data

settings, and apps

Remove existing

OS

Install new OS image

Restore data,

settings, and apps

Windows Setup

USMT USMTDISM

Deployment Tools (MDT, ConfigMgr)

Refresh:

Update:

Microsoft NDA Confidential

Microsoft NDA Confidential

Windows AIK

• Windows PE 3.x

• USMT 4.0

• Windows System Image Manager

• DISM

• ImageX

ADK 8.1

• Windows PE 5.0

• USMT “6.3”

• Windows System Image Manager

• DISM

• ImageX*

• Application Compatibility Toolkit

• Volume Activation Management Tool

• Windows Performance Toolkit

• Windows Assessment Toolkit

Microsoft NDA Confidential

Windows XP Windows Vista Windows 7 Windows 8 Windows 8.1

Windows XP USMT 3 USMT 4 USMT 4, 5 USMT 5 Not supported

Windows Vista Not supported USMT 4 USMT 4, 5 USMT 5 Not supported

Windows 7 Not supported Not supported USMT 4, 5, “6.3” USMT 5, “6.3” USMT “6.3”

Windows 8 Not supported Not supported Not supported USMT 5, “6.3” USMT “6.3”

Windows 8.1 Not supported Not supported Not supported Not supported USMT “6.3”

You might need different versions

Support for Office 2013 (hotfix added to USMT 5.0)

http://blogs.technet.com/b/configmgrteam/archive/2013/09/12/how-to-migrate-user-data-from-win-xp-to-win-8-1-with-system-center-2012-r2-configmgr.aspx

Microsoft NDA Confidential

Windows 7

• Image size:

• 1.97GB image (WIM), 7.87GB expanded

• Installation time (new):

• 15 minutes

• Upgrade time (from Vista):

• 30 minutes

Windows 8

• Image size:

• 1.96GB image (WIM), 7.76GB expanded

• Installation time (new):

• 10 minutes

• Upgrade time (from Windows 7):

• 20 minutes

Windows 8.1

• Image size:

• 2.13GB image (WIM), 7.65GB expanded

• Installation time (new):

• ~10 minutes

• Upgrade time (from Windows 8):

• ~20 minutes

Microsoft NDA Confidential

4 Goals

� Struggle to enter credentials on touch devices

� Built-in Windows Experience

� Introduce new “touch” fingerprint sensors

� Move from traditional to modern

Microsoft NDA Confidential

Microsoft NDA Confidential

Microsoft NDA Confidential

IT can publish access to corporate resources with the Web Application Proxy based on device awareness and the user’s identity.; multi-factor authentication can be used through Windows Azure Active Authentication (formerly PhoneFactor)

Users can register BYO devices for single sign-on and access to corporate data with Workplace Join. As part of this, a certificate is installed on the device

Users can enroll devices that configure the device for management with Windows Intune; the user can then use the Company Portal for easy access to corporate applications

As part of the registration process, a new device object is created in Active Directory, establishing a link between the user and their device

Data from Windows Intune is in sync with Configuration Manager, which provides unified management across both on-premises and in the cloud

Microsoft NDA Confidential

Data managementQuotasFile screensReportingClassificationRMS protection

Device management policyFile encryption / selective wipeRequire password / device lock

Limit access to registered devices (ADFS)

AuthenticationKerberos (Windows Auth)Digest (Windows Auth)

ADFS (OAuth)

https://workfolders.contoso.com

Microsoft NDA Confidential

Microsoft NDA Confidential

Windows 8.1 Client Hyper-v

Support of UEFI and Secure Boot (Gen 2)

Also in WS12R2

Windows To Go

Store is not longer disabled by default

NFC Support

NFC tagging

Miracast Wireless Display

Pair with a Miracast-enabled display and project wire free

Microsoft NDA Confidential

http://technet.microsoft.com/en-us/windows/dn140266

Release Notes: http://www.microsoft.com/en-us/download/confirmation.aspx?id=40244