Download presentation
Presentation is loading. Please wait.
1
TechEd 2013 4/15/2017 7:11 AM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
2
Managing Embedded Devices with Microsoft System Center 2012 SP1
4/15/2017 7:11 AM WCA-B326 Managing Embedded Devices with Microsoft System Center 2012 SP1 Hema Rajalakshmi © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
3
Agenda Support for write filter enabled devices in ConfigMgr 2012 SP1
Why Maintenance Windows Matter Persistence Other Improvements in SP1 and SP1+ Questions and Feedback
4
GROWTH OF EMBEDDED DEVICES
4/15/2017 7:11 AM GROWTH OF EMBEDDED DEVICES 100’s Millions IDC, Gartner PCs/SLATES Billions IDC, Consumer Electronics Association PHONES EMBEDDED DEVICES 10’s Billions VDC market reach, IDC © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
5
CHALLENGES MANAGING EMBEDDED DEVICES
Embedded devices OS are customized vs. the homogeneous OS in PCs/Servers Identifying Windows Embedded devices in ConfigMgr Write Filters are used to help maintain embedded devices Embedded devices are widely varied vs. PCs/Servers Updating the OEM embedded device/image
6
WINDOWS EMBEDDED DEVICE MANAGER
4/15/2017 7:11 AM WINDOWS EMBEDDED DEVICE MANAGER What’s in the box? Server installer Client installer Functionality Device Manager 2011 SP1 (For ConfigMgr 2007) ConfigMgr 2012 SP1 Software Distribution Software Updates Compliance Collections Device Imaging Legend Full support Partial support Not available © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
7
What is supported in SP1? CM 2012 SP1 capabilities extended
Thin Clients POS Digital Signage Kiosks Thin PCs Manage additional devices Additional software not required
8
Supported Embedded Operating Systems
4/15/2017 Supported Embedded Operating Systems Thin Clients Windows XP Embedded Windows Embedded Standard 2009 Windows Embedded Standard 7 POS / Kiosk Windows XP Embedded Windows Embedded Standard 2009 Windows Embedded Standard 7 POS Ready 2009 POS Ready 7 Digital Signage Windows Embedded Standard 2009 Windows Embedded Standard 7 Repurposed PC Windows Thin PC © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
9
System Center 2012 SP1 Embedded Management Capability Overview
Operating System Deployment Uses Windows ADK Software Update Management OS Servicing Application Management Win32 / Windows 8 Settings/Configuration Management Baselines Monitoring/Reporting Health/Compliance Endpoint Protection On-Premise x86/64 Intel SoC Cloud Windows Phone Windows RT Single Pane of Glass Antimalware
10
Native Support for Key Embedded Scenarios in SP1
Write filter orchestration Maintenance windows Opportunistic and forced persistence SCEP client installation SCEP updates No additional software/license
11
Write Filters and Overlays
12
Why Maintenance Windows Matter
ASAP
13
Without a Maintenance Window
Get deployment notice Download content Reboot immediately to disable WF Content gone; re-download Install content Reboot to enable WF
14
With a Maintenance Window
Waits for maintenance window Get deployment notice Disables WF; reboots Maintenance window arrives Install contents; reboots Downloads content
15
With Persistence Translation: I want to commit this change ASAP, so do the write filter thing at the deadline, or, better yet, at the maintenance window
16
Without Persistence Translation: Just put it in the overlay. When another deployment comes along with persistence, we’ll commit the change then.
17
What can be forced to persist?
These have a forced persistence option Applications Packages & programs Software Updates Task sequences These are persisted opportunistically Client agent settings Settings management (aka DCM set) Power management
18
One More Persistence Issue
First inventory data Delta data ? ! ? ! ?
19
With File Based Write Filters
Delta data First inventory data
20
Windows Embedded 8 - Write Filters
Windows Embedded 8 Standard Windows Embedded 8 Industry Functionality UWF EWF FBWF File/folder exclusions Yes No Registry key exclusions No* Sector-based filtering Supports HORM RAM-based overlay Providers for Windows Management Instrumentation (WMI) version 2 Disk-backed overlay Commit volume Commit file *You can use Registry Filter to make registry entries on volumes protected with EWF or FBWF persistent
21
Supported Write Filters
File Based Write Filters (FBWF) Redirects all writes targeted for protected volumes to overlay Folder/file exclusions can be used Enhanced Write Filters (EWF) RAM Stores overlay information in RAM Information on overlay discarded on reboot Unified Write Filters (UWF) Sector-based write filter to protect storage media Use Hibernate Once/Resume Many (HORM) or file and registry filtering exclusions Servicing mode via the UWF WMI provider ELM outside of Configuration Manager
22
Management Capabilities Overview
Windows Embedded 8 Standard with Write Filter enabled Management Capability Write Filter Awareness Maintenance Windows + Policy OS Deployment X Software Update Management Application Management Setting Configuration Management Monitoring / Reporting Endpoint Protection
23
Example – Software Update (with FBWF)
Admin selects the updates to install Admin selects the option to force persist the changes Admin selects target devices and pushes updates Write filter orchestration happens Update applied
24
Example – Software Update (with UWF)
Admin creates task sequence Admin selects task sequence and deploys Devices are updated
25
ELM to manage UWF device
Snap-in to MMC ELM detects the type(s) of write filter installed Uses WMI to detect and change config settings
26
Improvements Operating System Deployment Improvements
“Apply operating system” “SMSTSPostAction” Discovery Improvements Write filter capable now identified in Discovery Data Record
27
Client Side Improvements
Non-admins cannot log on while device is being serviced Software Center blocks installation if write filters are enabled Users cannot change their business hours Users cannot postpone deployments to non-business hours
28
Write Filter considerations
Settings management not write filter aware Manual write filter handling Opportunistic persistence during maintenance window Windows 8 applications registered during user login For fewer applications, re-register Admin to login to finalize app registration
29
Endpoint Protection SCEP installs will persist through the supported write filters Updates come frequently Write filter exceptions allow definition updates to persist Can be manually set or defined in a module New setting for Endpoint Protection client installation
30
Best Practices Use maintenance windows Plan for persistence
Make sure your max run time fits inside the maintenance window Plan for persistence Make deployments “required” instead of “available” Use File Based Write Filters Configure these exceptions to persist state and inventory data CCMINSTALLDIR\*.sdf CCMINSTALLDIR\ServiceData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\StateSystem Use WMI provider to manage other filters
31
Appendix - Exclusions for SCEP
Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Antimalware Folders: %ProgramData%\Microsoft\Microsoft Antimalware\Definition Updates\ %ProgramData%\Microsoft\Microsoft Antimalware\Scans\ %ProgramData%\Microsoft\Microsoft Antimalware\Support\ %ProgramFiles%\Microsoft Security Client\ Files: %Windir%\Windowsupdate.log %Windir%\Temp\MpCmdRun.log %SystemRoot%\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun*.log %SystemRoot%\ServiceProfiles\NetworkService\AppData\Local\Temp\MpCmdRun*.log
32
Thank you! Q&A
33
Windows Track Resources
4/15/2017 7:11 AM Windows Track Resources Windows Enterprise: windows.com/enterprise Windows Springboard: windows.com/ITpro Microsoft Desktop Optimization Package (MDOP): microsoft.com/mdop Desktop Virtualization (DV): microsoft.com/dv Windows To Go: microsoft.com/windows/wtg Outlook.com: tryoutlook.com © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
34
Resources Learning TechNet msdn http://channel9.msdn.com/Events/TechEd
4/15/2017 7:11 AM Resources Learning Sessions on Demand Microsoft Certification & Training Resources TechNet msdn Resources for IT Professionals Resources for Developers © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
35
For More Information System Center 2012 Configuration Manager
us/evalcenter/hh aspx?wt.mc_id=TEC_105_1_33 Windows Intune Windows Server 2012 Windows Server 2012 VDI and Remote Desktop Services us/evalcenter/hh aspx?ocid=&wt.mc_id=TEC_108_1_33 desktop-infrastructure.aspx More Resources: microsoft.com/workstyle microsoft.com/server-cloud/user-device-management
36
Complete an evaluation on CommNet and enter to win!
4/15/2017 7:11 AM Complete an evaluation on CommNet and enter to win! © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
37
4/15/2017 7:11 AM Required Slide *delete this box when your slide is finalized Your MS Tag will be inserted here during the final scrub. Evaluate this session Scan this QR code to evaluate this session and be automatically entered in a drawing to win a prize © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
38
4/15/2017 7:11 AM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Similar presentations
