Transcript Session 5: Look Mom, No Hands! Software and OS Deployment

Evaluations Are VERY IMPORTANT!
•
Please fill out your evaluations … Same scale as
“grade school” (drop the one’s)
− 10=100% Does not exist because there is no Such thing
as “perfect” 
− 9=90% Good = Report card of “A”
− 8=80% OK = Report card of “B”
− Less than 8, Please give feedback so we can improve
− 7=70% Not So Good = Report card of “C”
− Less than 7… You get the picture
•
Online Presence
− http://blogs.technet.com/johnbaker
− http://www.microsoft.com/events/series/deploymentessentials.aspx
http://blogs.technet.com/johnbaker
http://www.microsoft.com/events/series/deploymentessentials.aspx
Agenda
•
•
•
Overview of Configuration Manager
OS Deployment in Configuration Manager
MDT Extensions for Configuration Manager
Operating System Deployment - OSD
System Center Configuration Manager
•
•
•
•
Automated solution for assessing,
migrating and deploying windows
server and client operating systems
Broad support for advanced
delivery:
− Operating systems
− Applications
− Software and hardware updates
Support for both physical and
virtual environments
Increased scenario support:
−
−
−
−
Corporate Network
Branch locations
Mobile Workforce
Home workers (Internet based)
Configuration Manager Site Systems
Asset Intelligence sync point
SQL Server
Out of band service point
Distribution Point
SQL Server
Reporting
Services point
Primary Site Server
Server Locator Point
Reporting Point
Management Point
System Health Validator
SMS 2003
Equivalent Role
Fallback Status Point
Configuration
Manager Role
Software Update Point
PXE Service Point
State Migration Point
Branch DP
Configuration Manager Site Systems
Asset Intelligence sync point
SQL Server
Out of band service point
Distribution Point
SQL Server
Reporting
Services point
Primary Site Server
Server Locator Point
Reporting Point
Management Point
System Health Validator
SMS 2003
Equivalent Role
Fallback Status Point
Configuration
Manager Role
Software Update Point
PXE Service Point
State Migration Point
Branch DP
What’s New in SCCM 2007 R3
•
•
•
•
•
•
•
Power Management
Operating System Deployment
Improvements
Dynamic Collection Evaluation
Active Directory Delta Discovery
Simplified Resource Management
Desired Configuration Management
Higher Number of Supported Clients Per
Hierarchy
Application Deployment
•
•
•
Makes deployment of
business productivity
application easy
Distribution
Server
− Office System Programs
− SAP, Siebel, etc.
Planning Tool
− Extended and improved
inventory and metering
Deployment Tool
− Target based on business
needs
− Right applications to the
right users on time
− Better user experience
Package
Program
Collection
`
Client
Client
`
Client
Operating System Deployment
•
•
•
•
Highly automated solution for
assessing, migrating and deploying
windows server and client operating
systems
Common toolset and process
End-to-end deployment automation
support
Assess migration readiness for
Windows Server 2008 R2, Windows 7
and Office 2010
−
•
•
•
Built in reports for minimum and
recommended settings
Enable dynamic deployment of drivers
at runtime
Organize, replicate and deploy
packages
Utilize Windows PnP detect
Client Management
Streamlined Application
and Desktop Delivery
Optimized Client Health
and Performance
Ease User Access Without
Compromise
Adaptive Application
Delivery
Client Infrastructure
Monitoring
End-Point Security
Management
Managed Client Application
Delivery via Traditional and
Virtual Methods
Client Health Monitoring
and Proactive Issue
Identification
Simplified Windows 7
Deployment
Remote PC Diagnostics
& Repair
Automated OS Deployment
via Image Standardization
Zero-touch Remote
Diagnosis and Remediation
with Intel® Vprotm
Enforced Compliance with
System Health Policy
Definitions via Remediation
Configuration
Compliance
Assess Systems
Compliance Against
Established Configuration
Baselines
The Task Sequencer
•
•
•
•
•
Core OS deployment mechanism
Delivered to clients as policy via MP
Sequence of steps to execute
−
−
−
Completely hands-off for full automation
of the process
Two kinds of actions
−
−
•
Steps prior to deploying new OS
Steps in Windows PE to deploy new OS
Steps after the new OS is deployed
Built-in actions provided within product
Custom actions command line driven,
Vbscript, Batch etc.
Task Sequence can do other actions:
−
−
−
−
Capture images
Deploy Application chains
Administer complex activities
More (unlimited)
Task Sequence Actions
The built-in list of building blocks
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Run Command Line
Install Software
Install Software Updates
Join Domain or Workgroup
Connect to Network Folder
Reboot Computer to Windows PE
or hard disk
Set Task Sequence Variable
Format and Partition Disk
Convert Disk to Dynamic
Enable BitLocker
Disable BitLocker
Request State Store
Capture User State
Restore User State
Release State Store
•
•
•
•
•
•
•
•
•
•
•
•
•
Apply Operating System
Apply Data Image
Setup Windows and ConfigMgr
Install Deployment Tools
Prepare ConfigMgr Client for
Capture
Prepare Windows for Capture
Capture Operating System
Images
Auto Apply Drivers
Apply Driver Package
Capture Network Settings
Capture Windows Settings
Apply Network Settings
Apply Windows Settings
Controlling Task Sequence Steps
Condition
An optional test. If the test returns true,
the action is executed. If the test returns
false, the action is skipped
Action
The actual work to perform. Typically a
command line action – map a network
drive, reboot, run a script, etc.
Continue-on-Error flag
Governs behavior if the action completes
with an error
How Windows Deployment works
Bare Metal starts here
Microsoft Deployment Toolkit 2010
Feature categories
•
Wizards
•
Capabilities added to a task sequence
•
•
− Help with the setup and configuration, instead of
manual step-by-step processes
− Built into our task sequence templates
− Leverages scripts
Additional task sequence actions
− Extensions to the task sequence editor
− Scripts to perform the task
Making deployments more dynamic
− Web services, databases, computer variables, collection
variables, conditions, etc.
Task Sequence Capabilities
Dynamic state capture location
•
Capturing user state to the network is expensive
•
Only user the state migration point (SMP) when necessary
− Network traffic (both ways)
− Disk space consumption
− Time
− Estimate needed space
− Calculate if it will fit
Script to run USMT
estimate
Conditionally
request SMP store
Conditionally
release SMP store
Standard state
capture
Task Sequence Capabilities
Configure answer files
•
Dynamically update OS configuration files per computer
•
•
Inject values stored in task sequence variables
Preconfigured for commonly-used values
•
•
− Unattend.txt (Windows XP or Windows Server 2003 unattended)
− Sysprep.inf (Windows XP or Windows Server 2003 images)
− Unattend.xml (Windows 7 or Windows Server 2008)
− Domain, OU, computer name, time zone, area code, locale,
language, full name, organization, product key, home page, etc.
Easily extensible for whatever
values you want
− XML-driven: which variable to
inject where
Dynamic deployments
Task Sequence Capabilities
Handle any scenario
•
•
•
One task sequence to handle all
possible scenarios
− New computer (bare metal)
− Operating system refresh (wipe and load)
− Reference computer image build and
capture
− Replace computer (capture only)
Any operating system type
− OS installation package
− OS image
− Windows XP, Windows Vista, Windows
Server 2003, Windows Server 2008,
Windows 7
Conditions specified to
control the flow
Task Sequence Capabilities
Backup
•
•
Create an image of the computer before installing a new
operating system
Script to run ImageX.exe to create WIM
•
Caveats:
− Stores backup locally when possible (>=50% free space)
− If using the network, the WIM might be huge
− This can take a long time, so you
may choose to do it selectively
− ImageX is designed to create a
small image, so it’s not optimized
for capture speed
− ImageX is an imaging tool,
not a backup tool
− Ideal for recovering lost data,
not the entire OS
Task Sequence Capabilities
Miscellaneous items
•
Validation
•
Prerequisite checks
•
•
− Don’t deploy a client OS to a machine running a server OS (the
ultimate “oops”)
− Ensure minimum memory, processor, and disk requirements are
met
− Decompress the root of the drive
− Windows Scripting Host
and MSXML are functional
BIOS check
− Block installation for incompatible
BIOSes
Capture and restore local
group membership
Task Sequence Capabilities
Miscellaneous items
• Tattoo the machine
•
•
•
− Inventory deployment details
Enable Diskpart compatibility mode
when needed (Windows XP, Server
2003)
− KB 931760, KB 931761
Move state store (if local)
− Otherwise, it is deleted when
the deployment completes
Copy logs
− Make them available on
a network share for
troubleshooting
Task Sequence Actions
MDT 2010 Additions
Task Sequence Actions
Use Toolkit Package
• Custom actions have
two pieces:
•
•
− The user interface
− The command that gets
executed
The “Use Toolkit
Package” action takes
care of getting the
needed files to the
computer
Want to use any other
actions? You need this
first!
Task Sequence Actions
Gather
•
•
•
•
Sets variables that can be
used elsewhere in the task
sequence
“Local data” retrieved
from WMI
− MAC addresses, IP
addresses, make, model, etc.
“Rules” can leverage local
data to make further
decisions
− Static rules (e.g. subnet)
− Database queries
− Web services
Dynamic deployments
Task Sequence Actions
Validate
•
•
Perform hardware
checks to make
sure the machine is
capable
Prevent accidental
deployment of
client operating
systems to server
hardware (the
ultimate “oops”)
Task Sequence Actions
Install Updates Offline
•
•
Apply patches to Windows
7 before the OS boots for
the first time
− Just-in-time patching
− Eliminates window of
vulnerability
− Uses PKGMGR/DISM from
Windows PE
Uses an existing software
update package
− All patches in the package
will be applied
− Applicability cannot be
determined offline
Task Sequence Actions
Install Language Packs Online or Offline
• Simplifies the process
of installing language
packs during an OS
deployment
− Create a package
containing the
language packs
(LP.CABs) needed
− Specify that package
should be installed
online (after the OS is
running) or offline
(before the OS boots
for the first time,
similar to patching)
Summary
•
Broad support for advanced delivery
•
•
•
New Features in SCCM 2007 R3
Client Management
Task sequencer is the core deployment
mechanism in SCCM
− Applications
− Operating Systems
Resources
•
System Center Configuration Manager
•
Management Techcenter
•
System Center Team Blog
•
Windows 7
•
Website for Microsoft Desktop Optimization Pack for
Software Assurance
http://www.microsoft.com/systemcenter/configmgr/default.mspx
http://www.microsoft.com/systemcenter/softgrid/default.mspx
http://blogs.technet.com/systemcenter/
http://www.microsoft.com/windows7
http://www.microsoft.com/windows/enterprise/products/mdop/default.aspx
© 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market
conditions, It should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation.
MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.