Michel Barnett Architect Microsoft WCL201

Session Objectives and Takeaways Session Objectives: Explain deployment options Demonstrate key deployment tasks Leave you with an understanding of the tools used for: Customization Deployment Configuration Updating Explain how Windows 7 fits with IE8 Deployment

Enterprise Desktop Challenges

Desktop Total Cost of Ownership

Microsoft Desktop Optimization Vision

PlanBuildDeployOperate Requirements Requirements Specifications Specifications Vision / Scope Vision / Scope Inventory Inventory Assessments Assessments Architecture Architecture IO remediation IO remediation Requirements Requirements Specifications Specifications Vision / Scope Vision / Scope Inventory Inventory Assessments Assessments Architecture Architecture IO remediation IO remediation Image engineering Image engineering Deployment engineering (LTI/ZTI) Deployment engineering (LTI/ZTI) App Compat testing App Compat testing App Compat remediation App Compat remediation App packaging App packaging IO infra. upgrades IO infra. upgrades Image engineering Image engineering Deployment engineering (LTI/ZTI) Deployment engineering (LTI/ZTI) App Compat testing App Compat testing App Compat remediation App Compat remediation App packaging App packaging IO infra. upgrades IO infra. upgrades Lab deployments Lab deployments Pilot deployments Pilot deployments Production deployments Production deployments Automated provisioning (via LTI/ZTI) Automated provisioning (via LTI/ZTI) Process improvements Process improvements Lab deployments Lab deployments Pilot deployments Pilot deployments Production deployments Production deployments Automated provisioning (via LTI/ZTI) Automated provisioning (via LTI/ZTI) Process improvements Process improvements Deployment reporting Deployment reporting Image mgmt Image mgmt App mgmt App mgmt System monitoring System monitoring Deployment reporting Deployment reporting Image mgmt Image mgmt App mgmt App mgmt System monitoring System monitoring Steps to an Optimized Desktop

Key Deployment Technologies Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

Customization Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

Internet Explorer Administration Kit Customization Wizard Creates customized versions of IE Profile Manager Manages customization settings Supports automatic configuration

Audience Types Internet Service Provider (ISP) ISP users Internet Content Provider (ICP) Web Sites ISVs Corporate Administrator Corporate employees

Key Features Distribution Options CD, LAN Custom Components In-house applications Setup experience Hands-free/ interactive Search experience Custom search providers Browser experience Home pages, favorites, toolbars Administrator-approved Microsoft ActiveX controls Automatic configuration

Corporate Usage Install on build machine IE8 must be pre-installed Run wizard to create customized version of browser Platform specific Deploy customized version Manage with Profile Manager Optional

Demonstration Topology IEAK Build Machine Router IEAK Configuration Manager Server Domain Controller XP Workstation

The Scenario Customize Internet Explorer Home page Title bar Search providers Deploy using Configuration Manager With slipstream option Manage with Group Policy Update using Windows Server Update Services

IEAK Customization Wizard

Deployment: Configuration Manager Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

Deployment Options Group Policy Windows Server Update Services Windows Update System Center Configuration Manager Network Shared Folder Hyperlink from or Web Page CD

Managed Deployment System Center Configuration Manager is one example Use the.MSI package created by the IEAK Customization Wizard Four step process for System Center Configuration Manager distribution Create the Configuration Manager package Create the installation program Assign to a distribution point Create an advertisement

IE8 Deployment with System Center Configuration Manager

Deployment: Slipstreaming Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

Deployment vs. Slipstreaming Deployment Familiar process Applies to all supported operating systems Windows XP Windows Server 2003 etc. Necessary if operating system is already deployed Slipstreaming Faster No additional reboots May include updates and language packages Applies only to Vista and Windows Server 2008

How to Slipstream Stage IE installation media Extract standard installation program Stage operating system installation media From installation DVD Mount operating system Image file (.wim) Use PKGMGR to add Internet Explorer 8 Unmount operating system image Create ISO for OS Image

Using PKGMGR Pkgmgr.exe /n:.\updatepackage\Windows6.0- KB x86.xml /o:.\mount;.\mount\windows /s:.\sandbox /l:.\slipstream.log /n – unattended installation answer file /o – location of boot manager ; location of Windows directory /s – temporary storage /l – log file

Slipstreaming IE8

Management Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

Group Policy About 1300 group policies User and machine configuration Machine takes precedence Found in Administrative Templates in GP editor

Deploy Phase Depth of Group Policies will be determined by the needs of the customer Configure based on needs rather than trying to cover all policies New and recommended Group Policies can be found here:

Deploy Phase Commonly Set Group Policies

Group Policy

Management Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

Windows Update Useful for updating and installing Internet Explorer IE8 is now available through Automatic Updates pare-for-automatic-update-distribution-of-ie8.aspx Updates will be installed based on settings on the individual clients Effective, but doesn’t allow for centralized management Consider implementing update management system…

Update Management with WSUS Individual WSUS servers connect to Windows Update to download update packages Administrators can test updates to ensure compatibility before deployment Once approved, the updates are available to target machines System Center Configuration Manager makes this even better…

WSUS and Configuration Manager Microsoft Update Software Update Point / WSUS Server Primary Site Server ConfigMgr Client / WU Agent Synch Updates Database Synch Deploy Updates

Update Management with System Center Configuration Manager

Blocker Toolkit Blocks IE from being installed via Automatic Updates Gives you control of when IE is installed Creates a registry key HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\8.0\DoNotAllowIE80 Two possible settings 0: Allows AU to install IE8 1: Blocks AU from installing IE8 Two components in the toolkit ADM template for Group Policy IE80Blocker.cmd /B to block /U to unblock

Not necessary (IE8 built-in) Support ed Windows 7 Support Useful for Automatic Configuration

Slipstream Deployment

Internet Explorer Resources Feature Overview Engineering Blog blogs.msdn.com/ie Internet Explorer TechNet Site technet.microsoft.com/ie IE8 Blocker Toolkit 9e4e-8e224ec6dd8c&displaylang=en Group Policy Settings for IE D-24B2790BF592&displaylang=en Internet Explorer Administration Kit (IEAK) technet.microsoft.com/en-us/ie/bb aspx

Sessions On-Demand & Community Resources for IT Professionals Resources for Developers Microsoft Certification and Training Resources Microsoft Certification & Training Resources Resources Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online. Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online.

Related Content Breakout Sessions WCL204 – What’s New for Your Enterprise in Windows Internet Explorer 8 5/11 2:45 PM – 4:00 PM WUX04-INT – Top 10 Web Mistakes, and How to Avoid Them 5/11 – 4:30 PM – 5:45 PM WCL201 – Deploying and Rolling Out Windows Internet Explorer 8 5/12 8:30 AM – 9:45 AM WUX301 – Advanced Cross-Browser AJAX Applications with Windows Internet Explorer 8 5/12 10:15 AM – 1130 AM SIA315 – Windows Internet Explorer 8 Security, Inside and Out 5/12 1:00 PM – 2:15 PM WUX310 – Integrating Your Site with Windows Internet Explorer 8 Using Accelerators, Web Slices and Search Providers 5/15 2:45 PM – 4:00 PM Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session. Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session.

Related Content Hands On Labs WCL18-HOL – Managing Windows Internet Explorer 8 Security Settings in the Enterprise WUX09-HOL – Windows Internet Explorer 8: Building Search Suggestions WUX10-HOL – Preparing for Windows Internet Explorer 8: Application Compatibility WUX12-HOL – Using Accelerators and WebSlices in the Enterprise Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session. Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session.

Track Resources →Want to find out which Windows Client sessions are best suited to help you in your deployment lifecycle? →Want to talk face-to-face with folks from the Windows Product Team? Meet us today at the Springboard Series Lounge, or visit us at Springboard Series The Springboard Series empowers you to select the right resources, at the right technical level, at the right point in your Windows® Client adoption and management process. Come see why Springboard Series is your destination for Windows 7.

Complete an evaluation on CommNet and enter to win! Required Slide

© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. Required Slide