1. Windows 10 Deployment Explained
Dan Lezoche
x1628
@DLezoche

2. © Bucks County Intermediate Unit - All Rights Reserved
Steal This Content
This deck
my.sharepoint.com/:p:/g/personal/dlezoche_bucksiu_org/EYTjmkSRBeBNt9 FZeOpZ9yoBvHAbUNPnJlUlhhEovPZsyA?e=U4mgFA
Simplified: 
Handout
my.sharepoint.com/:w:/g/personal/dlezoche_bucksiu_org/ES3FXma2uGJAu k-mNdwmnyABLGABa5rOBIIuJM7aY1G2xw?e=zhXp4z
Simplified: 
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

3. © Bucks County Intermediate Unit - All Rights Reserved
Foundation
Problem Statement
Windows 7 and 8.1 mainstream support has ended, we need to move to Windows 10 somehow
Migrate to x64 and EUFI now
What hardware?
Intel i5, 8GB, SSD, TPM 1.2, VT BIOS
Client Lifecycle
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

4. © Bucks County Intermediate Unit - All Rights Reserved
The Old Way
Common platforms
Ghost/WDS/FoG/OEM/SnapDeploy/etc.
OEM installations right to client
Manual application installation/setup/configuration
“Fat” images right to hardware
Custom capture of “golden system” with all drivers/apps/etc
Downsides
Inflexible deployment
Labor intensive
Platform specific – large image libraries
Hard to update/revise
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

5. © Bucks County Intermediate Unit - All Rights Reserved
The New Way
Common platforms
MDT, SCCM, KASE, LanDesk, Altiris, ZenWorks
“Thin” imaging to disparate hardware
Task sequences for customization during deployment
Very flexible; dynamic rule-based installation
Downsides
More complicated backend setup
Drivers and application installations need to be automated
Some are $licensed
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

6. © Bucks County Intermediate Unit - All Rights Reserved
The New-New Way
Emerging platforms
Intune
Auto Pilot
Login to new workstation with AD creds; AAD join automatically
Pull Intune apps/policies/etc.
Provisioning
OEM/Clean image
USB key configuration from OOBE
Downsides
Departure from traditional nuke/pave and client lifecycle management
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

7. © Bucks County Intermediate Unit - All Rights Reserved
But Wait, There’s More!
Common alternatives
Ship gold image to manufacturer
3rd party mass deployments
$Vendor images machine
Often unboxes, delivers, coordinates
Less district staff involvement needed for imaging
Downsides
Need appropriate lead time for purchase/deployment/delivery
Cost can increase dramatically per-device
May need to extend infrastructure to vendor for AD join, imaging, etc.
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

8. © Bucks County Intermediate Unit - All Rights Reserved
Windows 10 Version Soup
Releases
1507, 1511, 1607, 1703, 1709, 1803
Editions (simplified)
Home, Professional, Enterprise*, Education*, Enterprise LTSB*
Architectures
X86/32-bit
X64/64-bit
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

9. Deployment in a Nutshell (MDT/SCCM)
Build and capture 'golden' image (VM; snapshot)
Import into MDT/SCCM
Create basic task sequence (test)
Add drivers/applications (test)
Add customizations (test)
BIOS/EUFI, desktop tweeks, etc.
Firmware updates (test)
BitLocker / security (test)
User State (for refresh)
Increase performance with powercfg.exe (TechNet)
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

10. © Bucks County Intermediate Unit - All Rights Reserved
Building your Plan
Handout
Pre-planning
Testing
Demo hardware
Virtual machines
Alpha/power user trial
Process validation
Staff training
Beta deployment
Full deployment
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

11. © Bucks County Intermediate Unit - All Rights Reserved
Servicing
Application management
Chocolatey ($free or paid) -
PDQ Deploy ($500 /admin) -
Ninite - ($per device)
SCCM\MDT
PSAppDeploy -
Windows/Microsoft Updates
WUFB - is-windows-update-for-business/
WSUS
SCCM Integration
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

12. © Bucks County Intermediate Unit - All Rights Reserved
Pro-Tips
Standardize on HW
Migrate to EUFI and 64-bit OS
Use whatever you want to deploy/manage
Plan for application deployment/updates
Design Windows update strategy
Plan for firmware/driver updates
Try to leverage the vast security options
BitLocker (GPO to write recovery to AD)
Credential Guard (Requires VT enabled)
Use USMT for user state! (test thoroughly)
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved

13. © Bucks County Intermediate Unit - All Rights Reserved
More Learning
TTL '18
Deploying and Using Intune for Education – Dave Light – 5/8 9:00AM
Package and Deploy Software with SCCM – AJ Malloy – 5/8 11:30AM
Configuration Manager OSD – Glen Drager – 5/9 1:00PM
Bucks IU GitHub –
Michael Nystrom -
Johan Arwidmark –
Windows Noob –
November 9, 2018
© Bucks County Intermediate Unit - All Rights Reserved