2. Michel Barnett Architect Microsoft WCL201

3. Session Objectives and Takeaways Session Objectives: Explain deployment options Demonstrate key deployment tasks Leave you with an understanding of the tools used for: Customization Deployment Configuration Updating Explain how Windows 7 fits with IE8 Deployment

4. Enterprise Desktop Challenges

5. Desktop Total Cost of Ownership

6. Microsoft Desktop Optimization Vision

7. PlanBuildDeployOperate Requirements Requirements Specifications Specifications Vision / Scope Vision / Scope Inventory Inventory Assessments Assessments Architecture Architecture IO remediation IO remediation Requirements Requirements Specifications Specifications Vision / Scope Vision / Scope Inventory Inventory Assessments Assessments Architecture Architecture IO remediation IO remediation Image engineering Image engineering Deployment engineering (LTI/ZTI) Deployment engineering (LTI/ZTI) App Compat testing App Compat testing App Compat remediation App Compat remediation App packaging App packaging IO infra. upgrades IO infra. upgrades Image engineering Image engineering Deployment engineering (LTI/ZTI) Deployment engineering (LTI/ZTI) App Compat testing App Compat testing App Compat remediation App Compat remediation App packaging App packaging IO infra. upgrades IO infra. upgrades Lab deployments Lab deployments Pilot deployments Pilot deployments Production deployments Production deployments Automated provisioning (via LTI/ZTI) Automated provisioning (via LTI/ZTI) Process improvements Process improvements Lab deployments Lab deployments Pilot deployments Pilot deployments Production deployments Production deployments Automated provisioning (via LTI/ZTI) Automated provisioning (via LTI/ZTI) Process improvements Process improvements Deployment reporting Deployment reporting Image mgmt Image mgmt App mgmt App mgmt System monitoring System monitoring Deployment reporting Deployment reporting Image mgmt Image mgmt App mgmt App mgmt System monitoring System monitoring Steps to an Optimized Desktop

8. Key Deployment Technologies Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

9. Customization Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

10. Internet Explorer Administration Kit Customization Wizard Creates customized versions of IE Profile Manager Manages customization settings Supports automatic configuration

11. Audience Types Internet Service Provider (ISP) ISP users Internet Content Provider (ICP) Web Sites ISVs Corporate Administrator Corporate employees http://go.microsoft.com/fwlink?LinkId=133798

12. Key Features Distribution Options CD, LAN Custom Components In-house applications Setup experience Hands-free/ interactive Search experience Custom search providers Browser experience Home pages, favorites, toolbars Administrator-approved Microsoft ActiveX controls Automatic configuration

13. Corporate Usage Install on build machine IE8 must be pre-installed Run wizard to create customized version of browser Platform specific Deploy customized version Manage with Profile Manager Optional

14. Demonstration Topology IEAK Build Machine Router IEAK Configuration Manager Server Domain Controller XP Workstation

15. The Scenario Customize Internet Explorer Home page Title bar Search providers Deploy using Configuration Manager With slipstream option Manage with Group Policy Update using Windows Server Update Services

16. IEAK Customization Wizard

17. Deployment: Configuration Manager Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

18. Deployment Options Group Policy Windows Server Update Services Windows Update System Center Configuration Manager Network Shared Folder Hyperlink from Email or Web Page CD

19. Managed Deployment System Center Configuration Manager is one example Use the.MSI package created by the IEAK Customization Wizard Four step process for System Center Configuration Manager distribution Create the Configuration Manager package Create the installation program Assign to a distribution point Create an advertisement

20. IE8 Deployment with System Center Configuration Manager

21. Deployment: Slipstreaming Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

22. Deployment vs. Slipstreaming Deployment Familiar process Applies to all supported operating systems Windows XP Windows Server 2003 etc. Necessary if operating system is already deployed Slipstreaming Faster No additional reboots May include updates and language packages Applies only to Vista and Windows Server 2008

23. How to Slipstream Stage IE installation media Extract standard installation program Stage operating system installation media From installation DVD Mount operating system Image file (.wim) Use PKGMGR to add Internet Explorer 8 Unmount operating system image Create ISO for OS Image

24. Using PKGMGR Pkgmgr.exe /n:.\updatepackage\Windows6.0- KB944036-x86.xml /o:.\mount;.\mount\windows /s:.\sandbox /l:.\slipstream.log /n – unattended installation answer file /o – location of boot manager ; location of Windows directory /s – temporary storage /l – log file

25. Slipstreaming IE8

26. Management Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

27. Group Policy About 1300 group policies User and machine configuration Machine takes precedence Found in Administrative Templates in GP editor

28. Deploy Phase Depth of Group Policies will be determined by the needs of the customer Configure based on needs rather than trying to cover all policies New and recommended Group Policies can be found here: http://technet.microsoft.com/en-us/library/cc985351.aspx

29. Deploy Phase Commonly Set Group Policies

30. Group Policy

31. Management Internet Explorer Administration Kit (IEAK) Customization Application: System Center Configuration Manager 2007 Operating System: Slipstreaming Deployment Group Policy Management Windows Update System Center Configuration Manager 2007 Windows Server Update Services (WSUS) Updating

32. Windows Update Useful for updating and installing Internet Explorer IE8 is now available through Automatic Updates http://blogs.msdn.com/ie/archive/2009/04/10/pre pare-for-automatic-update-distribution-of-ie8.aspx Updates will be installed based on settings on the individual clients Effective, but doesn’t allow for centralized management Consider implementing update management system…

33. Update Management with WSUS Individual WSUS servers connect to Windows Update to download update packages Administrators can test updates to ensure compatibility before deployment Once approved, the updates are available to target machines System Center Configuration Manager makes this even better…

34. WSUS and Configuration Manager Microsoft Update Software Update Point / WSUS Server Primary Site Server ConfigMgr Client / WU Agent Synch Updates Database Synch Deploy Updates

35. Update Management with System Center Configuration Manager

36. Blocker Toolkit Blocks IE from being installed via Automatic Updates Gives you control of when IE is installed Creates a registry key HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\8.0\DoNotAllowIE80 Two possible settings 0: Allows AU to install IE8 1: Blocks AU from installing IE8 Two components in the toolkit ADM template for Group Policy IE80Blocker.cmd /B to block /U to unblock

37. Not necessary (IE8 built-in) Support ed Windows 7 Support Useful for Automatic Configuration

38. Slipstream Deployment

39. Internet Explorer Resources Feature Overview www.microsoft.com/ie8 Engineering Blog blogs.msdn.com/ie Internet Explorer TechNet Site technet.microsoft.com/ie IE8 Blocker Toolkit www.microsoft.com/downloads/details.aspx?FamilyID=21687628-5806-4ba6- 9e4e-8e224ec6dd8c&displaylang=en Group Policy Settings for IE8 www.microsoft.com/downloads/details.aspx?familyid=AB4655F2-0A3C-42EB- 974D-24B2790BF592&displaylang=en Internet Explorer Administration Kit (IEAK) technet.microsoft.com/en-us/ie/bb219517.aspx

41. www.microsoft.com/teched Sessions On-Demand & Community http://microsoft.com/technet Resources for IT Professionals http://microsoft.com/msdn Resources for Developers www.microsoft.com/learning Microsoft Certification and Training Resources www.microsoft.com/learning Microsoft Certification & Training Resources Resources Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online. Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online.

42. Related Content Breakout Sessions WCL204 – What’s New for Your Enterprise in Windows Internet Explorer 8 5/11 2:45 PM – 4:00 PM WUX04-INT – Top 10 Web Mistakes, and How to Avoid Them 5/11 – 4:30 PM – 5:45 PM WCL201 – Deploying and Rolling Out Windows Internet Explorer 8 5/12 8:30 AM – 9:45 AM WUX301 – Advanced Cross-Browser AJAX Applications with Windows Internet Explorer 8 5/12 10:15 AM – 1130 AM SIA315 – Windows Internet Explorer 8 Security, Inside and Out 5/12 1:00 PM – 2:15 PM WUX310 – Integrating Your Site with Windows Internet Explorer 8 Using Accelerators, Web Slices and Search Providers 5/15 2:45 PM – 4:00 PM Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session. Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session.

43. Related Content Hands On Labs WCL18-HOL – Managing Windows Internet Explorer 8 Security Settings in the Enterprise WUX09-HOL – Windows Internet Explorer 8: Building Search Suggestions WUX10-HOL – Preparing for Windows Internet Explorer 8: Application Compatibility WUX12-HOL – Using Accelerators and WebSlices in the Enterprise Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session. Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session.

44. Track Resources →Want to find out which Windows Client sessions are best suited to help you in your deployment lifecycle? →Want to talk face-to-face with folks from the Windows Product Team? Meet us today at the Springboard Series Lounge, or visit us at www.microsoft.com/springboard www.microsoft.com/springboard Springboard Series The Springboard Series empowers you to select the right resources, at the right technical level, at the right point in your Windows® Client adoption and management process. Come see why Springboard Series is your destination for Windows 7.

45. Complete an evaluation on CommNet and enter to win! Required Slide

46. © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. Required Slide