Mobile Data Security Blog

Home  »  Posts tagged "Windows To Go"


Introducing IronKey Workspace W200 – Affordable and Secure Windows To Go


W200 – The Basics

This morning we introduced the IronKey™ Workspace W200 – our most affordable Windows To Go device to date. The W200 is a USB 3.0 SuperSpeed Windows To Go device in a new lightweight ruggedized design. The device comes in black, includes the always present IronKey LED that signals when your device is running, and provides a loop so you can add to your keyring or a lanyard. Like all IronKey devices the W200 is waterproof, shockproof and meets MIL-STD-810G test specifications like its siblings. The W200 has excellent performance clocking Max Read speeds of 310MB/second and Max Write of 159MB/second.  I’ve compared this to my everyday W500 and don’t see any noticeable lag. Like all IronKey Windows To Go devices the W200 is Microsoft Certified and Windows 10 Ready and can be used with all IronKey deployment tools including our mass Provisioning Tool or scriptable Command Line Utility. The W200 allows for usage of Bitlocker To Go encryption so you make use of all your Microsoft skills in creating and protecting your mobile workforce.  The IronKey Workspace W200 devices are available now through our partners, starting at $96 for a 32GB device.

Top Use Cases

Where is the volume? The largest deployments of IronKey Windows To Go are coming from two types of customers. The first are those who have been saving money over deploying new hardware to employees and contractors. Telefónica Deutschland recently noted a savings of 2,500 Euros (USD approx. $2800) on hardware over a three-year period – and they’re not alone. We’re seen many organizations find they can buy 10-20 W200 devices for the price of a single laptop.

The second use case we’re seeing in volume is the “secure container” where IT is leveraging Windows To Go for consistency and security. Here how it works with VDI/VPN and Remote Workers – IT creates a Windows image that contains Windows OS, all the software to VPN in, the Citrix Receiver or VMWare Player and any security software they might need and hand those out to employees and contractors. Why? Well, the biggest answer is saving time and money for IT as it reduces support calls from users who have trouble and call in from home machines. In addition employees like it too – no longer are there the hassles of security scans and the perception of IT invading the home machine – just plug-in, boot and go.

What’s Next?

Keep an eye out on our website for some updates that I think you’ll really like.




Microsoft Licensing for Windows To Go – You Can Deploy It Now!



In my last blog post Ready for Windows 10? IronKey Windows To Go is Windows 10 Ready, I mentioned that I would cover Windows To Go licensing.  In this blog post, I’ll review three key points that I often cover for our customers when asked about Microsoft Licensing.

The key takeaway is that if you have a Volume License, you probably are already able to deploy Windows To Go today.  Now lets’ review those three key points: 


1.   Windows To Go is a “benefit” of Software Assurance

When you purchase a Microsoft Volume License, which most companies do for the cost savings over time, you either receive Software Assurance by default with all Enterprise Agreements (EA) or may purchase it as an addition. What I’ve learned after many conversations is that most SMBs and Enterprises already have a Volume License and more often than not have Software Assurance associated with it.

If you fall in to this category, then you’re all set. You can use the Windows To Go Creator included with your Enterprise Windows 10 or Windows 8 OS, or take advantage of IronKey’s mass provisioning tool or scripting capabilities for provisioning many devices.


2.   Not sure if you have a Volume License? It is easy to check.

You may be part of a company where you do not purchase your Microsoft licenses so here is what you can do. The first stop is to just check the operating system on your current PC by going to Control Panel, System and Security, and looking at the System details. If you have Windows 8/8.1 Enterprise, Windows 7 Enterprise, or Windows Vista Enterprise your company probably has an EA and therefore Software Assurance so you can go ahead and create IronKey Windows To Go devices today.

If you have other OS types like Pro, Professional, Ultimate or Business you may have a Volume License that allows it but you’ll want to ask. Your first stop is to ask your IT folks if they know, and if not, you can always track back to your reseller and ask for your companies Microsoft Licensing Agreement which will include what you need to know.


3.   Did anything change in Windows 10?

In terms of Windows To Go as a benefit of Software Assurance (and EAs)—  no change. The change that is coming with Windows 10 and Enterprise agreements is that Microsoft is making a new selection of features available only to purchasers of EAs and so I expect that we’ll see more people purchasing it over time. Some of the new Enterprise features will be fairly desirable—such as Long Term Servicing Branch will allow some PCs to remain on a stable OS for long periods of time (think kiosk) as is covered in Windows 10 for Enterprise blog post by Jim Alkove. Additionally there are a lot of new benefits to Software Assurance (as covered well by ZDNet here) such as the inclusion of Microsoft Desktop Optimization Pack (MDOP) and the of App-V functionality. As you’d expect, more features equal a higher price (making up for all the free Windows 10 upgrades Microsoft is providing to consumers) so we’ll see how it all shakes out.


IronKey’s Windows To Licensing Guide

I made a  WTG licensing reference guide that our team has found useful in addressing the many questions that arise out in the field.  Check out the licensing guide and feel free to email me with any questions you might have or alternatively you can reach out to your local Microsoft reseller for details specific to your situation.


In summary – you’re Windows To Go ready!

You’ve probably have the license you need so there is no reason to not try it out today. We’ve got a large number of customers providing Windows 10 to a portion of their workforce today using IronKey’s Microsoft Certified Windows To Go devices.




Ready for Windows 10? IronKey Windows To Go is Windows 10 Ready


Windows 10 is just around the corner— with Terry Myerson announcing on Blogging Windows that Windows 10 Enterprise will be available to Volume Licensing customers beginning August 1st. The release of Windows 10 appears to be one of the most exciting releases for enterprise customers with a long list of compelling new features for security, update, and management flexibility. There are lots of good posts out there detailing predictions on what will be delivered in Windows 10 Enterprise, but in tandem with end user experience updates like the return of the Start Menu, this is the version of Windows we’ll all standardize on over time.

Windows 10: Go Ahead and Give it a Try!

Windows To Go remains a bright spot and as a key benefit of Software Assurance (and VDA licenses), the momentum will continue. As we announced at Microsoft Ignite, IronKey Windows To Go devices are now fully ready for Windows 10!  So what exactly does that mean?  If you have an IronKey Windows To Go device, you can install Windows 10 now.  Whether you’re testing builds from the Windows Insider Program or waiting for the first releases on August 1, IronKey’s Windows To Go devices can be deployed straightaway. We’re using our IronKey W300 and W500 devices to explore and test Windows 10 functionality for ourselves so feel free to give it a try.


If you’ve purchased our Mass Provisioning Tool and our scriptable Command Line Utility to produce many devices simultaneously, we are currently testing in this environment and will provide more information as we learn more. To date, the only restriction we’re seeing is that you’ll need to build Windows 8.1 devices from a Windows 8.1 PC, and Windows 10 devices from a Windows 10 PC.   From our testing efforts, and as we make use of the Windows DISM for some operations, we are seeing a need for version consistency with the current version of our tools. We’ll continue to investigate in order to make any updates as our testing proceeds. 

In short, IronKey Windows To Go is ready for Windows 10.

Haven’t Experienced Windows To Go? 

For those who haven’t yet experienced Windows To Go and want to give it a try, we’re offering a Windows To Go Intro Kit on our eStore.   Each Windows To Go Intro Kit features a 32GB IronKey Workspace W300 device with a 90-day trial version of Windows 8.1 pre-loaded, a right-angle USB adapter, and an IronKey lanyard for $89.00.  To purchase, visit IronKey eStore.  The kits will soon be available with Windows 10. 

Need to Learn More About Microsoft Licensing?

On an additional note, I’m often asked about licensing Windows for Windows To Go so I will be covering that in my next blog post. Here’s the simple summary— most Volume License holders have Software Assurance so they’re ready to deploy. If you’re not sure, I’ll be covering licensing in detail next month so please check back with us.  


SE Diaries: My Own Use Cases for Windows To Go

Our special guest blogger is Matt Drake, an IronKey sales engineer, who joined the company in 2013. 

As an IronKey™ sales engineer covering Asia Pac, I am always on the road constantly relying on my Windows To Go device. While my corporate laptop is my primary machine, I never leave home without my IronKey Workspace W500 64GB setup. This device allows me to utilize any Windows compatible PC as my corporate desktop. The separation of hardware and software components opens up a lot more flexibility for how people can consume IT.  My IronKey flash drive acts as my second work PC and personal crisis solution.

I have had the misfortune in the last six months with having two significant IT issues; both taking several days to resolve. Despite being a home-based worker who travels regularly (with no IT department at the end of the corridor to leap to my rescue), in both cases, my down time was minimal.

 A few months ago, I fired up my laptop and found it was unable to connect to any network, wired or wireless. So what did I do? I simply grabbed my W500 and booted my “broken” laptop into Windows To Go. Bingo. Everything worked as it should. This had the double advantage of proving the issue was software related, helping speed up the resolution, but more importantly, allowing me to carry on until our support team implemented a solution.

 Then, a few weeks later I had a laptop screen failure. Yes, this was fixed a day and a half later by the hardware vendor’s onsite support, but without my Windows To Go device as a backup, I would have been limited to using my laptop at home with a desktop monitor. Not great if you have to do customer visits. Instead I borrowed my wife’s MacBook and took that to the meeting, booting into my Corporate Windows desktop using my W500.

Fortunately IT failures are not regular events. They do happen, and often at the most inappropriate moments. Having a Windows To Go device in your pocket or brief case can save your bacon. I make sure I use mine fairly frequently so mail does not get too out of sync and Windows updates are not too far behind. I also use a real-time backup service on my primary laptop. The syncing of documents to either a cloud service or corporate file share not only provides a backup, but is also helpful for accessing data across multiple devices.  

Another key use of Workspace devices is to test software. When Microsoft released the Windows 10 Technical Preview, they stressed that it should not be used as a primary device. As a home based worker I have limited additional hardware to test software – no problem. I installed Windows 10 onto an IronKey W300 Windows To Go device. Adding Microsoft Office makes it a useable tool for most of my work, so I can happily explore this exciting new OS, safe in the knowledge my “real” corporate desktop is a quick reboot away.

 This is how I use Windows To Go to help me be more productive. What about you?


The Problem With BYOD (Computers)

Sure, everybody is excited about BYOD. You can use your personal phone to make business calls and read your corporate email. But the real cost savings for BYOD is “bring your own computer- BYOC”. There is no need to purchase, maintain, and upgrade computers; we just let the employees do that.

But wait; there are two BIG issues with Bring Your Own Computer.  The first is an IT issue. The IT team has to install applications, security tools, and management software onto each employee’s laptop. That means IT has to support a range of computer types (including Macs) and OS versions, and deal with incompatible applications running on the employee’s personal device.

The second issue is all about end-user satisfaction. I can hear the screaming now.  “What do you mean you are going to install monitoring software, file scanning, corporate applications, and Internet proxies on MY PERSONAL COMPUTER??   How much space is that going to take? Does this mean Corporate can see my personal files?” My users will rebel.

Good news for IT and the end user –  both of these issues can be easily addressed with Windows To Go.  Let them use their personal hardware – Macs, PC laptops, tablets – but have them run their corporate workspace from an IronKey ”PC-on-a-Stick”  Windows To Go USB flash drive. They run IT’s corporate Windows image with locked-down security controls and policies, applications, and data, but IT never touches their personal hard drive. Complete isolation between work and personal environments!

If you want happy employees, let them use their personal PC, but have them use an IronKey Windows To Go drive and don’t touch their personal system.  This is truly win-win. IT saves a boatload of money and users have a portable corporate workspace they can plug into their personal laptop, a home computer, or a computer they borrow at work.  When was the last time you rolled out a major cost savings initiative and got happy users at the same time! BYOC – bring it on!


The Cost of Cybercrime


Hackers are holding the world to ransom with cyber-attacks costing the global economy more than £238 billion a year¹. These attacks damage the global economy almost as much as illegal drugs and piracy, with financial losses from cyber theft resulting in a potential 150,000 European job losses.¹ Cybercrime is a growing menace which is proving to be an ever growing challenge for individuals and businesses. US retailing giant Target saw its earnings drop 46% after an attack that leaked more than 40 million customer credit card details², whilst eBay and Office have also been ‘hit’ this year, with customer data compromised.

Despite these devastating implications, the public, corporates and their employees continue to be careless with their valuable and highly confidential data –residing on laptops, tablets and mobile devices. Cyber espionage and theft of individuals’ personal information is believed to have affected more than 800 million people during 2013¹, and our mobile working culture has made data security an even greater challenge.

With IDC estimating that over one million smartphones were shipped last year³, someone somewhere in your company is using a personal, mobile device to connect to a corporate network and download sensitive data – making your organization a sitting target for cybercriminals. Companies must equip their employees with the means to protect corporate data from threats such as identity theft and cyber espionage, whilst mitigating the dangers associated with unsecured devices and free Wi-Fi hotspots.

Mobile devices need to maintain the same high levels of security as office-based desktops and servers, with only IT provisioned laptops or tablets connected to corporate networks. But, the best way of ensuring hackers can’t gain access to your company data, is by storing all your data on a secure fully encrypted Windows To Go USB flash drive. It provides employees with an IT managed and provisioned Windows workspace that replicates their secure office desktop environment, on any device that the USB is plugged into. This also means IT departments do not need to deploy individual computers but rather can deploy the Windows To Go workspace on USB drives which saves time, resources and introduces vast cost savings.

Staff awareness plays a crucial role in protecting the company network against cybercrime. Often under-estimating the inherent security risks of using personal devices in the office, employees must be educated to handle these responsibly – on a proactive, ongoing basis rather than waiting until a security breach occurs, when it’s too late.

With so many high profile security breaches making the headlines, organizations want to know that corporate data is secure at all times, regardless of where it resides, whilst employees need the flexibility to work remotely. Cybercrime can have a devastating impact on your business in terms of cost and reputation. Your organization can’t afford to be tomorrow’s headline…



¹McAfee report, June 2014 – Net Losses: Estimating the Global Cost of Cybercrime


³ International Data Corporation (IDC)Worldwide Quarterly Mobile Phone Tracker, Jan 2014








Computer Breakdown – How My Windows To Go Drive Came to the Rescue


You know I’m a fan of Windows to Go . There are so many benefits it is hard to describe them all. The other day I was attending a tradeshow in San Francisco, staying in a swank hotel overlooking the bar next door. I brought my laptop so I could work in my room, but as you might imagine it was running from my PC on a Stick. The laptop was just my workhorse. After dinner, I headed back to my room and powered up the PC, and… NADA! It went part way through its boot sequence and then froze. I rebooted multiple times, pulled out the power supply, even did my reincarnation voodoo dance, but all to no avail. Of course I needed to urgently update a slide presentation before an analyst meeting in the morning – what was I to do??

I was at the show with one of my sales guys, and I knew he would be out drinking most of the night. I quick texted him and got him to drop off his laptop before he headed out. He mumbled something about not wanting to give me his password but I assured him it was not needed – I wouldn’t touch the hard drive on his precious laptop.

I plugged in my USB drive, booted his laptop, and up came my workspace, including the not-yet-completed slide presentation.

“Cool! I’d like to know how you did that, but I’m just a salesman. Also, I’ve got to have that laptop back in the morning without your stuff all over it,” he said.

“No worries, all my work goes into this little PC on a Stick.” I replied with a smile.

Well, the next morning I returned his laptop unscathed, met my colleague, borrowed his laptop to boot my WTG device, and walked him through the presentation. He was so enamored with my WTG drive that he hardly paid attention to my presentation but promised he would give me a very favorable write-up.


Day One IT Integration for Mergers Using Windows To Go


A good friend of mine heads up IT for a successful Silicon Valley networking company. I met him for a beer recently and he looked as down as I’d seen him when his company was dealing with the Heartbleed issue. His company had just gone through a painful acquisition of a global high tech company and he was responsible for ensuring a smooth day one transition. As you know on the day of the acquisition, all the new employees need to have email access, intranet access, connections to corporate servers, VPN access, corporate wireless etc. They also need to continue accessing their existing services to make sure there is no disruption of the business. It can be an IT project management nightmare and my friend had miraculously pulled it off without a hitch.

“Why so blue, Superman?” I asked. “I hear you are the hero of IT!”

“Yeah, but guess what? We just announced another acquisition with 1000 employees, and this one closes in 6 weeks!” he replied. “Never fear, my friend. Let me buy you another beer and introduce you to my workspace in a pocket, PC on a stick,” I said with confidence.

I proceeded to lay out the following plan. Suppose you configure 1000 Windows To Go devices that provide all the applications, access tools and rules, and even personalized documents welcoming each new employee. Then on day one you welcome everyone to the new company and hand them their Windows to Go devices. They plug these into their existing work computers and, voila, they are fully operational on their new corporate systems. But they still need to access their old systems to do their day job. So, you unplug your PC on a Stick™  device to access your old system and plug it back in to access the new. Now, IT can do a step-wise conversion of groups and departments over the next weeks and months starting with the highest priority groups.

“I’m buying the beers…” he replied as a grin came to his brightened face. “This hero stuff is getting easier all the time!”


Secure Mobility Face-off: Windows To Go vs. Laptop and VDI

BYOD is a game changer for the mobile workforce, and IT leaders are waking up to the opportunity.

One case in point: State Tech reported that Fairfax County, VA is issuing Windows To Go drives to employees who work remotely, “improving productivity and reducing the number of employee-owned PCs that IT must support.”

“There’s nothing to install or configure. Employees simply plug the drives into their Windows 7– or Windows 8–compatible PCs or other devices, connect to the county network via a virtual private network, and work anytime, anywhere.”

Microsoft’s Windows To Go – an enterprise feature of Windows 8.1 – is a simple, cost effective way to liberate the corporate desktop from any single device by placing a full version of Windows 8.1, applications, security tools and policies onto a secure USB 3.0 stick. Employees and/or contractors now can work securely on most any laptop or tablet with a USB port.

Imation™ was an early proponent of the mobile USB workspace, so it’s gratifying to for us to see the growing excitement and adoption of Windows To Go among both enterprise and government organizations. As we meet forward-thinking IT leaders at seminars, trade shows, events around the world, it’s increasingly clear that Windows To Go represents an exciting and pragmatic new way to work for teleworkers, contractors and road warriors – and even students and teachers.

IT needs to keep evaluating new ways to increase security, manageability and flexibility for a mobile workforce while managing costs. In this context, we’re hearing from customers that Windows To Go delivers advantages over laptops in five key areas, as illustrated in our infographic, below:

  • Cost – The Windows To Go drive can be the D in the BYOD strategy, costing 1/5 to 1/10 what it would cost to deploy a laptop – a benefit for BYOD strategy and easing replacement costs for lost or stolen drives.
  • Security – The Ponemon Institute reports that only 31% of lost or stolen laptops were enabled for encryption. Standardizing on a Windows To Go certified, hardware encrypted USB 3.0 drive dramatically improves security from data breaches.
  • Manageability – Windows To Go lets you centrally manage the OS just as you do with laptops. In addition, innovations such as the IronKey Enterprise Service add the ability to track Windows To Go drives and do remote wipe or remote detonation if they are lost or stolen.
  • Deployment – Windows To Go drives are easy to deploy, lightweight to carry, and less costly to ship. And with provisioning tools, even hardware encrypted drives can be deployed centrally by the dozen.
  • Resilience – IDC report that 86% of organizations have had laptops lost or stolen, and more than half of those reported a security breach. A ruggedized, hardware encrypted drive like the IronKey Workspace W500™ resists both physical damage and physical tampering, and is useless to a thief if lost or stolen.

Of course, you can’t use a Windows To Go drive without a laptop. But when the work environment is on the move and BYOD is changing the rules of the game, Windows To Go delivers for IT and employees across multiple fronts.

We plan go into each of these advantages in more detail on the IronKey blog over the next few weeks, so watch this space. Comment below to share your thoughts in the meantime.

And if you want to learn more, download our latest whitepaper, an in-depth look at how organizations can use Windows To Go to empower and secure the mobile workforce.

Infographic Image


Sochi Games and Windows To Go – BYOB — Bring Your Own Burner

With reporters just starting to show up at the Sochi Games, their horror stories are emerging on everything from yellow drinking water, poisoned dogs and roofless hotel rooms to a hacker heaven. Digital connectivity and security are going to be hot topics and major issues during the Games. The IronKey Workspace™ for Windows to Go, a PC on a Stick™, is a great solution for anyone traveling to Russia. Here’s why:

Russia has LAWFUL interception of ALL communications. There is ONE network, completely government controlled. What this means is, if you want to be online — unless you are working on a highly classified government network from your country of origin — you WILL be monitored and almost certainly hacked.

Even if you have a VPN, the Russian network will own your PC, your credentials, your certificates, etc. So you’re toast.

But you have to be connected and get work done. What do you do?

Take three things on your trip:

  • IronKey Workspace W500™ for Windows To Go, with your needed applications and public files. You can plug the Windows To Go drive into almost any computer, work solely from the USB stick and not leave a trace behind.
  • Laptop, with the hard drive either disabled or removed (just to be safe)
  • Burner cell phone – buy with cash.

The good news is you can be connected this way without digital harm. The bad news is that, while you’re in Russia, you’ll have to assume all of your communications are public and not secure.  But you can stay completely connected, be productive, and still be safe when you return home.

While in Russia, you can use Windows To Go in your laptop, do all your work with your regular applications and stay connected to home base. The Windows 8.1 operating system you load on Windows To Go must contain applications and files that are not sensitive, because once you log on to the network, you need to assume anyone can see them and know it’s you. Same thing with when you use your cell. Even burner cells can be traced and triangulated. Just ask the DEA.

Once you get home, have IT re-provision your Windows To Go device. Or do it yourself. Load up all your applications and files, including all the sensitive ones. Windows To Go can be used again, completely securely in other countries. You can use it with your regular laptop or the drive-less one you got for the trip. Destroy the cell just like in cop shows.

Bon voyage!