michael niehaus [email protected]. windows store apps traditional desktop apps setup.exe...

20
Implementing an Enterprise App Store for Windows 8 and Windows 8.1 Michael Niehaus [email protected] om WCL331A

Upload: georgia-townsend

Post on 24-Dec-2015

226 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Implementing an Enterprise App Store for Windows 8 and Windows 8.1Michael [email protected]

WCL331A

Page 2: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Windows Store Apps

The biggest change in Windows 8Traditional Desktop Apps

Setup.exe installers

Windows Installer (MSI)

OneClick (.NET)

App-V, Click-to-Run

Can be installed silently (usually)

Typically requires admin rights, usually installs per

machine

Still used in Windows 8 (unchanged)

New packaging mechanism

Very simple installation mechanism

Only used for Windows Store apps

Always installs quietly

Does not require admin rights, always installs per

user

New in Windows 8, essentially unchanged in

Windows 8.1

Page 3: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Let’s agree on some terms

Windows Store appsModern, full-screen applications written to the WinRT API that run on Windows 8 and Windows RT.Sometimes also called WinRT apps, modern apps, Windows 8 apps, and the “M” word.

Microsoft AccountAn online account, formerly called a Live ID.

Windows StoreAn online store for acquiring Windows Store apps, and an application by the same name on Windows 8 and Windows RT for accessing the online store. Requires a Microsoft account to install new apps (but not to install updates).

Page 4: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Let’s agree on some terms

Appx filesA self-contained packaging format for Windows Store apps, effectively a zip file containing all the necessary components for the application, except for dependencies (which would also be Appx files).

SideloadingThe process of installing or provisioning Windows Store apps without going through the Windows Store. There are specific requirements to enable this.

LOB AppsLine of business applications developed, developed and used by enterprises, although sometimes used as a substitute for “sideloaded app”.

Page 5: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Windows Store apps

Install via an “Enterprise App Store” using:• System Center 2012 Configuration

Manager SP1• Windows Intune

Provision using the Microsoft Deployment Toolkit 2012 or DISM• Include in sysprepped image• Customize Start screen layout

ProvisioningInstallation

Register the application for the userAlways per-userDoes not require administrator rightsSide load or from the Windows Store

Register application on the computerInstall automatically for each userSide load onlyRequires administrator rights

Enterprise side loading requirements• Windows 8 Enterprise, domain joined or with a separate side load product key • Windows 8 Pro or Windows RT, with a separate side load product key

Page 6: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Demo:Windows Store App nuts and boltsName

Page 7: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Automatic installation of updatesGroup policy can disable auto install, but enabled by defaultUpdates can still install without a Microsoft account

Installation when the Windows Store is disabledGroup policy can disable the Windows Store for the user, but still allow updates to installDisabling the Windows Store for the computer prevents update installation

Updates to in-box appsMechanism to update OS images with the latest version of appsAvoids the immediate need for users to install updatesHandles scenarios where internet access isn’t available

Gift card purchasingApps can be purchased using gift cards, without each person using a credit card

Works behind proxy serversAddresses common issue in Windows 8

Improvements in Windows 8.1

Page 8: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Why create an enterprise app store?

Users need different applicationsNot all users need all apps

IT pros need a mechanism to deliver apps to usersAllow users discover available apps and make requestsGather approvals, if necessaryInstall the applicationsCompletely automated

Supports BYOD scenariosIT will increasingly need to deliver apps to computers that aren’t company-owned

Page 9: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Tools to create an enterprise app store

System Center 2012 Configuration ManagerOn-premises solution using app catalog

Windows IntuneCloud-based offering using Company Portal

Other solutionsFree tools like http://companystore.codeplex.com/ can install apps using available APIsManagement tools can leverage APIs, PowerShell, or DISM commands to achieve the same thing

Page 10: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Demo:Deploying and managing apps with System Center Configuration Manager

Name

Page 11: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Windows Store apps install per userTarget user collections (push or pull)Cannot be installed via a task sequenceNo native support for provisioning apps, but this can be done using standard software distribution and custom command lines

You need to enable sideloadingSet “Allow all trusted apps” policyDeploy trusted root certificatesJoin Active Directory with Windows 8.1 Enterprise, or install a sideload key

Requires the .appx installation files“Deep links” can be used, but the user must log in with a Microsoft Account and click “Install”

Enables self-service app installationUses app catalog with ConfigMgr 2012 SP1Adds Company Portal app for ConfigMgr 2012 R2

Requires ConfigMgr 2012 SP1 or later

Using ConfigMgr: Things to Remember

Page 12: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Demo:Deploying and managing apps with Windows Intune

Name

Page 13: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Windows Store apps install per userTarget users or groups (pull now, push coming soon)

You need to enable sideloadingSet “Allow all trusted apps” policyDeploy trusted root certificatesJoin Active Directory with Windows 8.1 Enterprise, or install a sideload key

Requires the .appx installation files“Deep links” can be used, but the user must log in with a Microsoft Account and click “Install”

Enables self-service app installationPublish apps to the Company App Portal (Windows Store app)

Requires setting up DirSyncBest with single sign-on

Windows 8.1 will be supported at GA

Using Windows Intune: Things to Remember

Page 14: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Demo:Provisioning apps with the Microsoft Deployment Toolkit

Name

Page 15: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Focuses on image creation scenariosProvisioning apps in the image (Windows limit of 24 apps)Specify the name of the .appx file as the install command line

You can’t install apps from the Windows Store before syspreppingOnly provisioned apps can be sysprepped

Requires MDT 2012 Update 1 for Windows 8, MDT 2013 for Windows 8.1

Using the Microsoft Deployment Toolkit: Things to Remember

Page 16: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Can I customize the Start screen layout?Yes, see http://technet.microsoft.com/en-us/library/jj134269.aspx for the basic process. This is easier with Windows 8.1 and the included PowerShell cmdlets to export and import the start screen layout.

Can I get the .appx files for <insert Microsoft app here>?Presently, there is no mechanism available to provide appx files for Office (OneNote MX, Lync MX), Windows (updated versions of the in-box apps), etc. Third parties may provide these.

Can I prevent users from installing <insert Windows Store app>?You can disable the Windows Store completely, or you can use AppLocker to whitelist or blacklist Windows Store apps.

Frequently Asked Questions

Page 17: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Why is the Windows Store disabled on Windows To Go?With Windows 8, there could be licensing issues if the Windows To Go device is attached to too many different PCs. You can configure a policy to enable this if you want. This has been fixed with Windows 8.1, so the Windows Store will now be enabled by default.

Where can I get a sideload product key?These are available to SA customers through the Volume Licensing Service Center, http://www.microsoft.com/licensing/servicecenter.

Frequently Asked Questions

Page 18: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Can I use the Mail app without a Microsoft ID?With Windows 8, no, you must specify a Microsoft ID even if you are going to be using Exchange or third-party IMAP for e-mail. This will be possible with Windows 8.1 via a group policy setting.

Can I programmatically install an app from the Windows Store?While you can specify a “deep link” URL to navigate directly to a specific Windows Store app, you cannot initiate the installation. The user will need to click the “Install” button.

Frequently Asked Questions

Page 19: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

Developer Network

Resources for Developers

http://msdn.microsoft.com/en-au/

Learning

Virtual Academy

http://www.microsoftvirtualacademy.com/

TechNet

Resources

Sessions on Demand

http://channel9.msdn.com/Events/TechEd/Australia/2013

Resources for IT Professionals

http://technet.microsoft.com/en-au/

Page 20: Michael Niehaus mniehaus@microsoft.com. Windows Store Apps Traditional Desktop Apps Setup.exe installers Windows Installer (MSI) OneClick (.NET) App-V,

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.