Look Mom, No Hands! Zero Touch Software and OS Deployment! If you like to automate things like I do then you’ll love System Center Configuration Manager 2007. SCCM is a comprehensive management tool to assess, deploy, and update servers, client computers, and devices-across physical, virtual, distributed, and mobile environments. There are a multitude of areas that System Center Configuration Manager can help you realize cost savings and efficiencies when managing your client infrastructure. In this session we will focus on the Software Distribution and Operating System Deployment functionality and see how it can help your simplify, and automate, the task of deploying Windows 7 and applications to desktops in your environment!! Kick back, let the SCCM do the work for you!!!

Evaluations Are VERY IMPORTANT! Please fill out your evaluations … Same scale as “grade school” (drop the one’s) 10=100% Does not exist because there is no Such thing as “perfect”  9=90% Good = Report card of “A” 8=80% OK = Report card of “B” Less than 8, Please give feedback so we can improve 7=70% Not So Good = Report card of “C” Less than 7… You get the picture Online Presence http://blogs.technet.com/johnbaker http://www.microsoft.com/events/series/deploymentessentials.aspx

Look Mom, No Hands! Zero Touch Software and OS Deployment! John Baker Chief Technology Strategist Microsoft Corporation http://blogs.technet.com/johnbaker http://www.microsoft.com/events/series/deploymentessentials.aspx

Agenda Overview of Configuration Manager OS Deployment in Configuration Manager MDT Extensions for Configuration Manager Operating System Deployment - OSD

System Center Configuration Manager Automated solution for assessing, migrating and deploying windows server and client operating systems Broad support for advanced delivery: Operating systems Applications Software and hardware updates Support for both physical and virtual environments Increased scenario support: Corporate Network Branch locations Mobile Workforce Home workers (Internet based) System Center Configuration Manager

Configuration Manager Site Systems Asset Intelligence sync point SQL Server Out of band service point Distribution Point SQL Server Reporting Services point Primary Site Server Server Locator Point Reporting Point Management Point SMS 2003 Equivalent Role System Health Validator Fallback Status Point Configuration Manager Role Software Update Point PXE Service Point Branch DP State Migration Point

Configuration Manager Site Systems Asset Intelligence sync point SQL Server Out of band service point Distribution Point SQL Server Reporting Services point Primary Site Server Server Locator Point Reporting Point Management Point SMS 2003 Equivalent Role System Health Validator Fallback Status Point Configuration Manager Role Software Update Point PXE Service Point Branch DP State Migration Point

Review SCCM Demo

What’s New in SCCM 2007 R3 Power Management Operating System Deployment Improvements Dynamic Collection Evaluation Active Directory Delta Discovery Simplified Resource Management Desired Configuration Management Higher Number of Supported Clients Per Hierarchy

Application Deployment 4/23/2017 12:03 AM Application Deployment Distribution Server Makes deployment of business productivity application easy Office System Programs SAP, Siebel, etc. Planning Tool Extended and improved inventory and metering Deployment Tool Target based on business needs Right applications to the right users on time Better user experience Package Program Collection Client Client Client

Operating System Deployment Highly automated solution for assessing, migrating and deploying windows server and client operating systems Common toolset and process End-to-end deployment automation support Assess migration readiness for Windows Server 2008 R2, Windows 7 and Office 2010 Built in reports for minimum and recommended settings Enable dynamic deployment of drivers at runtime Organize, replicate and deploy packages Utilize Windows PnP detect

Streamlined Application and Desktop Delivery Client Management Streamlined Application and Desktop Delivery Optimized Client Health and Performance Client Infrastructure Monitoring Client Health Monitoring and Proactive Issue Identification Remote PC Diagnostics & Repair Zero-touch Remote Diagnosis and Remediation with Intel® Vprotm Ease User Access Without Compromise End-Point Security Management Enforced Compliance with System Health Policy Definitions via Remediation Configuration Compliance Assess Systems Compliance Against Established Configuration Baselines Adaptive Application Delivery Managed Client Application Delivery via Traditional and Virtual Methods Simplified Windows 7 Deployment Automated OS Deployment via Image Standardization

The Task Sequencer Core OS deployment mechanism Delivered to clients as policy via MP Sequence of steps to execute Steps prior to deploying new OS Steps in Windows PE to deploy new OS Steps after the new OS is deployed Completely hands-off for full automation of the process Two kinds of actions Built-in actions provided within product Custom actions command line driven, Vbscript, Batch etc. Task Sequence can do other actions: Capture images Deploy Application chains Administer complex activities More (unlimited)

Task Sequence Actions The built-in list of building blocks Run Command Line Install Software Install Software Updates Join Domain or Workgroup Connect to Network Folder Reboot Computer to Windows PE or hard disk Set Task Sequence Variable Format and Partition Disk Convert Disk to Dynamic Enable BitLocker Disable BitLocker Request State Store Capture User State Restore User State Release State Store Apply Operating System Apply Data Image Setup Windows and ConfigMgr Install Deployment Tools Prepare ConfigMgr Client for Capture Prepare Windows for Capture Capture Operating System Images Auto Apply Drivers Apply Driver Package Capture Network Settings Capture Windows Settings Apply Network Settings Apply Windows Settings

Controlling Task Sequence Steps Condition An optional test. If the test returns true, the action is executed. If the test returns false, the action is skipped The actual work to perform. Typically a command line action – map a network drive, reboot, run a script, etc. Action Governs behavior if the action completes with an error Continue-on-Error flag

How Windows Deployment works Configure RAID controller Format & Partition Hard Drive Deploy OS Image Add Device Drivers Reboot to New OS Install ConfigMgr Client Install Software Updates Install Applications Restore User State & Settings Start OS Deployment Check Deployment Readiness Save User State & Settings Save System Settings Reboot to WinPE Steps in new OS Steps in old OS Steps in WinPE Bare Metal starts here

Configure SCCM for Operating System Deployments Demo

MDT Extensions

Microsoft Deployment Toolkit 2010 Feature categories Wizards Help with the setup and configuration, instead of manual step-by-step processes Capabilities added to a task sequence Built into our task sequence templates Leverages scripts Additional task sequence actions Extensions to the task sequence editor Scripts to perform the task Making deployments more dynamic Web services, databases, computer variables, collection variables, conditions, etc.

Task Sequence Capabilities Dynamic state capture location Capturing user state to the network is expensive Network traffic (both ways) Disk space consumption Time Only user the state migration point (SMP) when necessary Estimate needed space Calculate if it will fit Script to run USMT estimate Conditionally request SMP store Standard state capture Conditionally release SMP store

Task Sequence Capabilities Configure answer files Dynamically update OS configuration files per computer Unattend.txt (Windows XP or Windows Server 2003 unattended) Sysprep.inf (Windows XP or Windows Server 2003 images) Unattend.xml (Windows 7 or Windows Server 2008) Inject values stored in task sequence variables Preconfigured for commonly-used values Domain, OU, computer name, time zone, area code, locale, language, full name, organization, product key, home page, etc. Easily extensible for whatever values you want XML-driven: which variable to inject where Dynamic deployments

Task Sequence Capabilities Handle any scenario One task sequence to handle all possible scenarios New computer (bare metal) Operating system refresh (wipe and load) Reference computer image build and capture Replace computer (capture only) Any operating system type OS installation package OS image Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008, Windows 7 Conditions specified to control the flow

Task Sequence Capabilities Backup Create an image of the computer before installing a new operating system Script to run ImageX.exe to create WIM Stores backup locally when possible (>=50% free space) If using the network, the WIM might be huge Caveats: This can take a long time, so you may choose to do it selectively ImageX is designed to create a small image, so it’s not optimized for capture speed ImageX is an imaging tool, not a backup tool Ideal for recovering lost data, not the entire OS

Task Sequence Capabilities Miscellaneous items Validation Don’t deploy a client OS to a machine running a server OS (the ultimate “oops”) Ensure minimum memory, processor, and disk requirements are met Decompress the root of the drive Prerequisite checks Windows Scripting Host and MSXML are functional BIOS check Block installation for incompatible BIOSes Capture and restore local group membership

Task Sequence Capabilities Miscellaneous items Tattoo the machine Inventory deployment details Enable Diskpart compatibility mode when needed (Windows XP, Server 2003) KB 931760, KB 931761 Move state store (if local) Otherwise, it is deleted when the deployment completes Copy logs Make them available on a network share for troubleshooting

Task Sequence Actions MDT 2010 Additions

Task Sequence Actions Use Toolkit Package Custom actions have two pieces: The user interface The command that gets executed The “Use Toolkit Package” action takes care of getting the needed files to the computer Want to use any other actions? You need this first!

Task Sequence Actions Gather Sets variables that can be used elsewhere in the task sequence “Local data” retrieved from WMI MAC addresses, IP addresses, make, model, etc. “Rules” can leverage local data to make further decisions Static rules (e.g. subnet) Database queries Web services Dynamic deployments

Task Sequence Actions Validate Perform hardware checks to make sure the machine is capable Prevent accidental deployment of client operating systems to server hardware (the ultimate “oops”)

Task Sequence Actions Install Updates Offline Apply patches to Windows 7 before the OS boots for the first time Just-in-time patching Eliminates window of vulnerability Uses PKGMGR/DISM from Windows PE Uses an existing software update package All patches in the package will be applied Applicability cannot be determined offline

Task Sequence Actions Install Language Packs Online or Offline Simplifies the process of installing language packs during an OS deployment Create a package containing the language packs (LP.CABs) needed Specify that package should be installed online (after the OS is running) or offline (before the OS boots for the first time, similar to patching)

Summary Broad support for advanced delivery Applications Operating Systems New Features in SCCM 2007 R3 Client Management Task sequencer is the core deployment mechanism in SCCM

Import a Task Sequence from MDT 2010 Demo

Resources System Center Configuration Manager Management Techcenter http://www.microsoft.com/systemcenter/configmgr/default.mspx Management Techcenter http://www.microsoft.com/systemcenter/softgrid/default.mspx System Center Team Blog http://blogs.technet.com/systemcenter/ Windows 7 http://www.microsoft.com/windows7 Website for Microsoft Desktop Optimization Pack for Software Assurance http://www.microsoft.com/windows/enterprise/products/mdop/default.aspx

4/23/2017 12:03 AM © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, It should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.