Presentation Slides

advertisement
IT Series - Deploying Windows 7
with Free Tools
Donald Hester
October 14, 2010
For audio call Toll Free 1-888-886-3951
and use PIN/code 874614
Housekeeping
• Maximize your CCC Confer window.
• Phone audio will be in presenter-only mode.
• Ask questions and make comments using the chat window.
Adjusting Audio
1) If you’re listening on your computer, adjust your volume using
the speaker slider.
2) If you’re listening over the phone, click on phone headset.
Do not listen on both computer and phone.
Saving Files & Open/close Captions
1. Save chat window with floppy disc icon
2. Open/close captioning window with CC icon
Emoticons and Polling
1) Raise hand and Emoticons
2) Polling options
IT Series - Deploying Windows 7
with Free Tools
Micah Orloff
Donald E. Hester
CISSP, CISA, CAP, MCT, MCITP, MCTS, MCSE Security, Security+, CTT+
Director, Maze & Associates
University of San Francisco / San Diego City College / Los Positas College
www.LearnSecurity.org
http://www.linkedin.com/in/donaldehester
http://www.facebook.com/group.php?gid=245570977486
Email:
DonaldH@MazeAssociates.com
What we will be covering









8
Microsoft Assessment and Planning Toolkit (MAP)
Microsoft Application Compatibility Toolkit (ACT)
Enterprise Learning Framework (ELF)
Microsoft Deployment Toolkit (MDT)
Microsoft Desktop Optimization Pack (MDOP) for
Asset Inventory Planning
MDT Deployment Workbench
Windows Automated Installation Kit (WAIK)
User Settings Migration Tool (USMT) 4.0
Windows Deployment Services (WDS)
Deployment Lifecycle
9
10
Tools Used to Support the Planning
Phase
Microsoft Assessment and Planning
Toolkit (MAP)
Microsoft Application Compatibility Toolkit
(ACT)
Enterprise Learning Framework (ELF)
Microsoft Deployment Toolkit (MDT)
Microsoft Desktop Optimization Pack (MDOP) for
Asset Inventory Planning
System Center Configuration Manager
2007
P
L
A
N
Tools Used to Support the Building
Phase
B
U
I
L
D
MDT Deployment
Workbench
Windows Automated Installation Kit
(WAIK)
User State
Migration Tool (USMT)
Tools Used to Support the
Deploying Phase
DEPLOY
MDT Deployment
Workbench
Windows Deployment
Services (WDS) 2008
System Center
Configuration Manager 2007
User State
Migration Tool (USMT)
Microsoft Assessment and Planning
Toolkit (MAP)
14
MAP
 Deployment Readiness
• Secure and Agentless Inventory
• Comprehensive Data Analysis
• In-Depth Readiness Reporting
 Software Usage Tracker Feature
• Provides software usage reports
• Software by user/device
• Inventory
• License Compliance
15
MAP Secure Agentless Inventory













16
Windows 7
Windows Vista
Windows XP Professional
Office 2010 and previous versions
Windows Server 2008 or Windows Server 2008 R2
Windows Server 2003 or Windows Server 2003 R2
Windows 2000 Professional or Windows 2000 Server
VMware ESX
VMware ESXi
VMware Server
Linux variants
LAMP application stack discovery
SQL Server 2008
In-Depth Readiness Reporting
 Current software, hardware and
migration recommendations to:
• Windows 7
• Windows Server 2008 R2
• Office 2010
 Virtualization reports
• Possible server consolidation
• Migrate Linux to virtual environment
17
Microsoft Application Compatibility
Toolkit (ACT)
Version 5.6 has support for migration to Windows 7 64-bit
18
ACT Reports
19
Detailed Reports
20
Enterprise Learning Framework (ELF)
 Developing a training and
communication plan helps with:
• Raising Awareness
• Minimizing Disruption
• Shortening Training
• Gaining Productivity
http://www.microsoft.com/technet/desktopdeployment/bdd/elf/Welcome.aspx
21
22
Microsoft Deployment Toolkit
Microsoft Deployment Toolkit 2010
Lite Touch
•Aligns with ConfigMgr
•Evolutionary refinements
•Adds server support
•Upgrade from BDD 2007 and
MDT 2008
Zero Touch
with Configuration Manager 2007
•Fully integrated experience
•Single console
•Adds server support
•Extends and enhances ConfigMgr
2007
Leverages core deployment tools
Provides process and tool guidance
MDT 2010
Windows 7 and
Windows Server 2008
R2 Support
Deployment Workbench
Architecture
Enhancements
Script Architecture
Enhancements
Documentation
Improvements
• Add support for the latest operating systems
• Use the latest tools
• Enable new scenarios
• Improve administrative processes
• Support more than one user
• Enhance automation and extensibility
• Task Sequence & Script Enhancements
• Improve diagnostics and logging
• Better error reporting and recovery
• Make scripts as easy to follow as possible
• PowerShell Capabilities
• Continue to simplify documentation
• Cross-linked content
• Cover both the “why’s” and the “how’s”
What’s New in MDT 2010
 MDT 2010 is a significant upgrade from MDT 2008
• Still supports Windows XP and above
• Drops support for SMS 2003
 MDT 2010 adds full support for Windows 7 and
Windows Server 2008 R2 and latest deployment tools:
• Windows Automated Installation Kit 2.0
• Windows PE 3.0

New way to construct an image
• USMT 4.0

New hardlink and offline migration capabilities
• Deployment Image Servicing and Management (DISM) tool

Replaces several previous tools, adds new enumeration capabilities
 MDT 2010 makes these changes transparent
Microsoft Deployment Using MDT and SCCM
 Microsoft Deployment Toolkit (MDT)
• Excellent GUI interface to ask questions (variables) prior to deployment
• Alternatively, can be fully automated during deployment if variables predefined
• No built in mechanism to schedule and initiate itself for deployment
 System Center Configuration Manager (SCCM) Operating System
Deployment (OSD)
• Non-existent GUI interface
• All variables configured on SCCM prior to deployment
• Excellent built in scheduling and initiating of deployments
• $$$
Key Features of Windows AIK
Key Features
• Windows AIK 2.0 is a collection of tools
and documentation designed to help IT
professionals deploy Windows.
• Highly customized environments are ideal for using Windows
AIK.
• Windows AIK tools can be used to configure many
deployment options.
• Organizations can use the tools that satisfy their business
requirements, providing a high degree of flexibility.
Tools Included in Windows AIK
Tool
Description
Windows System Image
Manager (Windows SIM)
Used to create unattended installation answer files and
distribution shares, or to modify the files contained in a
configuration set.
ImageX
Used to capture, modify, and apply file-based disk images
for rapid deployment.
Deployment Image Servicing and Used to Apply updates, drivers, and language packs to a
Management (DISM)
Windows image.
Windows Pre-installation
Environment (Windows PE)
Designed to prepare a computer for Windows installation.
User State Migration Tool
(USMT)
Used to migrate user data from a previous Windows
operating system to Windows 7.
Volume Activation Management
Tool (VAMT)
Used to automate and centrally manage the Windows
volume activation process.
What Is Windows Imaging File
Format?
A file-based disk image format that contains compressed files used to install
operating systems
Resource
(Image 1)
Image 1
Metadata
Resource
(Image 2)
Image 2
Lookup Table
XML Data
Integrity Table
Header
Metadata
Lookup Table
XML Data
Integrity Table
File Resource
File Resource
File Resource
WIM
File Resource
File Resource
File Resource
Windows Image (.wim) File
Types of Images
Three different type of images:
Thick images
Thin images
Hybrid images
Mix thin and thick
image strategies
• Core application
•
Few applications
• Language packs
•
Few language
packs
• Other files
 How do you reduce management of image creation process?
 How do you improve security of images being deployed?
• Always have the latest Windows and application updates applied
• Always have the latest Virus Definitions applied
Create your image daily through
automation!
Deployment Image Servicing And
Management (DISM)
 Enable and disable,
enumerate, add, remove
packages and updates
 Add, remove,
enumerate drivers
 WIM and VHD support
 OEMs can select OS
editions offline
Deployment Image Servicing and
Management (DISM)
 A command-line tool used to service
Windows images offline before
deployment
 Use it to install, uninstall, configure, and
update:
• Windows features
• packages
• drivers
• international settings
33
Windows Deployment Services (WDS)
Windows Deployment Services (WDS) provides the ability to deploy
Windows 7 by using a network-based installation.
WDS benefits:

Reduces the complexity of deployments and the costs associated with inefficient manual
installation processes.

Enables you to perform network-based installation of Windows operating systems.

Deploys Windows images to computers without operating systems.

Provides an end-to-end solution for the deployment of Windows OSs to client computers
and servers.

Uses standard Windows Server 2008 setup technologies, including Windows PE, WIM
files, and image-based setup .
Windows Deployment Services
Multicast Enhancements
 Multiple Stream Transfer
• Multiple bands to
•
Fast
broadcast images to clients
Optimized rates per
client connection
 Client Auto Removal
• Slower clients can be
Medium
dropped to unicast or
entirely (only in standard
multicast)
 Boot Image Multicast
• Windows PE boot
Slow
images can use multicast
(clients with EFI)
Windows Deployment Services
Dynamic Driver Provisioning
WDS Server
Images
Client
Drivers
Driver targeting to match
drivers to hardware
Reduces image size and
centralizes deployment
driver management
User State Migration
A user state migration captures all custom settings on a existing computer and
restores the settings to newly deployed computer
User state migration components:
 User preferences
 User data
 Application settings
User State Migration scenarios
Replace
Refresh
Tools for Migrating User State
Use one of the following migration tools:
 Windows Easy Transfer (WET)
 User State Migration Tool (USMT)
Identify which elements are to be migrated to the new
operating system
USMT
To migrate by using USMT 4.0:
1 Collect Files and Settings from the Source Computer
• Close all applications
• Run ScanState command
Source
Computer
2 Prepare the Destination Computer:
• Install the operating system
• Install all applications
Restore Files and Settings on the Destination
3 Computer
• Run the LoadState command
• Log off
Destination
Computer
Features of USMT 4.0
User State Migration Tool (USMT) 4.0 is a scriptable command-line tool that
provides a highly-customizable user-profile migration experience
Benefits of USMT 4.0
• Safely migration of user accounts, operating system, and
application settings
• Reduces the cost of deploying Windows operating system by
preserving user state
• Reduces end-user downtime
New Features of USMT 4.0
• Hard-link migration store
• Offline migration
User State Data
What USMT Does Not Migrate:
User Data Settings:
Application
• Folders from each user profile
•Settings from earlier versions of an application
• Folders from the All Users and Public profiles
•Local
application settings
• File types
•Microsoft
Project
• Access Control
Listsettings when migrate from Microsoft
Operating-System
Settings:
Office 2003 to 2007
•Mapped
Operating-System
network Components
drives, local printers, hardware-related
• Migrates drivers,
operating passwords,
system components
to a destination
settings,
application
binary files,
computer that is running
Windows
from
computers
that
synchronization
files, DLL
files,7 or
other
executable
files
are running Windows XP, Windows Vista, or Windows 7
•Shared folders permissions
•Files and settings migrating between operating systems
Applications
with different
languages
 Supported
• Only the settings that have been used or
•Customized
icons for shortcuts
modified by the user
•Taskbar settings, when the source computer is running
Windows XP
Migrating User State by Using WET
WET
is the recommended
tool for on
scenarios
in which youcomputer
have a small
Prepare
for the
migration
the
destination
Transfer
files
and
settings
by
using
a
network
number of computers to migrate
On destination
computer:
To 1migrate
by
using
Start WET
onWET:
the source computer
Close all active programs
Clickthe
Next
Store
Windows 7 WET files to be Used on the Source
Start Windows Easy Transfer
Destinatio
Computer
Click A Network
Source
n
Click Next
Computer
Click
This
is
my
old
computer
Computer
Migrate
and method
Settings from the Source Computer to
Select Files
transfer
the
Destination
WET
creates Computer
WET key by using:
Click This is my new computer
• On
Windows
Easy Transfer
cable enter WET
the destination
computer,
I need
install
now (if source computer
key
and
thentoclick
Next
• Click
Network
does not have WET)
Removable
media
a network
share
7 • Click
Transfer
andorproceed
with
the
Destinatio
7 Select destination media and save WET files
wizard
n
Computer
1
2
12
3
3
2 44
5
5
6
6
Donald E. Hester
CISSP, CISA, CAP, MCT, MCITP, MCTS, MCSE Security, Security+, CTT+
Director, Maze & Associates
University of San Francisco / San Diego City College / Los Positas College
www.LearnSecurity.org
http://www.linkedin.com/in/donaldehester
http://www.facebook.com/group.php?gid=245570977486
Email:
DonaldH@MazeAssociates.com
Evaluation Survey Link
Help us improve our seminars by filing
out a short online evaluation survey at:
http://www.surveymonkey.com/s/IT-Windows7
IT Series - Deploying Windows 7
with Free Tools
Thanks for attending
For upcoming events and links to recently archived
seminars, check the @ONE Web site at:
http://onefortraining.org/
Download