Using VHDs in Remediation Workshops

Overview Advantages Simple and robust setup Use prepared VHDs Easy to reset (copy VHD file) Easy to switch between multiple VHDs No need for other imaging software (e.g. ImageX, Ghost) Notes Uses boot-from-VHD, not run-in-Virtual PC. Image will run image natively, not virualzied Host PC needs to run Windows 7.

Mounting the VHD (optional) Useful if you want to copy files into the VHD prior to usage. Open Computer Management (run as Administrator) Select Disk Management Select More Actions  Attach VHD VHD is now mounted as a drive

Preparing the VHD Copy c:\VHD\Original\*.* to c:\VHD\Run Now you need to enable booting from the VHD using bcdedit.exe (CMD.EXE run as Administrator) Reuse this ID in the following to commands! (see speaker notes)

Booting New boot option available when you restart the PC. At first boot drivers will be installed (~5min) You can leave the license key empty

Restoring original image Copy c:\VHD\Original\*.* to c:\VHD\Run

Deleting boot entries CMD.exe (run as Administrator) (see speaker notes)

Instructions for initial workshop setup Install Windows 7 on all PCs Copy 32-bit and 64-bit VHDs to all PCs and enable booting from them Create a third VHD with apps yourself (see next slide) So you have 3 configuations to boot from: – 32-bit Windows 7 – 64-bit Windows 7 – 32-bit Windows 7 with apps

Creating 3 rd VHD with Apps Boot from 32-bit VHD (which is stored in C:\VHD\Run) Install Office 2007 SP1 (trial version on microsoft.com) Install Windows 7 SDK for this Windows buildWindows 7 SDK Install Visual Studio 2008 SP1 (trial version)trial version Windows Update Set environment variable for symbols: MD C:\Symbols SetX.exe /M _NT_SYMBOL_PATH "SRV*C:\Symbols* Latest public version of WinDbg ( Install Debugging Tools for Windows 32-bit Version or Install Debugging Tools for Windows 64-bit Versions )Install Debugging Tools for Windows 32-bit Version Install Debugging Tools for Windows 64-bit Versions AppVerifier Application Compatibility Toolkit 5.5 Save this VHD to c:\VHD\Original and c:\VHD\Run (using a new filename) Add new boot entry for this VHD using BCDEDIT Copy to other machines (assuming hardware is identical)

Instructions for resetting VHDs On host computer delete VHDs in C:\VHD\Run Copy C:\VHD\Original\*.* to C:\VHD\Run