Rapidly Deploying Windows 10 Devices Via Modern Deployment Methods

One of the cool things in my job is that I get to see a lot of new devices and over the last few months I’ve been spending quite a bit of time figuring out the best way to deploy these in an educational context. I shared the guest blog around Modern Deployment Methods a few weeks back and I thought in this post I would outline some of my learnings from using some of the new Microsoft Education Solutions.

Devices I’ve Been Testing On:

The main devices I have been testing on are:

What is really pleasing about all of the above “hero” spec devices is that they all run a minimum of 4GB RAM and 64GB SSD storage making them powerful enough for most classroom uses and with new features coming like OneDrive Files on Demand, cloud storage will make them even more useful.

I’ve also had a look at the new Surface Laptop running Windows 10S but have not been able to do any extensive testing or resetting on with this device.

Modern Deployment Tools:

microsoft-tries-expelling-chromebooks-from-schools-with-intune-app-and-low-cost-pcs

Intune for Education dashboard.

Firstly, if you’re interested in setting up the full Microsoft Cloud Education Solutions then you really need to read this blog post first, where I’ve collated the key videos and “how to” articles. I’m going to outline the two key tools that make the deployment of Windows 10 super easy and these are:

Through my testing I’ve been using a few temporary demo tenants (check here to set one up if you’re a partner) and I’ve sometimes used Student Data Sync, and other times not. I have reset my above test devices numerous times using the Recovery Options in Windows 10 – if you’re not confident doing this, then the LaptopMag have created a pretty helpful guide here.

The idea behind the above tools is to take a cloud-first mentality in terms of pushing applications to devices and leveraging AzureAD as the key cloud identity platform.

Sequence For Setup:

This is the key sequence for setup in a simple list format:

  1. Reset Windows 10 to factory (see above) or use a brand new device.
  2. Insert a USB key with the Set Up School PCs App configured on it. This will:
    1. Install the initial provisioning package
    2. Install a selection of pre-selected applications
    3. Join the device to AzureAD of the pre-selected Office 365 Tenant.
    4. Enroll the device into Intune of the pre-selected Office 365 Tenant.
  3. Sign in as an Office365 user (this could be a student, teacher or ICT administrator)
  4. Intune (or Intune for Education) will start to push the remaining required apps and settings to the device immediately.
    1. In my testing I’ve settled on pushing apps to the device rather than to the user to ensure the fastest possible login times for students/staff i.e. once the application has been installed on the device it will be available to all users.
intune-for-education-set-up-pcs-100705444-large

The Set Up School PC App (SUSPC App) start screen.

In my testing, with the above mentioned test devices, I have found that steps 2-3 above typically takes under 5minutes. The initial login for a new user takes around 20-30seconds, and then subsequent logins of the same user is consistently under 4 seconds.

Step 4 above depends on how many applications you wish to push to the device, how fast the wireless network is etc. I am very confident that I could use the above sequence and deploy brand new devices to playing Minecraft:Education Edition on multiple devices in under 15 minutes.

Guides & Resources:

Learning more about the Set Up School PCs App can be done here but if you watch the below video you will see how easy it is:

The SUSPC App makes it super simple and fast to quickly deploy new (or restored Windows 10) devices and have them connected to your cloud first environment. It also means that the user experience for signing into these devices is fast and remains fast over time.

The second component to complete the deployment of apps and settings (sometimes referred to as policy) is using Intune For Education and you should look here for the full guide or watch the 5 minute video below:

As I mentioned in the sequence for setup at stage 4.1 above, I’ve settled on pushing apps directly to the device rather than to individual users, based on my preference that the apps are available to all users immediately when they sign in. This will, of course, vary from school to school based on how many apps they want on the devices (and available storage space) as well as app licensing considerations or suitability. The good news is that Student Data Sync will give you the granular control of which students (or classes, or year levels) you want to push certain apps or settings to.

If you’re after help or support directly from Microsoft around configuring Student Data Sync (SDS) for your school then complete the request form for personalised support HERE.

Conclusion:

These new tools, combined with new education focused devices from hardware partners, showcases just how far Microsoft has come in terms of delivering smarter and more efficient ways for schools to manage their ICT infrastructure. This is, of course, enabled through the power of the cloud and if your school is not leveraging a cloud identity platform like AzureAD it’s definitely time to explore this as an option.

Pleasingly, the above set up makes it easy for schools to have quick and reliable Windows 10 to focus on promoting great teaching and learning outcomes for students and teachers alike. Technology is a great servant to pedagogy, and with modern deployment methods like the above, less time is required to get the ICT equipment up and running, allowing more time for quality teaching and that has to be a good thing.

Microsoft Education Cloud Solution: End To End Guide For Deployment

microsoft_education_it_getstarted_workflow.png

2017 has been the year that has seen the various pieces of Microsoft’s Education offerings come together in a more cohesive, end-to-end offering that can now be deployed very easily by schools or their ICT partners.

Naturally, this is centered around Office365 and the power of the Azure cloud identity with Azure Active Directory, combined with the recent Creators Updates in Windows 10 providing a great overall solution for educators and students alike.

To the make the process of deploying this even easier, Microsoft have released a great step by step guide, with accompanying videos. The overview article, and the best place to start if you’re new to all of this, can be found at the following link:

Deploy & manage a full cloud IT solution with Microsoft Education

What is Microsoft Education?

Microsoft Education consists of these new and existing services and tools from Microsoft:

  • Microsoft Intune for Education for simple set up, control, and management of the resources for your school including apps, devices, and settings
  • Office 365 for Education provides online apps for work from anywhere and desktop apps for advanced functionality, built for working together and available across devices, and it’s free for schools, teachers, and students
    • School Data Sync to help automate the process for importing and integrating School Information System (SIS) data that you can use with Office 365
    • OneNote Class Notebook to organize course content, create and deliver interactive lessons to some or all students, collaborate and provide private feedback to individual students, and connect with major LMS and SIS partners for assignment workflow
  • Microsoft Teams to bring conversations, content, and apps together in one place and create collaborate classrooms, connect in professional learning communities, and communicate with school staff
  • Learning Tools are moving beyond the OneNote desktop app and is now available in Office Lens, OneNote Online, Word Online, and Word desktop
  • Whiteboard to create interactive lessons on the big screen, share and collaborate real-time by connecting to Class Notebook and Classroom
  • Windows 10, version 1703 (Creators Update) which brings 3D for everyone and other new and updated Windows features
  • Minecraft: Education Edition which provides an open and immersive environment to promote creativity, collaboration, and problem-solving

I’ve collated the following video guides from the individual instruction pages which are all worth checking out, with the goal of having a “one stop shop” for school IT admins to be able source all the help they need to deploy and maintain Microsoft Education.

In the following walkthrough videos, we’ll show you the basics on how to:

  • Acquire an Office 365 for Education tenant, if you don’t already have one
  • Import school, student, teacher, and class data using School Data Sync (SDS)
  • Deploy Microsoft Teams to enable groups and teams in your school to communicate and collaborate
  • Manage apps and settings deployment with Intune for Education
  • Acquire additional apps in Microsoft Store for Education
  • Use the Set up School PCs app to quickly set up and provision your Windows 10 education devices
  • Log in and use the devices

So, let’s get started with the setup process!

Set Up An Office365 Education Tenant

(full instructions here)

Use School Data Sync To Import Data

(full instructions here)

Enable Microsoft Teams For Your School

(full instructions here)

There is no video for this one, but the step by step instructions on the link above are very easy to follow along with.

Configure Microsoft Store For Education

(full instructions here)

Use Intune For Education To Manage Groups, Apps, and Settings

(full instructions here)

Set Up Windows 10 Education Devices

(full instructions here)

There is no video for this one either, however the above link shows you how to use the free Set Up School PCs App to quickly deploy new devices and join them to Azure Active Directory (AAD) – this process usually takes less than 5mins for a brand new device out of the box.

Finish Windows 10 Device Setup & Other Tasks

(full instructions here)

Conclusion

It’s now easier than ever before to quickly set up a feature rich educational environment using the Microsoft cloud offerings of Office365 combined with Windows 10 devices.

I hope the above guides help but if you have further questions, drop them in the comments section below.

Autopilot – Even Easier Device Enrollment & Deployment In Windows 10 Out Of The Box


UPDATE 10th July: Information on how to add devices to Autopilot via the Windows Store For Business / Education can be see here


UPDATE 3rd July: More technical information on Autopilot is available here, including example PowerShell scripts on how to collect the hardware identifier for existing devices you may want to enroll into Autopilot.


With Windows 10 Creators Update you can now configure and deploy devices even easier, thanks to the newly announced Autopilot and Intune (part of the EMS suite).

Autopilot is similar to Apple’s Device Enrollment Program (DEP), in that you can pre-register a unique hardware identifier before the device is even turned on. When the device is shipped to the end user (think either a teacher or student purchasing a BYOD laptop), as soon as they connect their new laptop to a wireless network, it will be registered by Autopilot and provide:

  • A custom set up experience as determined by the school’s ICT department (or their partner), this could include skipping steps in the device setup that are unnecessary or confusing for end users
  • Branded setup, showing the school name and logo so the student/teacher can be confident in the security of the device and trust the setup process
  • The option to enter their school email address/password which would automatically enroll the device into Intune (or Intune for Education), resulting in the correct applications and settings being pushed to the device

Microsoft’s blog announcing Autopilot described it as follows:

With Windows AutoPilot, IT professionals can customize the Out of Box Experience (OOBE) for Windows 10 PCs and enable end users to take a brand-new Windows 10 device and—with just a few clicks—have a fully-configured device ready for business use. There are no images to deploy, no drivers to inject, and no infrastructure to manage. Most importantly, users can go through the process independently, without making any decisions and without needing to involve IT.

Some of the benefits of Microsoft Autopilot include:

  • Intune can push policies, settings, and configuration to the device, and install Office 365 and other apps without IT ever having to touch the device or apply a custom image to the device.
  • Intune can configure Windows Update for Business to apply the latest updates.
  • The device can automatically upgrade from Windows 10 Pro to Windows 10 Enterprise seamlessly using AAD–no product keys to manage, no reboots, no prompts for the user (Requires a Windows 10 Enterprise E3 subscription)

Here is how you can set up the Autopilot program and see it in action:

This slideshow requires JavaScript.

The setup process when using Autopilot – note the branded sign-in page with logo and organisation name

My Point Of View:

I see Autopilot as a tremendously helpful tool for IT Admins in education as it will allow them to be more hands-free on the configuration and deployment of devices. Many schools love the simplicity of Apple’s Device Enrollment Program and now Autopilot enables similar functionality with full Windows 10.

An additional benefit is theft protection – if a device was enrolled into Autopilot and was later stolen, then even if it was wiped, it could not be used by the thief because as soon as it is connected to the internet the hardware identifier will enroll it into Autopilot again and start the school’s setup process – this can not be avoided until the device is un-enrolled by the school itself.

The other area where I see Autopilot adding significant value is BYOD. If a school uses an education partner and parents purchase their child’s BYOD device through the partner’s portal, then the hardware identifier could be registered with the school at the time of sale. As a result, when the student turns it on at home it is automatically connected to the school’s environment and has all of the apps, setting and network credentials pushed to it, ready for the first day of school – no more “onboarding days” at the school to get connected!

Even though this was just announced today, as ZDNet astutely picked up, this functionality was included in the Creators Update released back in April – just one more reason for schools to keep their computers updated on recent Windows 10 builds.

Enrolling a Windows 10 Home Edition BYOD Device Into Intune For Education

I’ve run a lot of demonstrations of Intune for Education  over the last few months and today I tried to see if I could enroll a Windows 10 Home Edition BYOD device into Intune for Education.

This is an important consideration because many of the devices that students bring to school typically only have Windows 10 Home Edition on them and this can not be joined to a local Domain or Azure Active Directory. It’s worth being aware, however, that schools can set up the Kivuto portal for free, and offer their students the ability to boost their BYOD Windows 10 version to Pro Edu for free and for the life of the device. You can see how to do this here.

Here are the steps to join a BYOD Win10 Home Edition device to Intune for Education:

1) Under settings, go to “Access work or school” and click the “Connect” button in the main view on the right:

1

2) Alternatively, if you hit the Windows button and search for “About this PC” you’ll see overall device info like below. Note the Edition is Windows 10 Home and there is also a link directly to “Connect to work or school”

2

3) When prompted, enter your full school email address as below:

3

4) When prompted, enter your school password:

4

5) If entered correctly, you’ll receive confirmation it’s been done:

5

6) You will then be advised that the device is being registered and applications and policy is being applied in line with the settings in Intune for Education:

6

7) Once completed, you will now be returned to the “Connect to work or school” screen and can now see your account listed as below:

 

7

8) As a reference, below is the product licenses assigned to the demo user in my Office 365 Tenant:

8

9) If you hit the Windows key you should see the various apps streaming to the device as per the policy in Intune for Education:

9

For schools, knowing that they can can enroll Windows 10 Home Edition BYOD directly into Intune For Education is an important step as they don’t need to worry about upgrading the devices to Win10 Pro / Edu.

 

Support Deploying Microsoft SDS

sds-support

If you’re a school that is needing some help deploying Microsoft Student Data Sync (SDS) then you can apply for one on one support for a limited time here:

http://concise.info/SDS-help

I posted some additional resources if you want to DIY that you can access here. SDS is being used increasingly across a range of Microsoft tool sets and will enable you to synchronise data with the recently announced Intune For Education.

Intune For Education Announced at BETT

This week Microsoft has released some major announcements at the annual BETT Show in London. You can read the full announcements on the official blog here, however the one that caught my attention the most was Intune For Education:

microsoft-tries-expelling-chromebooks-from-schools-with-intune-app-and-low-cost-pcsFor me, this is a key solution for schools to consider to simplify the management of Windows 10 devices, particularly for those schools that may not have dedicated ICT staff. The things that impressed me were:

  • It’s cloud based, there is no need to install locally as it is hosted in Azure and is scalable, making it suitable for schools of any size whilst remaining simple enough for part-time ICT admin staff to use.
  • There are a number of school-specific policies pre-configured to promote security for school devices (there are over 150 settings you can configure if you choose)
  • There is an express setup for schools that allow for quick deployment of new devices for different groups of users.
  • Your list of purchased applications in the Microsoft Windows Store For Business are automatically synchronised to Intune For Education allowing to easily choose which apps you wish to deploy e.g. Minecraft licensing in the Business Store.
  • There is an auto-enrollment feature meaning students or staff automatically receive the apps specified by the school when they first log in.
  • intune-for-education-set-up-pcs-100705444-largeFor super quick deployment there is free access to the “Schools Setup PC App” that creates a USB key to quickly configure common settings on a new device with a single key press – no need to get it on the wireless network first!
  • Intune for Education supports Student Data Sync to automatically create groups of students/teachers for customised group permissions allowing more granular control over policy.
    • Policy will “follow the user” so if you have different policies for different year levels, these will automatically apply as a student moves from year to year.
  • There is a test/assessment mode. Students can log in with a special account to be used when taking assessment which will lock the device down to pre-defined access levels.

These features represent a significant leap forward with technology offerings for managing Windows 10 devices in education. To learn more, check out Microsoft Education.

Update: A couple more videos showing how Intune for Education can be used, along with the benefits of Digital Inking: