Jumpstart deployment of Microsoft Surface Hub in your enterprise
Jumpstart deployment of Microsoft Surface Hub in your enterprise Christian Schacht, Partner Technology Strategist David Stoeckel, Technology Solutions Professional The Microsoft Devices Portfolio Premium craftsmanship and design Mobility of experience (Re-) Inventing categories Versatile form factors Visit Us in the Expo Hall, MS 140-143 Session objectives
Getting started with Surface Hub in the enterprise Learn how to: Set up Surface Hub from an out-of-box-experience, configuring with Office 365 Manage Surface Hub using tools like config packages and MDM Integrate Surface Hub with other devices in your organization Session agenda Surface Hub out-of-the-box experience
Overview Configure Surface Hub Managing Surface Hub Monitoring Surface Hub Applications What else? Q&A Hardware Microsoft Surface
Hub is the first of its kind Software Services Fully integrated with your Microsoft environment Integrates with back-end Microsoft services your enterprise already uses, like Exchange, Active Directory, and Skype for Business
Has its own Exchange Resource Account: its a bookable resource Can place/receive Skype for Business and PSTN calls OOBE takes minutes after Exchange and Skype for Business accounts are created
Does not need to be domain joined Supports two factor user authentication Users can access outside data sources Manage the device via SCCM and Intune or other MDM providers
Configure Surface Hub Christian Schacht What are my options to manage Surface Hub? Out of Box Experience Out of Box Experience (OOBE) Surface Hub basic configuration is done through OOBE OOBE launched upon first start of Surface Hub
Changes to the existing configuration can be done through settings after OOBE OOBE configurations includes Device localization Device Name and Friendly Name Skype and Exchange configuration Setting up the device administrator Import Package for Certificates (optional)
Domain join and device administrator Three options Azure Active Directory Services Active Directory Domain services Local Admin Joining domain is for admin purposes Group policies are not applied to the device Root certificates available in Active Directory are installed (requires AD integrated Certificate Authority)
BitLocker Key can be stored in local AD or Azure How is the AD local administrator setup ? Infrastructure Requirements Which credentials can be used for settings? Local Admin None Local admin credentials created at OOBE
Device is joined to an Active Directory Domain Organization uses Active Directory Domain Admin + AD user from specific security group Organization uses Azure AD Basic Tenant admins Device is joined to Azure AD Organization uses Azure AD Premium
Tenant or device admins + additional specified users/groups Surface Hub account Surface Hub can be configured to manage the device password The password will be changed weekly New password will not be shown Account format requirements exist Device Account Topology
Device Account Format in OOBE Supported On-premises only UPN Yes On-premises only DOMAIN\UserName
Yes Online only UPN Yes Online only DOMAIN\UserName N/A Hybrid online and onpremises
UPN No Hybrid online and onpremises DOMAIN\UserName Yes DEMO Out of Box Experience aka OOBE Managing Surface Hub What are my options to manage
Surface Hub? Out of Box Experience Local settings local settings Accessible only for admins Familiar Windows 10 Optic Surface Hub specific settings
Skype / Exchange account settings Projection / Miracast settings Monitoring NEW Skype audio settings Windows Store access Etc. What are my options to manage Surface Hub? Out of Box Experience Local settings Provisioning
packages Provisioning packages Windows imaging and Configuration Designer NEW in version 1607 Templates for Windows 10 Team edition During OOBE Import certificates Install apps After OOBE
Skype/Exchange account OMS join Update Settings (WSUS, maintenance, etc.) Many more DEMO Create ICD Configuration packages DEMO Use ICD Configuration packages
What are my options to manage Surface Hub? Out of Box Experience Local settings Provisioning packages Mobile device management MDM discovery 2.
1. DNS Lookup 1. Admin enters e-mail address for Workplace Management [email protected] DNS Lookup is done to CNAME EnterpriseEnrollment..com 3. Hub Intune
2. CNAME Points to manage.microsoft.com (Intune) 3. Surface Hub Joins MDM and gets managed Mobile device managment CSPs supported in Microsoft Surface Hub* APPLICATION CSP EnterpriseModernAppManagement
HealthAttestation CSP NodeCache CSP Policy CSP Provisioning CSP RootCATrustedCertificates CSP SurfaceHub W4 APPLICATION CSP w7 APPLICATION CSP Wi-Fi CSP *Supported features may vary based on the used MDM Solution DEMO Intune settings, WSUS,
homepage, background Management options INTUNE ICD: PPKG on USB MDM: Intune SCCM/Intune Hybrid SCCM MDM Surface Hub SCCM PPKG
DEMO Monitoring Surface Hub Applications Windows Store Business Store 1. 1a. 2. Windows Dev Center 2a.
Business Store 3. 1. 2. 4. ISV connecting to Windows Dev Center, application submission directly published in 2a.App the organization
1a. 3. Purchased licenses added to the organization inventory 2. Organization or ISV can directly publish in the Business Store or the organization (authorization requested) App available on Consumer Store. Also available on Business Store for IT
purchasers 4. Apps deployed to internal users according to defined organization policy inventory DEMO Run Win32 apps on your devices What else?
BitLocker encryption Non-domain joined Surface Hubs Keys need to be saved to USB Azure Active Directory joined Surface Hub Keys stored under the account that was used to join the device. On-prem Active Directory* joined Surface Hub Keys stored under the computer object in Active Directory, like any other computer does. *Bitlocker Recovery Password Viewer needs
to be installed to be able to search for Windows and store updates Windows updates Always check for new updates after first setup, WSUS Server can be used for updates Feature updates Defer feature updates for enterprise testing Windows Store Always check for new updates after first setup
Proxy and Internet Proxy settings Surface Hub is capable to use Proxy Servers Proxy authentication should be avoided Proxy is not recommended for Office 365 scenarios Internet / Lan access / Guest Wlans Wired connections are recommended OOBE is not capable of web browser authentication Recovery settings Reset device
Will bring back OOBE BitLocker Saves BitLocker key to USB Support collect logs Eventviewer Skype logs Windows Update etc. Session objectives and takeaways Objectives
Know how to setup Surface Hub from an out-of-box-experience, configuring with Office 365 Show how to manage Surface Hub using tools like config packages and MDM Learn how to integrate Surface Hub with other devices in your organization Key takeaways Surface Hub is a new category of device that helps your customer to transform to the modern workspace Deploying Surface Hub is very easy if planned accordingly
Additional resources Surface Hub @ Virtual Academy https://aka.ms/SurfaceHubTraining Surface Hub Support Pages https://www.microsoft.com/surface/support/surface-hub Surface Hub Admin Guide https://technet.microsoft.com/en-us/itpro/surface-hub/surface-hub-administrators-guide Questions Get in the game with Microsoft devices at Ignite Attend the next Breakout Session SESSION ID
SESSION TITLE D AT E / T I M E L O C AT I O N BRK3157 Rock collaboration experience by enabling Skype for Business with Microsoft Surface Hub 9/30 10:45 12:00 B401-402
Score a Surface Pro 4! Microsoft Device Promotion The more sessions you attend, the more chances you have to win! We are giving away 1 device per breakout session 1 device per day for theater sessions The drawing will be held at the end of this session MUST BE PRESENT TO WIN Stay connected after Ignite JOIN SEARCH
Qualify to become a Windows & Devices for IT MVP? Visit: mvp.Microsoft.com AskCore Blog #Surface Subscribe to the Surface IT Pro Bulletin through TechNet Surface Support for Business
Surface Blog for IT Pros SKILL UP Watch the Surface Playlist on Microsoft Mechanics Youtube Take Microsoft Devices course on Microsoft Virtual Academy Please evaluate this session
Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp Thank you 2016 Microsoft Corporation. All rights reserved.
A one piece B five pieces C two pieces D three pieces Hedgehog Bakes a Cake www.theteachersguide.com Who Wants To Be A Millionaire? Question 1 $100 Where does this story take place? A Hedgehog's kitchen B Hedgehog's yard C Rabbit's...
Using capital letters 3. Then I read the letter, which was signed, "Yours truly, Roy Irwin." Then—first word in sentence I—capitalize the pronoun I Yours—first word in closing of letter Capitalize each lowercase letter that should be a capital.
Sing in me, Muse, and through me tell the story . of that man skilled in all ways of contending,° the wanderer, harried for years on end, after he plundered the stronghold . on the proud height of Troy. He...
For example, empty bottles, old utensils, cardboard tubes, bubble wrap, fabric and yarn, eyeglass cases, old tools, cookie tins, shoes, gloves, and so forth. Collecting materials can also make for a great scouting project or volunteer activity.
The world is always changing. Natural disasters are changes which are so great they may cause damage to the shape of the land or the lives of people and other things. Great changes happen deep inside the Earth and on...
23 And he called them to him and said to them in parables, "How can Satan cast out Satan?24 If a kingdom is divided against itself, that kingdom cannot stand.25 And if a house is divided against itself, that house...
Ready to download the document? Go ahead and hit continue!