In my previous role as a Professional Services architect, I collaborated with numerous customers to develop End-User Computing solutions. This involved understanding their requirements and constraints, formulating a design solution, and documenting assumptions, decisions, and risks. I’ve also sat on countless VCDX panels reviewing designs from peers in the field and asking questions about the design’s scalability, manageability, supportability, and querying deviations from typical “best practices”. Over the years I have seen a shift away from customizing architectures and focusing more on the use case that the solution is addressing.
Our end-user-computing architects have developed a blueprint that reduces time spent on design and deployment, allowing us to focus our efforts on activities that provide direct value to our customer’s IT team, employees, and business stakeholders. The Windows Modern Management service deploys the primary components that comprise Windows management in a single turnkey service, by leveraging best practices and accommodating core use cases across the five pillars of Windows Modern Management. Some customers will have unique requirements or constraints that require a more customized deployment, and we can continue to deliver that. But for most customers that fit the standardized deployment, we can accelerate their time to value.
What is Windows Modern Management?
The complete Windows Modern Management service provides deployment of VMware Workspace ONE® UEM, VMware Workspace ONE® Access™, and VMware Workspace ONE® Intelligence™ to transform the way customers manage their Windows devices. Through a series of workshop sessions, we can jointly work through the solution blueprint to address a customer’s specific needs and then configure the components across the five pillars of modern management which are Onboarding, Policy Management, Application Management, Patch Management, and Reporting as follows:
- Onboarding – Configure Windows Device Enrollment and onboarding flow for Greenfield devices with Dropship or Out-of-Box Experience (OOBE) and Autopilot.
- Policy Management – Configure the UEM baselines and profiles for Windows devices including policies for Bitlocker, Wi-Fi, VPN, Firewall, Anti-virus, and Certificates.
- Application Management – Configure a Windows MSI and a non-MSI application and set up the application approvals for enrolled Windows devices. Also, configure Peer to Peer (P2P) distribution for Windows applications.
- Patch Management – Configure standard Enterprise-wide Windows Updates for Business utilizing RINGs with deferrals, Target Release Version, and pause functionality. Also, configure P2P distribution and dashboards.
- Reporting – Configure reporting for Windows devices and integrate Workspace ONE UEM with an existing Configuration Management Database (CMDB).
Implementing Windows Modern Management
Throughout this process, we work with the customer teams to document our solution design decisions and provide knowledge transfer, so they are equipped to manage the environment after deployment. With our global deployment experience as the foundation of this approach, we can help our customers achieve faster time to value whilst minimizing risk. By establishing the groundwork for Windows Modern Management, our customers who adopt this solution blueprint can seamlessly incorporate additional features and integrations as they become available. This enables them to consistently enhance the platform’s capabilities, ensuring continuous improvement.
The outcome of this service allows the customer to achieve faster productivity from new employees by enabling drop ship provisioning. The customer can then streamline the deployment of the tier 1 Windows applications across their managed devices. They can push out policies for Wi-Fi and other configurations to ensure compliance for devices regardless of location. The employees benefit from a better experience through Single Sign-On whilst improving security and compliance. Finally, IT can provide proactive maintenance to their employees through greater monitoring, visibility, and intelligence.
Want to know more?
To learn more about this service and how VMware Professional Services can help your organization, contact your VMware Sales Representative. We are continuing to expand our solutions to leverage this approach in other areas so keep an eye out for future blogs that will highlight these.
