Next level learning with Microsoft and Intel

Windows 10

in Education:

What’s new and what

do I need to know?

Jason Trump

Senior Education Specialist - Devices

Windows 10 Desktop Editions

Edition Audience Benefits

Consumers and BYOD

1. For Windows 7/8.1 devices for one year after the Windows 10 launch, delivered through Windows Update

2. Requires Software Assurance

Availability

Windows 10 Home

• Familiar and personal experience

• All-new browser great for doing things online

• New ways to get organized and be productive

• Up-to-date with latest security and features

OEM

Retail/ESD

Free upgrade1

Windows 10 Pro

Small, lower mid-size

businesses

• Management of devices and apps

• Support for remote and mobile scenarios

• Cloud technologies for organizations

• Update quality confidence with broad market validation

OEM

Retail/ESD

VL

Free upgrade1

Windows 10 Enterprise

Mid-size and large

enterprises

• Advanced security

• Extensive device and app management

• Full flexibility of OS deployment & update control2

• Microsoft Desktop Optimization Pack (MDOP) 2

VL

Windows 10 Education

Educational institutions,

students, teachers, and

administrators

• All the features of Windows 10 Enterprise

• Simplified upgrade and deployment from Windows 10

Home

VL

Simple to deploy and manage

Special systemsLong Term Service Branch

Consumer devicesCurrent Branch

Updates installed via Windows Update as they arrive

Keeping hundreds of millions of consumers up to date

Large and diverse user base helps drive quality of the OS updates

BYOD devices are up to date and have the latest security features

No new functionality on long term servicing branch

Regular security updates

Control with WSUS

Examples: Air Traffic Control, Emergency Rooms

Business usersCurrent Branch for Business

Update their devices

after features are validated

in the market

Windows as a Service

Delivery of Updates

Windows as a Service

Edition

Windows 10 Home

Windows 10 Pro

Windows 10 Enterprise

Update Deployment Options

Windows UpdateCurrent Branch

Windows Update

Windows Update for Business

WSUS

Current Branch

Current Branch for Business

Windows Update

Windows Update for Business

WSUS

Current Branch

Current Branch for Business

Long Term Servicing Branch

Windows 10 Education

Windows Update

Windows Update for Business

WSUS

Current Branch

Current Branch for Business

*Conceptual illustration only

Current Branch for BusinessCurrent BranchMicrosoftInsider Preview Branch

Broad Microsoft internal validation

Engineering builds

Customer Internal Ring

ICustomer

Internal Ring II

Customer Internal Ring

IIICustomer

Internal Ring IV

Users

10’s of thousands

Several Million

Hundredsof millions

Capabilities

Office 365Use the same login for Office 365 and Windows 10

Easily connect to OneDrive for Business

Management features included with Office 365 can be used

Azure Active DirectoryMore secure logins and single sign on with Azure AD

Azure AD connects to existing Active Directory infrastructures

Sign-in to Windows Store and procure apps

Microsoft IntuneAdvanced MDM support available with Windows 10

Consistent support across PC/mobile

Provide access to apps, data, and resources from anywhere

Azure Rights Management Providing control when data leaves the company

Offering more granular rights

Protecting data on other platforms

Windows Store

• Windows Store apps

• Sign in with MSA

• Pay with credit card, gift card,

PayPal, Alipay, INICIS, mobile

operators

Windows Store for

Business

“Company Portal”

• Windows Store apps

• Leverages Azure Active Directory for

administration, some scenarios

• Private store for the org’s preferred

or LOB apps

• Pay with credit card or PO/invoice **

• Deploy Windows Store apps offline,

in images, and more

• Windows Store app license

management

• Sideload line-of-business apps

• Deploy apps from the Windows Store

(even when the Store UI is disabled)

as well as uploaded LOB apps

through BSP integration using MDM

• Org users do not need Azure AD accounts

• Installation files are downloaded and deployed using org’s infrastructure

• No license tracking

• Updates installed via Windows Update

• All org users need Azure AD accounts

• Installation files managed and deployed by the Windows Store

• Licenses tracked by the Windows Store

• Updates installed via Windows Update

Online Offline

Private storeMDM /

ConfigMgr(deep links)

Direct assignment

ImagingMDM /

ConfigMgr(sideload)

Manual

Office 365 / Azure Active Directory

Microsoft Account

Active Directory

Local Accounts

Identity for schools

Provisioning, not Reimaging

Transform a Device Enable the organization SKU

Install apps and enterprise configuration

Enroll the device to be managed via MDM

Flexible Methods Using media, USB tethering, or e-mail for manual

distribution

Automatically trigged from the cloud or connection to a

corporate network

Leverage NFC or QR codes

• Works with existing infrastructure

• Continued support for Group Policy and WMI

• Advanced MDM support

• Consistent across PC/phone

• 1st and 3rd party solutions

Available Choices

Identity Active Directory; Azure Active Directory

ManagementGroup Policy, System Center Configuration Manager,

3rd party PC management; Intune, 3rd party MDM

UpdatesWindows Update; Windows Server Update Services (WSUS);

Intune, 3rd party MDM

Infrastructure On-premises or in the cloud

Ownership Corporate-owned, CYOD; BYOD

Organizations may mix and match, depending on their specific scenario

One consistent set of MDM capabilities

across Mobile, Desktop, and IoT

• Provisioning

• Bulk enrollment

• Simple bootstrap

• Converged protocol

• Azure AD Integration

• Extended set of policiesClient certificate management

• Enterprise Wi-Fi

• VPN management

• Email provisioning

• MDM Push

• Device Update control

• Kiosk, Start screen, Start menu configuration and control

• Curated Windows Store

• Windows Store for Business app deployment; license reclaim

• Enterprise App management

• Simplified LOB app management

• Win32 (MSI) app management

• App inventory (LOB/store apps)

• App allow/deny lists via Applocker

• Enterprise data protection

• Full device wipe

• Remote Lock, PIN reset, Ring, & Find

• Enhanced inventory for compliance decisions

• Unenrollment with alerts

• Removal of Enterprise configuration (apps, certs, profiles, policies) and Enterprise encrypted data (with EDP)

• Additional device inventory

Next StepsNext Level Learning www.microsoft.com.au/nextlevellearning

Educator Community http://blogs.msdn.com/b/austeachers/

http://blogs.msdn.com/b/education/

Office 365 http://www.microsoft.com/australia/o365learninghub/

Apps for Learning http://bit.ly/1Oktn9G

Windows 10 http://aka.ms/edudeploy

BYOD Guidance for Schools http://www.microsoft.com.au/forschools

BYOD Guidance for Parents http://www.microsoft.com.au/forparents

#msnextlevellearning

#MSAUedu

Thank you

Jason Trump

jasontru@microsoft.com@TrumpOnEDU