MBL362 微软 IT 部门部署 60,000 Windows Mobile 的策略

1. MBL362微软IT部门部署60,000 Windows Mobile的策略 崔 海 haicui@microsoft.com Program Manager Mobile and Embedded Device Division Microsoft Corporation

3. 主要议程 • Microsoft的IT策略 • IT部门的移动应用 • Windows Mobile 5.0 beta Program • Q&A

4. Empower – Empower ourcustomers, clients and partnerswith great services, guidanceand solutions Simplify – Simplify our technology environment and focus investments in core areas Protect – No hacks or impacting attacks and total compliance Microsoft IT 策略 Objectives Strategy Pillars Run World Class Managed Solutions & IT Be Microsoft’s First and Best Customer Protect Microsoft Digital Assets Drive value for Microsoft and our customers

5. Mobile Messaging Service in 2002 • Microsoft IT FY02 service offering • Current pull requests for MMIS • User base: 4,050 Total: 550 Asia; 2,500 EMEA; 1,000 SPAR • User locations: USField, UK, Ireland, Germany, Nordic, Amsterdam, Hong Kong, Korea, and Japan • MIS site locations: Redmond, UK, Germany, Hong Kong, Japan

6. Typical Pre-Consolidation Exchange Site

7. Microsoft IT Mobile Messaging Today • Topology: Over the past 12 months Microsoft has consolidated Exchange from dozens of access points to the 5 below • 1 main access point (https://mail.microsoft.com) • 4 regional access points (i.e., https://emea.mail.microsoft.com) • Sao Paulo, Dublin, Singapore, Chofu • Microsoft IT has multiple production Windows forests / Exchange organizations • 1 additional access point per Exchange organization (Forest) • Design: • 2 Exchange Front End servers per access point • (For redundancy and load balancing) • Multiple ISA servers performing Web publishing • Split-brain configuration for internal/external DNS namespaces

8. Typical Post-Consolidation Exchange Site

9. Mobile Messaging Today 22,000 active mobile users 400+ sites worldwide in 89 countries 300,000+ PCs 45,000+ Windows Mobile devices Dublin Redmond Tukwila Silicon Valley Tokyo Charlotte Singapore 92,000 end users 57,500 full time employee Johannesburg 3M+ e-mail messages per day internally 99.99% Exchange availability 7,000,000 remote connections/month

10. Mobile Device Support Trend

11. Support Call Generators Help configure install 15% Other Symptom 11% Corp WLAN configuration 63% Request forinformation 7% Mobile Operatorconnectivity failure 4%

12. Device StandardizationIT 部门当今最大的挑战 • What does this mean? • Process for selecting hardware for internal employees to utilize within the company • Including requirements for internal Beta programs • What are some of the benefits? • Documentation/education • Helpdesk support • Pricing and availability • Enterprise warranty • Infrastructure interoperability (WLAN – 802.1X)

13. 内部网站

14. Internal Web Sites DEMO

15. Improving the Mobile Device Experience • Internally-built Web tool provides end users with a streamlined method for configuring their mobile device out-of-the-box (OOB) • This drives down unnecessary setup related calls to helpdesk • Easy to navigate Web interface also simplifies other tasks for that user by providing over the air (OTA) features for: • Configuration • Patching / Updating • Installing applications • Customization (wallpapers, skins and ring tones) • What devices are supported? • All WM 2002+ OS devices are supported • How can I give this a try? • Although new features in Windows Mobile 2005 make many of these tasks easier, our existing solution was developed for internal use

16. Windows Mobile DEMO

17. Pocket Expense – LOB (Line of Business) Application DEMO

19. Customer Explorer Mobile Demo PPCPE Screens

20. Microsoft IT Requirements • Security • Removal of user credentials • Local PIN enforcement • Certificate authentication – SmartCard support in the future • Remote wipe • Management • Detailed statistics • OS updates • Configuration push

21. Protected Mobile Operation Enforced use of the power on PIN/password Pocket PC/Smartphone 2003 DPAPI to encrypt corporate credentials Soft certificates used

22. Windows Mobile 5.0 Internal Beta Program

23. Windows Mobile 5.0 OS • Enterprise security model requirements • Application security • Pocket PC platform • 1-Tier • Prompt for unsigned • Allow for unsigned install • Smartphone platform • 2-Tier • Prompt for unsigned • Allow for unsigned install • Certificates • IT Management certificates • Certificate based through cab/cpf updates • Application signing • IT Management related tasks • Corporate certificates • SSL • Corporate delegated CA for WiFi • Mobile 2 Market (M2M) can be revoked to disallow applications outside of the environment from being installed

24. Enterprise Benefits • First time MDPG/MED dogfood program in large scale environment • MDPG and user experience early on in development lifecycle outside of lab • Microsoft IT influence on new features for enterprise – security, management, device provisioning, corporate imaging, etc.

25. Windows Mobile 5.0 Statistics • Employee participation • 1,200+ Smartphone users at B2 • 1,900 at RC8 • 2,200 participants at RTM • Feedback and bug reporting • Over 1,070 filed in product studio • Helpdesk call volume • ~125 calls in 7 months • Less than 5% rolling back to 2002 OS

26. Summary – Recap • Global presence • Complex infrastructure – 40,000 + devices • Microsoft IT mission: • First and best customer • Feedback to product group during SDLC • Run world class utility (support, cost, availability) • Windows Mobile 5.0 • First Dogfood experience • Incorporated MSIT feedback on device management and security features

27. Mobility Challenges • Remote access to messaging resources is a form of remote access to data • New security risks are introduced – the key is to understand these risks and manage them • Security concerns/challenges: • Infrastructure exposure • Device management • Single factor authentication / password exposure • Data exposure • Device provisioning • Per user restrictions • Client/device configuration validation

28. Microsoft Portugal (Living the dream) • Objectives: • Integrated voice and data solution, that each employee can demonstrate • 20% reduction in global communication costs • Improve response time and CPE due to better availability near customers • Technological showroom of Microsoft mobility solutions

29. Microsoft Portugal (cont’d) • Results: • Calls between employee through extension number no matter where they are in the country. Call transfer on GSM implemented. • Device bought directly from manufacturer, although cost financed by mobile operator (free from MO) • 2 GB GPRS/month, sharable by 250 users • All employees in the sub with Windows Mobile devices, with access to: • E-mail , Calendar, Internet, MSN Messenger

30. Microsoft Portugal Results • Results: • Each Microsoft employee is an ambassador to this technology • Always in contact with the customers • Extensive usage of MSN Messenger, essentially when abroad, reducing costs • Conf Calls using VoIP to the US through the usage of a simple extension wherever you are! • End of waiting times due to the permanent access to e-mail

31. Regional Data Center Design

32. Direct Push: Under the hood

33. Policy Provisioning: Admin View

34. Additional content on Microsoft IT deployments and best practices can be found on Microsoft TechNet: http://www.microsoft.com/technet/itshowcase Trustworthy Messaging at Microsoft:http://www.microsoft.com/technet/itsolutions/msit/operations/trustmes.mspx Exchange Server 2003 Transport and Routing Guide:http://www.microsoft.com/downloads/details.aspx?FamilyId=C092B7A7-9034-4401-949C-B29D47131622&displaylang=en Resources

35. 最后… • 相关的Session • MBL201 - How Microsoft Ships Windows Mobile 5.0 Software • 请您填写Survey，给与我宝贵的反馈 Thank You Very Much!

36. Q & A