Windows XP Professional Deployment and Support Microsoft IT Shares Its Experiences Published: May 2002 (Revised October 2004)

Business Requirements ● Increased Reliability ● Windows XP Professional includes a driver-signing program ● System Restore ● Increased Security ● 802.1X wireless protocol support ● Internet Connection Firewall (Windows Firewall) ● Lower Support Costs ● Greater Support for Mobile Users ● b wireless networking in Windows XP Professional includes automatic detection and automatic connection reconfiguration ● Remote Desktop for accessing computers from outside the office ● IntelliMirror and My Documents folder redirection

Past Lessons Learned ● Identify Dependencies ● Use a Test Environment ● Manage Assets Carefully ● Plan Site Definitions

Deployment Scope And Objectives ● Localized Deployment ● 22 languages worldwide ● Business Unit IT Groups ● Tested LOB applications on Windows XP ● Goals ● Use Microsoft as enterprise test environment ● Provide feedback to product development ● Leverage new features to improve IT

Designing The Desktop ● Standard configuration eases upgrades and support ● Effective software distribution ● Windows Installer ● Zero Administration Windows application package ● Group Policy ● Account and storage policies ● Logon and security settings ● Policy applied at the domain level

Desktop Management ● Offline files and folders ● Software installation and maintenance ● Folder redirection

Security ● Kerberos ● Encrypting File System (EFS) ● Remote user security ● Smart cards ● Connection Manager ● Security Logon script

Technology Feature Pilots ● IntelliMirror with Group Policy ● My Documents folder redirection ● Internet Connection Firewall ● Employee home computers connected through VPN ● For all computers running Windows XP SP2

Technology Feature Pilots ● Windows Messenger ● Video and audio support ● Remote Assistance ● Help desk reduces on site visits ● Remote Desktop ● Kiosk computers in building lobbies

Technology Feature Pilots ● Zero Configuration WLAN ● Corporate campus ● Home ● Airports ● Coffee shops ● Windows Product Activation ● Volume License media key ● Single License Activation media

Additional Considerations ● Localizations/Languages ● Multi-user interface (MUI) deployment ● Microsoft IT deployed 22 localized builds ● Security for unmanaged computers ● May lack security infrastructure ● Do not provide access controls, IPsec, and firewall features

Deployment ● Worldwide Distribution ● 450 sites in 62 countries ● Installation Considerations ● Upgrading versus clean installations ● Number of computers ● Do employees need assistance? ● Customization ● Types and configuration of hardware ● Active Directory

Microsoft IT Deployment Methods Microsoft IT Web Site Bootable CD-ROM Unattended Installation System Preparation (SysPrep) RISSMS Application Publishing Upgrade or Clean Install Upgrade only Upgrade or clean install Clean install only Upgrade only Required Hardware Network connectivity CD-ROM drive Network startup disk if using a remote distribution share Similar hardware configurations for all desktop computers Pre-boot eXecution Environment (PXE) Fast connection to the SMS site Network connectivity Required Windows 2000 Server? YesNo Yes, and Active Directory Yes, and SMS Yes, and Active Directory User interaction requirements Some user interaction Minimal for upgrades; more for clean installation MinimalMinimal if using Sysprep.inf file Minimal Microsoft IT Installation Options

Helpdesk and Support ● Information on central Web site ● announcements ● Telephone support

Hardware and Application Compatibility ● Hardware compatibility ● Used configurations in Windows Catalog ● Publicized known issues ● Application Compatibility ● IT development teams test existing applications ● Central program developed to aid technology adopters

Lessons Learned ● Minimize deployment schedule by using automated tools ● Direct LOB application developers to test Windows XP compatibility ● Build and test LOB suites ● Pilots should reflect the diversity of the computing environment ● Review Group Policy settings

Lessons Learned ● Require a common operating system version ● Maintain a central intranet Web site ● Ensure software distribution servers are near users ● Emphasize training for users and Helpdesk technicians ● Use Windows Update ● Promote Remote Desktop and Remote Assistance ● Enforce the use of firewall technology

Benefits and Conclusion ● Increased Security ● Remote access policies ● WLAN improvements ● Client firewall ● Lower Support Costs ● Help desk call rate lower than with Windows 2000 ● Greater support for mobile users ● Laptop users ● Remote users ● Lobby kiosks

For More Information ● Additional content on Microsoft IT deployments and best practices can be found on ● Microsoft Services ● Microsoft TechNet ● IT Showcase

© 2004 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. Microsoft, Active Directory, IntelliMirror, MSN, NetMeeting, Outlook, SharePoint, Visio, Windows, Windows NT, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.