Windows 8.1 deployment to PCs: A guide for education

Deploying the Windows 8.1 operating system in an educational environment can be an easy process when properly planned. Educational institutions have requirements (such as classroom and computer labs) that make them unique, but you can deploy Windows 8.1 in multiple ways, depending on the needs of the environment. This guide provides an overview of Windows 8.1 deployment to PCs in an educational environment. The guide is written for IT pros and looks at the various means by which they can deploy Windows 8.1, including the processes and tools involved along with their benefits, requirements, and limitations. You can install Windows 8.1 onto devices within your institution in many ways. Although deployment strategies for enterprise typically apply to educational deployments, certain requirements make educational deployments unique. Many educational environments need to provide not only for administrative staff but also for faculty and students, each of whom has special requirements for their computing environment. At a high level, you can deploy Windows by using a thick or thin image. A thick imaging strategy creates an image with the operating system, applications, drivers, and updates installed prior to deployment. A thin imaging strategy creates an image with the operating system, and then installs applications, drivers, and updates after deployment. A thin imaging strategy is easier to maintain and is the recommended strategy for Windows deployment.

Windows 8.1 deployment planning A guide for education January 2014 Table of contents 2 Windows 8.1 in education 2 ITbenets 2 Facultybenets 3 Studentbenets 4 Windows 8.1 purchase and licensing 6 Volume Activation 10 Network infrastructure 10 Internetingressandegress 11 Networkbandwidth 12 Wirelessnetworking 15 Accessibility 16 Printers 18 Security and privacy 21 Internetaccess 21 Applicationaccess 21 Deviceaccess 22 Remoteconnectivity 24 DirectAccess 25 Virtualprivatenetwork 26 Windows Store apps 27 User accounts 29 Deployment 31 Institution-owneddevices 32 Personallyowneddevices 33 VirtualDesktopInfrastructure 34 WindowsToGo 36 Device roaming and multiple devices 39 WindowsWorkFoldersandWorkplaceJoin 40 WindowsFolderRedirection 41 WindowsOfineFiles 41 WindowsRoamingUserProles 42 Defaultuserproles 42 UserExperienceVirtualization 43 MicrosoftApplicationVirtualization 44 Conguration and management 46 GroupPolicy 47 WindowsPowerShell 47 CongurationManager 47 WindowsIntune 1WINDOWS 8.1 DEPLOYMENT PLANNING Windows 8.1 deployment planning A guide for education This guide is designed for IT pros, school administrators, and other faculty members who are responsible for the deployment of devices running Windows 8.1 in educational institutions. This guide covers the key considerations and questions that should be answered as a part of a typical Windows 8.1 deployment. SomeofthekeystosuccessinaWindows8.1(oranytechnology deployment)thatwewillcoverineachsectionareasfollows: • DevelopandcommunicateyourWindows8.1deploymentplan beforeyoudeploydevices. • Starttheplanningprocessandvalidateyourdesignasearly inyourdeploymentprojectaspossible,becausebaddesign decisionsbecomedifculttocorrectthelateryoudiscoverthem intheprocess. • Includerepresentativesfromcurriculumandtechnology leadership(inadditiontothosewhoareresponsiblefor performingtheactualdeployment)tohelpensurethatthenal solutionmeetsorexceedscurriculumandlearningoutcome requirements. Eachsectioninthisguideliststhekeyplanningconsiderationsand questionsforthetopicscoveredinthatsection.Eachsectionalso includeslinkstoadditionalresourcestohelpintheWindows8.1 deploymentplanningprocessdiscussedinthatsection. NOTE Classroomcurriculum designisoutsidethe scopeofthisdocument.In addition,althoughmostof theplanningdecisionsin thisguideareapplicable toWindowsRT8.1, WindowsRT,andWindows 8,thisguidefocuseson Windows8.1deployment only. 2WINDOWS 8.1 DEPLOYMENT PLANNING Windows 8.1 in education Windows8.1providesanincredibleopportunityforeducatorsandstudentstotakeadvantageof thenewworldofdigitaleducationandexcitingnewdevices,leveragingtheworldwidestandard Microsoftplatformandcloudservicestoensureseamlessmanageability,robustsecurity,backward compatibility,andcosteffectiveness.RunningWindows8.1ondevicesdesignedforWindows8.1 canhelpyoumeetthechallengesandmaximizethebenetsofusingWindows8.1ineducation. IT benets ManyITorganizationswithineducationalinstitutionsalreadysupportaMicrosoftinfrastructure. Inmanyinstances,theITstaffcanusethesametoolstheyarealreadyfamiliarwithtomanage Windows8.1devices.Institutionscanalsooutsourcethisworktopartnerswhoareabletoleverage thepartner’sWindows8.1managementexperienceandskillsets. YoucanmanageWindows8.1devicesandappsautomaticallybyemployingon-premisesand off-premisesmanagementsolutions.Thesesolutionsdramaticallyreducetheeffortrequiredfrom ITprostokeepdevicescurrentwithsoftwareandsecurityupdatesandtoperformcommonIT administrativetasks.Inmanyinstances,educationalinstitutionscancreateself-serviceportalsthat allowuserstosolvemanycommonproblemsthemselves(suchasresettingapassword,deploying anapp,orinstallingsoftwareupdates).ThismeansthatITproscanspendfewerhoursmanaging hardware,software,andservicestoprovidehigher-qualityserviceswiththesameorlesslevelof effort. Faculty benets Windows8.1hasalargeecosystemofprovidersandservices,providingeducatorstheexibilityto choosethedevicesandservicestheyprefer–sotheycanteachthewaytheywant.Windows8also helpsteachersmanagetheclassroombylimitingavailabilityofdistractingapplications(suchas instantmessagingorsocialnetworking)duringclassandviewingandsharingstudentscreensto improveclassroomparticipation. MostinstructorsandfacultymembersarefamiliarwiththeWindowsoperatingsystemandusually haveanexistingdevicerunningWindowsintheclassroomorathome.Facultymembershave avastlibraryofexistingWindowssoftwareandperipheralstoincorporateintotheirlearning curriculum.DevicesrunningWindows8.1supportWindowsStoreappsanddesktopapplications, whichallowseducatorstohavetheultimateinexibilityanddiversitywhenselectingtechnology resourcesfortheclassroom.IfapplicationsandperipheralsworkedinWindows8andWindows7, theywilloftenworkjustaswellinWindows8.1,decreasingbothcostanddeploymenttime. 3WINDOWS 8.1 DEPLOYMENT PLANNING Thismeansthatinstructorsandfacultymemberswillbeabletorealizethebenetofusing Windows8intheclassroommorequicklythanotheroperatingsystems. Student benets Learningisaboutconsuming,collaboration,andcreation.MostWindowsdeviceshavea multitouchuserinterfacethatprovidesanimmersiveuserexperienceforconsumingand collaborating,buttheyalsocomewithafull-functioningkeyboardthatisessentialforcontent creation.Nowthereistheadditionofauidandimmersiveuserexperiencethatenablestablets andtouchscreensaswell.Withthehugeinterestintabletsforthestudentmarket,Windows8.1is abletoprovideaconsistentuserexperienceacrossformfactors.Inaddition,studentshaveaccess tothevastlibraryofexistingsoftwarecreatedforWindows—includingWindowsStoreappsand Windowsdesktopapplications—andmostapplicationsthatrunontheWindows8,Windows7,or WindowsXPoperatingsystemwillalsorunonWindows8.1. MoststudentsalreadyknowhowtousedevicesrunningaWindowsoperatingsystem.They typicallyhaveaccesstodevicesrunningWindowsathome,aswell,whichallowsstudentsto continuetheireducationathomewithoutadditionalcostonthepartoftheeducationalinstitution orthestudent’sfamily. 4WINDOWS 8.1 DEPLOYMENT PLANNING Windows 8.1 purchase and licensing NotethefollowingkeyWindows8.1purchaseandlicensingplanning considerations: • Howmanyusersdoyouneedtoenable? • HowmanynewdeviceswillyoubuywithWindows8.1 preinstalled? • HowwillyouupgradeexistingWindows8devicesto Windows8.1? • HowmanyWindows8.1licensesdoyouneedtopurchaseto upgradeexistingdevices(notethatsomeproductswillrequire licenseupgrades,suchasWindows8.1Enterpriseedition)? • HowdoesyourinstitutionhandleWindow8.1licensingfor personallyowneddevices? • HowcanfacultyandstudentspurchaseWindows8.1licensesat educationalprices? • Whateducationalpricingandlicensingprogramsareavailable foreducationalinstitutions? Eachphysicaldeviceorvirtualmachine(VM)runningWindows8.1 musthaveavalidlicense.Mostdevicehardwarevendorsprovide aWindows8.1licenseforeachdevicetheinstitutionpurchases. However,youmustobtainWindows8.1licensesforanyexisting devicesrunningpreviousversionsofWindowsthatwillbeupgraded toWindows8.1(suchasdevicesrunningWindows7). ThelistbelowprovidestheWindows8.1licensingconsiderationsfor devicesbasedontheirownership: • Institution owned Educationalinstitutionscanacquire licensesforWindows8(andotherMicrosoftproducts) throughtheMicrosoftEnrollmentforEducationSolutions (EES)program.TheMicrosoftEESprogramisaneasy,cost- NOTE ExistingWindows8 licensescanbeupgraded toWindows8.1licenses withoutadditional licensingfeesforthesame editionofWindows8.1.For example,aWindows8Pro licensecanbeupgradedto Windows8.1Prowithout additionallicensingfees. However,upgradinga Windows8licenseto Windows8.1Prowould requiretheWindows8Pro licensepriortoupgrading. NOTE Microsoftworkswith organizationsinthepublic sectorthroughtheShape theFutureprogram.For moreinformationabout theShapetheFuture program,seehttp:// www.microsoft.com/ shapethefuture. 5WINDOWS 8.1 DEPLOYMENT PLANNING effectiveofferthatprovidesqualiedacademiccustomers asimpliedwaytoacquireMicrosoftsoftwareandservices underasinglesubscriptionagreement.Formoreinformation, see“ProgramsforEducationalInstitutions”athttp://www. microsoft.com/education/en-us/buy/licensing/Pages/ enrollmentforeducationsolutions.aspx. • Personally owned Facultyandstudentsareresponsiblefor havingtheappropriateWindows8licensesfortheirdevices. InadditiontopotentiallybeingabletopurchaseMicrosoft softwarethroughtheeducationalinstitution,facultyand studentscanindividuallypurchaseMicrosoftproductsat educationaldiscountsthroughresellerssuchas: • JourneyEdathttp://www.journeyed.com/dept/Brands/ Microsoft/284074 • OnTheHubathttp://www.onthehub.com UsethisinformationtodeterminethenumberofWindows8.1 licensesyoumustobtainforyoureducationalinstitution.Also, usetheinformationtodetermineinstitution-sponsoredMicrosoft educationalbenetprogramsforfacultyandstudents. INFO Formoreinformation,see “MicrosoftinEducation” athttp://www.microsoft. com/education/ en-us/buy/Pages/ academicsavings.aspx. 6WINDOWS 8.1 DEPLOYMENT PLANNING Volume Activation NotethefollowingkeyMicrosoftVolumeActivationplanningconsiderations: • WhichlicensingmodelsareavailableforWindows8.1andMicrosoftOfceProfessional Plus2013? • Whattechnologiesareavailabletoactivatevolumelicenses? • Whattypeofconnectivityisavailablefordevicestoperformactivation? ThefollowinglistshowstheVolumeActivationtechnologiesandprovidesabriefdescriptionof each: • Active Directory-Based Activation (ADBA) ADBAisaroleservicethatallowsyoutouse ActiveDirectoryDomainServices(ADDS)tostoreactivationobjects,whichcanfurther simplifythetaskofmaintainingVolumeActivationservicesforanetwork.WithADBA,no additionalhostserverisneeded,andactivationrequestsareprocessedduringcomputer startup.ADBAworksonlyfordevicesrunningWindows8thataredomainjoined. • Key Management Service (KMS) KMSisaroleservicethatallowsorganizationstoactivate systemswithintheirnetworkfromaserveronwhichaKMShosthasbeeninstalled.WithKMS, ITproscancompleteactivationsontheirlocalnetwork,eliminatingtheneedforindividual computerstoconnecttoMicrosoftforproductactivation.KMSdoesnotrequireadedicated system,anditcanbecohostedonasystemthatprovidesotherservices.Bydefault,volume editionsofWindows8connecttoasystemthathoststheKMSservicetorequestactivation. Noactionisrequiredfromtheuser. • Multiple Activation Key (MAK) AMAKisavolumelicensekeythatisusedforone-time activationwithactivationservicesthatMicrosofthosts.YoucanactivateMAKsoverthe Internetorbytelephone. Table1onpage7liststheVolumeActivationtechnologiesandtheinformationnecessaryfor selectingtheappropriatetechnologiesforyourinstitution.Youcanselectanycombinationof thesetechnologiestodesignacompleteVolumeActivationsolution. 7WINDOWS 8.1 DEPLOYMENT PLANNING ADBA KMS MAK Device must be domain joined Yes No No Devices must connect to the network at least once every 180 days Yes Yes No Supports Volume Activation of Windows 8.1 and Windows 8 Yes Yes Yes Supports Volume Activation of Windows 7 No Yes Yes Supports Volume Activation of Microsoft Ofce Yes (Ofce2013 only,not Microsoft Ofce365 orprevious versionsof Ofce) Yes Yes Can use Volume Activation services in Windows Server 2012 R2 and Windows Server 2012 Yes Yes N/A Can use Volume Activation services in operating systems prior to Windows Server 2012 R2 and Windows Server 2012 Yes,but requiresthat theActive Directory schemabe updatedto Windows Server 2012 orWindows Server 2012 R2 Yes N/A Microsoft Volume Licensing information is stored in AD DS Yes No No Can be activated with Internet access only No No Yes Can be activated by telephone No No Yes TABLE 1 Volume ActivationTechnology Selection [...]... connections Windows 8.1 includes the new Auto-Triggered VPN feature, which allows Windows to automatically initiate a VPN connection by: • Referencing a Domain Name System (DNS) domain name suffix This allows you to configure Windows 8.1 to automatically initiate a VPN connection when a user attempts to access a resource with the DNS domain suffix For example, you could configure Windows 8.1 to automatically... user accounts to use  Table 5 on page 28 lists the user account types available for use in Windows 8 Use the information in Table 5 to determine which user account types faculty and students will use • Account management  You can centrally manage domain-based Windows accounts and Windows Azure AD accounts You cannot centrally manage Microsoft accounts and local Windows accounts (for example, you cannot... key deployment planning considerations: • What deployment scenarios are available for Windows 8.1 in education? • What are the deployment technologies and tools available for institution-owned devices? • What are the deployment technologies and tools available for personally owned devices? • What role does virtualization play in deploying Windows 8 in education? • What type of connectivity is available... perform manual deployment of Windows 8.1 from the distribution media You can upgrade to Windows 8.1 from distribution media or by downloading the update from the Windows Store Additional information: • Windows 8.1 deployment to PCs: A guide for education at http://www.microsoft.com/ download/details.aspx?id=39684 • VDI: A deployment guide for education at http://www.microsoft.com/download/details aspx?id=39687... Windows 8.1 operating system includes many new feature and capabilities, but one prominent feature is Windows Store apps Educational institutions can purchase or create apps for Windows 8 that use the new UI WINDOWS 8.1 DEPLOYMENT PLANNING INFO Windows Store app planning considerations are discussed in Windows Store apps: A deployment guide for education at http://www.microsoft com/download/details aspx?id=39685... initiate a VPN connection anytime the user attempts to access a resource with a DNS suffix of corp.contoso.com (such as dc.corp.contoso.com or intranet.corp.contoso.com) • Starting a specific Windows Store or desktop app This allows you to configure Windows 8.1 to automatically initiate a VPN connection when the user starts an app For example, you could configure Windows 8.1 to automatically initiate a. .. creation for children under 13 years of age To verify that an adult is giving a child permission to create a new Microsoft account, COPPA requires that a small amount be charged to the adult’s credit card (for a U.S account) Although you do not need adult permission to create Windows accounts and Windows Azure AD accounts, it is recommended that adults be notified and permission obtained, as necessary... Windows 8.1 upgrade Upgrades from Window 8 are available at no additional licensing fee Upgrades from prior versions of Windows (such as Windows 7) are available for educational institutions For more information, see the section, Windows 8.1 purchase and licensing” on page 4, earlier in this guide You can determine if an existing device can run Windows 8.1 by using the Microsoft Assessment and Planning... WINDOWS 8.1 DEPLOYMENT PLANNING 27 account type Description Windows account This account is stored locally on the Windows 8.1 device (local Windows account) or in an onpremises AD DS domain This account is identical to the user accounts that Windows 7 uses You can associate a Microsoft account with a Windows account to provide access to resources that use a Microsoft account (such as the Windows Store... computers for those with significant vision, hearing, dexterity, language, or learning needs These features are available in Windows 8.1, Windows 8.1 Pro, Windows 8.1 Enterprise, and Windows RT 8.1 Note the following planning considerations for Windows 8 accessibility: • Ease of Access and Personalization options  These options in Windows 8.1 make devices easier to see, hear, and use; they include screen magnification, . Windows 8. 1 VoluntaryProductAccessibilityTemplate(VPAT)”athttp://download.microsoft. com/download/B /1/ B/B1BDCD6D-4EBC-4D9 2-9 40 5-5 E81AAE159D0/Remote_Server_ Administration_Tools _for _Windows_ 8_ 1_ VPAT.docx 1 6WINDOWS 8. 1 DEPLOYMENT PLANNING Printers Notethefollowingkeyprinter planning considerations: •. CongurationManager 47 Windows Intune 1WINDOWS 8. 1 DEPLOYMENT PLANNING Windows 8. 1 deployment planning A guide for education This guide is designed for IT pros, school administrators, and other. Windows 8. 1 deployment planning A guide for education January 2 014 Table of contents 2 Windows 8. 1 in education 2 ITbenets 2 Facultybenets 3 Studentbenets 4 Windows 8. 1 purchase and