Presented by: Christopher Diachok, CMS Consulting Inc.

The contents of this presentation are the property of CMS Consulting Inc. No portion, in whole or in part can be used without the express written consent of CMS. You may for permission to re-post or re-use any of this content.

Microsoft Infrastructure and Security Experts Active Directory - Windows Server - Exchange - SMS - ISA MOM - Clustering - Office – Desktop Deployment - SQL – Terminal Services - Security Assessments - Lockdown – Wireless Training by Experts for Experts MS Infrastructure – Security - Vista and Office Deployment Visit us online: Downloads – Resources – White Papers For Security Solutions For Advanced Infrastructure For Network Solutions For Information Worker For Mobility Solutions

Common ways of doing things today…and “best practice” What’s new in desktop lifecycle management? What is image life cycle? What is BDD? What is so cool about the new tools? Why should I care about image lifecycle?

Who knows what BDD is? How many users in your organization:  < 100  100 – 500  500 – 5000  > 5000 How many images do you currently have  1-5  5 – 25  25 – 50  > 50  I don’t know 1. ~~~~~~~~~ 2. ~~~ ~~ ~~ 3. ~~~~

Level 1: Chaotic: Uncontrolled with little planning No standardization in imaging/deployments Manual deployments No images Level 2: Some standardization: Limited standardization Limited process knowledge within team Manual deployments Multiple images Level 3: Manual deployments: Some standards in place Processes are documented Manual deployments Multiple images Level 4: Some Automation: Standards are in place Processes are documented Automated deployments Reduction in image count Level 5: Fully AutomatedS tandards are in place Processes are documented Automated imaging Automated deployments Reduction in image count

I don’t know if my applications will work with the new operating system Upgrades cost me a lot of money! Upgrades take too long, its easier to stay where we are at I don’t have the staff for a long project I have no easy way to deploy a new operating system This stuff only works with Microsoft technologies Vista

Operating SystemQuantity Windows NT20 – 40 Windows Windows XP3-5 Windows Vista1-2

Hardware & OS Applications in Image Core Applications Sales ApplicationsFinance ApplicationsHR Applications Development Applications One Off Applcation One Off Application Its not just about the image Image reduction however will save money Global image End to End management of the desktop environment Image inception to end of life Application Packaging Application deployments Patch Management Desktop security Next generation OS

Application Compatibility Computer Imaging Deployment Patch /App Management Security

Business Desktop Deployment 2007 provides prescriptive guidance, tools, scripts for desktop deployment lifecycle management Supports deployment of Vista and XP Deployment tool agnostic Centralized storage of source files Automated creation of base images Saves time Standardization Equals $$$$ savings!!! Includes tools such as BDD Workbench Update rollup released June – KB937191

Application Compatibility Toolkit 5.0 BDD 2007 Workbench System Image Manager Windows Automated Installation Toolkit ImageX PEImg Windows Deployment Services User State Migration Tool 3.0 Group Policies

Collect Data AnalyzeTest Inventory Applications and Devices Gather high-level compatibility data In-depth testing with test tools Log test data Build and Test mitigations Prioritize and Categorize Synchronize data with Compatibility Exchange Identify high-level issues

Log Processing Service Agent Framework/Compatibility Evaluators Europe North America Desktop Topology Internet HR Finance Application Compatibility Manager Local ACT DB Inventory IE IE UAC UAC UCE Etc… Compatibility Exchange Wilma Betty

Imaging infrastructure GUI interface Easy driver installation Can add applications and patches to images Supports XP and Vista Can be used to deploy operating systems in small environments

Quickly create an unattended Windows Setup answer file View all of the configurable settings in a Windows image Easily update an existing answer file Add third party drivers, applications, or other packages to an answer file Create a Configuration Set

Tool to automatically migrate user settings and data during an enterprise migration project Migrates Windows 2000 SP4 and > to Windows XP or Vista Uses XML files instead of inf Scanstate and Loadstate /config option can be used for excludes Requires elevated mode in Vista (due to User Access Control)

Runs on Windows Server 2003/2008 Replaces RIS New Features: Native support for Windows PE as a boot operating system. Native support for the Windows Imaging (WIM) file format. An extensible and higher-performing PXE server component. A new client menu for selecting boot operating systems. Benefits: Deploys Windows Vista and Windows Server 2008 to "bare metal" computers (no operating system installed). Supports mixed environments including Microsoft Windows XP and Microsoft Windows Server Provides an end-to-end solution for deployment of Windows operating systems to client and server computers.

Boot Click F12 Click F12 Apply new image Boot Image PXE Boot Calls Boot image from WDS Scripts Run Boot image loads User State migrated Calls defined WIM File New WIM installed Operating System and base applications Supplementary applications installed Desktop Windows PE Vista OS InstallApplications ConfigureOS Unattend.xml Drivers added Build required file structure User state restored

Microsoft’s offering in “Desktop imaging” Adds support to SMS 2003 for deploying new OS images to desktops in a distributed environment Integrates with SMS 2003 to improve functionality Inventory-based planning and targeting Centralized tracking and status Replication of images throughout distributed enterprises Open architecture Partitioning capability (using Diskpart) Uses WIM image format: No need to delete system partition – data can stay local Capable of new computer install and refreshes OS Supports custom scripts and migration tools Installs into SMS 2003 Requires SMS 2003 Service Pack 1 or 2

Extensions to the OS Deployment Feature Pack Designed to completely automate three scenarios: New Computer Refresh Computer Replace Computer Designed to extend OSD capabilities Computer rename Greater control over the process: dynamic USMT state backup location, Sysprep.inf editing Centralized monitoring and control Progress reporting and alerting (SMS, MOM)

1 BDD Deployment – – Refresh Computer Client receives advertisement to init OSD, determine Package/Program to install and run USMT state capture Validation Phase 1 State Capture: Variables and UNC path for migration store set, Capture run 2 Boot toWinPE 3 Compressed WIM OS image is downloaded & installed 4 Post Install: Script: Modify Sysprep.inf, run Mini Setup, reboot 5 6 State Restore: SMS delivers role based applications & post OSconfig. 7 State Capture: 1.2 CMD: User State data stored State Restore CMD: User State restored State Capture: 1.1 Script: Set System variables USMT Data File Server SMS 2003 SP1 OSD FP MOM 2005 Server 8 BDD Script/Rules Monitor Status Script/Rules LogActivity

OS platform standardization easier management of the desktop Lower TCO Reduction in images reduced ongoing image support costs Reduced complexity Desktop security more secure desktop landscape Automation more rapid, less expensive OS deployments Repeatable processes Desktop PC Replacement Age (lifecycle) From: MS/Intel Strategic Mgmt of the PC Install Base Whitepaper Number of Deployed PC Hardware Configurations Estimated Annual Support Cost Reductions CurrentTargetPercent$ / PC 10523%$ %$ %$346 Hardware Configuration Reduction Reduces Costs “Lowering the number of configurations by half can cut support costs by 25 – 50%” From: MS/Intel Strategic Mgmt of the PC Install Base Whitepaper

Major Canadian Bank Reduction in images from 18 worldwide to 2 (XP) Provides increased standardization and automation Large Canadian Retailer Previous chaotic state is now a managed desktop infrastructure Significant reduction in images to a single image (XP) Image build is automated Deployment with SMS is automated Toronto District School Board 50 images has been reduced to 1 Vista Automated image creation takes less than 1.5 hours (previously several days) Deployment reduced to 2 hours from approximately 16 Lab built over lunch Recently highlighted at the Vista launch in Toronto

November 20 – 21, 2007, MTCC, Toronto, ON, Canada

INSPIRE Infrastructure Workshop 4 days of classroom training - demo intensive AD, Exchange, ISA, Windows Server, SMS, MOM, Virtual Server Business Desktop Deployment – Deploying Vista/Office 3 days of classroom training - hands on labs (computers provide) Business Desktop Deployment Concepts, Tools, Processes, etc. Vista and Office Securing Internet Information Services Securing ActiveDirectory Securing Exchange day classroom training per topic TRAINING BY EXPERTS FOR EXPERTS

@ Brian Bourne, President – Robert Buren, VP Business Development – Christopher Diachok, Senior Consultant, MCSE, MCT – CMS Consulting Inc. – CMS Training – Toronto Area Security Klatch –

Thank You! Visit: CMS Consulting at Join: Toronto Area Security Klatch at Register: Security Education in Toronto at CMS Consulting Inc.