Enterprise Browser Management in Windows 10 - PowerPoint Presentation

Slide1
Slide2

Enterprise Browser Management in Windows 10

Deen King-Smith, Program Manager Enterprise BrowsingSlide3

Topic

Session

Topic

SpeakerEnterprise GuidanceBRK2338Enterprise Web BrowsingFred PullenHow do I upgrade to Internet Explorer 11?BRK2307Enterprise Mode for Internet Explorer 11 Deep DiveDeen King-SmithBRK2312Web App Compat & Modernization for NerdsChris JacksonTell me about Microsoft EdgeBRK1301Microsoft Edge OverviewFred PullenBRK2347Windows 10 Browser ManagementDeen King-SmithWhat about security?BRK2319Browser Security OverviewFred Pullen

Browser Breakout Sessions at Microsoft Ignite

CRSlide4

Web Browsing on Windows 10

Microsoft Edge

Software as a Service

Internet Explorer 11Software as a ProductSlide5

“Management

is all about managing in the short term, while developing the plans for the long term

.” – Jack Welch, former Chairman & CEO of GESlide6

Windows 10 Browser Management Tenets

Optimized policy set for Microsoft Edge

Easy configuration of Microsoft Edge

Consistent management experience for Internet Explorer 11 and Microsoft Edge in Windows 10

Consistent policy set for Internet Explorer 11 across all supported versions of Windows

Tight integration between Microsoft Edge and Internet Explorer 11

Reduce management overhead where possibleSlide7

What we’ll cover

Microsoft Edge & Internet Explorer 11

Working together to give you the best of both worlds

Internet Explorer 11Best-in-class compatibility with Legacy LOB appsNew default Windows 10 browserMicrosoft EdgeSlide8

What we’ll cover

Microsoft Edge & Internet Explorer 11

Working together to give you the best of both worlds

Internet Explorer 11Best-in-class compatibility with Legacy LOB appsNew default Windows 10 browserMicrosoft EdgeSlide9

No change to management tooling in Windows 10

Internet Explorer 11 in Windows 10

Consistent management approach

for Internet Explorer 11 on all supported Operating SystemsSlide10

Internet Explorer 11

Management

Configure

Create a custom IE package using IEAKPredefine settings for End users using Group Policy Objects and Group Policy Preferences

Deploy

Easy deployment of IE11 using

System Center

or end point management solutions

Manage

Day to day management of IE11 using 1650+

Group Policy Objects

and

Group Policy Preferences

Service

Delivery of updates to IE11 via

System Center, WSUS

,

WUB

or other meansSlide11

Configuration - A word about IEAK

IEAK

Option Page

SupportCustomized Title Bar textYesAdd Toolbar buttonYesSearch ProviderYesHomepage tabsYesOnline support page URLYesFavoritesYesCustom Welcome PageYes

Compatibility View

Yes

Append to UA

No

Connection Settings

YesSlide12

Internet Explorer 11

Group

PolicyWindows 10 & Windows 7Slide13

Internet Explorer 11

All existing tools

work

Common management surface across supported Operating SystemsNew polices to support added compatibility featuresSlide14

The

n

ew default browser for Windows 10

Microsoft EdgeWhat we’ll cover nextMicrosoft Edge & Internet Explorer 11Working together to give you the best of both worldsInternet Explorer 11Best-in-class compatibility with Legacy LOB appsSlide15

The

right

time for a

new browserEnables new experiences on the webPowered by a new rendering engineWorks with Internet Explorer 11 to provide interoperability and compatibilitySlide16

A break from the past . . . Slide17

Opportunity: How do we improve the management experience for Microsoft Edge?Slide18

1995

3

4

125.5

6

5

7

8

4.x

9

2015

9

10

11

State

of Browser PoliciesSlide19

How are Group Policies used?

Usage of IE11 Group PoliciesSlide20

How do we take advantage of this opportunity?

. . with zero assumptionsSlide21

Microsoft Edge Management

Configure

Deploy

Manage

ServiceSlide22

Microsoft Edge Management

Configure

Predefine settings for End users using

Group Policy (domain joined) or MDM (any device)

Deploy

Manage

Predefine settings for End users using

Group Policy (domain joined)

or

MDM (any device)

ServiceSlide23

Microsoft Edge Management

Configure

Predefine settings for End users using

Group Policy (domain joined) or MDM (any device)

Deploy

Deployed as a preinstalled app for Windows 10

Manage

Predefine settings for End users using

Group Policy (domain joined)

or

MDM (any device)

Service

Always

up-to-date via Windows App updatesSlide24

Configuration and ManagementSlide25

Configuration and Management

Microsoft Edge Browser Policies

Group Policy

New set of policies for Microsoft Edge Uses existing GPO/GPP/SCCM infrastructureMDMNew for Windows 10Policy parity with Group PolicyCross Platform/OS management Standards based management based infrastructureManaged Microsoft Edge Slide26

What is Mobile Device Management (MDM)?

Windows 10

Devices

Consistent way to manage multi-platform devicesUses XML for data exchangeSupported by leading mobile manufacturersSlide27

Microsoft

Edge

Policies Scenario DrivenConsistent across devicesGroup Policy & MDM parity

PolicyCategoryConfigure Enterprise Site List (Desktop)CompatibilitySend Intranet to IECompatibilityAllow Browser (Mobile)GeneralDefault BrowserGeneralAllow Pop-upsContent RestrictionsCookiesContent RestrictionsAllow SmartScreenContent RestrictionsAllow Active ScriptingContent RestrictionsConfigure Home Page(s)

General

Allow Do Not TrackNetwork and Security 

Allow Autofill

User Experiences

Configure Password Manager

User Experiences

Turn off search suggestions in the address bar

User ExperiencesSlide28

Microsoft

Edge Future

Policy ConsiderationsScenario DrivenForward LookingFeedback Driven

CategorySample PoliciesCompatibilityDisable Compatibility View fallbackGeneralFavorites, Reading List, First Run TabsContent RestrictionsExplicit Content, MediaExtensionsAllow Extensions, PDFNetwork and SecurityBrowsing Certificates, Prefetching, Auto-detect Intranet, GeolocationUser ExperiencesFull screen, InPrivate Browsing, Annotations, Cortana, Developer ToolsSlide29

Deployment and ServicingSlide30

Ships with Windows 10

Deploying Microsoft Edge in Windows 10

Default browserSlide31

Servicing Microsoft Edge in Windows 10

Microsoft Edge

Microsoft Edge

AppEdgeHTML.dllWeb PlatformAlways up-to-dateUpdated like a Universal Windows App Updated and serviced via WU/WSUS/WUBEnables testing of updates before broad deployment Slide32

*Conceptual illustration only

Ensuring Product Quality via Previews

Enterprise-ready

Current

Branch

Hundreds

of millions

Broad

External

Flights

Several

million

Limited

External

Flights

100’s of

thousands

Broad Internal Validation

10’s of

thousands

Engineering Builds

Users

TimeSlide33

Microsoft Edge

Simplified Policy Set

Multiple

management optionsAlways up-to-date AppWeb Platform updates via WU/WSUS/WUBSlide34

What we’ll cover

Microsoft Edge & Internet Explorer 11

Working together to give you the best of both worlds

Internet Explorer 11Best-in-class compatibility with Legacy LOB appsNew default Windows 10 browserMicrosoft EdgeSlide35

“Two Browsers are better

than

one only when they work together and provide a better solution.” – An Enterprise Browser Program ManagerSlide36

Common Management Settings

Microsoft Edge & Internet Explorer 11

Single Entry Point for End-UsersSlide37

Common Management

Microsoft Edge

Microsoft Edge

AppEdgeHTML.dllWeb Platform Internet Explorer 11Internet Explorer 11AppMSHTML.dllWeb PlatformSlide38

Common Management

Microsoft Edge

Microsoft Edge

AppEdgeHTML.dllWeb Platform Internet Explorer 11Internet Explorer 11AppMSHTML.dllWeb Platform

Browser Specific

SettingsSlide39

Common Management

Microsoft Edge

Microsoft Edge

AppEdgeHTML.dllWeb Platform Internet Explorer 11Internet Explorer 11AppMSHTML.dllWeb Platform

Browser Specific

Settings

Platform Specific

SettingsSlide40

Single Entry Point for End U

sers

Starting with Microsoft EdgeIE 11 can be configured as a compatibility fallbackLeverages existing investments in Enterprise ModeSlide41

Compatibility Fallback to Internet Explorer 11

Enterprise Control

All Sites on the Enterprise Mode Site List by defaultIntranet Fallback Policy Set

Consumer ExperienceSites on the Microsoft Compatibility View ListSlide42

Compatibility Experience

Site List Manager (beta)

DemosSlide43

Compatibility Fallback Management

Policy:

Windows Components\Microsoft Edge\Use Enterprise Mode Site List

Policy OptionsImpactUse IE11 Enterprise Mode Site ListMicrosoft Edge will use the location of the IE11 Enterprise Mode Site list(if available and ) to determine which sites fallback. Use custom Site ListMicrosoft Edge will use a site list defined in policyDisable or Not ConfiguredMicrosoft Edge will not use an Enterprise Site list for Compatibility FallbackSlide44

Updated Site List Manager Tool (Beta)

Beta available before RTM

All sites enabled by default

Enables fine grain control of fallback experienceSlide45

Better together

Single entry point for end users

IT Pro control of which site loads in which browser

Leverages existing Enterprise Mode investmentsSlide46

Day

Time

Location

TopicSpeakerMonday1:30pmE253Microsoft Edge OverviewFred Pullen6:00pmHall A1/A2Ask the ExpertsEnterprise Browsing TeamTuesday9:00amS401Enterprise Web BrowsingFred PullenWednesday9:00amE451bWindows 10 Browser ManagementDeen King-Smith3:15pmE451bBrowser Security OverviewFred PullenThursday

9:00am

N427Enterprise Mode for Internet Explorer 11 Deep Dive

Deen King-Smith

3:15pm

S502

Web App Compat &

Modernization for Nerds

Chris Jackson

11am-5pm

N135

Drop-In

App Compat Troubleshooting Workshop

Enterprise

Browsing Team

Browser Session Schedule at Microsoft Ignite

CRSlide47

Visit

Myignite

at http://myignite.microsoft.com or download and use the Ignite Mobile App with the QR code above.Please evaluate this

sessionYour feedback is

important to us!Slide48