Transcript DC-B310 88% 88% Employees are using their personal computing technologies for business purposes today (2) 3.3 Information workers will have 3.3 connected devices in 2014 – up 18%

DC-B310
88%
88% Employees are using
their personal computing
technologies for business
purposes today (2)
3.3
Information workers will
have 3.3 connected devices
in 2014 – up 18% from 2.8
in 2012 (3)
THIS IS
CONSUMERIZATION
BUT NOT
CONSUMERIZATION
OF IT
International Telecommunications Union “Tablet Demand and Disruption” Morgan Stanley
VentureBeat
Deploy OS / Apps, Standardize, Patch,
Lockdown user
x4
x4
Remote Desktop
Services
(RDS / Citrix)
Virtual Desktop
(Non-Persistent)
Virtual Desktop
(Persistent)
At what cost did you
enable Agility ?
How do we sustain TCO while enabling flexibility and provide compliance?
Personas / Profiles, Access & Security, Data Rights Management, Application lifecycle
Provide
Cost Effective World Class Continuous Services to Any Device
Synchronization




Exchange Active Sync
SkyDrive Pro
User Experience Virtualization
SharePoint
Data Protection and Compliancy






Group Policy
Data classification
Rights Management
Data encryption
BranchCache
Application White Listing
Virtualization



Application Virtualization
Remote Desktop Services
Virtual Desktop Infrastructure
Secure Access
x4





Server and domain isolation
Network Access Protection
Unified Access Gateway
Direct Access
Remote device management
•
•
•
•
•
x1
mobile services
ENABLE
Work on any PC anywhere
Work on your own device
Work on many devices
A
New
Paradigm
From
To
Empower People-centric IT
Your apps and data delivered
Personalized
experience
Any device,
anywhere
Secure &
well-managed
Start
Start
Start
A
New
Paradigm
From
To
http://www.microsoft.com/casestudies/Windows-Azure/Flavorus/Ticketing-Company-Scales-to-Sell-150-000-Tickets-in-10-Seconds-by-Moving-to-CloudComputing-Solution/4000011072
A
New
Paradigm
From
To
CORPORATE NETWORK
Windows 7/8
RRAS
VPN
Access to data
depends on
user, device
and
Myriad mobile devices
location
SSL VPN
Down-level Windows clients
and mobile devices.
If user, device and
locations are trusted
access is granted
A
New
Paradigm
From
To
Cost of data breach
• $204 per compromised record
• $6.75 million average total cost
are people
mistakes Toolkit
Information classification wizard• 40% of cases
Microsoft
Data Classification
http://www.windowsphone.com/en*Source: Ponemon
Corp, January
2010
Solution
Accelerator
us/store/app/infoclasswiz/cca5583a-a3cc-4e89-a11bhttp://www.microsoft.com/en3d348d6b04ec
s/download/details.aspx?id=27123
HBI
MBI
LBI
HIGH
Business Impact
MODERATE
Business Impact
LOW
Business Impact
Public info
Marketing info
Email address
IP address
Fax number
Social security #
Credit card info.
Aggregate Data
Health info
Username/PW
Recommendations by International
Accounting Standards Board
US: SOX, PCI-DSS, GLBA, FISMA,
Joint Commission and HIPAA
EU: Basel Accord I, II, II
UK: Data Protection Act, FSA,
Freedom of Information Act 2000,
Australia: ARPA, Canada: C-SOX ,
China: CCC Mark, Japan: J-SOX,
and others
A
New
Paradigm
From
To
497
360
324
231
The incorrect perception
that Microsoft programs still
represent the primary
attack vector, means that
defenses based on this false
assumption are as effective
as locking the front door to
your home while the back
door remains wide open.
System Security & Compliance
Simplifying Management across Platforms
Encryption
Devices & Platforms
• Deploy, provision, recover
BitLocker encrypted systems.
• Deploy desktop OS preconfigured for BitLocker
Server
Applications & Data
MDOP ConfigMgr/SCEP and
Windows Intune
(MBAM,
AppLocker)
DirectAccess/
Forefront
UAG
Network
Single admin
console
Hardware and Boot
Windows and Drivers
Anti-Virus
Data Encryption
Start
Start
Windows Intune
Device
IT
Windows 8 device
AV and Compliance
• Device policy control and
compliance through enforced
PINs or remote wipe
• All Windows AV and system
configurations managed in a
single interface
• Device discovery and inventory
A
New
Paradigm
From
To
without Compromising Security
+ Information Protection
On Premise & in the Cloud
Windows Server 2012
Dynamic Access Control
Data governance across file servers
Windows
Server 2012
• Control who can access information
• Audit who has accessed information
Start
Start
Windows Intune
Microsoft
Exchange
Connected productivity:
Active Directory
• ShareRights
and edit Office documents directly using Windows Phone
Management
Services major smartphone platforms
• Use Lync on all ConfigMgr
Microsoft
Persistent, identity-centric
•
Take
notes
with
text,
pictures
and
voice
with
OneNote
Mobile for
SharePoint
use policies and encryption
Phone and iPhone
embedded with theWindows
data
• Work online together with others on Office documents from
anywhere with Office Web Apps
A
New
Paradigm
From
To
Access
RISK
Employee
Indifference
Employee Managed
Employee Purchased
Company Influenced
Company Managed
Company Purchased
 Enablement
 Proxi LOB applications
 Public Collaboration
 Mobility




Business value
Collaboration needs
LOB Applications
Engagement with
technology
 Mobility
 Secure and compliant
environment
 LOB Applications
 Business value
 Collaboration needs
 Mobility
Embrace Bring Your Own Device
A variety of solutions that fits your organization
* Any device certified for use with Windows 7 or Windows 8,. Software Assurance (SA) for Windows required
A
New
Paradigm
From
To
Consumer
Used by
by
Examples
Distribution
B2C and B2B
LOB ISV
Custom LOB
A
New
Paradigm
From
To
Staffing Ratios (Users per FTE)
5000
137:1 151:1 169:1
4500
-39%
4000
3500
1874
-39%
-44%
2000
1613
1000
2162
-17%
-5%
1500
2526
-57% 16%
-67%
+23%
No Corporate Security
post -8%
1787
2500
-47%
With Corporate Security
VDI SmackdownRead
v1 3 this
(ENG) (feb 2012).pdf
1869
3000
221:1
1494
No Data Plan
-28%
2918.51
1493
1426.49
952.85
1797
1067
500
973
834
487.4
487.4
487.4
Smartphone
(Platform)
Tablet (Platform)
Smartphone
(Concierge)
0
Unmanaged PC
Somewhat
Managed PC
Moderately
Managed PC
Locked and Well SBC Windows RDS SBC RDS & Citrix
Managed PC
XenApp
End-User Costs
Direct Costs
• Gartner:
•
Desktop Total Cost of Ownership: 2011 Update, Published: 16 November 2010, ID:G00208726
•
Notebook Total Cost of Ownership: 2011 Update, Published: 17 November 2010 ID:G00208793
•
Total Cost of Ownership of Mobile Devices: 2012 Update, Published: 20 March 2012, ID:G00229907
•
Client Computing Total Cost of Ownership, 2011: A Chart of Accounts, Published: 3 March 2011, ID:G00210895
•
Total Cost of Ownership Comparison of PCs With Hosted Virtual Desktops, 2011 Update, Published: 14 December 2010,
ID:G00209403
•
Total Cost of Ownership Comparison of PCs With Server-Based Computing, 2011 Update, Published: 14 December 2010,
ID:G00209456
• PQR VDI Smackdown v1 3 (ENG) (feb 2012).pdf
• PQR Understanding how storage design has a big impact on your VDI (updated September 2011)
1.
2.
3.
4.
5.
6.
High Autonomy
Low Mobility
High Mobility
Low Autonomy
No Compromise
1
Business Tablet
New Possibilities in
Mobile Productivity
Enhanced End-toEnd Security
2
Management
and Virtualization
4
1,2
Support Mobile
Workforce
4
2
3
1 Internet
2
access required
Software Assurance (SA) for Windows required
3 Microsoft
4
Desktop Optimization Pack (MDOP) required
Windows 8 Pro required
107
Countries
WorkSpace – Implementation Timeline
Enable better decisions faster and enhance productivity by providing secure anytime, anywhere,
access to MyApps, MySettings, and MyDocs from MyDevices
1.0
2.0
Devices
Follow Me Desktop
Windows 8 (Tablet/OS)
Assessment
Thin Clients
Settings
Follow Me Settings
Apps
Voicemail in Email
Docs
No Change
Devices
3.0
Devices
Enterprise Ready Window
8
UC
Device Consolidation
Settings
Follow Me Printing
Apps
Follow Me Apps
Office 2013, IE 10
Docs
Outlook Offline
Devices
No Change
Settings
Follow Me Printing
Apps
Automated App Request
Docs
Follow Me Docs
Follow Me
Desktop
Thin Clients
Device Consolidation
Enterprise Ready
Windows 8
Windows 8 (Tablet/OS) Assessment
Apps
Video Phone
Office 2013
Voicemail in
Email
Automated App
Request
Internet Explorer 10
Follow Me Apps
Settings
Follow Me
Settings
Docs
Follow Me Printing
Outlook Offline
2013 Q1
Q2
Q3
Follow Me Docs
Q4
2014 Q1
Profile
Device(s)/Scenario
Apps
Data
Executives
Laptop or Tablet running Windows 7/8 or Mac
OS
Windows: Streamed (App-V)
Mac: Local Install
Windows RT: AZ App Store, Sideloaded,
Windows Store
iOS: iTunes AppStore, Citrix XenApp or
XenDesktop
Office 365
Skydrive Pro
Folder Redirection
ARM Tablet running Windows RT or iOS
Corporate
Laptop or Desktop running Windows 7/8
Streamed (App-V)
Citrix XenApp (Remote App)
Office 365
SkyDrive Pro
Folder Redirection
Commercial
ARM Tablet running Windows RT or iOS
Windows RT: AZ App Store, Sideloaded,
Windows Store
Office 365
Skydrive or Skydrive Pro
Windows-to-Go
iOS: iTunes AppStore, Citrix XenApp or
XenDesktop
R&D
Laptop or Desktop
Transient between clean lab and office
environment
Windows: Streamed (App-V)
Linux: Citrix XenApp
Office 365
Skydrive Pro
Folder Redirection
Contractors
Windows-to-Go
Streamed (App-V)
Citrix XenApp (Remote App)
Office 365 Kiosk
Folder Redirection
Manufacturing
Kiosk running Windows 7/8
Streamed (App-V)
Citrix XenApp (Remote App)
Office 365 Kiosk
R&D
Transient among
devices
Office 365
SkyDrive
Pro
WindowsCOMMERCIAL to-Go
Win Rt or iOS
CORPORATE
Windows 7/8
SCCM
2012
CONTRACTOR
BYOD device,
Windows-to-Go
On-Premise Services
MANUFACTURING
Kiosk
SkyDrive
Public Cloud Services
EXECUTIVE
Windows 7/8 Laptop,
Mac, or Tablet
workstyle
Assessment & Roadmap
Tactical Solutions
Strategic Solutions
Support
Risk Assesment
Online Resources
• Microsoft Assessment and Planning (MAP)
Toolkit
• Microsoft Deployment Toolkit (MDT)
• Security Compliance Manager (SCM)
• Infrastructure Planning and Design (IPD)
• Microsoft Operations Framework (MOF)
• Governance, Risk, & Compliance (GRC)
Microsoft Consumerization resources are located at:
http://www.microsoft.com/consumerization