IT Series - Deploying Windows 7 with Free Tools Donald Hester October 14, 2010 For audio call Toll Free 1-888-886-3951 and use PIN/code 874614 Housekeeping • Maximize your CCC Confer window. • Phone audio will be in presenter-only mode. • Ask questions and make comments using the chat window. Adjusting Audio 1) If you’re listening on your computer, adjust your volume using the speaker slider. 2) If you’re listening over the phone, click on phone headset. Do not listen on both computer and phone. Saving Files & Open/close Captions 1. Save chat window with floppy disc icon 2. Open/close captioning window with CC icon Emoticons and Polling 1) Raise hand and Emoticons 2) Polling options IT Series - Deploying Windows 7 with Free Tools Micah Orloff Donald E. Hester CISSP, CISA, CAP, MCT, MCITP, MCTS, MCSE Security, Security+, CTT+ Director, Maze & Associates University of San Francisco / San Diego City College / Los Positas College www.LearnSecurity.org http://www.linkedin.com/in/donaldehester http://www.facebook.com/group.php?gid=245570977486 Email: DonaldH@MazeAssociates.com What we will be covering 8 Microsoft Assessment and Planning Toolkit (MAP) Microsoft Application Compatibility Toolkit (ACT) Enterprise Learning Framework (ELF) Microsoft Deployment Toolkit (MDT) Microsoft Desktop Optimization Pack (MDOP) for Asset Inventory Planning MDT Deployment Workbench Windows Automated Installation Kit (WAIK) User Settings Migration Tool (USMT) 4.0 Windows Deployment Services (WDS) Deployment Lifecycle 9 10 Tools Used to Support the Planning Phase Microsoft Assessment and Planning Toolkit (MAP) Microsoft Application Compatibility Toolkit (ACT) Enterprise Learning Framework (ELF) Microsoft Deployment Toolkit (MDT) Microsoft Desktop Optimization Pack (MDOP) for Asset Inventory Planning System Center Configuration Manager 2007 P L A N Tools Used to Support the Building Phase B U I L D MDT Deployment Workbench Windows Automated Installation Kit (WAIK) User State Migration Tool (USMT) Tools Used to Support the Deploying Phase DEPLOY MDT Deployment Workbench Windows Deployment Services (WDS) 2008 System Center Configuration Manager 2007 User State Migration Tool (USMT) Microsoft Assessment and Planning Toolkit (MAP) 14 MAP Deployment Readiness • Secure and Agentless Inventory • Comprehensive Data Analysis • In-Depth Readiness Reporting Software Usage Tracker Feature • Provides software usage reports • Software by user/device • Inventory • License Compliance 15 MAP Secure Agentless Inventory 16 Windows 7 Windows Vista Windows XP Professional Office 2010 and previous versions Windows Server 2008 or Windows Server 2008 R2 Windows Server 2003 or Windows Server 2003 R2 Windows 2000 Professional or Windows 2000 Server VMware ESX VMware ESXi VMware Server Linux variants LAMP application stack discovery SQL Server 2008 In-Depth Readiness Reporting Current software, hardware and migration recommendations to: • Windows 7 • Windows Server 2008 R2 • Office 2010 Virtualization reports • Possible server consolidation • Migrate Linux to virtual environment 17 Microsoft Application Compatibility Toolkit (ACT) Version 5.6 has support for migration to Windows 7 64-bit 18 ACT Reports 19 Detailed Reports 20 Enterprise Learning Framework (ELF) Developing a training and communication plan helps with: • Raising Awareness • Minimizing Disruption • Shortening Training • Gaining Productivity http://www.microsoft.com/technet/desktopdeployment/bdd/elf/Welcome.aspx 21 22 Microsoft Deployment Toolkit Microsoft Deployment Toolkit 2010 Lite Touch •Aligns with ConfigMgr •Evolutionary refinements •Adds server support •Upgrade from BDD 2007 and MDT 2008 Zero Touch with Configuration Manager 2007 •Fully integrated experience •Single console •Adds server support •Extends and enhances ConfigMgr 2007 Leverages core deployment tools Provides process and tool guidance MDT 2010 Windows 7 and Windows Server 2008 R2 Support Deployment Workbench Architecture Enhancements Script Architecture Enhancements Documentation Improvements • Add support for the latest operating systems • Use the latest tools • Enable new scenarios • Improve administrative processes • Support more than one user • Enhance automation and extensibility • Task Sequence & Script Enhancements • Improve diagnostics and logging • Better error reporting and recovery • Make scripts as easy to follow as possible • PowerShell Capabilities • Continue to simplify documentation • Cross-linked content • Cover both the “why’s” and the “how’s” What’s New in MDT 2010 MDT 2010 is a significant upgrade from MDT 2008 • Still supports Windows XP and above • Drops support for SMS 2003 MDT 2010 adds full support for Windows 7 and Windows Server 2008 R2 and latest deployment tools: • Windows Automated Installation Kit 2.0 • Windows PE 3.0 New way to construct an image • USMT 4.0 New hardlink and offline migration capabilities • Deployment Image Servicing and Management (DISM) tool Replaces several previous tools, adds new enumeration capabilities MDT 2010 makes these changes transparent Microsoft Deployment Using MDT and SCCM Microsoft Deployment Toolkit (MDT) • Excellent GUI interface to ask questions (variables) prior to deployment • Alternatively, can be fully automated during deployment if variables predefined • No built in mechanism to schedule and initiate itself for deployment System Center Configuration Manager (SCCM) Operating System Deployment (OSD) • Non-existent GUI interface • All variables configured on SCCM prior to deployment • Excellent built in scheduling and initiating of deployments • $$$ Key Features of Windows AIK Key Features • Windows AIK 2.0 is a collection of tools and documentation designed to help IT professionals deploy Windows. • Highly customized environments are ideal for using Windows AIK. • Windows AIK tools can be used to configure many deployment options. • Organizations can use the tools that satisfy their business requirements, providing a high degree of flexibility. Tools Included in Windows AIK Tool Description Windows System Image Manager (Windows SIM) Used to create unattended installation answer files and distribution shares, or to modify the files contained in a configuration set. ImageX Used to capture, modify, and apply file-based disk images for rapid deployment. Deployment Image Servicing and Used to Apply updates, drivers, and language packs to a Management (DISM) Windows image. Windows Pre-installation Environment (Windows PE) Designed to prepare a computer for Windows installation. User State Migration Tool (USMT) Used to migrate user data from a previous Windows operating system to Windows 7. Volume Activation Management Tool (VAMT) Used to automate and centrally manage the Windows volume activation process. What Is Windows Imaging File Format? A file-based disk image format that contains compressed files used to install operating systems Resource (Image 1) Image 1 Metadata Resource (Image 2) Image 2 Lookup Table XML Data Integrity Table Header Metadata Lookup Table XML Data Integrity Table File Resource File Resource File Resource WIM File Resource File Resource File Resource Windows Image (.wim) File Types of Images Three different type of images: Thick images Thin images Hybrid images Mix thin and thick image strategies • Core application • Few applications • Language packs • Few language packs • Other files How do you reduce management of image creation process? How do you improve security of images being deployed? • Always have the latest Windows and application updates applied • Always have the latest Virus Definitions applied Create your image daily through automation! Deployment Image Servicing And Management (DISM) Enable and disable, enumerate, add, remove packages and updates Add, remove, enumerate drivers WIM and VHD support OEMs can select OS editions offline Deployment Image Servicing and Management (DISM) A command-line tool used to service Windows images offline before deployment Use it to install, uninstall, configure, and update: • Windows features • packages • drivers • international settings 33 Windows Deployment Services (WDS) Windows Deployment Services (WDS) provides the ability to deploy Windows 7 by using a network-based installation. WDS benefits: Reduces the complexity of deployments and the costs associated with inefficient manual installation processes. Enables you to perform network-based installation of Windows operating systems. Deploys Windows images to computers without operating systems. Provides an end-to-end solution for the deployment of Windows OSs to client computers and servers. Uses standard Windows Server 2008 setup technologies, including Windows PE, WIM files, and image-based setup . Windows Deployment Services Multicast Enhancements Multiple Stream Transfer • Multiple bands to • Fast broadcast images to clients Optimized rates per client connection Client Auto Removal • Slower clients can be Medium dropped to unicast or entirely (only in standard multicast) Boot Image Multicast • Windows PE boot Slow images can use multicast (clients with EFI) Windows Deployment Services Dynamic Driver Provisioning WDS Server Images Client Drivers Driver targeting to match drivers to hardware Reduces image size and centralizes deployment driver management User State Migration A user state migration captures all custom settings on a existing computer and restores the settings to newly deployed computer User state migration components: User preferences User data Application settings User State Migration scenarios Replace Refresh Tools for Migrating User State Use one of the following migration tools: Windows Easy Transfer (WET) User State Migration Tool (USMT) Identify which elements are to be migrated to the new operating system USMT To migrate by using USMT 4.0: 1 Collect Files and Settings from the Source Computer • Close all applications • Run ScanState command Source Computer 2 Prepare the Destination Computer: • Install the operating system • Install all applications Restore Files and Settings on the Destination 3 Computer • Run the LoadState command • Log off Destination Computer Features of USMT 4.0 User State Migration Tool (USMT) 4.0 is a scriptable command-line tool that provides a highly-customizable user-profile migration experience Benefits of USMT 4.0 • Safely migration of user accounts, operating system, and application settings • Reduces the cost of deploying Windows operating system by preserving user state • Reduces end-user downtime New Features of USMT 4.0 • Hard-link migration store • Offline migration User State Data What USMT Does Not Migrate: User Data Settings: Application • Folders from each user profile •Settings from earlier versions of an application • Folders from the All Users and Public profiles •Local application settings • File types •Microsoft Project • Access Control Listsettings when migrate from Microsoft Operating-System Settings: Office 2003 to 2007 •Mapped Operating-System network Components drives, local printers, hardware-related • Migrates drivers, operating passwords, system components to a destination settings, application binary files, computer that is running Windows from computers that synchronization files, DLL files,7 or other executable files are running Windows XP, Windows Vista, or Windows 7 •Shared folders permissions •Files and settings migrating between operating systems Applications with different languages Supported • Only the settings that have been used or •Customized icons for shortcuts modified by the user •Taskbar settings, when the source computer is running Windows XP Migrating User State by Using WET WET is the recommended tool for on scenarios in which youcomputer have a small Prepare for the migration the destination Transfer files and settings by using a network number of computers to migrate On destination computer: To 1migrate by using Start WET onWET: the source computer Close all active programs Clickthe Next Store Windows 7 WET files to be Used on the Source Start Windows Easy Transfer Destinatio Computer Click A Network Source n Click Next Computer Click This is my old computer Computer Migrate and method Settings from the Source Computer to Select Files transfer the Destination WET creates Computer WET key by using: Click This is my new computer • On Windows Easy Transfer cable enter WET the destination computer, I need install now (if source computer key and thentoclick Next • Click Network does not have WET) Removable media a network share 7 • Click Transfer andorproceed with the Destinatio 7 Select destination media and save WET files wizard n Computer 1 2 12 3 3 2 44 5 5 6 6 Donald E. Hester CISSP, CISA, CAP, MCT, MCITP, MCTS, MCSE Security, Security+, CTT+ Director, Maze & Associates University of San Francisco / San Diego City College / Los Positas College www.LearnSecurity.org http://www.linkedin.com/in/donaldehester http://www.facebook.com/group.php?gid=245570977486 Email: DonaldH@MazeAssociates.com Evaluation Survey Link Help us improve our seminars by filing out a short online evaluation survey at: http://www.surveymonkey.com/s/IT-Windows7 IT Series - Deploying Windows 7 with Free Tools Thanks for attending For upcoming events and links to recently archived seminars, check the @ONE Web site at: http://onefortraining.org/