coming up we're going to take a look at deploying and managing Microsoft 365
powered devices with capabilities that make it possible for you to be able to
auto provision new devices using Windows AutoPilot and deliver apps and services
including office 365 ProPlus and line of business apps we're gonna make it so
that you can simplify the management of user identity devices apps and data with
an integrated management experience and we're also going to show you how you can
plan Windows 10 deployments at scale and help you focus on what really
matters those ready in its efforts and staying up-to-date and compliant oh one
more thing we're also going to keep you watching so that you can learn about our
new co-management capabilities that are coming to Configuration Manager so
that you can take advantage of cloud-based model management with
configuration manager at your own pace so I'm joined today by Brad Anderson
corporate vice president. Great to be here I love Mechanics I love the
work the Mechanics team has been doing so with Microsoft 365 we've actually
brought together Windows 10, Office 365 and Enterprise Mobility + Security
lots of people might just think it's a product bundling but it actually isn't
there's a lot more to it Microsoft 365 is so much more than just
a name or a brand Microsoft 365 is funding how we build define and deliver
products for our customers we've literally been working on some of these
scenarios for you know close to five years I think we're literally looking at
a time in a place in time right now much like we were 25 years ago with Office
when Office came together and it fundamentally changed what people
thought about productivity from that point forward I think we're gonna look
back a couple of years from now the launch of Microsoft 365 it's gonna have
a similar impact where people go that is what a modern workplace is it's gonna
have that kind of an impact you know several years ago we pulled teams
together from across Microsoft Identity Management, Security, Windows and the
Office team and we tried our best to find what we thought the needs were
gonna be in this modern workplace it was really clear to us back then that
delivering on the needs of both users and IT was gonna require us to engineer
for both but they have to deeply integrate across all those technologies
to really build that solution that is loved by users and trusted by IT
so Microsoft 365 pulls together the power of Windows 10, Office 365 and
EMS and delivers that modern
workplace that is loved by users and trusted by IT. Can you
make this real by taking us through a scenario so that we can see how things
change from both the users and IT's perspective you bet
so the first thing we're gonna show you is how we're evolving the user
experience as well as the IT experience for provisioning a new device now
historically IT would receive the new devices as they came in they would be
the ones who would create you know we're seeing from the manufacturer they would
image the device and get it ready to go to the user but that just introduces
complexity in time and so what we do now with a Microsoft 365 powered device is
that device can literally be delivered directly to your users and one of the
great things about that is that your users now have the ability to be able to
open up that box and for that first time you know that magic experience of taking
a PC out of the box and so with a part of this now that can be shipped directly
to the user the users gonna be asked a couple of questions and we're
automatically gonna provision the device ok so a show is what it looks like to go
through that automatic provision best we actually have a version he or she can
get a flavor what the experience is so the the PC boots up from the first time
and then as it comes up its gonna ask me five questions what's my language where
do I live what's my keyboard preference and it's gonna come back and ask me to
join what Wi-Fi now one of the most important
things to point out here is you do not have to be on the corporate network
these are cloud services after all so I could be anywhere on the planet so I'm
gonna go ahead and join the Wi-Fi put my key in and now what's gonna happen is
it's actually communicating with them autopilot service and it knows by the
serial number of the device what company purchased it and who it's
been assigned to and the amazing thing about this is look it starts
personalizing that experience for me within seconds at the time I first
powered it on you know literally I think your users are gonna think this is magic
because you know the device knows it belongs to them within seconds and you
can see here it provisions the device the apps get deployed the settings get
deployed your users up and running in minutes and so what used to take hours
now takes minutes and so what actually happened behind the scenes, is that
AutoPilot provides a way to be able to import the
serial number of the devices that are purchased and then it gets assigned to a
specific tenant or customer and the user and one of these will be announced today
is we announced that that that you know five of the OEMs have now joined
Microsoft in supporting AutoPilot and they kind of
give you an idea that accounts for 63% of all the PCs that are shipped out to
commercial organizations and of course we hope all the OEM join us that's
amazing that means most folks okay I'm having one of those PCs absolutely okay so what does it actually look like when we're in on that
PC now which is a Windows much-loved 365 powered device okay so as first
I'll take a look at it from from the experience of the end-user so you're
looking at my my device here and I've gone ahead and I thought indicating and
using Microsoft Teams I don't how many of you are using Teams yet, but it really
fundamentally changes how you create and how you do teamwork now one of the
things I want to point out here it's personalize it for me it knows
it's me I got that great single sign-on experience here my team wants me to take
a look at a document so I'm gonna go ahead I'm gonna go ahead and open this
into Word now what I want to show you here is some of the innovations in
Microsoft 365 on data protection so what I want you to notice here is this
document is marked as confidential this is a success story that we've been
working with with Fruit of the Loom who has been using Microsoft 365 we've been
going back and forth and reviewing the document because it's not been approved
yet we've marked it as confidential, so things like I can come in here and take
a look you know this document understands who
can open it it sells protecting but one of the great things about Microsoft 365
is the customer just approved this well I not want to go ahead and change this
from being confidential to making it publicly available and just like that
you know the watermark is gone. If I had to come back and take a look here and
file that protection is gone it is that easy now for a user to be able to mark
the confidential nature of a document and actually assign what the level of
security should be applied each one of the documents so that's a great
simplified end-user experience we've already taken away a lot of the pain
that I'm what have we actually done to simplify this for IT so make it easy to
set up all right so let's go take a look at some of the administrative
experiences so the first thing I'm going to talk about is how we actually
configured that PC that was just image using AutoPilot so here you're looking
at into and I'm looking at all the policies that I've configured for my
Windows 10 baseline configuration so you can see in here I can come in here and I
can do things like I can come in and go to go set all the Windows Defender
settings, but all of the settings that are exposed by
Windows 10 you can now manage and control through Intune okay and those
of you who are on Config Manager and you're looking to move into this modern management
we're gonna show you how easy we've made that but this is the next evolution of
that architecture let's take a look now at the applications and so first I want
to point out here the Microsoft 365 enables us to manage applications on all
your platforms you know iOS, Android, Windows let's go take a look at one of
the new innovations we're talking about here at the event and that is now the
ability for us to be able to manage Office (365) ProPlus as a suite rather than
as individual products so I can come in here now I'm looking at my policy to
deploy Office (365) ProPlus you can go and take a look at the applications that you
want to employ so I could be select if I wanted to play everything I can come in
here and actually to find the settings for office but now in a modern way you
can now manage these applications that are coming from their various stores and
instead of having to treat them as individual apps you can now treat it as
a suite very cool so many of you are you scripting inside a Config Manager and
one of the things that you've asked for as you've looked at the MDM keep losing
manage means you've wanted a way to script so you can do things on Windows
10 devices that the MDM layer did not enable. So what we're announcing at the event
today is what we call PowerShell scripts the official name of this is Intune
Management Extensions and this extends the capabilities of Intune and for
example now allows you to create a PowerShell script. that PowerShell script
can deploy apps it can do it can set settings it can do all the things you
would want to do on a device you just simply point to the PowerShell script
and then you can configure it and apply it you now have much more flexibility as
you move from the way you've done things in the past and now doing it from the
cloud through Intune. Microsoft 365 is all about empowering that modern
workplace for users across all the devices that they love and so we know we
look at iOS, Android, Windows and announcing at the event today that Jamf
has joined us for deep Mac management and we believe all of those need to be
managed enabled by Microsoft 365 so it in the same portal you've actually got
access to be able to activate Windows security you've been able got the
ability to do app deployment you also showed us information protection how
easy was it actually to activate all of that ok as your information protection
is something revolutionary for it you think about it for a minute historically
rise to files have a stored on the file system with Azure Information Protection
we actually store the files of the rights in the file itself so that file
becomes self protecting what you let me show you here is the
administrative experience to set up a AIP and what you can do is you can come
in here you you can set up your own custom groups that align to how your
company wants to protect it what is confidential mean what is
extremely confidential mean and then your users can select the appropriate
tag or setting as their grading the application with Microsoft 365 we can
automatically auto classify based upon rules that you give us but it really is
that easy to set up what I want to show you here is some of the work that we
have done in terms of how we are helping organizations upgrade and so one of the
key things about Microsoft 365 is we're able to give you views now into the data
that we collect on your tenant as well as views for by aggregating data
across the board specific I want to walk through one scenario then at four
o'clock we're gonna go through a lot more detail on this so the first thing
that we have that we want to do here is we want to give you a view of how we
enable you to actually upgrade your devices. The biggest challenge associated
with upgrading historically from one version of Windows to another has been
application compatibility testing and that's the single largest bucket of cost
and so what we now give you is the ability to help you identify what you
should spend your precious time at so what you're looking at here in this
console is is a couple of places so first of all that number that says 503
there but we're telling you in this particular scenario to upgrade all your
PCs there's 503 applications we think you need to go take a look at if you
take a look down in there we actually help you classify where to spend your
time there's one line in there that says I think it's 279 that actually is
pointing to the fact that we actually see those applications that are running
around the globe and your peers and other organizations we see it working
and so we're telling you you're not to worry about testing those because we all
have value validated that they're working but that blade right there that
has 136 and 579 on it this is my favorite blade of this experience
because what it's saying there is if you look at these 136 drivers and apps and
go through the process to make sure that they're validated you'll unblock 10% of
your remaining PCs to upgrade to Windows 10 if you look at the 579 you will
unblock 80% of your devices to go up to Windows 10
now remember end of service for Windows 7 is less than a thousand days away so
all of you gonna be going through this okay this is gonna be one of the ways
you can accelerate your deploy into Windows 10 and then we track it for you
and you see here in this donut you can see that that as you go do your work
will automatically identify the PCs that are ready to be upgraded if you take a
look at there at the very bottom it says export that automatically exports all
that data the config manager you and config manager will automatically go and
target all of your devices and operating for you also notice there that there's
that little red mark that says 5. What we're telling you is these devices will
not upgrade to Windows 10 don't even try it and so we help you also understand
where you shouldn't go to upgrade you should actually replace that the
hardware and that's learning that's come from the half of the billion PCs that
we've upgraded to Windows 10 around the globe now the other thing you've done
here is we've done some more integration with Office and Office analytics and so
the biggest question we hear from all of you is upgrading to a new version of
office is what plugins are my users using because I have to make sure the
plugins are available in the new version of office right here you get that
prioritized list of off of Office Add-in usage ranked by usage and so you
can very quickly take action to make sure that you're doing the things that
are most commonly used by your users that's great so you actually mentioned
that not only do we have this capability of looking at the existing estate we
also have configuration manager which is out there and managing a lot of machines
yet right now and let's talk a little bit about co-management with with
configuration manager so first let's just let's just take a moment and celebrate
the impact the configuration manager has had on the lives of millions of IT
professionals. this summer is the 25th anniversary of configuration manager ok
yeah that's pretty amazing and this last week we passed 100 million device is
actively being managed by current branch we're just a little over halfway through
upgrading the configuration management installed base we still have more than a
million new devices coming in every single week but I'll tell you 25 years a
hundred million devices that is an amazing impact now that's where all of
us start our starting at including Microsoft we're all in a world where we
have Active Directory, configuration manager and group policy we want to move
into this modern way of doing it but you told us and we've been we've seen this
it's just too hard trying to do it all at once
it's risky and there's no way to walk in and in one morning and say we're gonna
move to Azure AD and to Intune and so what we have done now is we've made it easier
for you by forming a bridge and we call that bridge Co-management and what that
enables us to do now is a single device can be now joined to a single window 10
device can be joined to Active Directory and Azure Active Directory at the
same time this will be a made available in the fall release of Windows what that
means now is that device can be managed by both config manager
and Intune at the same time you start with what you're doing today and then what
you can use you can start to move a workload at a time so you start doing
device compliance from the cloud then maybe you go start moving so do your
software updates from the cloud then you do software distribution from the cloud
but this enables you to do it in little bite-sized chunks it's less risky and
it's actually gonna help you accelerate this movement to a modern management
from the cloud do what we call Co-management now one of the unique things
about config manager and Intune is it's one team that builds it and so you have
this communication that's always happening between the two of those and
we actually know on every single object on every single attribute who the
authoritative source is it Intune or is it config manager because we want to
make sure that you don't have to worry about conflicting policies and so that's
one of the things that as you move from config manager to Intune for your
modern management a great benefit enabling it so let me actually give you
a view of what it looks like from the administrative experience this right
here is a view inside of the SCCM console this will be a mate made
available in the 1710 build a config manager and notice what we've done here
you can now take a look at workloads we're going to start with these three
and over time this is going to expand to eight or ten different workloads and if
I want to now move a workload to the cloud it literally is just as simple as
dragging and dropping that slider bar and I can say hey I want a pilot this
one so I'm gonna kind of have some in Intune some in config manager if I want
to move the whole organization over I just drive back that slide and bar all
the way over let's do it again and just like that you start moving to the cloud
you start moving workload by work or to the cloud and you're moving to a modern
IT where we can now apply all the power of Microsoft 365 in the cloud to help
you that's a really clever way of doing it just being able to move a slider to
be able to set the authority to different location I love the fact
we've actually got the ability to pilot in there as well it means that nobody
has to take a Big Bang change they can do it at their own pace you know IT we
don't like taking those big leaps we like to do things that are a little more
controlled those things are less risky but by doing that you actually
accelerate so can you tell me just why might people want to be doing a lot of
management work sure what is so great about it you know by moving to a modern
management organizations can massively simplify the work that they have to do
and in so doing it they make themselves more secure they decrease their cost and
they actually give their users the best experience possible you know there's an
elegance about simplicity the fewer moving parts that
you have that have all been integrated to work together give you both the best
experience but it also makes you more secure
I'll give me an engineering perspective on this we're able to build and release
in these incredibly rich innovative scenarios across Microsoft 365 serving
the services we're delivering capabilities that we've never been able
to do on prem each of the Microsoft 365 services are constantly being updated
but because there are cloud services and they're all running in the cloud we can
actually update them one by one across the globe and doing a controlled way
that allows us to as long as each of the services gives a northbound SLA and an
agreement on compatibility they can all iterate iterively, but we bring
together a collective security and the collective integrated solution for our
customers it's a really great way of being able to manage that entire service
and I think it means that people don't have to deploy lots and lots of kind of
hard to hard to configure things on-premises yeah in the past
you think about what you had to do as an organization in order to take advantage
of a new set of cables coming out from Microsoft you maybe had to start with
updating your servers your data bases config manager itself you know so there
was all these things that you had to build in order to deliver a bunch of
innovation and say we worked hard over the years to build these integrated
scenarios across everything across the company but the reality is getting all
of that deployed was very very hard for you but now you do in the cloud we're
able to do all that work on your behalf it's our job to update the services it's
our job to make sure they're integrating end-to-end you just get the value of
this it increases your impact and it increases your ability to get out new
capabilities quicker one of the things that we just fundamentally believe is
that human hands and human heads minds can don't want to keep up with
everything that they have to do and so you're gonna continue to see us take
these integrated scenarios across Microsoft 365 and we're going to focus
on how we empower you and how we give you insights for you to be more
efficient and more effective how we better secure your environment and how
we deliver the absolute best experience for your users across all the devices
that they want to love or that they love and that they want to use so we're
looking forward to your feedback we're gonna go do this together thank you very
much for coming along to the Microsoft Mechanics Live stage and thank you
everybody for for watching the show that's all we've got time for now we'll
see you next time
Thank you! [Music]