michael niehaus [email protected]. windows store apps traditional desktop apps setup.exe...
TRANSCRIPT
Implementing an Enterprise App Store for Windows 8 and Windows 8.1Michael [email protected]
WCL331A
Windows Store Apps
The biggest change in Windows 8Traditional Desktop Apps
Setup.exe installers
Windows Installer (MSI)
OneClick (.NET)
App-V, Click-to-Run
Can be installed silently (usually)
Typically requires admin rights, usually installs per
machine
Still used in Windows 8 (unchanged)
New packaging mechanism
Very simple installation mechanism
Only used for Windows Store apps
Always installs quietly
Does not require admin rights, always installs per
user
New in Windows 8, essentially unchanged in
Windows 8.1
Let’s agree on some terms
Windows Store appsModern, full-screen applications written to the WinRT API that run on Windows 8 and Windows RT.Sometimes also called WinRT apps, modern apps, Windows 8 apps, and the “M” word.
Microsoft AccountAn online account, formerly called a Live ID.
Windows StoreAn online store for acquiring Windows Store apps, and an application by the same name on Windows 8 and Windows RT for accessing the online store. Requires a Microsoft account to install new apps (but not to install updates).
Let’s agree on some terms
Appx filesA self-contained packaging format for Windows Store apps, effectively a zip file containing all the necessary components for the application, except for dependencies (which would also be Appx files).
SideloadingThe process of installing or provisioning Windows Store apps without going through the Windows Store. There are specific requirements to enable this.
LOB AppsLine of business applications developed, developed and used by enterprises, although sometimes used as a substitute for “sideloaded app”.
Windows Store apps
Install via an “Enterprise App Store” using:• System Center 2012 Configuration
Manager SP1• Windows Intune
Provision using the Microsoft Deployment Toolkit 2012 or DISM• Include in sysprepped image• Customize Start screen layout
ProvisioningInstallation
Register the application for the userAlways per-userDoes not require administrator rightsSide load or from the Windows Store
Register application on the computerInstall automatically for each userSide load onlyRequires administrator rights
Enterprise side loading requirements• Windows 8 Enterprise, domain joined or with a separate side load product key • Windows 8 Pro or Windows RT, with a separate side load product key
Demo:Windows Store App nuts and boltsName
Automatic installation of updatesGroup policy can disable auto install, but enabled by defaultUpdates can still install without a Microsoft account
Installation when the Windows Store is disabledGroup policy can disable the Windows Store for the user, but still allow updates to installDisabling the Windows Store for the computer prevents update installation
Updates to in-box appsMechanism to update OS images with the latest version of appsAvoids the immediate need for users to install updatesHandles scenarios where internet access isn’t available
Gift card purchasingApps can be purchased using gift cards, without each person using a credit card
Works behind proxy serversAddresses common issue in Windows 8
Improvements in Windows 8.1
Why create an enterprise app store?
Users need different applicationsNot all users need all apps
IT pros need a mechanism to deliver apps to usersAllow users discover available apps and make requestsGather approvals, if necessaryInstall the applicationsCompletely automated
Supports BYOD scenariosIT will increasingly need to deliver apps to computers that aren’t company-owned
Tools to create an enterprise app store
System Center 2012 Configuration ManagerOn-premises solution using app catalog
Windows IntuneCloud-based offering using Company Portal
Other solutionsFree tools like http://companystore.codeplex.com/ can install apps using available APIsManagement tools can leverage APIs, PowerShell, or DISM commands to achieve the same thing
Demo:Deploying and managing apps with System Center Configuration Manager
Name
Windows Store apps install per userTarget user collections (push or pull)Cannot be installed via a task sequenceNo native support for provisioning apps, but this can be done using standard software distribution and custom command lines
You need to enable sideloadingSet “Allow all trusted apps” policyDeploy trusted root certificatesJoin Active Directory with Windows 8.1 Enterprise, or install a sideload key
Requires the .appx installation files“Deep links” can be used, but the user must log in with a Microsoft Account and click “Install”
Enables self-service app installationUses app catalog with ConfigMgr 2012 SP1Adds Company Portal app for ConfigMgr 2012 R2
Requires ConfigMgr 2012 SP1 or later
Using ConfigMgr: Things to Remember
Demo:Deploying and managing apps with Windows Intune
Name
Windows Store apps install per userTarget users or groups (pull now, push coming soon)
You need to enable sideloadingSet “Allow all trusted apps” policyDeploy trusted root certificatesJoin Active Directory with Windows 8.1 Enterprise, or install a sideload key
Requires the .appx installation files“Deep links” can be used, but the user must log in with a Microsoft Account and click “Install”
Enables self-service app installationPublish apps to the Company App Portal (Windows Store app)
Requires setting up DirSyncBest with single sign-on
Windows 8.1 will be supported at GA
Using Windows Intune: Things to Remember
Demo:Provisioning apps with the Microsoft Deployment Toolkit
Name
Focuses on image creation scenariosProvisioning apps in the image (Windows limit of 24 apps)Specify the name of the .appx file as the install command line
You can’t install apps from the Windows Store before syspreppingOnly provisioned apps can be sysprepped
Requires MDT 2012 Update 1 for Windows 8, MDT 2013 for Windows 8.1
Using the Microsoft Deployment Toolkit: Things to Remember
Can I customize the Start screen layout?Yes, see http://technet.microsoft.com/en-us/library/jj134269.aspx for the basic process. This is easier with Windows 8.1 and the included PowerShell cmdlets to export and import the start screen layout.
Can I get the .appx files for <insert Microsoft app here>?Presently, there is no mechanism available to provide appx files for Office (OneNote MX, Lync MX), Windows (updated versions of the in-box apps), etc. Third parties may provide these.
Can I prevent users from installing <insert Windows Store app>?You can disable the Windows Store completely, or you can use AppLocker to whitelist or blacklist Windows Store apps.
Frequently Asked Questions
Why is the Windows Store disabled on Windows To Go?With Windows 8, there could be licensing issues if the Windows To Go device is attached to too many different PCs. You can configure a policy to enable this if you want. This has been fixed with Windows 8.1, so the Windows Store will now be enabled by default.
Where can I get a sideload product key?These are available to SA customers through the Volume Licensing Service Center, http://www.microsoft.com/licensing/servicecenter.
Frequently Asked Questions
Can I use the Mail app without a Microsoft ID?With Windows 8, no, you must specify a Microsoft ID even if you are going to be using Exchange or third-party IMAP for e-mail. This will be possible with Windows 8.1 via a group policy setting.
Can I programmatically install an app from the Windows Store?While you can specify a “deep link” URL to navigate directly to a specific Windows Store app, you cannot initiate the installation. The user will need to click the “Install” button.
Frequently Asked Questions
Developer Network
Resources for Developers
http://msdn.microsoft.com/en-au/
Learning
Virtual Academy
http://www.microsoftvirtualacademy.com/
TechNet
Resources
Sessions on Demand
http://channel9.msdn.com/Events/TechEd/Australia/2013
Resources for IT Professionals
http://technet.microsoft.com/en-au/
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.