Security
Reader small image

You're reading from  Mastering Microsoft Intune - Second Edition

Product typeBook
Published inMar 2024
PublisherPackt
ISBN-139781835468517
Edition2nd Edition
Concepts
Cybersecurity
Right arrow
Authors (2):
Christiaan Brinkhoff
Christiaan Brinkhoff
author image
Christiaan Brinkhoff

Christiaan Brinkhoff works as a Principal Program Manager and Community Director for Windows 365 and AVD at Microsoft, in his role at Microsoft, he works on features such as Windows 11, Windows 365 app, Switch and Boot. Christiaan is also an Author (3 books) and Inventor (3 patents). His mission is to drive innovation while bringing Windows 365, Windows, and Microsoft Intune closer together, drive community efforts around virtualization to empower Microsoft customers in leveraging new cloud virtualization scenarios. Christiaan joined Microsoft in 2018 as part of the FSLogix acquisition. He has also been rewarded with the Microsoft MVP, Citrix CTP, and VMware vExpert community achievements - for his continued support in the EUC community.
Read more about Christiaan Brinkhoff

Per Larsen
Per Larsen
author image
Per Larsen

Per Larsen works as a Senior Program Manager for Microsoft Endpoint Manager - Customer Acceleration Team - Commercial Management Experiences (CMX) Engineering, where he takes learnings from Microsoft's largest and most strategic customers back into the rest of engineering to drive improvements for the service so that customers have a continuously improving product experience. He also helps deploy and adopt Microsoft Endpoint Manager - Microsoft Intune. Per mainly focuses on the management of Windows and special devices such as HoloLens 2, Surface Hub, and Microsoft Teams Room System. Per was also an MVP in Enterprise Mobility, from 1st July 2016 to when he joined Microsoft on 1st April 2018.
Read more about Per Larsen

View More author details
Right arrow

What is Windows 365?

In this chapter, you’ll learn everything you need to know about Windows 365 from a conceptual perspective.

After reading this chapter, you’ll know more about the benefits of using Windows 365 and the different service components. In the next chapter, you’ll learn how you can deploy it!

This chapter is very comprehensive – we’ll go through the following topics:

  • What is Windows 365?
  • Removing the complexity of traditional Virtual Desktop Infrastructure (VDI) deployments
  • What to think about as a VDI administrator
  • Windows 10 Extended Security Updates (ESUs)
  • Comparing Windows 365 Enterprise and Business
  • What is Windows 365 Frontline?
  • What is Windows 365 Government?
  • Microsoft Intune
  • Configuration Manager support
  • Co-management and Windows 365
  • Disaster recovery
  • Sizes and performance of fixed-price licenses
  • GPU-Enhanced Cloud PCs
  • Connect...

What is Windows 365?

Users want technology that is familiar, easy to use, and always available so they can work and create Office and other business-related content fluidly across devices. Cloud PCs make this possible by combining the power and security of the cloud with the familiarity of a PC. Only Microsoft can bring together a PC, Microsoft Intune, and the cloud with a consistent and integrated Windows experience. Windows 365 is the world’s first Cloud PC. With Windows 365 Cloud PC, Windows evolves from a device-based Operating System (OS) to hybrid personalized computing that you can run from different platforms, like iPads and smartphones, via the new Windows app that is now available from almost any platform.

“With Windows 365, we’re creating a new category: the Cloud PC. Just like applications were brought to the cloud with SaaS, we are now bringing the operating system to the cloud...” – Satya Nadella, CEO, Microsoft

...

Configuration Manager support

Configuration Manager is an on-premises management solution to manage desktops, servers, and laptops that are on your network or internet based. You can enable it to integrate with Intune, Entra ID, Microsoft Defender ATP, and other cloud services. Use Configuration Manager to deploy apps, software updates, and OSs. You can also monitor compliance, query, act on clients in real time, and much more.

Co-management and Windows 365

As part of Microsoft Intune, you can continue to use Configuration Manager as you always have. If you’re ready to move some tasks to the cloud, consider co-management.

Co-management combines your existing on-premises Configuration Manager investment with the cloud using Intune and other Microsoft 365 cloud services. You choose whether Configuration Manager or Intune is the management authority for the seven different workload groups.

Screenshot of the wizard page for enabling automatic enrollment in Intune.

Figure 4.7: Enable co-management

Disaster recovery

Business...

GPU-Enhanced Cloud PCs

Whether you are a graphic designer, video editor, 3D modeler, data analyst, or visualization specialist, you can now enjoy the GPU acceleration you need to work efficiently on any device and from any location.

With Windows 365, you always have access to the latest hardware in Microsoft Azure, so you don’t have to worry about hardware life cycles. Powered by NVIDIA and AMD, GPU-enabled Cloud PCs are designed to handle workloads that involve graphic design, image and video rendering, 3D modeling, data processing, and visualization applications that require a GPU to perform. Example applications include Adobe Photoshop, Illustrator, or enhanced video editing / 3D software. For engineering workloads, AutoCAD, Revit, SolidWorks, and other technical drawing software are supported.

These high-performance offerings are now in public preview in selected regions, and they come in the following configurations:

  • Windows 365 Enterprise GPU 4 vCPU...

Connect to your on-premises network

Most likely, you will need to connect to backend services with your Cloud PC, which are either living in a private cloud data center on-premises or in Azure. Windows 365 Enterprise supports all Azure networking services to connect to your own networks via ExpressRoute, Site2Site VPN, or SD-WAN. You must configure this via Azure Networking, meaning it requires an Azure subscription, VNet, and VPN connection. For a POC, you can easily configure a site-to-site VPN connection to ensure your Cloud PCs can talk with your intranet, databases, and application servers.

Once you have this ready, you must move to the Intune portal to configure an Azure Network Connection (ANC) that you need to have first before creating the provisioning policy (covered in the next section). There are two kinds of ANCs based on their join type. Both let you manage traffic and Cloud PC access to network-based resources, but they have different connectivity requirements:

...

Summary

In this chapter, you’ve learned everything about the fundamentals of the new Windows 365 service. Are you ready to learn how to kick the tires!?

In the next chapter, we will learn how to deploy Windows 365.

Questions

  1. What cloud-managed service is used to manage, maintain, and operate your Windows 365 cloud desktops?
    1. Microsoft Intune
    2. Microsoft Endpoint Configuration Manager
    3. System Center Configuration Manager
  2. Do Cloud PCs running inside a Microsoft-managed environment configured with Entra ID Join Cloud PCs in a hosted network mean that you don’t need an Azure subscription?
    1. Yes
    2. No

Answers

  1. (a)
  2. (a)

Further reading

If you want to learn more about Windows 365 after reading this section, please go to one of the following chapters of this book:

  • Chapter 5, Deploying Windows 365
  • Chapter 14, Monitoring and Endpoint Analytics
  • Chapter 17, Troubleshooting Windows 365

Learn more on Discord

To join the Discord community for this book – where you can share feedback, ask questions to the author, and learn about new releases – follow the QR code below:

https://packt.link/SecNet

lock icon
The rest of the chapter is locked
Previous Chapter
Chapter 7 of 25
Next Chapter
You have been reading a chapter from
Mastering Microsoft Intune - Second Edition
Published in: Mar 2024Publisher: PacktISBN-13: 9781835468517
© 2024 Packt Publishing Limited All Rights Reserved
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Sign up now
undefined
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Start free trial
Renews at €14.99/month. Cancel anytime

Authors (2)

author image
Christiaan Brinkhoff

Christiaan Brinkhoff works as a Principal Program Manager and Community Director for Windows 365 and AVD at Microsoft, in his role at Microsoft, he works on features such as Windows 11, Windows 365 app, Switch and Boot. Christiaan is also an Author (3 books) and Inventor (3 patents). His mission is to drive innovation while bringing Windows 365, Windows, and Microsoft Intune closer together, drive community efforts around virtualization to empower Microsoft customers in leveraging new cloud virtualization scenarios. Christiaan joined Microsoft in 2018 as part of the FSLogix acquisition. He has also been rewarded with the Microsoft MVP, Citrix CTP, and VMware vExpert community achievements - for his continued support in the EUC community.
Read more about Christiaan Brinkhoff

author image
Per Larsen

Per Larsen works as a Senior Program Manager for Microsoft Endpoint Manager - Customer Acceleration Team - Commercial Management Experiences (CMX) Engineering, where he takes learnings from Microsoft's largest and most strategic customers back into the rest of engineering to drive improvements for the service so that customers have a continuously improving product experience. He also helps deploy and adopt Microsoft Endpoint Manager - Microsoft Intune. Per mainly focuses on the management of Windows and special devices such as HoloLens 2, Surface Hub, and Microsoft Teams Room System. Per was also an MVP in Enterprise Mobility, from 1st July 2016 to when he joined Microsoft on 1st April 2018.
Read more about Per Larsen

Personalised recommendations for you

Based on your interests and search pattern

Attacking and Exploiting Modern Web Applications

Attacking and Exploiting Modern Web Applications

Attacking and Exploiting Modern Web Attacks will help you understand how to identify attack surfaces and detect vulnerabilities. This book takes a hands-on approach to implementation and associated methodologies and equips you with the knowledge and skills needed to effectively combat web attacks.

BookAug 2023338 pages
Automotive Cybersecurity Engineering Handbook

Automotive Cybersecurity Engineering Handbook

This Automotive Cybersecurity Engineering Handbook untangles the complexities of building secure automotive products and helps you to comply with cybersecurity standards. It provides practical tools, tips, and techniques coupled with real-world examples to enable you to create cyber-resilient automotive products with ease.

BookOct 2023392 pages
Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

This book will help you to design, develop, and operate security controls on Google Cloud as well as discover best practices for relevant security domains, including identity and access management, network, and data.

BookAug 2023496 pages
Cloud Penetration Testing for Red Teamers

Cloud Penetration Testing for Red Teamers

The advent of cloud networks and the AWS, Azure, and GCP platforms has revolutionized how companies of all sizes in all industries do business online. This book will help you meet the emerging demand for pentesting as it guides you through the tools, techniques, and security measures used by pentesters and red teamers in the 2020s and beyond.

BookNov 2023298 pages
ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

ISACA Certified in Risk and Information Systems Control (CRISC®) Certification Guide is an enterprise IT risk management professional’s dream. With its in-depth approach and various self-assessment exercises, this book arms you with knowledge of every single aspect of the certification, and is a fantastic career companion after you’re certified.

BookSep 2023316 pages5
Burp Suite Cookbook

Burp Suite Cookbook

Burp Suite is an immensely powerful and popular tool for web application security testing. This book provides a collection of recipes that address vulnerabilities in web applications and APIs. It offers guidance on how to configure Burp Suite, make the most of its tools, and explore into its extensions.

BookOct 2023450 pages
Building and Automating Penetration Testing Labs in the Cloud

Building and Automating Penetration Testing Labs in the Cloud

This hands-on guide will help you design and build a variety of penetration testing labs that mimic modern cloud environments running on AWS, Azure, and GCP. In addition to these, you will explore a number of practical strategies on how to manage the complexity, cost, and security risks involved when setting up vulnerable cloud lab environments.

BookOct 2023562 pages
Ethical Hacking Workshop

Ethical Hacking Workshop

As cyber-attacks grow and APT groups advance their skillset, you need to be able to protect your enterprise against cyber-attacks. In order to limit your attack surface, you need to ensure that you leverage the same skills and tools that an adversary may use to hack your environment and discover the security gaps. This book will teach you how to think like a hacker, use state-of-the-art hacking tools, and protect yourself and your organizaiton.

BookOct 2023220 pages
Windows Forensics Analyst Field Guide

Windows Forensics Analyst Field Guide

This book contains step-by-step processes to guide you in any investigation related to Windows OS. You’ll find out how to acquire evidence using multiple tools as well as examine and analyze the collected artifacts, while discovering multiple techniques used in real-world forensic incidents.

BookOct 2023318 pages
Implementing DevSecOps Practices

Implementing DevSecOps Practices

This book is a comprehensive, hands-on guide for individuals new to DevSecOps who want to implement DevSecOps practices successfully and efficiently. With its help, you’ll be able to shift security toward the left, enabling you to merge security into coding in no time.

BookDec 2023258 pages