Deploying Windows 7 - Linn–Benton Community Collegecf.linnbenton.edu/bcs/cs/lakea/upload/7 - Deploying_Windows_7.pdf · Windows Deployment Services ... One for each HAL type if

LBCC CS140M Fall 2014

Lake 1

Windows 7 DeploymentCompatibility and Assessment Tools

Chapters 3 – 6

By Al Lake

CS140M

Fall 2014

LBCC

Fall 2014 CS140MLake 2

Good tools for any deployment effort Microsoft Assessment & Planning (MAP) Automated Installation Kit (AIK)

Deployment Strategies High‐Touch vs. Lite‐Touch Additional deployment tools (MDT, USMT, WDS)

Surviving Application Compatibility Issues Application Compatibility Toolkit (ACT) Some MDOP Tools (MED‐V, App‐V)

Other useful tools Asset Inventory Service (AIS)

Objectives


Windows 7 Touches Everything

However, there are tools to reduce the amount of time you’ll have to spend touching computers during and after deployment.


Windows 7 Deployment Enhancements

Deployment Deployment Image Servicing Image Servicing and Managementand Management

Add/Remove Drivers and Add/Remove Drivers and PackagesPackages

WIM and VHD Image WIM and VHD Image ManagementManagement

User State User State Migration ToolMigration Tool

HardHard‐‐link Migrationlink Migration

Offline File GatherOffline File Gather

Improved user file Improved user file detectiondetection

Microsoft Deployment Microsoft Deployment ToolkitToolkit

Application Application Compatibility ToolkitCompatibility Toolkit

Microsoft Assessment Microsoft Assessment and Planningand Planning

Windows Windows Deployment ServicesDeployment Services

MulticastMulticast

Multiple Stream TransferMultiple Stream Transfer

Dynamic Driver Dynamic Driver ProvisioningProvisioning

Attribution‐Microsoft TechEd 2008/9 Win7 Deployment by James Dent


Agent‐less (What does this mean?)

Discovers computers using AD, scanning IP ranges, with Windows networking protocols or with manual lists of computer names.

Inventories using WMI, Remote Registry service and Vmware Webservice.

Uses a non‐default instance of SQL Server 2008 Express to store information.

Install on Windows 7, Windows Vista, Server 2003 R2 and higher.

Microsoft Assessment and Planning Toolkit


MAP Assessments and Wizards

Assessments Wizards

Windows Vista Hardware Assessment

2007 Office Assessment Windows Server 2008 R2 Readiness MS SQL Server Discovery Windows Server Role Discovery Windows Server 2008 Readiness Virtual Machine Inventory Security Assessment Windows 7 Readiness Power Saving Assessment Application Virtualization

Assessment

o Performance Metrics Wizard

o Server Virtualization Wizard

o Hardware Library Configuration Wizard

o Prepare New Reports and Proposals Wizard

o Inventory and Assessment Wizard


Lake 2


Windows 7 Readiness – indicates which computers can support Windows 7 and suggests any necessary hardware upgrades. Generates a report and a proposal.

Power Saving Assessment – describes power savings you can realize by migrating to Windows 7

App‐V Assessment – identifies applications and computers capable of supporting an App‐V environment.

Inventory and Assessment Wizard – gather info about client computers

Key Assessment Tools for Deployments


Sample MAP Report


Installed the kit on any computer running Windows Vista, Windows 7 or Server 2003.

Supports file‐based disk imaging

Includes tools to create: answer files (Windows System Image Manager)

Windows PE (pre‐installation) boot disk

master image from reference installation (ImageX)

User State Migration Tool 4.0 is also included in the package.

Automated Installation Kit (AIK 2.0)


High‐Touch with Retail Media

Hands‐on, very manual, less than 100 computers

High‐Touch with Standard Image

Uses customized images, 100‐200 computers

Lite‐Touch, High‐Volume

Interaction only at the start of process, 200‐500 computers

Zero‐Touch, High‐Volume

No interaction, fully automated, 500 or more computers

Deployment Strategies


Tools High‐Touch with Retail

High‐Touch with Images

Lite‐Touch Zero‐Touch

Media Type Retail Retail or VL Volume Lic. Volume Lic.

AIK X X X X

MDT X X X

ACT X X X

MAP X X

WDS X X

Configuration Mgr. 2007 R2

X

Where the Deployment Tools Fit

Suggested tools from Microsoft’s “Choosing a Deployment Strategy” whitepaper.


Start Easy: Hardware

Will your hardware run Windows 7?

And how do you find out?

Visit every computer and take a inventory.

Use your pre‐existing inventory management software.

Use the Microsoft Assessment and Planning Toolkit (MAP)


Lake 3


Refresh or Replace?

Refreshing ‐ “wipe and install”, use the same hardware and just reinstall the OS, applications and user settings.

Replacing – providing a new computer and copying user data and settings to the new machine.

Bare Metal – no user settings, just a new installation


Capturing User Data & Settings

Windows Easy Transfer (WET) Included with Windows

7

Also downloadable from Microsoft

Can be used on Windows XP or Vista

User State Migration Tool 4.0 More robust and

customizable then WET

Included in the AIK 2.0


Hard‐link Migration Enables local file migration without

copying or moving files

Processes migration jobs in third of the time or less

Offline User State Capture Capture during Windows PE phase

to improve speed

Volume Shadow Copy support Migrates in‐use files

Improved file detection Uses dynamic algorithms to discover

user documents.

User State Migration Tool 4.0


Installing the Operating System

Automated Installation Kit (AIK 2.0) SIM, ImageX tools, Windows

PE, etc.

Microsoft Deployment Toolkit (MDT) Solutions Accelerator

Extends the AIK tools to include a deployment share for lite‐touch or zero‐touch deployments.

Windows Deployment Service


Great for applying the same image to a bunch of computers with an answer file

Can inject some drivers, but doesn’t deploy applications outside of those installed on the image.

Multicast is improved with Windows 7, so you can deploy images faster.

WDS is a server 2008 Role and needs AD, DNS and DHCP to function.

Using WDS in conjunction with MDT extends it’s capabilities.

Windows Deployment Services


Clients

Multicast

WDS Server

Multicast Transmission

First client joins “transmission”

Attribution- Microsoft TechEd 2008/9 Win7 Deployment by James Dent


Lake 4


Clients

WDS Server


Waiting for other clients to join…

Multicast

Attribution- Microsoft TechEd 2008/9 Win7 Deployment by James DentFall 2014 CS140MLake 20

Clients with multiple transfer speeds

WDS Server


Transmission begins…

Multicast

Fastest Medium




WDS Server


Additional clients join stream

Multicast

Fastest Medium Slowest Medium



WDS Server


More clients to join

Multicast

FastestMedium Slowest Medium FastestMedium Medium




WDS Server

Multicast

First clients complete. Second broad‐cast begins. One client removed.

Multicast

Medium Medium Medium MediumSlowest



WDS Server

Multicast

Last clients complete…

Multicast

Medium MediumSlowest



Lake 5


Clients

WDS Server

Multicast

All clients complete. Transmission ends.

Multicast


Supports deployment of Windows XP SP3, Windows Vista SP1, Windows 7, Server 2003 R2, Server 2008 and Server 2008 R2.

Used in the Lite‐Touch and Zero‐Touch deployment models.

Includes a Deployment Workbench and Task Sequencer, which guides you through creating a deployment share for the operating system images, language packs, applications, device drivers, and other software deployed to the target computers.

Work in conjunction with the AIK 2.0

Helps support thinner images.

Microsoft Deployment Toolkit


MDT – Deployment Process Overview

From the “Using the Microsoft Deployment Toolkit” whitepaper. Fall 2014 CS140MLake 28

One for each version of the Windows OS One for each edition of the OS One for each processor type (32 or 64‐bit) One for each HAL type if deploying Windows XP or Server

2003. For Vista or later, the HAL is determined dynamically at start

up.

One for each localized language type for Windows XP or Server 2003. For Vista or later, the core OS is language neutral and you can

add language packs.

How Many Images do you Need?






AIK X X X X

MDT X X X

ACT X X X

MAP X X

WDS X X


X








AIK X X X X

MDT X X X

ACT X X X

MAP X X X X

WDS X X


X




Lake 6


Starting with your list of applications, start sorting them out into buckets.

Applications that will run fine on Windows 7 as is.

Applications that have a Windows 7 compatible version you can upgrade to.

Applications that don’t run on Windows 7.

How do we figure out which categories those applications fall into?

What about those Applications?


If your application works on Vista, it will probably work on Windows 7.

If your application doesn’t work on Vista. It will notwork on Windows 7.

Windows7 Builds on Vista

Few Changes: Few Changes: Most software that runs on Windows Most software that runs on Windows Vista will run on Windows 7 Vista will run on Windows 7 ‐‐ exceptions will be low level exceptions will be low level code (AV, Firewall, Imaging, etc). Hardware that runs code (AV, Firewall, Imaging, etc). Hardware that runs

Windows Vista well will run Windows 7 well.Windows Vista well will run Windows 7 well.

Deep Changes: Deep Changes: New models for security, New models for security, drivers, deployment, and networkingdrivers, deployment, and networking

Few Changes: Few Changes: Focus on quality and reliability Focus on quality and reliability improvementsimprovements


User Account Control (UAC) Limits the context in which processes run

Restricts users to Standard Users

Windows Resource Protection Creates a temporary work area and

redirects write action for applications.

IE Protected Mode Defends against elevation‐of‐privilege

attacks by only allowing write operations to the temporary internet files.

Operating System Versions The OS version number changes with each

release. (Vista is 6, Windows 7 is 6.1.)

Some Common Compatibility Problems


Provides tools to inventory applications, hardware and devices in the production environment

Synchronizes collected inventory with current application and hardware compatibility data from Microsoft and the ACT [Microsoft Application Compatibility Toolkit (ACT)] community.

Includes tools to test and repair individual applications.

Reduces the cost and time involved in resolving application compatibility issues

Helps you determine how a Windows Update will impact your applications

Application Compatibility Toolkit


Evaluate Your Applications AgainstThe ACT Community

To download the MS ACT:http://www.microsoft.com/en-us/download/details.aspx?id=7352


Installing the Applications

The “Easy” Applications

Include in Operating System Image (thick) or deployment process (thin).

Group Policy Deployments

System Center Configuration Manager or other 3rd‐party software.

The “Not So Easy” Ones

Shims (Compatibility Fix)

MED‐V (Microsoft Enterprise Desktop Virtualization environment)

App‐V (Application Virtualization and Desktop Virtualization)

RDS (Remote Data Service)


Lake 7


Also known as compatibility fixes, they are flexible tools used to address issues.

Can not be used to bypass Windows security directly, but you can use them to loosen Access Control Lists (ACLs) on a directory, redirect file access or feed alternate information to an application, etc.

Compatibility Fixesaka “Shims”

o Only run in user‐mode, so they can’t be used to correct kernel‐mode issues, like with device drivers.

o The Application Compatibility Tool kit can help with this type of solution, but in general, a high level of expertise required to create compatibility fixes.

o Some are documented on TechNet and included with the Compatibility Manager within the ACT.


When Should I Consider MED‐V?The challenge of upgrading to a new operating system

How MED‐V Relates to Windows XP Mode

Windows Virtual PC (Windows Virtual PC (““XP ModeXP Mode””) Provides the Ease of Use for End Users) Provides the Ease of Use for End Users

MEDMED‐‐V V –– ApplicationApplication‐‐OS compatibility for the EnterpriseOS compatibility for the Enterprise

Fall 2014 CS140MLake 39 Fall 2014 CS140MLake 40

Applications are packaged and delivered to the desktop on demand

Streamed bits are cached locally on the client and use the resources on the client directly.

Managed applications are easier to patch, upgrade and deploy.

Helps control the entire lifecycle of your application.

Applications must be able to run natively on the destination OS in order to work on that OS via App‐V.

Decouples applications from the OS to reduce conflicts –ex: multiple versions of Office.

Will App‐V Help me Get to Windows 7?


No user learning curve. Click to launch any virtual application anywhere

Simplify your next Windows rollout

Easily prepare Virtual Applications and Dependencies for Deployment.

Flexible deployment and streaming options for all business needs.

Readily Accessible Applications for Users, Manageable for IT.

Virtual Application Management in the box.

Mature and Proven Mature and Proven

Save Time & Money. Save Time & Money. Deploy Applications Deploy Applications VirtuallyVirtually

Partners ready to move Partners ready to move you from Proof of you from Proof of Concept to Production Concept to Production


Stream Once. Launch local and work completely offline.

No waiting for complete application install or update. No reboots. No application conflicts.

Preserve user settings online and offline.

Automatic application and icon refresh if removed.

Isolate and decouple applications from Windows to reduce conflicIsolate and decouple applications from Windows to reduce conflicts.ts.

Reduce the Windows footprint by never installing applications.Reduce the Windows footprint by never installing applications.

Reduce Windows deployment time by delivering applications virtuaReduce Windows deployment time by delivering applications virtually.lly.

Manage Windows and Applications independently but use the same tManage Windows and Applications independently but use the same toolset.oolset.

Single sequencing wizard with powerful interface for customization.

Simple MSI creation for quick deployment with existing software distribution systems.

Simple application dependency creation. No editing or renaming.

Easily view applications and their dependencies.

Virtual applications supported on Windows 7.


Lake 8


MED‐V vs. App‐V

®®


Well known technology.

TS on Server 2003 with 3rd party add‐ons (like Citrix) can allow you to continue to serve legacy applications to users.

TS on Server 2008 with RemoteApp can support applications that run on Vista and provide the a more “seamless” experience.

RDS on Server 2008 R2 with RemoteApp will support Windows 7 applications and meets a different set of needs than App‐V.

Terminal Services orRemote Desktop Services


AIS consists of two parts: A Web‐based service, onto which Desktop

Optimization Pack subscribers can log to view inventories of software installed on client computers in their enterprises.

Client software that communicates with the Web‐based service and supplies it with an inventory of programs that are installed on each client computer.

Supports XP, Vista and Windows 7 clients as well as Server 2003 and Server 2008.

Keeping Track of Applicationswith Asset Inventory Service (AIS)


Some tools are part of the MDOP subscription


“Using the Microsoft Deployment Toolkit.docx”

Solution Accelerators ‐ http://technet.microsoft.com/en‐us/solutionaccelerators/default.aspx

Microsoft Springboard – www.microsoft.com/springboard

Application Compatibility for Windows 7 ‐http://technet.microsoft.com/appcompat

Online Resources


Questions?


Lake 9


Assignment

Write a 1 to 2 page paper about Windows 7 deployment using the following scenario:

Local non‐profit organization

56 desktop and laptop computers at the local site, running:

40% running Windows XP

20% running Windows Vista

40% running Windows 98SE

2 servers (both running Windows Server 2008R2)

How would you determine to upgrade/update computers?

What method would you recommend for implementing Windows 7 deployment on the existing hardware?

How would you implement the deployment?

List the steps to migrate/deploy Windows 7 in this organization

Documents

Deploying Windows 7 - Linn–Benton Community Collegecf.linnbenton.edu/bcs/cs/lakea/upload/7 - Deploying_Windows_7.pdf · Windows Deployment Services ... One for each HAL type if