Michael Niehaus mniehausmicrosoftcom WCL331A Windows Store Apps The biggest change in Windows 8 Traditional Desktop Apps Setupexe installers Windows Installer MSI OneClick NET AppV ClicktoRun ID: 143312
Download Presentation The PPT/PDF document "Implementing an Enterprise App Store for..." is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
Implementing an Enterprise App Store for Windows 8 and Windows 8.1
Michael Niehausmniehaus@microsoft.com
WCL331ASlide2
Windows Store Apps
The biggest change in Windows 8
Traditional Desktop Apps
Setup.exe installers
Windows Installer (MSI)
OneClick
(.NET)
App-V, Click-to-Run
Can be installed silently (usually)
Typically requires admin rights, usually installs per machine
Still used in Windows 8 (unchanged)
New packaging mechanismVery simple installation mechanismOnly used for Windows Store appsAlways installs quietlyDoes not require admin rights, always installs per userNew in Windows 8, essentially unchanged in Windows 8.1Slide3
Let’s agree on some terms
Windows Store apps
Modern, full-screen applications written to the
WinRT
API that run on Windows 8 and Windows RT.
Sometimes also called
WinRT
apps, modern apps, Windows 8 apps, and the “M” word.
Microsoft Account
An online account, formerly called a Live ID.
Windows Store
An online store for acquiring Windows Store apps, and an application by the same name on Windows 8 and Windows RT for accessing the online store. Requires a Microsoft account to install new apps (but not to install updates).Slide4
Let’s agree on some terms
Appx
files
A self-contained packaging format for Windows Store apps, effectively a zip file containing all the necessary components for the application, except for dependencies (which would also be
Appx
files).
Sideloading
The process of installing or provisioning Windows Store apps without going through the Windows Store. There are specific requirements to enable this.
LOB Apps
Line of business applications developed, developed and used by enterprises, although sometimes used as a substitute for “
sideloaded
app”.Slide5
Windows Store apps
Install via an “Enterprise App Store” using:
System Center 2012 Configuration Manager SP1
Windows
Intune
Provision using the Microsoft Deployment Toolkit 2012 or DISM
Include in
sysprepped image
Customize Start screen layout
Provisioning
Installation
Register the application for the user
Always per-user
Does not require administrator rights
Side load or from the Windows Store
Register application on the computer
Install automatically for each user
Side load only
Requires administrator rights
Enterprise side loading requirements
Windows 8 Enterprise, domain joined or with a separate side load product key
Windows 8 Pro or Windows RT, with a separate side load product keySlide6
Demo:
Windows Store App nuts and bolts
NameSlide7
Automatic installation of updates
Group policy can disable auto install, but enabled by default
Updates can still install without a Microsoft account
Installation when the Windows Store is disabled
Group policy can disable the Windows Store for the user, but still allow updates to install
Disabling the Windows Store for the computer prevents update installation
Updates to in-box apps
Mechanism to update OS images with the latest version of apps
Avoids the immediate need for users to install updates
Handles scenarios where internet access isn’t available
Gift card purchasing
Apps can be purchased using gift cards, without each person using a credit card
Works behind proxy servers
Addresses common issue in Windows 8
Improvements in Windows 8.1Slide8
Why create an enterprise app store?
Users need different applications
Not all users need all apps
IT pros need a mechanism to deliver apps to users
Allow users discover available apps and make requests
Gather approvals, if necessary
Install the applications
Completely automated
Supports BYOD scenarios
IT will increasingly need to deliver apps to computers that aren’t company-ownedSlide9
Tools to create an enterprise app store
System Center 2012 Configuration Manager
On-premises solution using app catalog
Windows Intune
Cloud-based offering using Company Portal
Other solutions
Free tools like
http://companystore.codeplex.com/
can install apps using available APIs
Management tools can leverage APIs, PowerShell, or DISM commands to achieve the same thingSlide10
Demo:
Deploying and managing apps with System Center Configuration Manager
NameSlide11
Windows
Store apps install per user
Target user collections (push or pull)
Cannot
be installed via a task sequence
No native support for provisioning apps, but this can be done using standard software distribution and custom command
lines
You need to enable
sideloading
Set “Allow all trusted apps” policy
Deploy trusted root certificates
Join Active Directory with Windows 8.1 Enterprise, or install a
sideload
key
Requires the .
appx
installation files
“
Deep links” can be used, but the user must
log
in with a
Microsoft Account
and click “Install
”
Enables self-service app installation
Uses app catalog with
ConfigMgr
2012 SP1
A
dds Company Portal app for ConfigMgr 2012 R2Requires ConfigMgr 2012 SP1 or later
Using ConfigMgr: Things to RememberSlide12
Demo:
Deploying and managing apps with Windows Intune
NameSlide13
Windows
Store apps install per user
Target users or groups (pull now, push coming soon)
You need to enable
sideloading
Set “Allow all trusted apps” policy
Deploy trusted root certificates
Join Active Directory with Windows 8.1 Enterprise, or install a
sideload
key
Requires the .
appx
installation files
“
Deep links” can be used, but the user must
log
in with a
Microsoft Account
and click “Install
”
Enables self-service app installation
Publish apps to the Company App Portal (Windows Store app)
Requires setting up
DirSync
Best with single sign-on
Windows 8.1 will be supported at GA
Using Windows Intune: Things to RememberSlide14
Demo:
Provisioning apps with the Microsoft Deployment Toolkit
NameSlide15
Focuses
on image creation scenarios
Provisioning apps in the image (Windows limit of 24 apps
)
Specify the name of the .
appx
file as the install command line
You can’t install apps from the Windows Store before
sysprepping
Only
provisioned apps can be syspreppedRequires MDT 2012 Update 1 for Windows 8, MDT 2013 for Windows 8.1
Using the Microsoft Deployment Toolkit: Things to RememberSlide16
Can
I customize the Start screen layout?
Yes, see http://technet.microsoft.com/en-us/library/jj134269.aspx for the basic process. This is easier with Windows 8.1 and the included PowerShell
cmdlets
to export and import the start screen layout.
Can I get the .
appx
files for <insert Microsoft app here>?
Presently, there is no mechanism available to provide
appx
files for Office (OneNote MX, Lync MX), Windows (updated versions of the in-box apps), etc. Third parties may provide these.
Can I prevent users from installing <insert Windows Store app>?
You can disable the Windows Store completely, or you can use
AppLocker
to whitelist or blacklist Windows Store apps
.
Frequently Asked QuestionsSlide17
Why
is the Windows Store disabled on Windows To Go?
With Windows 8, there could be licensing issues if the Windows To Go device is attached to too many different PCs. You can configure a policy to enable this if you want. This has been fixed with Windows 8.1, so the Windows Store will now be enabled by default.
Where can I get a
sideload
product key?
These are available to SA customers through the Volume Licensing Service Center, http://www.microsoft.com/licensing/servicecenter.
Frequently Asked QuestionsSlide18
Can
I use the Mail app without a Microsoft ID?
With Windows 8, no, you must specify a Microsoft ID even if you are going to be using Exchange or third-party IMAP for e-mail. This will be possible with Windows 8.1 via a group policy setting.
Can I programmatically install an app from the Windows Store?
While you can specify a “deep link” URL to navigate directly to a specific Windows Store app, you cannot initiate the installation. The user will need to click the “Install” button.
Frequently Asked QuestionsSlide19
Developer Network
Resources for Developers
http://
msdn.microsoft.com
/en-au/
Learning
Virtual Academy
http://www.microsoftvirtualacademy.com/
TechNet
Resources
Sessions on Demand
http://channel9.msdn.com/Events/
TechEd
/Australia/2013
Resources for IT Professionals
http://technet.microsoft.com/en-au/Slide20
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.