Microsoft Edge & Search | Chromium-based experiences, compatibility & deployment. (Microsoft Ignite)

(upbeat techno music) (audience applauding) – Hello and welcome to Microsoft Mechanics Live Coming up we’re joined by Chuck Friedman, the engineering leader of the Microsoft Edge team, for an update on the latest enterprise updates to Edge, including the compatibility for modern sites with Chromium, and also for legacy sites with integrated IE Mode Also we’re gonna show you your options to deploy, configure, and manage Edge installs at scale, the breakthrough security features to keep your users and data protected, as well as unique custom search experiences that are in Edge that serves up internal content for your organization front and center, above content available on the public internet using Microsoft Search So everybody please give a warm welcome to Mr. Chuck Friedman, from the the Edge team (applause) – Thank you Thank you, it’s actually, it’s awesome to be here It’s my first time on the Mechanics Stage and I’m excited to get into it – First question, so you made a really bold move going to Chromium open source project for Microsoft Edge on the desktop What was behind this decision? – So that does really cut to the chase There’s a few things that really drove this decision About 18 months ago we kicked off a set of conversations with a broad set of users We talked to end users, we talked to developers, we talked to IT managers, and we talked to educators And they came back with three very clear messages First compatibility is still an issue It’s different from the compatibility that we expected It’s not just about compatibility with the modern web, but it’s also about how the legacy web and the modern web are gonna work together Second, security and privacy is actually a growing concern, there’s real problems that we need to get after there And then finally, people are doing more and more with the web and as a result there are productivity gaps when using web technology People want to be able to assemble web content together and produce additional content, or collaborate And so this is a rich set of problems, they felt very Microsoft for us to solve And so we had a real challenge, we had to figure out how did we want to get after them – Okay, so how did Chromium then help address these types of challenges – So joining the Chromium open source project really accelerated our ability to nail the fundamentals Chromium is the defacto standard for the web, and really sets the bar for modern web compatibility Rather than duplicating the efforts to build our own version of a compatible web, we’re now able to contribute new capabilities and address a new set of needs Further, adopting Chromium allowed us to deliver a browser across platforms And this also means that we can ensure that the latest version of the edge browser is available on all versions of Win 10 And, and something that we heard quite a bit when we went out and talked to IT managers, we can deliver it on Windows Server and the LTSC And then of course the open source nature of Chromium meant, even if a user isn’t using Edge, we can actually make contributions that make the web better for everybody – All right, so let’s dive into the contributions What are some of the things that we’ve actually done to contribute to the project? – Yeah, so since announcing the project last December we’ve made over 1600 commits in a variety of areas At a high level, we sort of looked at the things that Edge did that was great, and then we wanted to bring them to the Chromium code base We’re particularly proud of the contributions we’ve made around accessibility So the in market Edge product has a perfect score on HTML5 accessibility test And we’re on path to reach the same score with the new Edge It’s been a great experience actually partnering with the Chromium engineering team and members of the project across other companies to make the web platform more accessible for everybody Just a quick example With our new contributions all text image, like you see here, will appear, we’ve also done a ton of work in areas around screen reader support, high contrast, video caption styling, smooth scrolling, and touch interaction – So it’s really great to see how the team’s addressing all these different fundamentals And all this is gonna really help with compatibility of modern sites But we’re in a pretty big room with a lot of admins I think here in the audience Not every single internal site is modern So I’ve read, actually around 60% I think have legacy co-dependencies What have we done to help there? – Yeah, absolutely So again, this is sort of the additional challenge that we found when we started talking about compatibility The new version of Edge has a feature called Internet Explorer mode, and that is designed to address this exact problem As you know IE has been in the market for over two decades, and over that period most companies have built mission critical applications that use IE technology such as ActiveX controls – Right And these apps aren’t broken, they still work So there’s lot’s of different investments that are still made in these apps But when you click on them from a modern browser a lot of times you end up popping a second window open that’s got IE 11 – Right The fundamental problem is this leaves users needing two browsers

So here I actually have my desktop showing This is a state that users often find themselves in They started out in a modern browser, in this case it was Edge And then they launched into a legacy application that actually created an instance of IE 11 running Now what I want to show And this by the way, this site is based on Silverlight, and it’s quite useful It’s the way that Fabricam, our favorite company, can schedule customer visits So I’m gonna go to that exact same website, but I’m gonna do it in the new Edge So here I am, I’m gonna go to a Fabricam portal, I’m gonna schedule a visit, an what you’ll notice is, it opens up just as you would expect it inside the modern Edge browser Frankly, the only way a user would know that they’re running IE mode is if they look up and they see the little icon in the corner – Right And one of the things, I think with emulation, emulation doesn’t work well if it’s kind of, like popping up the second window, it’s got to be fairly subtle, the user can’t know that they’ve shifted context, or rendering in this case And we’ve kept a really subtle way in terms of showing that it’s in IE 11, kind of IE mode But it’s actually still within the context of the same window, the same browser – That’s right And actually we’ve worked to make it easy for you all to set up, as well So setting up enterprise mode just takes advantage of the enterprise mode site list that many of you have already implemented And then of course there’s the big moment If I navigate away, instead of navigating within IE 11, I just navigate back and I’m still in my modern browser – Very cool stuff So all without leaving the context of Edge, you can do all of the rendering, everything you need to within the same spot Its pretty amazing, but does any site that works inside of IE 11 continue to work in the new Edge? – Yes, although it’s important to note that IE mode works on platforms on which IE 11 is supported And it might be helpful just to understand how we enable it He full IE 11 is actually running, hidden in the background, and we’re conceptually remoting the content of the tab into Edge It’s also worth noting that we’re putting our money where our mouth is on this one We’ve announced the Microsoft Edge App Assure program as part of Microsoft FastTrack If you’re an E3 or E5 customer, and your site runs on IE 11, we promise that it will run on the new version of Edge If it doesn’t, and it’s a product problem, my team is committed to fixing it And if it’s an issue with the app a Microsoft engineer will come and help fix the app so that it just works Ultimately we want you to have the best modern web while being able to migrate your legacy sites forward, but on your schedule – Okay, so we’ve addressed compatibility With some of the IT admins, I think that are watching, why don’t we switch gears to Edge deployment, something I’m really fond of What’s new there? – So, this is your area of expertise and I’m gonna rely on that in a second Our goal is to make Edge the easiest Browser to deploy That’s why we support all the common operating system platforms, and why we’re making it easy to manage Edge across all of those, as well As you might expect we support Windows group policy templates, the Mac OS templates, and a variety of management tools But really this is your area of expertise and I’d love it if you’d just show everybody how it works – All right, so great So I’m gonna go and I’m gonna show you, kind of the things that you can do here, real quick So we’re in System Center Configuration Manager Just to note I’m on 1906 at the moment In 1910 TP it’s even easier than what I’m gonna show you here It’s just an MSI, so you can use standard MSI exec commands So I want to show you a couple of packages, there’s both a 32 and a 64 bit native package If you go to the requirements and look at the operating system type, this is where it gets interesting because you can target all these different versions of Windows So right now we see that we’ve got Windows Server 2019, 2016, 2012 R2 We can even target things down to 2008 And even Windows 10, 8.1, and Windows 7 all with the same package The nice thing is I can deploy, and I can set up my packages and get it to all these different machines, but it gets even better than that Because if you’re using Intune, and I’d encourage everybody to set up, kind of cloud attached management between Config Manager, and Intune The nice thing is with your apps there it’s even better than you probably expect So if you go into your apps view Now normally, and you’ve maybe done this with Mac OS, you have to take the pkg file, convert it to a .intune Mac file, then import it into Intune and use the Mac actually as the conversion mechanism Here it’s so much easier So I’m gonna go ahead, and I’m gonna go into apps in the Mac OS, and I click and add a Mac OS app And the cool thing is, it’s just right here as a normal Mac OS preview right there You don’t have to worry about doing anything it’s already packaged up for you, in the right format, no extra work to be done The nice thing is, also if you want to deeplink or deploy from things like Google Play for the phone based apps, or the app store for iOS, those can be done through Intune, as well, super easy

And also if you’ve got other MDM solutions or systems management tools, it’s an MSI, all those will work as well, to deploy Edge So where ever you’ve go it, whatever tools you have, they will just work – And again, we’re really are trying to nail all the fundamentals to make this easy So we’re trying to address compatibility, we feel good about the number of operating systems we’re gonna be delivering on We feel good about, sort of the unique capability we’re adding with IE mode But when we talk to customers we often reach this moment and they say, okay, we kind of get what you’re doing, but the legacy stuff is sort of going away What is it that you’re going to do that is new and different, and where are you going with Edge? And frankly, we asked ourselves that same question when we started the project, and we came back to those other conversations we had with customers, the meaningful next set of problems the users are facing Things like security and privacy, which are growing And then really, how do we make productivity for the web world class? And we love those kinds of problems at Microsoft – Right, so can we drill more into the things that we’ve done in terms of making this version of Edge even better in this case – This won’t surprise anybody, but let’s start with the area of security, compliance There are many facets to this problem, and we’ve thought about four primary attack vectors The user, the browser, the corporate network, and corporate data And we’re building solutions across these vectors holistically So let’s take a look at a couple of examples To begin, we’ve integrated Microsoft Defender smart screen across all platforms, which has industry leading protection and keeps users from accessing malicious sites And yes, you get to look at this lovely red screen when you run into a site that could be a challenge We received literally trillions of signals through the Microsoft intelligent security graph, and use that intelligent to protect each and every PC running Edge Next we have Application Guard for Edge, which uses virtualization based security to run the browser in an isolated container And what runs in the container, stays in the container, neutralizing the threat – Right So as an admin, if you haven’t set this up, it’s really easy because in this case a site that’s trusted, if it’s not trusted I’ll say, we’ll assume that it’s gonna be bad So why don’t you show us what it looks like in case of Application Guard – Okay, so here I am as a user I’m gonna go into a site called Spikes and Valleys, this is a website where you can buy camping equipment Now there’s nothing wrong with this site in particular, but it’s not something the IT manager necessarily would have known to list as a trusted site So it automatically opens up in a container And I can tell I’m in that container because if I click up here I see that I’m in Application Guard So if this site did contain malware, then it wouldn’t have had an impact on the system, or frankly any of the network data We are so serious about this, that this is another place where we’re applying a bounty program So there’s a bounty of up to $350,000 if you can break through this And of course the promise that we’re making is because everything is running in an isolated container, we’re protecting your network, and your corporate data as well – Right And with Application Guard, all the settings can be enabled like you can see here with group policy So everything that you’d kind of expect in terms of how to configure it and what cases to open up Application Guard, that can be configured here And also, again kind of back to our MDM points, also through cloud or CSP files, you’ll be able to deploy those policies over things like Intune as well But there’s a big connection I think between security and privacy So why don’t we talk about what we’ve done in terms of amplifying privacy – Yeah, absolutely So modern browser uses a lot of services to enable it’s functionality, and Chromium of course is no exception One thing that we did was to disable all of the services that were natively built into Chromium, and we replaced them with services that need Microsoft’s services agreement For example, users expect a browser to sync across devices, but we know that it makes many of you as IT managers nervous Basically what we’ve done is make it easy for a user to log into any device with their AAD account, synchronize password, form fill data, or tabs, but we store all of that information in Azure And as a result it conforms to the policies that you have as your tenet, and you end up being in control So if you feel good about keeping your data in Microsoft 365 or Azure, you should feel great about your users using Edge – Right So okay, so we’ve covered compatibility now, manageability, security, compliance, privacy We made a lot of these controls and the things that we’ve done for admins, but what about end users? We kind of started with all the admin stuff, have we made it better to browse the web and use it in terms of all the time that people spend normally in the browser for end users as well? – Yeah, this is the needle in the haystack problem that I mentioned earlier, and I’m actually super glad you asked about this After talking to Enterprise customers

we found this problem of users not being able to, they knew the content was on their websites, but they couldn’t get there And so we went out and researched it and found that, now it turns out people want their intranet to work more like the internet But of course there’s security risks, and it hasn’t been easy to set up So we really focused on solving that problem In general, people spend time searching for corporate information or tools, and so we’ve integrated that into a very familiar UI, a new tab page, and then we’ve created a search that works not just against the internet, but also the corporate intranet The goal is getting the user to what’s next And so we’ve incorporated the applications that you may have wanted to set up We’ve brought the Microsoft graph information to the site And then I’m gonna go into search and here I’m gonna search again Not just the internet, but also the intranet So, first search I’m gonna do, let’s say I want to take vacation time So I type in vacation – [Jeremy] Always a good topic – [Chuck] Always a good topic All right And what you’ll see is a set of results at a very obscure URL that will get me to the corporate vacation site – [Jeremy] But it gets even better – [Chuck] It does get even better So let’s say I’m looking for a file about marketing – [Jeremy] Everybody looks for files about marketing, but let’s have a look – [Chuck] And what you’ll see is, it actually brings up a set of files that are available to me, and only me, on the intranet – [Jeremy] Intranet, yes – I can’t get information that I shouldn’t be able to get to, from the intranet – [Jeremy] Right – And then, finally, and I end up using this one quite a bit at work, I’m gonna do a search for a colleague I’m gonna go search for the famous Adele – [Jeremy] And no one knows this, but Adele actually works at Fabricam – Yes So if you look, I have Adele the internet star, but then I have Adele Vance, the internal retail manager, who is also a star, and I can get to all of her information Her organization, the files we might be working on together And then of course, what’s super cool, as I’m walking to her office and can’t remember where she’s located, I can do that same search, phone – [Jeremy] All right, let’s find Adele – [Chuck] And there she is We’ve got Adele – All right, and Adele comes up, same Adele Vance Nice thing is, we’re logged in to both the instance that’s on the PC and the phone (applause) All right Not bad, this is working on Android, iOS, very cool stuff But you get to have the same experience across devices – Yeah, and the cool thing is you don’t have to go to a company portal to get to the information, you just go to the search box and operate the way that a user would expect to – Right, and the integration there is awesome, but I want to go and geek out on the admin side again – You go (laughs) – If you want to actually get all this stuff set up, so basically I’ll switch over from Intune back into Microsoft 365 admin portal Everybody knows this location So if you go into settings, you can go into Microsoft Search, Microsoft Search has it’s own admin center experience Just to show you a couple of things we actually do is, we kind of start you out and help you in terms of getting something set up so that search works once you’ve turned on and configured it Now if we go to suggestions, the nice thing is we’ve actually taken and made 17 suggestions, edit HR, and I’ll show you that in a sec But all the suggestions for common Enterprise searches that people use Now I’m gonna go ahead and show you something that I just configured on Sunday So if you go into published and I click on HR, here’s what you configure So you can see that tile like we saw in Chuck’s screen earlier, that we see as part of a search The different keywords So people will search for things like HR, W2 You can do different languages (speaks in foreign language) And all these things that we have in German And I can also target to the right groups, the device types, the PCs, platforms One of my favorite things is PowerApps, I can even expose a PowerApp For example, if I want to book time off, I can do that straight from here So it’s super easy to set up, and I’ve got, kind of the search experience set up, like we saw on Chuck’s machine, just in a couple of minutes, and it actually works instantly once you set this up and configure it – It’s worth noting, one of the beauties of Microsoft Search is that, when users are searching within your corporate network, all that information remains yours Nothing goes beyond your boundary – Really great experiences, really extending across the different platforms, the devices, and the apps It’s really true for a Microsoft Search, as well as the new Edge browser, so really god stuff here – Yeah, and of course there’s a ton more that we’d like to show you But even more important, we want to hear from you Our goal is to make Microsoft Edge, and Bing, the browser, and search engine, for business So our request is, please join the Edge Insider program, and give us your feedback You can get to us at aka.ms/edgeenterprise And then you can see everything that we’ve documented and presented today at that site And then finally, to learn more about how to deploy, go to aka.ms/deployedge

– And again, if you’re using Microsoft 365 you can enable Microsoft Search just like I showed from the admin portal, you can try it out, kind of expand it over time to more users, more devices And of course you’re gonna want to keep watching Microsoft Mechanics, and follow the latest updates that we have beyond the documentation that’s here And thanks for watching, everybody We’ll see you next time, good bye for now (applause) (upbeat techno music)