From 2495d870fe59fddeb64e9dbc4d8459911219206e Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 10:14:01 -0700 Subject: [PATCH 1/9] Updates to landing & tools pages --- devices/surface/get-started.yml | 54 ++++++++----------- .../surface/microsoft-surface-data-eraser.md | 4 +- .../surface-diagnostic-toolkit-business.md | 4 +- .../surface-enterprise-management-mode.md | 2 +- 4 files changed, 27 insertions(+), 37 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 9b0bd74d7e..86beba22d0 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -28,20 +28,9 @@ landingContent: url: https://www.microsoft.com/surface/business/surface-go-2 - text: Surface Book 3 for Business url: https://www.microsoft.com/surface/business/surface-book-3 - - text: Surface Pro 7 for Business - url: https://www.microsoft.com/surface/business/surface-pro-7 - - text: Surface Pro X for Business - url: https://www.microsoft.com/surface/business/surface-pro-x - - text: Surface Laptop 3 for Business - url: https://www.microsoft.com/surface/business/surface-laptop-3 - - text: Surface Studio 2 for Business - url: https://www.microsoft.com/surface/business/surface-studio-2 + - text: Explore all Surface family products + url: https://www.microsoft.com/surface/business - - linkListType: video - links: - - text: Microsoft Mechanics Surface videos - url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ - # Card (optional) - title: Get started linkLists: @@ -53,18 +42,14 @@ landingContent: url: surface-book-quadro.md - text: What’s new in Surface Dock 2 url: surface-dock-whats-new.md - - text: Surface and Endpoint Configuration Manager considerations - url: considerations-for-surface-and-system-center-configuration-manager.md - - text: Wake On LAN for Surface devices - url: wake-on-lan-for-surface-devices.md - + # Card - title: Deploy Surface devices linkLists: - linkListType: deploy links: - - text: Manage and deploy Surface driver and firmware updates - url: manage-surface-driver-and-firmware-updates.md + - text: Surface Deployment Accelerator tool + url: microsoft-surface-deployment-accelerator.md - text: Autopilot and Surface devices url: windows-autopilot-and-surface-devices.md - text: Deploying, managing, and servicing Surface Pro X @@ -75,15 +60,15 @@ landingContent: linkLists: - linkListType: how-to-guide links: - - text: Optimize Wi-Fi connectivity for Surface devices - url: surface-wireless-connect.md + text: Manage and deploy Surface driver and firmware updates + url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - - text: Manage battery limit with UEFI - url: battery-limit.md + - text: Optimize Wi-Fi connectivity for Surface devices + url: surface-wireless-connect.md # Card - - title: Secure Surface devices + - title: Explore security topics linkLists: - linkListType: how-to-guide links: @@ -99,31 +84,34 @@ landingContent: linkLists: - linkListType: how-to-guide links: - - text: Surface Dock Firmware Update - url: surface-dock-firmware-update.md - text: Surface Diagnostic Toolkit for Business url: surface-diagnostic-toolkit-for-business-intro.md - text: SEMM and UEFI url: surface-enterprise-management-mode.md - - text: Surface Brightness Control - url: microsoft-surface-brightness-control.md - text: Battery Limit setting url: battery-limit.md # Card - - title: Support and community + - title: Browse Support topics linkLists: - linkListType: learn links: - text: Top support solutions url: support-solutions-surface.md - - text: Maximize your Surface battery life - url: https://support.microsoft.com/help/4483194/maximize-surface-battery-life + - text: Protecting your data during Surface repair or service + url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations - - linkListType: reference + +# Card + - title: Participate in Surface Community + linkLists: + - linkListType: learn links: + links: - text: Surface IT Pro blog url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + - text: Microsoft Mechanics Surface videos + url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ \ No newline at end of file diff --git a/devices/surface/microsoft-surface-data-eraser.md b/devices/surface/microsoft-surface-data-eraser.md index ca46b58a8b..1ad32d8518 100644 --- a/devices/surface/microsoft-surface-data-eraser.md +++ b/devices/surface/microsoft-surface-data-eraser.md @@ -168,7 +168,9 @@ After you create a Microsoft Surface Data Eraser USB stick, you can boot a suppo Microsoft Surface Data Eraser is periodically updated by Microsoft. For information about the changes provided in each new version, see the following: ### 3.30.139 -This version of Surface Data Eraser to be released May 11, 2020 adds support for: +*Release Date: 11 May 2020* + +This version of Surface Data Eraser adds support for: - Surface Book 3 - Surface Go 2 - New SSD in Surface Go diff --git a/devices/surface/surface-diagnostic-toolkit-business.md b/devices/surface/surface-diagnostic-toolkit-business.md index d916f7d91b..f67a1290d0 100644 --- a/devices/surface/surface-diagnostic-toolkit-business.md +++ b/devices/surface/surface-diagnostic-toolkit-business.md @@ -175,8 +175,8 @@ You can select to run a wide range of logs across applications, drivers, hardwar ## Changes and updates ### Version 2.94.139.0 - -This version of Surface Diagnostic Toolkit for Business to be released May 11, 2020 adds support for the following: +*Release date: May 11, 2020*
+This version of Surface Diagnostic Toolkit for Business adds support for the following: - Ability to skip Windows Update to perform hardware check. - Ability to receive notifications for about the latest version update diff --git a/devices/surface/surface-enterprise-management-mode.md b/devices/surface/surface-enterprise-management-mode.md index 819ef39b6a..d8d1715907 100644 --- a/devices/surface/surface-enterprise-management-mode.md +++ b/devices/surface/surface-enterprise-management-mode.md @@ -228,7 +228,7 @@ create a reset package using PowerShell to reset SEMM. ## Version History -The latest version of SEMM to be released May 11, 2020 includes: +The latest version of SEMM released May 11, 2020 includes: - Support for Surface Go 2 - Support for Surface Book 3 - Bug fixes From 891e5841ef30959d66187bb6e476e0ac58d8cd60 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 13:43:52 -0700 Subject: [PATCH 2/9] Update surface-hub-2s-recover-reset.md --- devices/surface-hub/surface-hub-2s-recover-reset.md | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/devices/surface-hub/surface-hub-2s-recover-reset.md b/devices/surface-hub/surface-hub-2s-recover-reset.md index 7493e10c3c..44912c169c 100644 --- a/devices/surface-hub/surface-hub-2s-recover-reset.md +++ b/devices/surface-hub/surface-hub-2s-recover-reset.md @@ -60,16 +60,6 @@ Using Surface Hub 2S, you can reinstall the device by using a recovery image. By When the first-time setup screen appears,remove the USB drive. -## Recover a locked Surface Hub - -At the end of a session, Surface Hub 2S may occasionally encounter an error during the cleanup of user and app data at the end of a session. If this occurs, the device automatically reboots and resumes the data cleanup. However, if this operation repeatedly fails, the device automatically locks to protect user data. - -**To unlock a Surface Hub 2S:**
-- Reset or recover the device from the Windows Recovery Environment. For more information, see [What is Windows RE?](https://technet.microsoft.com/library/cc765966.aspx) - -> [!NOTE] -> To enter recovery mode, unplug the power cord and plug it in again three times. - ## Contact Support If you have questions or need help, you can [create a support request](https://support.microsoft.com/supportforbusiness/productselection). From 0ba6a072fdb0e185bc417c43967edc0651c6dee7 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 14:14:20 -0700 Subject: [PATCH 3/9] Update get-started.yml --- devices/surface/get-started.yml | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 86beba22d0..d35baf3ac6 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -30,7 +30,6 @@ landingContent: url: https://www.microsoft.com/surface/business/surface-book-3 - text: Explore all Surface family products url: https://www.microsoft.com/surface/business - # Card (optional) - title: Get started linkLists: @@ -41,8 +40,7 @@ landingContent: - text: Surface Book 3 Quadro RTX 3000 technical overview url: surface-book-quadro.md - text: What’s new in Surface Dock 2 - url: surface-dock-whats-new.md - + url: surface-dock-whats-new.md # Card - title: Deploy Surface devices linkLists: @@ -54,19 +52,17 @@ landingContent: url: windows-autopilot-and-surface-devices.md - text: Deploying, managing, and servicing Surface Pro X url: surface-pro-arm-app-management.md - # Card - title: Manage Surface devices linkLists: - linkListType: how-to-guide links: - text: Manage and deploy Surface driver and firmware updates + - text: Manage and deploy Surface driver and firmware updates url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - text: Optimize Wi-Fi connectivity for Surface devices url: surface-wireless-connect.md - # Card - title: Explore security topics linkLists: @@ -78,7 +74,6 @@ landingContent: url: surface-enterprise-management-mode.md - text: Surface Data Eraser tool url: microsoft-surface-data-eraser.md - # Card - title: Discover Surface tools linkLists: @@ -90,8 +85,7 @@ landingContent: url: surface-enterprise-management-mode.md - text: Battery Limit setting url: battery-limit.md - - # Card +# Card - title: Browse Support topics linkLists: - linkListType: learn @@ -102,7 +96,6 @@ landingContent: url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations - # Card - title: Participate in Surface Community linkLists: From 1d90b8cb60ad81de4a98489863909051c86dda1d Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 14:58:52 -0700 Subject: [PATCH 4/9] Update get-started.yml --- devices/surface/get-started.yml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index d35baf3ac6..344d214bae 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -30,6 +30,7 @@ landingContent: url: https://www.microsoft.com/surface/business/surface-book-3 - text: Explore all Surface family products url: https://www.microsoft.com/surface/business + # Card (optional) - title: Get started linkLists: @@ -52,17 +53,19 @@ landingContent: url: windows-autopilot-and-surface-devices.md - text: Deploying, managing, and servicing Surface Pro X url: surface-pro-arm-app-management.md + # Card - title: Manage Surface devices linkLists: - linkListType: how-to-guide links: - - text: Manage and deploy Surface driver and firmware updates + - text: Manage and deploy Surface driver and firmware updates url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - text: Optimize Wi-Fi connectivity for Surface devices url: surface-wireless-connect.md + # Card - title: Explore security topics linkLists: @@ -74,7 +77,8 @@ landingContent: url: surface-enterprise-management-mode.md - text: Surface Data Eraser tool url: microsoft-surface-data-eraser.md - # Card + + # Card - title: Discover Surface tools linkLists: - linkListType: how-to-guide @@ -85,6 +89,7 @@ landingContent: url: surface-enterprise-management-mode.md - text: Battery Limit setting url: battery-limit.md + # Card - title: Browse Support topics linkLists: @@ -92,10 +97,11 @@ landingContent: links: - text: Top support solutions url: support-solutions-surface.md - - text: Protecting your data during Surface repair or service + - text: Protecting your data during Surface repair or service url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations + # Card - title: Participate in Surface Community linkLists: @@ -106,5 +112,5 @@ landingContent: url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices - - text: Microsoft Mechanics Surface videos + - text: Microsoft Mechanics Surface videos url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ \ No newline at end of file From 454e8cc273a2e4e14face0e0e9ed48493980a49f Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 15:33:52 -0700 Subject: [PATCH 5/9] Update get-started.yml --- devices/surface/get-started.yml | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 344d214bae..0a02e29fec 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -42,6 +42,7 @@ landingContent: url: surface-book-quadro.md - text: What’s new in Surface Dock 2 url: surface-dock-whats-new.md + # Card - title: Deploy Surface devices linkLists: @@ -54,18 +55,18 @@ landingContent: - text: Deploying, managing, and servicing Surface Pro X url: surface-pro-arm-app-management.md - # Card + # Card - title: Manage Surface devices linkLists: - linkListType: how-to-guide links: - - text: Manage and deploy Surface driver and firmware updates + - text: Manage and deploy Surface driver and firmware updates url: manage-surface-driver-and-firmware-updates.md - text: Best practice power settings for Surface devices url: maintain-optimal-power-settings-on-Surface-devices.md - text: Optimize Wi-Fi connectivity for Surface devices url: surface-wireless-connect.md - + # Card - title: Explore security topics linkLists: @@ -90,27 +91,24 @@ landingContent: - text: Battery Limit setting url: battery-limit.md -# Card + # Card - title: Browse Support topics linkLists: - linkListType: learn links: - text: Top support solutions url: support-solutions-surface.md - - text: Protecting your data during Surface repair or service - url: https://support.microsoft.com/en-us/help/4023508/surface-faq-protecting-your-data-service + - text: Protecting your data during Surface repair or service + url: https://support.microsoft.com/help/4023508/surface-faq-protecting-your-data-service - text: Troubleshoot Surface Dock and docking stations url: https://support.microsoft.com/help/4023468/surface-troubleshoot-surface-dock-and-docking-stations - + # Card - title: Participate in Surface Community linkLists: - linkListType: learn links: - links: - text: Surface IT Pro blog url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices - - text: Microsoft Mechanics Surface videos - url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ \ No newline at end of file From cf8d4f39597f682ca895e05d82d8cd105ca5328b Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 12 May 2020 16:25:59 -0700 Subject: [PATCH 6/9] Update get-started.yml --- devices/surface/get-started.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 0a02e29fec..9d70d7a59d 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -68,7 +68,7 @@ landingContent: url: surface-wireless-connect.md # Card - - title: Explore security topics + - title: Explore security guidance linkLists: - linkListType: how-to-guide links: @@ -92,7 +92,7 @@ landingContent: url: battery-limit.md # Card - - title: Browse Support topics + - title: Browse support solutions linkLists: - linkListType: learn links: @@ -112,3 +112,5 @@ landingContent: url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + - text: Surface Devices Tech Community + url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices From dfa2880a69f48995d846056a7301f7d95b5cd8bf Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 13 May 2020 10:06:44 -0700 Subject: [PATCH 7/9] Update get-started.yml --- devices/surface/get-started.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/devices/surface/get-started.yml b/devices/surface/get-started.yml index 9d70d7a59d..a11e35c584 100644 --- a/devices/surface/get-started.yml +++ b/devices/surface/get-started.yml @@ -112,5 +112,5 @@ landingContent: url: https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/bg-p/SurfaceITPro - text: Surface Devices Tech Community url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices - - text: Surface Devices Tech Community - url: https://techcommunity.microsoft.com/t5/Surface-Devices/ct-p/SurfaceDevices + - text: Microsoft Mechanics Surface videos + url: https://www.youtube.com/watch?v=Uk2kJ5FUZxY&list=PLXtHYVsvn_b__1Baibdu4elN4SoF3JTBZ From 84b4df63dc9a4fa5ca322c798f0a834dbd03a458 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 13 May 2020 10:15:46 -0700 Subject: [PATCH 8/9] Create cloud-desktop-surface.md --- devices/surface/cloud-desktop-surface.md | 175 +++++++++++++++++++++++ 1 file changed, 175 insertions(+) create mode 100644 devices/surface/cloud-desktop-surface.md diff --git a/devices/surface/cloud-desktop-surface.md b/devices/surface/cloud-desktop-surface.md new file mode 100644 index 0000000000..14f3e92b65 --- /dev/null +++ b/devices/surface/cloud-desktop-surface.md @@ -0,0 +1,175 @@ +--- +title: Cloud Desktop on Surface +description: This article explains how Surface devices deliver an ideal end node for Windows Virtual Desktop solutions, providing customers with flexible form factors, Windows 10 modern device security and manageability, and support for persistent, on-demand & just-in-time work scenarios. +ms.prod: w10 +ms.mktglfcycl: manage +ms.localizationpriority: medium +ms.sitesec: library +author: coveminer +ms.author: greglin +ms.topic: article +ms.date: 5/15/2020 +ms.reviewer: rohenr +manager: laurawi +audience: itpro +--- +# Cloud Desktop on Surface + +## Introduction + +Cloud Desktop on Surface represents another milestone in the evolution of computing, combining Microsoft 365 -- virtualized in the Azure cloud -- with the advanced security protections, enterprise-level manageability, and enhanced productivity tools of Windows 10 on Surface. This fusion of premium form factor and Virtual Desktop Infrastructure (VDI) in Azure provides exceptional customer value that spans user experiences, portability, security, business continuity, and modern management. Surface blurs the lines between the local desktop experience and the virtual desktop where touch, pen and ink and biometric authentication span both physical and virtual environments. + +### Virtual Desktop Infrastructure on Azure + +Customers can take advantage of VDI on Azure with first party Microsoft solutions such as Windows Virtual Desktop (WVD) or third-party desktop as a service (DaaS) offerings from partners like Workspot and Rackspace. + +### Windows Virtual Desktop + +Windows Virtual Desktop (WVD) is a Platform as a Service (PaaS) solution providing a comprehensive desktop and app virtualization service running in the Azure cloud. It’s the only virtual desktop infrastructure that delivers simplified management, multi-session Windows 10, optimizations for Office 365 ProPlus, and support for Remote Desktop Services (RDS) environments. Deploy and scale Windows desktops and apps on Azure in minutes and get built-in security and compliance features. +This model of cloud desktop still requires customers to maintain and manage updates of Windows virtual machines. + +###Virtual Desktop as a Service + +Virtual Desktop as a Service (DaaS) frees customers from having to maintain their own virtual machines (VMs) by providing a fully managed, turnkey desktop and virtualization service. The ability to deliver customized desktops to users anywhere in the world enables companies to quickly adjust to changing market conditions by spinning up cloud desktops on-demand - when and where they’re needed. + + +## Microsoft Surface Devices + +Surface engineering has long set new standards for innovation by going beyond the keyboard and mouse to imagine more natural ways of interacting with devices, whether by touch, voice, ink, or Surface Dial. And with chip-to-cloud integration of Microsoft 365 and the security and manageability of Windows 10 Pro, we’ve seamlessly connected hardware, software, apps, and services the way they were intended. +Although you can run Windows Virtual Desktop on Windows 7, Windows Server 2012 R2, or virtual machines, or Windows OEM devices, running WVD on Microsoft Surface devices provides unique advantages including support for: + +- **Flexible form factors** - like 2-in-1 devices such as Surface Go 2, Surface Pro 7 and Surface Pro X with pen, touch and detachable keyboard. +- **Persistent, on-demand and just-in-time work scenarios** - with offline and on-device access for more productive experiences. +- **Windows 10 modern device security and manageability** - providing the flexibility to be productive anywhere. +- **Reducing your carbon footprint –** to support your efforts to cut carbon emissions and drive towards environmental sustainability. + +### Flexible form factors and premium user experience + +The Microsoft Surface for Business family comprises a diverse portfolio of form factors including traditional laptops, all-in-one machines, and 2-in-1 devices. Surface devices deliver experiences people love with the choice and flexibility they need in order to work on their terms. + +#### Transforming the virtual desktop endpoint + +Surface 2-in-1 devices, including [Surface Go 2](https://www.microsoft.com/p/surface-go/ (10.5”), [Surface Pro 7](https://www.microsoft.com/surface/devices/surface-pro-7/) (12”) and [Surface Pro X](https://www.microsoft.com/p/surface-pro-x/) (13”), provide users with the ideal cloud desktop endpoint bringing together the optimal balance of portability, versatility, power, and all-day battery. From site engineers relying on Surface Go 2 in tablet mode to financial advisors attaching Surface Pro 7 to a dock and multiple monitors, 2-in-1 devices deliver the versatility that has come to define the modern workplace. + +Unlike traditional, fixed VDI “terminals”, Surface devices allow users to work from anywhere and enable companies to remain viable and operational during unforeseen events -- from severe weather to public health emergencies. With support for persistent, on-demand and just-in-time scenarios, Surface devices effectively help companies sustain ongoing operations and mitigate risk from disruptive events. + +Features designed to enhance productivity on Surface 2-in-1 devices include: + +- Vibrant, high resolution displays with 3:2 aspect ratio to get work done. +- Natural inking and multi-touch for more immersive experiences. +- With a wide variety of built-in and third-party accessibility features, Surface devices let you choose how to interact with your device, express ideas, and get work done. +- Far-field mics and high-performance speakers for improved virtual meetings. +- Biometric security including built-in, Windows Hello camera that comes standard on every Surface device. +- Longer battery life[[1]](#) and fast charging. +- LTE options[[2]](#), on modern devices like Surface Pro X and Surface Go 2 for hassle-free and secure connectivity. +- Support for a wide range of peripherals such as standard printers, 3D printers, cameras, credit card readers, barcode scanners, and many others. A large ecosystem of Designed for Surface partners provides licensed and certified Surface accessories. +- Broad range of Device Redirection support. + +#### VDI Device Redirection Support + +The Surface-centric productivity experiences listed above become even more compelling in VDI environments by taking advantage of device redirection capabilities with Windows 10. Surface provides a broad range of device redirection support, especially when compared to OEM thin clients and fixed terminals, Android, iOS/macOS and Web-based access. The Windows Inbox (MSTSC) and Windows Desktop (MSRDC) clients provide the most Device Redirection capabilities including Input Redirection (keyboard, mouse, pen and touch), Port Redirection (serial and USB) and Other Redirections (cameras, clipboard, local drive/storage, location, microphones, printers, scanners, smart cards and speakers). For a detailed comparison of Device Redirection support refer to the [Device Redirection documentation](https://docs.microsoft.com/windows-server/remote/remote-desktop-services/clients/remote-desktop-app-compare#redirection-support). + +#### Familiar Desktop Experience + +Not only does running the Windows Desktop Client on Surface devices provide users with the broadest set of Device Redirection capabilities but it also provides the additional capability to use the apps in the way that is familiar to the end users – by launching an app directly from the Start Menu or launch the apps by searching it in the search bar. + +### Persistent, on-demand and just-in-time work scenarios + +Cloud Desktop on Surface helps customers meet increasingly complex business and security requirements across industries, employee roles, and work environments. These include: + +- Multi-layered security of access to data and organizational resources. +- Compliance with industry regulations. +- Support for an increasingly elastic workforce. +- Employee-specific needs across a variety of job functions. +- Ability to support specialized, processor-intensive workloads. +- Resilience for sustaining operations during disruptions. + + +**Table 1. Windows Virtual Desktop business conversations** + +| Security & regulation | Elastic workforce | Work Roles | Special workloads | Business continuity | +| ---------------------------------------------------- | ---------------------------------------------------------------------------- | ----------------------------------------------------------------- | ---------------------------------------------------------------------------- | ---------------------------------------------------- | +| - Financial Services
- Healthcare
- Government | - Merger & acquisition
- Short term employees
- Contractors & partners | - BYOD & mobile
- Customer support/service
- Branch workers | - Design & engineering
- Support for legacy apps
- Software dev & test | - On demand
- Just-in-Time (JIT)
- Work @ Home | + + + +### Offline and on-device access for more productive experiences + +Traditionally, VDI solutions only work when the endpoint is connected to the internet. But what happens when the internet or power is unavailable for any reason (due to mobility, being on a plane, or power outages, and so on)? + +To support business continuity and keep employees productive, Surface devices can easily augment the virtual desktop experience with offline access to files, Microsoft 365 and third-party applications. Traditional apps like Microsoft Office, available across .x86, x64, Universal Windows Platform, ARM platforms, enable users to stay productive in “offline mode”. Files from the virtual desktop cloud environment can be synced locally on Surface using OneDrive for Business for offline access as well. You can have the confidence that all locally “cached” information is up-to-date and secure. + +In addition to adding support for offline access to apps and files, Surface devices are designed to optimize collaborative experiences like Microsoft Teams “On-Device”. Although some VDI solutions support the use of Teams through a virtual session, users can benefit from the more optimized experience provided by a locally installed instance of Teams. Localizing communications and collaboration apps for multimedia channels like voice, video, live captioning allows organizations to take full advantage of Surface devices’ ability to provide optimized Microsoft 365 experiences. The emergence of Surface artificial intelligence (AI) or “AI-on-device” brings new capabilities to life, such as eye gaze technology that adjusts the appearance of your eyes so the audience sees you looking directly at the camera when communicating via video. + +An alternative to locally installing traditional applications is to take advantage of the Chromium version of Microsoft Edge, which comes with support for Progressive Web Apps (PWA). PWAs are just websites that are progressively enhanced to function like native apps on supporting platforms. The qualities of a PWA combine the best of the web and native apps by additional features, such as push notifications, background data refresh, offline support, and more. + +### Virtual GPUs + +GPUs are ideal for [AI] compute and graphics-intensive workloads, helping customers to fuel innovation through scenarios like high-end remote visualization, deep learning, and predictive analytics. However, this isn’t ideal for professionals who need to work remotely or while on the go because varying degrees of internal GPU horsepower are tied to the physical devices, limiting mobility and flexibility. + +To solve for this Azure offers the N-series family of Virtual Machines with NVIDIA GPU capabilities (vGPU). With vGPUs, IT can either share GPU performance across multiple virtual machines, or power demanding workloads by assigning multiple GPUs to a single virtual machine. For Surface this means that no matter what device you’re using, from the highly portable Surface Go 2 to the slim and stylish Surface Laptop 3, your device has access to powerful server-class graphics performance. Surface and vGPUs allow you to combine all the things you love about Surface, to include pen, touch, keyboard, trackpad and PixelSense displays, with graphics capability only available in high performance computing environments. + +Azure N-series brings these capabilities to life on your Surface device allowing you to work in any way you want, wherever you go. [Learn more about Azure N-Series and GPU optimized virtual machine sizes.](https://docs.microsoft.com/azure/virtual-machines/sizes-gpu) + +### Microsoft 365 and Surface + +Even in a virtualized desktop environment, Microsoft 365 and Surface deliver the experiences employees love, the protection organizations demand, and flexibility for teams to work their way. According to Forrester Research3: + +- Microsoft 365-powered Surface devices give users up to 5 hours in weekly productivity gains with up to 9 hours saved per week for highly mobile workers, providing organizations with 112 percent ROI on Microsoft 365 with Surface +- 75 percent agree Microsoft 365-powered Surface devices help improve employee satisfaction and retention +- agree that Microsoft 365- powered Surface devices have helped improve employee satisfaction and retention. + +#### Security and management + +From chip to cloud, Microsoft 365 and Surface helps organizations stay protected and up to date. +With both Surface hardware and software designed, built, and tested together by Microsoft, users can be confident they’re productive and protected by leading technologies from chip to cloud. With increased numbers of users working remotely, protecting corporate data and intellectual property becomes more paramount than ever. Cloud Desktop on Surface is designed around a zero-trust security model in which every access request is strongly authenticated, authorized within policy constraints, and inspected for anomalies before granting access. + +By maximizing efficiencies from cloud computing, modern management enables IT to better serve the needs of users, stakeholders and customers in an increasingly competitive business environment. For example, you can get Surface devices up-and-running with minimal interaction from your team. Setup is automatic and self-serviced. Updates are quick and painless for both your team and your users. You can manage devices regardless of their physical location. + +Security and management features delivered Cloud Desktop on Surface include: + +- **Windows Update.** Keeping Windows up to date helps you stay ahead of new security threats. Windows 10 has been engineered from the ground up to be more secure and utilize the latest hardware capabilities to improve security. With a purpose-built UEFI[[3]](#) and Windows Update for Business that responds to evolving threats, end-to-end protection is secure and simplified.4 + +- **Hardware encryption.** Device encryption lets you protect the data on your Surface so it can only be accessed by authorized individuals. All Surface for Business devices feature a discrete Trusted Platform Module (dTPM) that is hardware-protected against intrusion while software uses protected keys and measurements to verify software validity. +- **Windows Defender.** Windows Defender Antivirus brings together machine learning, big-data analysis, in-depth threat resistance research, and the Microsoft cloud infrastructure to protect devices. The tool is built in and needs no extra agents to be deployed on-devices or in the VDI environment, simplifying management and optimizing device start up. +- Windows Defender is built in and needs no extra agents to be deployed on-device or in the VDI environment, simplifying management and optimizing device start up. The true out-of-the-box experience. +- **Removable drives** - A subset of newer Surface devices[[4]](#) feature removable SSD drives5 providing greater control over data retention. +- **Modern authentication -** Microsoft 365 and Surface is a unified platform delivering every Windows security feature (subject to licensing and enablement). All Surface portfolio devices ship with a custom-built camera, designed for Windows Hello for Business providing biometric security that persists seamlessly from on-device to VDI-based experiences. +- **Modern firmware management** - IT administrators can disable hardware elements at a firmware level such as mics, USB ports, SD card slots, cameras, and Bluetooth which removes power to the peripheral. Device Firmware Configuration Interface (DFCI) enables IT managers to manage UEFI via Microsoft Intune, for simple remote management. Windows Defender Credential Guard uses virtualization-based security so that only privileged system software can access them. +- **Backward and forward compatibility** - Windows 10 devices provide backward and forward compatibility across hardware, software and services. Microsoft has a strong history of maintaining legacy support of hardware, peripherals, software and services while incorporating the latest technologies. Businesses can plan IT investments to have a long useful life. +- **Bridge for legacy Windows 7 workloads** - For solution scenarios dependent on legacy Windows OS environments, enterprises can use VDI instances of Windows 7 running in Azure. This enables support on modern devices like Surface without the risk of relying on older Windows 7 machines that no longer receive the latest security updates. In addition to these “future proofing” benefits, migration of any legacy workloads becomes greatly simplified when modern Windows 10 hardware is already deployed. +- **Zero-Touch Deployment** - Autopilot is the recommended modern management deployment option for Surface devices. Windows Autopilot on Surface is a cloud-based deployment technology in Windows 10. You can use Windows Autopilot on Surface to remotely deploy and configure devices in a zero-touch process right out of the box. Windows Autopilot-registered devices are identified over the Internet at first startup through a unique device signature that's called a hardware hash. They're automatically enrolled and configured by using modern management solutions such as Azure Active Directory (Azure AD) and mobile device management. + +### Reduce your carbon footprint with Surface + +At Microsoft Devices, sustainability is integral to our mission to build products that create magical experiences while empowering every person and organization to achieve more. From product design through sourcing, manufacturing, delivery, and product end-of-life, we are driven to make a difference with our products both in how our customers create with them and in the impact their development has on our environment. + +- **Surface Environmental Impact** – For each Surface product we produce an ECO profile which consist of data about the environmental impact for the product. In the profile you can find the Product Carbon Footprint as well as the EnergyStar value. Taking the average values from those reports and comparing them to the average values from in market VDI desktop and VDI mobile devices. We can see some big differences. 565 percent difference in kg Co2 and a 158 percent in the energy use. +- **Surface Packaging** - Integrating sustainability into our packaging designs and measuring results is a business priority. We focus on using less packaging and selecting the right materials for the environment. We are committed to designing and delivering packaging materials that achieve measurable sustainability gains. Wood-based fiber packaging materials contain an average of 65 percent post-consumer recycled content. Packaging is 93 percent recyclable. Packaging weight is minimized. + + ![Surface ECO profiles](images/surface-eco-data.png) + +To download profiles for each Surface device, see [ECO Profiles](https://www.microsoft.com/download/details.aspx?id=55974) on the Microsoft Download Center. + +## Summary + +Cloud Desktop on Surface provides organizations with greater flexibility and resilience in meeting the diverse needs of users, stakeholders, and customers. Running WVD and Azure-based virtual desktop solutions on Surface devices provides unique advantages over continued reliance on legacy devices. Flexible form factors like Surface Go 2 and Surface Pro 7 connected to the cloud (or offline), enable users to be productive from anywhere, at any time. Whether employees work in persistent, on-demand, or just-in-time scenarios, Cloud Desktop on Surface affords businesses with the versatility to sustain productivity throughout disruptions from public health emergencies or other unforeseen events. Using the built in, multi-layered security and modern manageability of Windows 10, companies can take advantage of an expanding ecosystem of cloud-based services to rapidly deploy and scale Windows desktops and apps. Simply put, Cloud Desktop on Surface delivers critically needed technology to organizations and businesses of all sizes + +## Learn more + +For more information, see the following resources: + +- [Windows Virtual Desktop](https://azure.microsoft.com/services/virtual-desktop/) +- [Surface for Business](https://www.microsoft.com/surface/business) +- [Zero-trust security model](https://www.microsoft.com/security/business/zero-trust) + + + + +---------- + +[[1]](#) Battery life varies significantly with settings, usage and other factors. +[[2]](#) Service availability and performance subject to service provider’s network. Contact your service provider for details, compatibility, pricing, SIM card, and activation. See all specs and frequencies at surface.com. +[[3]](#) Surface Go uses third party UEFI. +[[4]](#) Hard drive is not user removable. Hard drive is only removable a by skilled technician following Microsoft instructions. + From 5cd251c6f806de98ed1248def16ffbf23af13091 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Wed, 13 May 2020 10:25:43 -0700 Subject: [PATCH 9/9] Delete cloud-desktop-surface.md --- devices/surface/cloud-desktop-surface.md | 175 ----------------------- 1 file changed, 175 deletions(-) delete mode 100644 devices/surface/cloud-desktop-surface.md diff --git a/devices/surface/cloud-desktop-surface.md b/devices/surface/cloud-desktop-surface.md deleted file mode 100644 index 14f3e92b65..0000000000 --- a/devices/surface/cloud-desktop-surface.md +++ /dev/null @@ -1,175 +0,0 @@ ---- -title: Cloud Desktop on Surface -description: This article explains how Surface devices deliver an ideal end node for Windows Virtual Desktop solutions, providing customers with flexible form factors, Windows 10 modern device security and manageability, and support for persistent, on-demand & just-in-time work scenarios. -ms.prod: w10 -ms.mktglfcycl: manage -ms.localizationpriority: medium -ms.sitesec: library -author: coveminer -ms.author: greglin -ms.topic: article -ms.date: 5/15/2020 -ms.reviewer: rohenr -manager: laurawi -audience: itpro ---- -# Cloud Desktop on Surface - -## Introduction - -Cloud Desktop on Surface represents another milestone in the evolution of computing, combining Microsoft 365 -- virtualized in the Azure cloud -- with the advanced security protections, enterprise-level manageability, and enhanced productivity tools of Windows 10 on Surface. This fusion of premium form factor and Virtual Desktop Infrastructure (VDI) in Azure provides exceptional customer value that spans user experiences, portability, security, business continuity, and modern management. Surface blurs the lines between the local desktop experience and the virtual desktop where touch, pen and ink and biometric authentication span both physical and virtual environments. - -### Virtual Desktop Infrastructure on Azure - -Customers can take advantage of VDI on Azure with first party Microsoft solutions such as Windows Virtual Desktop (WVD) or third-party desktop as a service (DaaS) offerings from partners like Workspot and Rackspace. - -### Windows Virtual Desktop - -Windows Virtual Desktop (WVD) is a Platform as a Service (PaaS) solution providing a comprehensive desktop and app virtualization service running in the Azure cloud. It’s the only virtual desktop infrastructure that delivers simplified management, multi-session Windows 10, optimizations for Office 365 ProPlus, and support for Remote Desktop Services (RDS) environments. Deploy and scale Windows desktops and apps on Azure in minutes and get built-in security and compliance features. -This model of cloud desktop still requires customers to maintain and manage updates of Windows virtual machines. - -###Virtual Desktop as a Service - -Virtual Desktop as a Service (DaaS) frees customers from having to maintain their own virtual machines (VMs) by providing a fully managed, turnkey desktop and virtualization service. The ability to deliver customized desktops to users anywhere in the world enables companies to quickly adjust to changing market conditions by spinning up cloud desktops on-demand - when and where they’re needed. - - -## Microsoft Surface Devices - -Surface engineering has long set new standards for innovation by going beyond the keyboard and mouse to imagine more natural ways of interacting with devices, whether by touch, voice, ink, or Surface Dial. And with chip-to-cloud integration of Microsoft 365 and the security and manageability of Windows 10 Pro, we’ve seamlessly connected hardware, software, apps, and services the way they were intended. -Although you can run Windows Virtual Desktop on Windows 7, Windows Server 2012 R2, or virtual machines, or Windows OEM devices, running WVD on Microsoft Surface devices provides unique advantages including support for: - -- **Flexible form factors** - like 2-in-1 devices such as Surface Go 2, Surface Pro 7 and Surface Pro X with pen, touch and detachable keyboard. -- **Persistent, on-demand and just-in-time work scenarios** - with offline and on-device access for more productive experiences. -- **Windows 10 modern device security and manageability** - providing the flexibility to be productive anywhere. -- **Reducing your carbon footprint –** to support your efforts to cut carbon emissions and drive towards environmental sustainability. - -### Flexible form factors and premium user experience - -The Microsoft Surface for Business family comprises a diverse portfolio of form factors including traditional laptops, all-in-one machines, and 2-in-1 devices. Surface devices deliver experiences people love with the choice and flexibility they need in order to work on their terms. - -#### Transforming the virtual desktop endpoint - -Surface 2-in-1 devices, including [Surface Go 2](https://www.microsoft.com/p/surface-go/ (10.5”), [Surface Pro 7](https://www.microsoft.com/surface/devices/surface-pro-7/) (12”) and [Surface Pro X](https://www.microsoft.com/p/surface-pro-x/) (13”), provide users with the ideal cloud desktop endpoint bringing together the optimal balance of portability, versatility, power, and all-day battery. From site engineers relying on Surface Go 2 in tablet mode to financial advisors attaching Surface Pro 7 to a dock and multiple monitors, 2-in-1 devices deliver the versatility that has come to define the modern workplace. - -Unlike traditional, fixed VDI “terminals”, Surface devices allow users to work from anywhere and enable companies to remain viable and operational during unforeseen events -- from severe weather to public health emergencies. With support for persistent, on-demand and just-in-time scenarios, Surface devices effectively help companies sustain ongoing operations and mitigate risk from disruptive events. - -Features designed to enhance productivity on Surface 2-in-1 devices include: - -- Vibrant, high resolution displays with 3:2 aspect ratio to get work done. -- Natural inking and multi-touch for more immersive experiences. -- With a wide variety of built-in and third-party accessibility features, Surface devices let you choose how to interact with your device, express ideas, and get work done. -- Far-field mics and high-performance speakers for improved virtual meetings. -- Biometric security including built-in, Windows Hello camera that comes standard on every Surface device. -- Longer battery life[[1]](#) and fast charging. -- LTE options[[2]](#), on modern devices like Surface Pro X and Surface Go 2 for hassle-free and secure connectivity. -- Support for a wide range of peripherals such as standard printers, 3D printers, cameras, credit card readers, barcode scanners, and many others. A large ecosystem of Designed for Surface partners provides licensed and certified Surface accessories. -- Broad range of Device Redirection support. - -#### VDI Device Redirection Support - -The Surface-centric productivity experiences listed above become even more compelling in VDI environments by taking advantage of device redirection capabilities with Windows 10. Surface provides a broad range of device redirection support, especially when compared to OEM thin clients and fixed terminals, Android, iOS/macOS and Web-based access. The Windows Inbox (MSTSC) and Windows Desktop (MSRDC) clients provide the most Device Redirection capabilities including Input Redirection (keyboard, mouse, pen and touch), Port Redirection (serial and USB) and Other Redirections (cameras, clipboard, local drive/storage, location, microphones, printers, scanners, smart cards and speakers). For a detailed comparison of Device Redirection support refer to the [Device Redirection documentation](https://docs.microsoft.com/windows-server/remote/remote-desktop-services/clients/remote-desktop-app-compare#redirection-support). - -#### Familiar Desktop Experience - -Not only does running the Windows Desktop Client on Surface devices provide users with the broadest set of Device Redirection capabilities but it also provides the additional capability to use the apps in the way that is familiar to the end users – by launching an app directly from the Start Menu or launch the apps by searching it in the search bar. - -### Persistent, on-demand and just-in-time work scenarios - -Cloud Desktop on Surface helps customers meet increasingly complex business and security requirements across industries, employee roles, and work environments. These include: - -- Multi-layered security of access to data and organizational resources. -- Compliance with industry regulations. -- Support for an increasingly elastic workforce. -- Employee-specific needs across a variety of job functions. -- Ability to support specialized, processor-intensive workloads. -- Resilience for sustaining operations during disruptions. - - -**Table 1. Windows Virtual Desktop business conversations** - -| Security & regulation | Elastic workforce | Work Roles | Special workloads | Business continuity | -| ---------------------------------------------------- | ---------------------------------------------------------------------------- | ----------------------------------------------------------------- | ---------------------------------------------------------------------------- | ---------------------------------------------------- | -| - Financial Services
- Healthcare
- Government | - Merger & acquisition
- Short term employees
- Contractors & partners | - BYOD & mobile
- Customer support/service
- Branch workers | - Design & engineering
- Support for legacy apps
- Software dev & test | - On demand
- Just-in-Time (JIT)
- Work @ Home | - - - -### Offline and on-device access for more productive experiences - -Traditionally, VDI solutions only work when the endpoint is connected to the internet. But what happens when the internet or power is unavailable for any reason (due to mobility, being on a plane, or power outages, and so on)? - -To support business continuity and keep employees productive, Surface devices can easily augment the virtual desktop experience with offline access to files, Microsoft 365 and third-party applications. Traditional apps like Microsoft Office, available across .x86, x64, Universal Windows Platform, ARM platforms, enable users to stay productive in “offline mode”. Files from the virtual desktop cloud environment can be synced locally on Surface using OneDrive for Business for offline access as well. You can have the confidence that all locally “cached” information is up-to-date and secure. - -In addition to adding support for offline access to apps and files, Surface devices are designed to optimize collaborative experiences like Microsoft Teams “On-Device”. Although some VDI solutions support the use of Teams through a virtual session, users can benefit from the more optimized experience provided by a locally installed instance of Teams. Localizing communications and collaboration apps for multimedia channels like voice, video, live captioning allows organizations to take full advantage of Surface devices’ ability to provide optimized Microsoft 365 experiences. The emergence of Surface artificial intelligence (AI) or “AI-on-device” brings new capabilities to life, such as eye gaze technology that adjusts the appearance of your eyes so the audience sees you looking directly at the camera when communicating via video. - -An alternative to locally installing traditional applications is to take advantage of the Chromium version of Microsoft Edge, which comes with support for Progressive Web Apps (PWA). PWAs are just websites that are progressively enhanced to function like native apps on supporting platforms. The qualities of a PWA combine the best of the web and native apps by additional features, such as push notifications, background data refresh, offline support, and more. - -### Virtual GPUs - -GPUs are ideal for [AI] compute and graphics-intensive workloads, helping customers to fuel innovation through scenarios like high-end remote visualization, deep learning, and predictive analytics. However, this isn’t ideal for professionals who need to work remotely or while on the go because varying degrees of internal GPU horsepower are tied to the physical devices, limiting mobility and flexibility. - -To solve for this Azure offers the N-series family of Virtual Machines with NVIDIA GPU capabilities (vGPU). With vGPUs, IT can either share GPU performance across multiple virtual machines, or power demanding workloads by assigning multiple GPUs to a single virtual machine. For Surface this means that no matter what device you’re using, from the highly portable Surface Go 2 to the slim and stylish Surface Laptop 3, your device has access to powerful server-class graphics performance. Surface and vGPUs allow you to combine all the things you love about Surface, to include pen, touch, keyboard, trackpad and PixelSense displays, with graphics capability only available in high performance computing environments. - -Azure N-series brings these capabilities to life on your Surface device allowing you to work in any way you want, wherever you go. [Learn more about Azure N-Series and GPU optimized virtual machine sizes.](https://docs.microsoft.com/azure/virtual-machines/sizes-gpu) - -### Microsoft 365 and Surface - -Even in a virtualized desktop environment, Microsoft 365 and Surface deliver the experiences employees love, the protection organizations demand, and flexibility for teams to work their way. According to Forrester Research3: - -- Microsoft 365-powered Surface devices give users up to 5 hours in weekly productivity gains with up to 9 hours saved per week for highly mobile workers, providing organizations with 112 percent ROI on Microsoft 365 with Surface -- 75 percent agree Microsoft 365-powered Surface devices help improve employee satisfaction and retention -- agree that Microsoft 365- powered Surface devices have helped improve employee satisfaction and retention. - -#### Security and management - -From chip to cloud, Microsoft 365 and Surface helps organizations stay protected and up to date. -With both Surface hardware and software designed, built, and tested together by Microsoft, users can be confident they’re productive and protected by leading technologies from chip to cloud. With increased numbers of users working remotely, protecting corporate data and intellectual property becomes more paramount than ever. Cloud Desktop on Surface is designed around a zero-trust security model in which every access request is strongly authenticated, authorized within policy constraints, and inspected for anomalies before granting access. - -By maximizing efficiencies from cloud computing, modern management enables IT to better serve the needs of users, stakeholders and customers in an increasingly competitive business environment. For example, you can get Surface devices up-and-running with minimal interaction from your team. Setup is automatic and self-serviced. Updates are quick and painless for both your team and your users. You can manage devices regardless of their physical location. - -Security and management features delivered Cloud Desktop on Surface include: - -- **Windows Update.** Keeping Windows up to date helps you stay ahead of new security threats. Windows 10 has been engineered from the ground up to be more secure and utilize the latest hardware capabilities to improve security. With a purpose-built UEFI[[3]](#) and Windows Update for Business that responds to evolving threats, end-to-end protection is secure and simplified.4 - -- **Hardware encryption.** Device encryption lets you protect the data on your Surface so it can only be accessed by authorized individuals. All Surface for Business devices feature a discrete Trusted Platform Module (dTPM) that is hardware-protected against intrusion while software uses protected keys and measurements to verify software validity. -- **Windows Defender.** Windows Defender Antivirus brings together machine learning, big-data analysis, in-depth threat resistance research, and the Microsoft cloud infrastructure to protect devices. The tool is built in and needs no extra agents to be deployed on-devices or in the VDI environment, simplifying management and optimizing device start up. -- Windows Defender is built in and needs no extra agents to be deployed on-device or in the VDI environment, simplifying management and optimizing device start up. The true out-of-the-box experience. -- **Removable drives** - A subset of newer Surface devices[[4]](#) feature removable SSD drives5 providing greater control over data retention. -- **Modern authentication -** Microsoft 365 and Surface is a unified platform delivering every Windows security feature (subject to licensing and enablement). All Surface portfolio devices ship with a custom-built camera, designed for Windows Hello for Business providing biometric security that persists seamlessly from on-device to VDI-based experiences. -- **Modern firmware management** - IT administrators can disable hardware elements at a firmware level such as mics, USB ports, SD card slots, cameras, and Bluetooth which removes power to the peripheral. Device Firmware Configuration Interface (DFCI) enables IT managers to manage UEFI via Microsoft Intune, for simple remote management. Windows Defender Credential Guard uses virtualization-based security so that only privileged system software can access them. -- **Backward and forward compatibility** - Windows 10 devices provide backward and forward compatibility across hardware, software and services. Microsoft has a strong history of maintaining legacy support of hardware, peripherals, software and services while incorporating the latest technologies. Businesses can plan IT investments to have a long useful life. -- **Bridge for legacy Windows 7 workloads** - For solution scenarios dependent on legacy Windows OS environments, enterprises can use VDI instances of Windows 7 running in Azure. This enables support on modern devices like Surface without the risk of relying on older Windows 7 machines that no longer receive the latest security updates. In addition to these “future proofing” benefits, migration of any legacy workloads becomes greatly simplified when modern Windows 10 hardware is already deployed. -- **Zero-Touch Deployment** - Autopilot is the recommended modern management deployment option for Surface devices. Windows Autopilot on Surface is a cloud-based deployment technology in Windows 10. You can use Windows Autopilot on Surface to remotely deploy and configure devices in a zero-touch process right out of the box. Windows Autopilot-registered devices are identified over the Internet at first startup through a unique device signature that's called a hardware hash. They're automatically enrolled and configured by using modern management solutions such as Azure Active Directory (Azure AD) and mobile device management. - -### Reduce your carbon footprint with Surface - -At Microsoft Devices, sustainability is integral to our mission to build products that create magical experiences while empowering every person and organization to achieve more. From product design through sourcing, manufacturing, delivery, and product end-of-life, we are driven to make a difference with our products both in how our customers create with them and in the impact their development has on our environment. - -- **Surface Environmental Impact** – For each Surface product we produce an ECO profile which consist of data about the environmental impact for the product. In the profile you can find the Product Carbon Footprint as well as the EnergyStar value. Taking the average values from those reports and comparing them to the average values from in market VDI desktop and VDI mobile devices. We can see some big differences. 565 percent difference in kg Co2 and a 158 percent in the energy use. -- **Surface Packaging** - Integrating sustainability into our packaging designs and measuring results is a business priority. We focus on using less packaging and selecting the right materials for the environment. We are committed to designing and delivering packaging materials that achieve measurable sustainability gains. Wood-based fiber packaging materials contain an average of 65 percent post-consumer recycled content. Packaging is 93 percent recyclable. Packaging weight is minimized. - - ![Surface ECO profiles](images/surface-eco-data.png) - -To download profiles for each Surface device, see [ECO Profiles](https://www.microsoft.com/download/details.aspx?id=55974) on the Microsoft Download Center. - -## Summary - -Cloud Desktop on Surface provides organizations with greater flexibility and resilience in meeting the diverse needs of users, stakeholders, and customers. Running WVD and Azure-based virtual desktop solutions on Surface devices provides unique advantages over continued reliance on legacy devices. Flexible form factors like Surface Go 2 and Surface Pro 7 connected to the cloud (or offline), enable users to be productive from anywhere, at any time. Whether employees work in persistent, on-demand, or just-in-time scenarios, Cloud Desktop on Surface affords businesses with the versatility to sustain productivity throughout disruptions from public health emergencies or other unforeseen events. Using the built in, multi-layered security and modern manageability of Windows 10, companies can take advantage of an expanding ecosystem of cloud-based services to rapidly deploy and scale Windows desktops and apps. Simply put, Cloud Desktop on Surface delivers critically needed technology to organizations and businesses of all sizes - -## Learn more - -For more information, see the following resources: - -- [Windows Virtual Desktop](https://azure.microsoft.com/services/virtual-desktop/) -- [Surface for Business](https://www.microsoft.com/surface/business) -- [Zero-trust security model](https://www.microsoft.com/security/business/zero-trust) - - - - ----------- - -[[1]](#) Battery life varies significantly with settings, usage and other factors. -[[2]](#) Service availability and performance subject to service provider’s network. Contact your service provider for details, compatibility, pricing, SIM card, and activation. See all specs and frequencies at surface.com. -[[3]](#) Surface Go uses third party UEFI. -[[4]](#) Hard drive is not user removable. Hard drive is only removable a by skilled technician following Microsoft instructions. -