Developing New and Af fordable Opportunit ies

for the Mobi le Workforce in a Secure Environment

2

Windowsto Go

or IT profession-als, there is an opportunity for government IT to be instrumental in

creating a modern, agile, and ef-ficient government agency. How-ever, IT professionals have great responsibility to support agency- wide success and meet federally mandated initiatives. With the launch of Windows 8, govern-ment agencies are even better positioned to be more agile, mo-bile and secure, with a platform reimagined for today’s govern-ment needs.

Advancements in technology provide opportunities for gov-ernment agencies to modernize, become more agile and efficient. These elements are essential to meet organizational demand, es-pecially as agencies operate with leaner budgets.

In the latest version of Windows everything from the system ar-

chitecture to the user interface has been transformed. This re-port highlights one of the latest features of Windows 8, Windows To Go. Windows To Go allows the Windows 8 environment to be carried on an encrypted USB key, which can be plugged into any PC to access information on their PC desktop.

This report highlights how Windows To Go helps facilitate agency continuity of operations initiatives, opens new opportuni-ties for government agencies and retains security in a mobile en-vironment to accommodate an increasingly mobile workforce.

With this feature available, em-ployees can easily access and share information on the go, and not be confined to a single desk or location to access their desk-top, and without compromising security. There are many practi-cal implications of Windows To Go. In a recent report from NSA

reviewing Windows To Go, NSA states:

“Microsoft’s recommended us-age of Windows To Go focuses on providing a managed Win-dows environment while allow-ing users to roam to different machines either in the workplace or at home. This includes scenar-ios such as managed free seating, temporary or contracted work-force, and working from home. A preconfigured and managed Windows To Go device with a Virtual Private Network (VPN) solution, such as DirectAccess, can provide a trusted environ-ment for remote access into an enterprise network.

Travel amongst sites often re-quires a user to travel with a lap-top or mobile device. Windows To Go could be used as a solu-tion allowing employees to travel lighter while still having access to their desktop and managed net-work environment.”

3

With the explosion of technological capabilities and broader consumer adoption, there is an in-creasing reliance on technology to deliver core services to citizens by government. Therefore, continuity of operations (COOP) has become in-creasingly important for the federal government. The Federal Continuity Directive 1 (FCD 1) pro-vides direction to the federal executive branch on how to best create and develop a continuity plan and program. A continuity plan is critical, as it al-lows government to continue to operate during emergencies that may disrupt normal work activi-ties. Windows To Go is one piece of technology that can help transform how governments operate during a crisis.

COOP initiatives have become increasingly impor-tant for government agencies. In todays world, hav-ing the ability for employees to access their desk-tops on any PC is essential. For many government agencies, it is now imperative that employees find a way to securely access information and resources during a crisis. Windows To Go can help facilitate an effective COOP program.

Microsoft provides a great overview of Windows To Go, and the relationship to assisting in devel-oping COOP programs is clear. Microsoft states, “Windows To Go is an enterprise feature of Win-dows 8 that enables users to boot Windows from a USB-connected external drive. Windows To Go drives can use the same image that enterprises use for their desktops and laptops, and can be man-aged the same way. Offering a new mobility op-tion, a Windows To Go workspace is not intended to replace desktops or laptops, or supplant other mobility offerings.” The end goal of Windows To Go is that it will allow government agencies anoth-er option for growing mobility trends, and work

in partnership with BYOD initiatives and telework programs.

Considering that many government computers have different versions of Windows, hardware specifications and software, it is remarkable that Windows To Go can run in a variety of different computing environments. Microsoft continues to explain what kinds of devices can deploy Windows To Go, stating, “Enterprise customers utilizing Vol-ume Activation Windows licensing will be able to deploy USB drives provisioned with Windows To Go workspace.” Microsoft states that a host com-puter for the Windows To Go environment does not require specific software. Microsoft continues to acknowledge that PCs certified for Windows 7 or Windows 8 can host Windows To Go. Microsoft provides some further details on what conditions a host computer must meet to use Windows To Go:

Computer is USB boot capableComputer is USB boot enabled in the firm-ware Meet Windows 8 minimum system require-ments Have compatible processor architectures (for example, x86 or AMD64) as the image used to create the Windows To Go workspace. ARM is not a supported processor for Win-dows To Go. Have firmware architecture that is compatible with the architecture of the image used for the Windows To Go workspace.

There are many scenarios in which Windows To Go can be used; Microsoft provides an overview of some of these scenarios. The first way is through COOP. Microsoft states:

Faci l i tat ing Cont inuity of Operat ions

4

Opening New Opportunit ies

In this scenario, selected employees receive a USB drive with a Windows To Go workspace, which includes all of the applications that the employees use at work. The employees can keep the device at home, in a briefcase, or wherever they want to store it until needed. When the users boot their home computer from the USB drive, it will create a corporate desktop experience so that they can quickly start working. On the very first boot, the employee sees that Windows is installing devices; after that one time, the Windows To Go drive boots like a normal computer. If they have enterprise network ac-cess, employees can use a virtual private network (VPN) connection or Di-rectAccess to access corporate resources. If the enterprise network is avail-able, the Windows To Go workspace will automatically be updated using your standard client management processes.

Microsoft continues to provide other examples as to how Windows To Go can open up new opportunities for agencies. Microsoft states that Windows To Go can also assist with contractors and temporary workers accessing information. Microsoft states, “In this situation, an enterprise IT pro or manager would distribute the Windows To Go drive directly to the worker where they can be assisted with any necessary additional user education needs or address any possible compatibility issues.” This would certainly be extremely helpful for workers and contractors who are highly mobile, and often on the move. Microsoft continues, “While the worker is on assignment, they can boot their computer ex-clusively from the Windows To Go drive and run all applications in that environment until the end of the assignment when the device is returned. No installation of software is required on the worker’s personal computer.”

Increasingly, government employees desire flex-ible work styles and access to information to work on the device and place of their choosing. The Windows 8 environment goes well beyond COOP initiatives and aligns with many elements of the Digital Government Strategy. With the Digi-

tal Government Strategy released by the White House, agencies are now tasked to move citizen-facing services to a mobile environment. Susie Ad-ams, Chief Technology Officer at Microsoft, recent-ly spoke with Chris Dorobek of GovLoop, Susie comments that Windows 8 can help agencies fully

5

align with the Digital Government Strategy. Susie states, “The Digital Government Strategy pushes for agencies to look at bring your own device and mobility. The directive calls for federal employees to have access to the data they need anywhere, anytime on any device.”

Additionally, Windows To Go may be an afford-able solution for many agencies to consider while adopting a mobile strategy, especially as opposed to ongoing BYOD efforts. Although BYOD cer-tainly can provide improved productivity to allow employees to work on the device of their choice, BYOD does have hidden costs.

One of the hidden costs relates to the pricing structure of wireless plans. To avoid shifting data and wireless plans to employees, agencies are be-ginning to offer reimbursements for data and wire-less. For agencies, this reimbursement rate can po-tentially be higher than if the agency were to buy devices in bulk and optimize service plans based

on employee need. With Windows To Go, agencies will already have a built in technology infrastruc-ture that provides remote work in a secure en-vironment, and will not have to worry about the associated costs of wireless and data. Likewise, to support mobile work initiatives, like BYOD, agen-cies must provide security and IT support for a variety of devices and operating systems. With Windows To Go, an employee can seamlessly con-nect to their desktop from a variety of different work scenarios, all on the same operating system and accessed securely. Windows To Go sticks can be purchased at a low rate, and avoid some of the challenges and hidden costs we have seen with BYOD.

Another instance that Microsoft identifies is tele-work, stating, “The Windows To Go drive can be provisioned for employees using various methods including System Center Configuration Manager or other deployment tools and then distributed to employees. The employee is instructed to boot

“The Digital Government Strategy pushes for agen-cies to look at bring your own device and mobility. The directive calls for federal employees to have access to the data they need anywhere, anytime on any device.”

“In this situation, you have employees who are moving from site to site, but who always have ac-cess to a compatible host computer on site. Using Windows To Go workspaces allows them to travel without the need to pack their PC.”

Susie AdamsChief Technology Officer, Microsoft

Microsoft

“Windows To Go could be used as a solution allowing employees to travel lighter while still hav-ing access to their desktop and managed network environment.”

National Security Agency

6

Improved Securi ty Features

Yet, with all these great innovations from Win-dows To Go, the core concern for any government agency is security. Retaining security in a mobile environment is a necessity to meeting organiza-tional demands. With increased collaboration and providing mobile and multiple channels to access information, agencies are faced with increased risks of government data being compromised.

Microsoft has made significant security updates to protect information, and ensure that security is number one for government employees. This is especially true with Windows To Go, Susie Adams of Microsoft states; “Windows To Go is protected and encrypted with BitLocker, so you can plug into any device that could run Windows 7, and then your Windows 8 desktop is there for you to ac-cess.”

Microsoft continues to provide insights to im-proved security features throughthe use of Bit-Locker, stating, “We recommend that you use

BitLocker with your Windows To Go drives to protect the drive from being compromised if the drive is lost or stolen. When BitLocker is enabled, the user must provide a password to unlock the drive and boot the Windows To Go workspace, this helps prevent unauthorized users from boot-ing the drive and using it to gain access to your network resources and confidential data.”

Microsoft continues, “You can enable BitLocker while using the Windows To Go creator wizard as part of the drive provisioning process before first use; or it can be enabled afterward by the user from within the Windows To Go workspace.”

Another key feature about Windows To Go is that no information can be transferred between com-puters. Susie states, “Windows To Go runs in your own sandbox, and no information can move be-tween devices, so when you shutdown and unplug, you have your desktop in your pocket.”

the Windows To Go drive initially at work, which caches the employee’s credentials on the Win-dows To Go workspace and allows the initial data synchronization between the enterprise network and the Windows To Go workspace. The user can then bring the Windows To Go drive home where it can be used with their home computer, with or without enterprise network connectivity.”

A final example is that with Windows To Go, gov-ernment employees can travel lightly. Microsoft states, “In this situation you have employees who are moving from site to site, but who always have access to a compatible host computer on site. Us-ing Windows To Go workspaces allows them to travel without the need to pack their PC.”

7

The Way Forward

For more information on Microsoft Windows 8 , p lease see the fol lowing resources :

1. Overview: Windows To Go 2. Windows To Go: Frequently Asked Questions 3. Windows To Go: Prepare Your Organization 4. Windows To Go: Deployment Considerations 5. Windows To Go: Security and Data Protection Considerations 6. Windows To Go: Best Practice Recommendations 7. Configuring Windows To Go as a Mobile Desktop Solution Windows To Go Step by Step8. How to Create a Windows To Go USB Drive9. Ask the Performance Team Blog. Windows 8 / Windows Server 2012: Windows To Go10. Security and Data Protection Considerations for Windows To Go11. How to Securely Configure Microsoft Windows Vista BitLocker

GovLoop Resources

1. Microsoft Productivity for Government2. Windows 8 Apps3. Most Anticipated Features of Windows 8

Across all areas of government, services rely on dependable and efficient technology. In todays digi-tal world, it is essential for government to have reliable systems for improved governance. At the speed at which technology moves and with height-ened citizen expectations of government, agencies need to be become more flexible and agile in tech-nology adoption.

There is no doubt that the current government landscape is complex, and contains significant chal-lenges for improved services, cost reductions and modernized infrastructure. Yet, with emerging

technology, such as Windows To Go, there is much reason for optimism that technology can enable agencies to tackle their most complex challenges. In many ways, government technology is at the core of enabling agencies to meet their agency wide objectives. As technology like Windows 8 contin-ues to evolve, it is critical that agencies adopt and modernize technology to meet the growing needs of the agency.

8Every day at Microsoft we are motivated and inspired by how our customers use our software to find creative solutions to business problems, develop breakthrough ideas, and stay connected to what’s most important to them. Check out the Microsoft Productivity for Government group on GovLoop as well as the Technology Sub-Community of which we are a council member.

GovLoop’s mission is to “connect government to improve government.” We aim to inspire public sector professionals by serving as the knowledge network for government. GovLoop connects more than 60,000 members, fostering cross-government collaboration, solving common problems and advancing government careers. GovLoop is headquartered in Washington D.C with a team of dedicated professionals who share a commitment to connect and improve government.

For more information about report, please reach out to Pat Fiorenza, GovLoop Research Analyst, at pat@govloop.com.

GovLoop 734 15th St NW, Suite 500 Washington, DC 20005 Phone: (202) 407-7421 Fax: (202) 407-7501

About GovLoop

About Microsoft