VMware Workspace ONE a synergie s Microsoftem

Confidential ©2018 VMware, Inc.
VMware Workspace ONE
and synergies with Microsoft
Michal Minařík
mminarik@vmware.com
EUC System Engineer
@minarik_cz

Agenda
2Confidential ©2018 VMware, Inc.
What is Workspace ONE
VMware Horizon on Microsoft Azure
Workspace ONE and Windows 10 co-management
Workspace ONE and Office365 integration
Discussion

Strategy for 2018
Customers will leverage
cloud models for virtual
desktops and apps that
improve business agility,
cost and flexibility
Data-driven insights and
automation will redefine how
desktop environments are
managed, secured
and experienced.
Windows 10 will drive
the adoption of a
holistic management
model across physical
and virtual desktops.

Drive to an integrated Workspace ONE Platform
Unified Endpoint Management
(Powered by AirWatch)
Desktop and App Virtualization
(Powered by Horizon)
API Framework
Security
Business Flows
Identity
Analytics
Mobile
Professionals
Front Line
Employees
Contingent
Employees
IT ExperienceCorporate and Personal Use
Ecosystem
Automation Engine
Policies | Notifications | Operations
Consistent
Onboarding
Experience
Secure Productivity AppsSelf Service
Unified Catalog
Insights & Dashboards
Employees
RISKS INSIGHTS
ü Risk Score
ü Patch Levels
ü Apps Deployed
ü Device Health
Score
ü License Status
COST SECURITY PRODUCTIVITY

VMware Horizon Cloud
On Microsoft Azure

BYO
Azure Cloud
NEW
VMware Horizon Cloud Service – Now on Microsoft Azure!
VMware-Managed
Public Cloud
BYO
Private Cloud
Comprehensive Application & User Management
User
Environment
Management
App
Management
Image
Management
Monitoring
& Analytics
Service
Updates
New

VMware Horizon Cloud
Horizon Cloud Service Named User License
Horizon Cloud Service Concurrent User License
Value
Professional
Premium
Standard Capacity Workstation Capacity
Performance
ProfessionalWS
PremiumWS
PerformanceWS
VMware-Managed
Hosted Infrastructure
Bring-Your-Own
Infrastructure
Hosted Apps Server
Microsoft Azure Cloud Infrastructure
3rd Party On-premises Infrastructure

Deployment Options
• CAPEX Model
• Greater flexibility in desktop
options
• Scalable to customer
requirements
• Feature rich management
On Premises
(Horizon 7)
LOAD
BALANCERS
CONNECTION
BROKERS
ACTIVE
DIRECTORY
MANAGEMENT
SERVERS
COMPUTESERVERSRUNNING
VIRTUALDESKTOPS
CUSTOMER IT ENVIRONMENT
SANSTORAGE
• OPEX model of utility based
pricing
• Scalability on demand
• Minimal internal expertise
required
• Remote locations where
building data center capacity
is impossible
Horizon Cloud with Hosted
Infrastructure
IBM
CloudMOBILE
USERS
REMOTE
USERS
ACTIVE
DIRECTORY USER APP
DATA
CORP USER DEVICES
SECURE VPN
SECUREVPN
CUSTOMER IT ENVIRONMENT
• Hybrid OPEX model
• Cross-Cloud Integration
• Management plane in the
cloud
• Published desktops & apps on
Azure Cloud infrastructure
• Reduce Cost with
consumption based billing
• Minimal internal expertise
required and easily scalable
Horizon Cloud on Azure
Infrastructure
G
HORIZON CLOUD
CONTROL PLANE
IT Services
MOBILE & REMOTE
USERS
SESSION DESKTOPS
& RDSH HOSTS

Horizon Cloud on Microsoft Azure Overview
• Continuous delivery of service improvements.
• Hosted Globally – Access from any network location, with multi-
layer security.
• Session Desktops and RDS Hosted Applications.
• Blast Extreme and PCoIP support.
• Integrates with other Cloud Services like Workspace ONE.
Details
• Global Footprint.
• Automatic, orchestrated upgrades.
• Highly available management platform.
• Hourly Billing on Infrastructure from Microsoft.
Benefits
Azure Infrastructure
SmartNode
UAG Jumpbox
Horizon Cloud
Services
Web UI
Connector
Administrator

Horizon Cloud on Microsoft Azure – Components
Comprehensive Application & User Management
User
Environment
Management
Desktop
& App
Management
Image
Management
Monitoring
& Analytics
Service
Updates
1
2
BYO
Microsoft Azure Subscription
3
VMware-delivered Horizon Cloud Control Plane

End
Users
Express Route or
VPN / MPLS etc.
On-Premises
(optional)
System
Admin
Active Directory
System Architecture

Public IP
Unified Access
Gateway
DMZ
Unified Access
Gateway
Azure Load Balancer
System Architecture
Express Route or
VPN / MPLS etc.
Active Directory
End
Users
Base Image(s)Active Directory
WS1
Connector
(optional)
RDS License
Server(s)
SmartNode
Marketplace
RDS Farm(s)
Deployment
Engine
(short lived)
System
Admin

Public IP
Unified Access
Gateway
DMZ
Unified Access
Gateway
Azure Load Balancer
System Architecture
Express Route or
VPN / MPLS etc.
Active Directory
End
Users
Active Directory
WS1
Connector
(optional)
RDS License
Server(s)
SmartNode
Marketplace
RDS Farm(s)
Deployment
Engine
(short lived)
System
Admin
Deployment
Engine
(short lived)
On-Premises
(optional)
Cloud-Infrastructure Cloud-Capacity
Base Image(s)

RDSH Licensing servers
DHCP
DNS
Servers for other features
• User Environment Manager
• Workspace ONE / IDM
File services
Windows licenses
Other stuff that customer is responsible for

Horizon Cloud Service – Control Plane
Details
• Cloud-hosted, scalable, multi-tenant
management service.
– Micro service architecture – built from ground up
for global scale.
• Customers can configure specific region to
manage from.
Benefits
• Single Cloud-Managed Management Plane.
– Single pane of management.
– Continuous updating of new features.
• Data Sovereignty.
– e.g. German customers cannot have their data be
stored in USA.
Pepsi
Node 1
Pepsi
Node 2
BMW
Node 1

Multi-node management from a single UI
Details
• Manage multiple SmartNodes from a single
UI.
• Customers can manage deployments in
different Azure regional datacenters.
Limitations
• Cross-node entitlement
• No user load balancing across nodes

Simple Upgrades
“Blue”
Active Node
“Green”
New Node
Details
• Seamless Updates with minimal outage.
• Cloud Plane Upgraded Weekly.
– Micro service architecture – built from ground up
for global scale.
• Nodes Upgraded Quarterly.
– Customer schedules upgrade with VMware.
– Takes approximately 5 minutes to migrate.
Benefits
• “Blue – Green” Upgrade mechanism.
– No downtime.
• Fast and reliable Upgrade.
– Clean node + migrate metadata.

RDS Host Power Management
Overview
• Define policies in Farm profile to take power actions.
– Select minimum and maximum number of servers for RDSH farm.
– Select threshold at which new capacity is powered up / down within those
limits.
• Optimized Performance
• Balanced
• Optimized Power
• Farm automatically scale out (up to max size) when necessary.
• Automatic shut down (deallocation) of unused servers.
Benefits
• Avoids spending money for cloud capacity when not needed.
• Servers deallocated, so that no longer paying compute costs.

Provision RDS from Microsoft Azure Marketplace
Overview
• Provision Azure VM’s directly from within Horizon
Cloud UI.
• Automatic Horizon Agent & Bootstrap Install.
– Configure Horizon Agent options.
– For GPU based VM’s, NVIDIA drivers must be
installed manually
• After deployment, you can install applications to
complete image.
Benefits
• Single configuration to build RDS Image Master.
• Leverage standard RDSH VM’s from Azure
Marketplace.

RDS Host Maintenance
Overview
• Scheduled Maintenance.
– Daily or weekly.
• Two options – Recreate and Restart
– Recreate destroys VM and builds fresh off of image.
– Recreate used to update to a new Master image.
– Restart just restarts current.
• Subsequent times will use the same Master image.
• A minimum amount of RDS Hosts are kept available during
maintenance.
Benefits
• Simplified updates of RDSH farms with minimal user impact.
• Automatically keep RDSH farm at optimal condition.

GPU VMs in Microsoft Azure
Overview
• Details on the properties of Azure GPU VM’s can
be found on web.
– Standard_Nv6 have access to one half of NVIDIA’s
Tesla M60 GPU card.
– Drivers available from Microsoft or NVIDIA (latest).
– Customer may need to increase the cores quota (per
region) in your Azure subscription.
Details
• Only supported on Windows Server 2012r2 images
– NVIDIA Drivers need to be installed manually.
– Drivers available from Microsoft or NVIDIA (latest).
• Each GPU-backed RDS Host Limited to 20 Concurrent users.

Horizon Cloud Monitoring
Details
Horizon Cloud for Azure has monitoring capabilities
built-into the service.
• Basic connection history / reporting.
• Utilization of Service.
• Service Health.
• Reports on assignments and capacity.
Benefits
• Single location for management of all critical
components of the service.
• No need for 3rd party tools.

Virtual Desktops Beta BETA
Overview
• Currently in progress
• Only available to 5 customers.
• Support for:
– Windows 10.
– Dedicated & Limited Floating Desktops + current GA features.
– 200 VM’s / Node for VDI for Beta.

Workspace ONE and True SSO
Details
• True SSO deployment details in admin guide
• Horizon Cloud on Microsoft Azure supports IDM
3.0 & Connector 2017.8.1
Overview
• Horizon Cloud – Azure integrates
with Workspace ONE to deliver a
single workspace for all users
• True SSO provides a way to
authenticate to Microsoft Windows,
retaining all of the users’ normal
domain privileges, without requiring
them to provide AD credentials

Co-Management = PCLM + EMM
Path to Modern Management

Expensive, time consuming, difficult, error prone
Large enterprises typically:
• Skip versions of Windows
• Deploy based on End of Support
• Take 12-18 months of testing prior to deployment
• Take 18-24+ months for full deployment
• Update images infrequently
• Maintain multiple images at $13,000/image/year per
Gartner
• Run prior OS 6+ years post deployment
Eventually, an OS will be sunset and migration occur
Windows Software Assurance often drives faster
deployments
Typical Windows Deployment Lifecycle

Windows Deployment and Management Tools
Co-Management
• Microsoft announcement at Ignite last year
• Provides a “bridge” to modern management from
an SCCM managed environment
• Enables the use of both SCCM and Intune
management simultaneously
• Current Microsoft messaging makes co-
management appear as only available with Intune
• Allows workloads to be selected per management
platform
• Compliance, access policies, Windows update
management
• Exposed via APIs which are available to any ISV as
well as Microsoft

Workspace ONE Enhancements to Meet Critical PC Management Needs
Transforming the way IT manage PCs with Modern Management for Windows 10
Peer-to-Peer
Distribution
Co-exist with
PCLM
Updates On
or Off Network
Device Health
Attestation
Win32 App
Management
GPOs On or
Off Domain
Data
Protection
Patch Audit &
Analytics
Granular
Controls
5. Client Health &
Security
3. OS Patch
Management
4. Software
Distribution
2. Configuration
Management
1. Deployment and
Onboarding
Asset
Tracking
Device and OS Lifecycle Management
App Management and
Delivery
End-to-end Security
Management
App
Inventory
BitLocker
Management
Company App
Store & SSO
Imageless
Provisioning
Out-of-the-Box
Deployment
MDM
Configuration
Intelligent Insights and Rules Engine
BIOS
Management
Delivery
Optimization
Automated
Compliance
EXPANDED EXPANDED EXPANDEDEXPANDEDNEW
EXPANDEDNEW
EXPANDED

PowerShell
Windows Desktop Solution Stack
Windows OS
WiFi VPN Passcode
Firewall Updates
BitLocker
ZIP, EXE,
MSI, P2P
MSI
BIOS
Scripting
Microsoft CSPs
Windows
Capabilities
Firmware
AirWatch CSP
Direct
Win32
WMI Management
API
Policy
Engine
CSP / GPO
OMA-DM Client AirWatch Win32
Management
Clients
Workspace ONE (AirWatch Server) Management
Server
Added in
1709
WNS AWCM
OEM
Updates
Drivers
https://docs.microsoft.com/en-us/windows/client-management/mdm/configuration-service-provider-reference

Easing the Journey to Windows 10 with Co-Management
32
COMPLEMENT
Selective move to modern
management for specific
devices and use cases
TRANSITION
Co-management with legacy
tools for specific PCLM tasks
and transition over time
TRANSFORM
Full migration from legacy
to modern management for
maximum cost efficiencies

Simplify Migration to Windows 10 and Modern Management
VMware
In-place Upgrade Tool for Dell
Windows 10 Devices
SCCM App Migration Tool for
Windows 10
GPO Migration Tool for Windows
10
VMware AirWatch Unified Endpoint
Management Migration Toolkit (MTK)*
* Download the free tools today at https://code.vmware.com/
Migrate policy
and app
packages
In-place
upgrade
Company Image AirWatch Agent
+
Re-image
Provisioning PPKG AirWatch Agent
+
Provisioning – PC
refresh
Traditional
Management
Win7/8

Workspace ONE and O365

Office 365 Identity Models

Manage and Secure Microsoft Office 365
Get users up and running quickly with self-service and secure
access
© 2017 VMware Inc. All rights reserved. Confidential – Not for Distribution
Leverage existing IDPs and
federation for common
identity and SSO across all
apps
Getting Started Wizard for
easy Office 365 setup,
delivery, config and
assignment
Integration with Graph API
for Office app DLP policies
(copy paste and save as
controls)
Comprehensive security with
conditional access to
authorized and compliant
devices only
Secure enterprise data with
comprehensive MAM – native
or app container

Confidential ©2018 VMware, Inc. 38
Try Workspace ONE
in our demo environment VMware TestDrive
What can you try:
Managing and securing mobile devices
Modern management of MacOS and
Windows OS
Application delivery
Virtual desktops (including GPU
accelerated applications)
Contact us for 30-days demo access

VMware Workspace ONE a synergie s Microsoftem

More Related Content

What's hot

What's hot (20)

Similar to VMware Workspace ONE a synergie s Microsoftem

Similar to VMware Workspace ONE a synergie s Microsoftem (20)

More from MarketingArrowECS_CZ

More from MarketingArrowECS_CZ (20)

Recently uploaded

Recently uploaded (20)

VMware Workspace ONE a synergie s Microsoftem