Windows XP Professional Deployment and Support

Microsoft IT Shares Its Experiences

Published: May 2002 (Revised October 2004)Published: May 2002 (Revised October 2004)

Business Requirements● Increased Reliability

● Windows XP Professional includes a driver-signing program● System Restore

● Increased Security● 802.1X wireless protocol support● Internet Connection Firewall (Windows Firewall)

● Lower Support Costs● Greater Support for Mobile Users

● 802.11b wireless networking in Windows XP Professional includes automatic detection and automatic connection reconfiguration

● Remote Desktop for accessing computers from outside the office● IntelliMirror and My Documents folder redirection

Past Lessons Learned

● Identify Dependencies● Use a Test Environment● Manage Assets Carefully● Plan Site Definitions

Deployment Scope And Objectives● Localized Deployment

● 22 languages worldwide

● Business Unit IT Groups● Tested LOB applications on Windows XP

● Goals● Use Microsoft as enterprise test environment● Provide feedback to product development● Leverage new features to improve IT

Designing The Desktop

● Standard configuration eases upgrades and support

● Effective software distribution● Windows Installer● Zero Administration Windows application package

● Group Policy● Account and storage policies● Logon and security settings● Policy applied at the domain level

Desktop Management

● Offline files and folders● Software installation and maintenance● Folder redirection

Security● Kerberos● Encrypting File System (EFS)● Remote user security

● Smart cards● Connection Manager● Security Logon script

Technology Feature Pilots

● IntelliMirror with Group Policy● My Documents folder redirection

● Internet Connection Firewall● Employee home computers connected

through VPN● For all computers running Windows XP

SP2

Technology Feature Pilots

● Windows Messenger● Video and audio support

● Remote Assistance● Help desk reduces on site visits

● Remote Desktop● Kiosk computers in building lobbies

Technology Feature Pilots

● Zero Configuration WLAN● Corporate campus● Home● Airports● Coffee shops

● Windows Product Activation● Volume License media key● Single License Activation media

Additional Considerations● Localizations/Languages

● Multi-user interface (MUI) deployment● Microsoft IT deployed 22 localized builds

● Security for unmanaged computers● May lack security infrastructure● Do not provide access controls, IPsec, and firewall

features

Deployment

● Worldwide Distribution● 450 sites in 62 countries

● Installation Considerations● Upgrading versus clean installations● Number of computers● Do employees need assistance?● Customization● Types and configuration of hardware● Active Directory

Microsoft IT Deployment Methods

Microsoft IT Web

Site

Bootable CD-ROM

Unattended Installation

System Preparation(SysPrep)

RIS SMSApplication Publishing

Upgrade or Clean Install

Upgrade only

Upgrade or clean install

Upgrade or clean install

Clean install only

Clean install only

Upgrade only

Upgrade only

Required Hardware

Network connectivity

CD-ROM drive

Network startup disk if

using a remote distribution

share

Similar hardware

configurations for all desktop

computers

Pre-boot eXecution

Environment (PXE)

Fast connection to the SMS

site

Network connectivity

Required Windows

2000 Server?

Yes No No No Yes, and Active

Directory

Yes, and SMS

Yes, and Active

Directory

User interaction

requirements

Some user interaction

Minimal for upgrades; more for

clean installation

Minimal Minimal if using

Sysprep.inf file

Minimal Minimal Minimal

Microsoft IT Installation Options

Helpdesk and Support

● Information on central Web site● E-mail announcements● Telephone support

Hardware and Application Compatibility

● Hardware compatibility● Used configurations in Windows Catalog● Publicized known issues

● Application Compatibility● IT development teams test existing applications● Central program developed to aid technology

adopters

Lessons Learned● Minimize deployment schedule by using

automated tools● Direct LOB application developers to test

Windows XP compatibility

● Build and test LOB suites● Pilots should reflect the diversity of the

computing environment● Review Group Policy settings

Lessons Learned● Require a common operating system version● Maintain a central intranet Web site● Ensure software distribution servers are near

users● Emphasize training for users and Helpdesk

technicians● Use Windows Update● Promote Remote Desktop and Remote

Assistance● Enforce the use of firewall technology

Benefits and Conclusion

● Increased Security● Remote access policies● WLAN improvements● Client firewall

● Lower Support Costs● Help desk call rate lower than with Windows 2000

● Greater support for mobile users● Laptop users● Remote users● Lobby kiosks

For More Information● Additional content on Microsoft IT

deployments and best practices can be found on http://www.microsoft.com● Microsoft Services

http://www.microsoft.com/itshowcase

● Microsoft TechNet http://www.microsoft.com/technet/itshowcase

● E-mail IT Showcaseshowcase@microsoft.com

© 2004 Microsoft Corporation. All rights reserved.

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. Microsoft, Active Directory, IntelliMirror, MSN, NetMeeting, Outlook, SharePoint, Visio, Windows, Windows NT, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.