Exam Ref: MS-101 Microsoft 365 Mobility and Security

Thought experiment

In this thought experiment, demonstrate your skills and knowledge of the topics covered in this chapter. You can find the answer to this thought experiment in the next section.

Alpine Ski House is a global organization, spanning 200 locations and supporting 25,000 mobile devices. Some offices have slow WAN links, but all locations have fast Internet connections. The organization is using ConfigMgr for device management and deployment. All employees are registered in Azure AD and have an Office 365 license assigned. Last year they started introducing Windows 10 through a traditional bare metal deployment. 2,500 devices are running Windows 10, version 1803 and the remaining fleet is running Windows 8.1. Your manager has tasked you with creating a deployment plan for fully adopting Windows 10 over the next 6 months and keeping current with new releases. As the technical lead for enterprise device management, you have started testing the in-place upgrade using ConfigMgr, going from Windows 8.1 to Windows 10. Some devices upgraded successfully, and others failed. As part of your deployment design you need to address the following questions, while minimizing on-premises infrastructure:

1. The in-place upgrade from Windows 8.1 to Windows 10 has identified some compatibility issues. What solution should you implement to track compatibility for your fleet and what steps do you need to take to implement this solution?
2. Windows 10 Enterprise 64-bit is the target operating system for your fleet. Through a recent discovery you found 5% of your Windows 8.1 devices are 32-bit. What solution will you use to upgrade these devices?
3. What servicing channels should you adopt to keep current with the latest releases of Windows 10 and what steps do you need to take to implement them?
4. The 2,500 devices running Windows 10 need to be upgraded to version 1809. What solution should you implement to upgrade these devices?
5. Your CIO is asking you to begin migrating MDM workloads to Intune. What MDM solution addresses this requirement.

Thought experiment answers

This section contains the solution to the thought experiment. Each answer explains why the answer choice is correct.

1. To address compatibility issues with Windows 10 you should implement upgrade readiness. To accomplish this, you will need to create the Log Analytics workspace in Azure. After creating the workspace, you should create and deploy a GPO with Windows telemetry enabled and set to basic, along with your commercial ID. The Windows 8.1 computers will also need KB2976978 installed before they can upload data.
2. The Windows 8.1 computers will need to be upgraded using a refresh or replace deployment method. The user state can be captured with ConfigMgr and restored after the device has been re-imaged using a Windows 10 64-bit installation.
3. To support the latest release of Windows 10, you should adopt Semi-Annual Channel (Targeted) and plan for the Windows Insider channel to prepare for new versions of the operating system. You should use a GPO to configure the servicing channel.
4. You should use Windows Update for Business to manage the upgrade from Windows 10, version 1803 to Windows 10, version 1809.
5. The best solution is to use Microsoft Intune with co-management enabled in ConfigMgr. This solution will deliver a cloud-based MDM with support for iOS, Android, and Windows 10. This will also enable the organization to transition workloads for Windows 10 from ConfigMgr to Microsoft Intune. The existing devices enrolled in MDM for Office 365 can also be assigned EMS licenses and can be converted to Intune.