Deploying the Microsoft Deploying the Microsoft Windows .NET Server Windows .NET Server Platform Platform

Wes MillerWes MillerProgram ManagerProgram ManagerWindows SetupWindows SetupMicrosoft CorporationMicrosoft Corporation

2

ObjectivesObjectives

Look at the technologies that can be used to Look at the technologies that can be used to install products on the Microsoft® Windows® install products on the Microsoft® Windows® .NET Server platform.NET Server platform

Examine the pros and cons of eachExamine the pros and cons of each Explore new functionality in the Explore new functionality in the

Windows .NET Server familyWindows .NET Server family Understand the Windows deployment toolsetUnderstand the Windows deployment toolset

3

AgendaAgenda

Windows deployment toolsWindows deployment tools Imaging versus scriptedImaging versus scripted Tools in-depthTools in-depth Windows Product Activation (WPA)Windows Product Activation (WPA) SummarySummary ResourcesResources

4

Windows Deployment ToolsWindows Deployment Tools

RIS – for bare metal setup or bare metal RIS – for bare metal setup or bare metal system image deployment (PXE-based), or system image deployment (PXE-based), or bothboth

Sysprep – for creating image-deployable Sysprep – for creating image-deployable systemssystems

RIPrep – RIS-based version of SysprepRIPrep – RIS-based version of Sysprep Unattend filesUnattend files

Unattend.txt (unattended installation)Unattend.txt (unattended installation) RIStndrd.sif (RIS unattended installation)RIStndrd.sif (RIS unattended installation) Sysprep.inf (automate Sysprep mini-setup)Sysprep.inf (automate Sysprep mini-setup)

5

Windows Deployment Tools Windows Deployment Tools (2)(2)

Windows Preinstallation Environment Windows Preinstallation Environment (WinPE) (WinPE) –– for customized deployment for customized deployment solutionssolutions Image-based deployment, for similar hardwareImage-based deployment, for similar hardware Unattend-based deployment, for dissimilar Unattend-based deployment, for dissimilar

hardwarehardware

Group Policy/SMS – distribution of new Group Policy/SMS – distribution of new Windows upgrades/updatesWindows upgrades/updates

Cmdlines.txt/GUIRunOnce – setup/post setup Cmdlines.txt/GUIRunOnce – setup/post setup scriptsscripts

6

Imaging vs. ScriptedImaging vs. Scripted

Image-based installations – file/disk-based Image-based installations – file/disk-based duplicationduplication RIPrep (RIS “imaging”)RIPrep (RIS “imaging”) Sysprep (Xcopy or capture with third-party Sysprep (Xcopy or capture with third-party

imaging software)imaging software)

Unattended installations – standard Windows Unattended installations – standard Windows setup that is automatedsetup that is automated RISetup (RIStndrd.sif) ~Unattend.txtRISetup (RIStndrd.sif) ~Unattend.txt Unattend.txtUnattend.txt

7

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal

UpgradesUpgrades

PrestagePrestage

Dissimilar HWDissimilar HW

Image basedImage based

Centralized Centralized installation installation pointpoint

Operating Operating system and system and applications applications togethertogether

Two or more Two or more partitionspartitions

Easy to Easy to reconfigurereconfigure

Requires Requires Active Active DirectoryDirectory

8

RISRIS

Remote Installation Services (RIS)Remote Installation Services (RIS) Permits network-initiated setupPermits network-initiated setup

Clean scripted installation (RISetup)Clean scripted installation (RISetup) Clean imaged installation (RIPrep)Clean imaged installation (RIPrep)

Uses PXE network cards to initiate setup with Uses PXE network cards to initiate setup with minimal user interactionminimal user interaction

Boot floppy disk supports certain additional PCI Boot floppy disk supports certain additional PCI network cards that are not PXE capablenetwork cards that are not PXE capable

9

RIS – How it WorksRIS – How it WorksThe client requests an IP addressThe client requests an IP address11

The IP address is supplied by a DHCP serverThe IP address is supplied by a DHCP server

The client contacts the RIS serverThe client contacts the RIS server

The RIS server checks Active Directory to see if the client has been prestagedThe RIS server checks Active Directory to see if the client has been prestaged

22

33

44

RIS responds or forwards the request to another RIS serverRIS responds or forwards the request to another RIS server

55

The RIS server sends Startrom.com to the client – launches OSChoiceThe RIS server sends Startrom.com to the client – launches OSChoice66

DHCP ServerDHCP Server

RIS ServerRIS Server Active Directory DCActive Directory DC

ClientClient

1111

2222

3333

4444

5555

6666

10

RIS RIS –– Enhancements Enhancements

Support for deploying:Support for deploying: All versions of Windows 2000 All versions of Windows 2000 Windows XP ProfessionalWindows XP Professional All 32-bit versions of the Windows .NET Server All 32-bit versions of the Windows .NET Server

familyfamily All 64-bit versions of the Windows .NET Server All 64-bit versions of the Windows .NET Server

family*family*

Significant performance increase over Significant performance increase over Windows 2000 RIS ServerWindows 2000 RIS Server

*RISetup only, not RIPrep-based images*RISetup only, not RIPrep-based images

11

RIS RIS –– Enhancements Enhancements (2)(2)

RIPrep image HAL filteringRIPrep image HAL filtering User is offered only HAL-compatible RIPrep User is offered only HAL-compatible RIPrep

imagesimages Can help decrease support calls about Can help decrease support calls about

incompatible installation failuresincompatible installation failures

AutoEnter functionality in OSChoiceAutoEnter functionality in OSChoice Specify SIF file or Startrom.com, or both, for Specify SIF file or Startrom.com, or both, for

each computer in Microsoft Active Directory®each computer in Microsoft Active Directory®

12

RIS – SecurityRIS – Security

Security enhancementsSecurity enhancements Disables local Administrators account on domain Disables local Administrators account on domain

join when the Domain Administrators account is join when the Domain Administrators account is added to Administrators groupadded to Administrators group

AdminPW screenAdminPW screen Administrator password encryptionAdministrator password encryption

13

RISRIS

PC that meets PXE 1.0 or 2.0 specifications

Network adapter that supports PXE or issupported by the RIS boot floppy (RBF)

PXE aware:• Docking stations • PXE CardBus NIC • Internal PXE NIC• Mini-PCI NIC(may require BIOS support)

RIS clients must also meet minimum hardware requirements for theversion of Windows being installed.

Not supported: USB, 1394, USB 2.0 NICs, CardBus NIC via boot floppy

ComputerComputer Network AdapterNetwork Adapter Mobile SystemsMobile Systems

Client System RequirementsClient System Requirements

14

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal UpgradesUpgrades

PrestagePrestage Dissimilar HWDissimilar HW **Image basedImage based **Centralized Centralized installation installation pointpoint

Operating Operating system and system and applications applications togethertogether

**

Two or more Two or more partitionspartitions

Easy to Easy to reconfigurereconfigure **Requires Requires Active Active DirectoryDirectory

* In certain cases* In certain cases

15

SysprepSysprep

System Preparation toolSystem Preparation tool Prepares a reference system for disk-based Prepares a reference system for disk-based

duplication (using Xcopy or a third-party imaging duplication (using Xcopy or a third-party imaging tool)tool)

Similar to RIPrep, used for RIS imagingSimilar to RIPrep, used for RIS imaging Requires relatively similar hardwareRequires relatively similar hardware

Hardware abstraction layer (HAL)Hardware abstraction layer (HAL) Runs mini-setup instead of full setupRuns mini-setup instead of full setup

16

Sysprep – Enhancements Sysprep – Enhancements

Permits updated or out-of-box drivers to be Permits updated or out-of-box drivers to be picked up by image before the system is fully picked up by image before the system is fully set up (-factory switch)set up (-factory switch)

Can image products in the Windows .NET Can image products in the Windows .NET Server family running IISServer family running IIS

Winbom.ini permits gathering of files (for Winbom.ini permits gathering of files (for example, drivers and applications) from the example, drivers and applications) from the networknetwork

You no longer have to use -PnP (saves time)You no longer have to use -PnP (saves time)

17

Sysprep – How It WorksSysprep – How It Works

Source computer is prepared as desired – Windows and applicationsSource computer is prepared as desired – Windows and applications11

Sysprep is run on the computer, which then powers offSysprep is run on the computer, which then powers off22

Using WinPE or an imaging tool, the image is stored (here, to a server)Using WinPE or an imaging tool, the image is stored (here, to a server)33

New computer is booted using WinPE or an imaging tool, image is installedNew computer is booted using WinPE or an imaging tool, image is installed

44

New computer is powered on, mini-setup runsNew computer is powered on, mini-setup runs

55

New computer is powered off and ready to redistributeNew computer is powered off and ready to redistribute66

File ServerFile ServerSourceSource

3333

Steps 4-6 are repeated as needed for each new computerSteps 4-6 are repeated as needed for each new computer77

4444

18

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal UpgradesUpgrades

PrestagePrestage Dissimilar HWDissimilar HW **Image basedImage based ** Centralized Centralized installation installation pointpoint

Operating Operating system and system and applications applications togethertogether

**

Two or more Two or more partitionspartitions

Easy to Easy to reconfigurereconfigure **Requires Requires Active Active DirectoryDirectory

* In certain cases* In certain cases

19

Unattend and Setup ManagerUnattend and Setup Manager

Setup Manager creates and modifies Setup Manager creates and modifies unattended setup answer files (unattend, unattended setup answer files (unattend, Sysprep, RISetup)Sysprep, RISetup)

Can be found with other deployment tools Can be found with other deployment tools and guides in Deploy.cab on the Windows and guides in Deploy.cab on the Windows product CD (\Support\Tools\)product CD (\Support\Tools\)

20

Unattend and Setup Manager Unattend and Setup Manager –– Enhancements Enhancements Administrator password encryptionAdministrator password encryption Setup Manager Setup Manager –– improved interface improved interface Improved .chm file on the product CD for Improved .chm file on the product CD for

unattended setup and deploymentunattended setup and deployment

21

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal UpgradesUpgrades **PrestagePrestage Dissimilar HWDissimilar HW ** Image basedImage based ** Centralized Centralized installation installation pointpoint

**

Operating Operating system and system and applications applications togethertogether

**

Two or more Two or more partitionspartitions

Easy to Easy to reconfigurereconfigure ** Requires Requires Active Active DirectoryDirectory

* In certain cases* In certain cases

22

Custom CDCustom CD

Tools to create a custom bootable ISO image Tools to create a custom bootable ISO image included in WinPE for corporationsincluded in WinPE for corporations

Allows for custom:Allows for custom: DriversDrivers Unattend fileUnattend file Applications and scripts to run by using Applications and scripts to run by using

GUIRunOnce or Cmdlines.txtGUIRunOnce or Cmdlines.txt

23

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal UpgradesUpgrades ** **PrestagePrestage Dissimilar HWDissimilar HW ** Image basedImage based ** Centralized Centralized installation installation pointpoint

**

Operating Operating system and system and applications applications togethertogether

**

Two or more Two or more partitionspartitions

Easy to Easy to reconfigurereconfigure ** Requires Requires Active Active DirectoryDirectory

* In certain cases* In certain cases

24

Windows PEWindows PE

Based on Windows XP or products in the Based on Windows XP or products in the Windows .NET Server familyWindows .NET Server family

Minimal footprintMinimal footprint Implements basic Microsoft Win32® API setImplements basic Microsoft Win32® API set 32-bit and 64-bit versions32-bit and 64-bit versions Replaces MS-DOSReplaces MS-DOS®® for preinstallations for preinstallations

Use Winnt32.exe instead of Winnt.exeUse Winnt32.exe instead of Winnt.exe

Scriptable (batch files) Scriptable (batch files) Customizable through Winbom.iniCustomizable through Winbom.ini Can configure additional mass storage and Can configure additional mass storage and

network adapter driversnetwork adapter drivers

25

Windows PE Windows PE (2)(2)

Hardware independentHardware independent TCP/IP networking supportTCP/IP networking support Scriptable hard disk configuration tools Scriptable hard disk configuration tools

DiskpartDiskpart FormatFormat Both 32-bit (fast partitioning and formatting)Both 32-bit (fast partitioning and formatting)

Boot from:Boot from: PXE (RIS)PXE (RIS) Hard diskHard disk CD or DVDCD or DVD

26

WinPE – How it WorksWinPE – How it WorksComputer is booted with WinPE (CD, DVD, PXE)Computer is booted with WinPE (CD, DVD, PXE)11

Disk is prepared using Diskpart (scripted)Disk is prepared using Diskpart (scripted)22

Image is applied (Xcopy, third-party imaging tools), or Winnt32 is launchedImage is applied (Xcopy, third-party imaging tools), or Winnt32 is launched55

Disk is formatted using Format (scripted)Disk is formatted using Format (scripted)33

Connect to any needed shares for installation points or image sharesConnect to any needed shares for installation points or image shares44

4444

27

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal UpgradesUpgrades ** **PrestagePrestage Dissimilar HWDissimilar HW ** **Image basedImage based ** **Centralized Centralized installation installation pointpoint

** **

Operating Operating system and system and applications applications togethertogether

** **

Two or more Two or more partitionspartitions Easy to Easy to reconfigurereconfigure ** ** **Requires Requires Active Active DirectoryDirectory

* In certain cases* In certain cases

28

Group Policy and SMSGroup Policy and SMS

Can be used to upgrade products in the Can be used to upgrade products in the Windows .NET Server family in the existing Windows .NET Server family in the existing Active Directory/SMS infrastructureActive Directory/SMS infrastructure

Upgrade Windows to future versions, or add Upgrade Windows to future versions, or add hotfixes or service packshotfixes or service packs

Use SMS to verify that the upgrade to .NET Use SMS to verify that the upgrade to .NET occurred successfullyoccurred successfully

Use SMS to inventory and verify compatibility Use SMS to inventory and verify compatibility before you upgradebefore you upgrade

29

Comparative UsesComparative UsesRISRIS SysprepSysprep UnattendUnattend CDCD WinPEWinPE GP/SMSGP/SMS

Bare metalBare metal UpgradesUpgrades ** ** PrestagePrestage Dissimilar HWDissimilar HW ** ** Image basedImage based ** **Centralized Centralized installation installation pointpoint

** **

Operating Operating system and system and applications applications togethertogether

** **

Two or more Two or more partitionspartitions Easy to Easy to reconfigurereconfigure ** ** Requires Requires Active Active DirectoryDirectory

(GP)(GP)

* In certain cases* In certain cases

30

Multiple Tools TogetherMultiple Tools Together

Client launches WinPE through RISClient launches WinPE through RIS11

Disk is prepared (diskpart, format), and image is applied (xcopy and so on)Disk is prepared (diskpart, format), and image is applied (xcopy and so on)22

Sysprep mini-setup completes, using a Sysprep.inf (unattend file)Sysprep mini-setup completes, using a Sysprep.inf (unattend file)

33

Computer uses autologon, and runs GUIRunOnce to install SQL Server™Computer uses autologon, and runs GUIRunOnce to install SQL Server™

44

RIS ServerRIS ServerClientClient

1111

1111

File ServerFile Server

2222 2222

31

Deployment FactorsDeployment Factors

Be aware of how the following can affect Be aware of how the following can affect deployment:deployment: Geography and time zonesGeography and time zones Bandwidth (or lack of) to sitesBandwidth (or lack of) to sites Hardware homogeneity and lifespanHardware homogeneity and lifespan Existing hardware (PC, router, network) Existing hardware (PC, router, network)

infrastructureinfrastructure Existing software (for example, third-party system Existing software (for example, third-party system

management software)management software) Support infrastructureSupport infrastructure

32

64-Bit Deployment64-Bit Deployment

RISRIS Windows .NET supported as RIS clients, using Windows .NET supported as RIS clients, using

RISetup RISetup RIPrep is not supported on 64-bit systemsRIPrep is not supported on 64-bit systems 64-bit versions of the Windows .NET Server family 64-bit versions of the Windows .NET Server family

can serve as RIS serverscan serve as RIS servers Sysprep and unattended setup are fully functional Sysprep and unattended setup are fully functional

on the 64-bit platformon the 64-bit platform WinPE is available for 64-bit systemsWinPE is available for 64-bit systems

33

Windows Product ActivationWindows Product Activation

Volume licensed mediaVolume licensed media No activation requiredNo activation required Common product key across installationsCommon product key across installations

Encryptable for Windows .NETEncryptable for Windows .NET

Retail mediaRetail media Activation requiredActivation required Unique product key per installationUnique product key per installation

Can be scripted using WMI and WSHCan be scripted using WMI and WSH

34

SummarySummary

Use the tool that works best for your needsUse the tool that works best for your needs There is no predetermined “right” solutionThere is no predetermined “right” solution Create a deployment strategy that works for Create a deployment strategy that works for

youyou There are huge improvements in Windows XP There are huge improvements in Windows XP

and the Windows .NET Server family for and the Windows .NET Server family for deploymentdeployment

WinPE can help unblock many deployment WinPE can help unblock many deployment issuesissues

35

Additional ResourcesAdditional Resources

Windows Deployment Web site:Windows Deployment Web site: http://www.microsoft.com/http://www.microsoft.com/WindowsXPWindowsXP/deployment//deployment/

Deploy.cab on Windows product CDDeploy.cab on Windows product CD Deploying Windows 2000 with Support ToolsDeploying Windows 2000 with Support Tools

(ISBN: 1-928994-12-1)(ISBN: 1-928994-12-1) Windows 2000Windows 2000 magazine RIS series magazine RIS series TechNetTechNet Microsoft Knowledge BaseMicrosoft Knowledge Base

Thank you for joining today’s Microsoft SupportThank you for joining today’s Microsoft Support

WebCast.WebCast.

For information about all upcoming Support WebCasts, For information about all upcoming Support WebCasts,

and access to the archived content (streaming mediaand access to the archived content (streaming media

files, PowerPointfiles, PowerPoint®® slides, and transcripts), please visit: slides, and transcripts), please visit:

http://http://support.microsoft.com/webcastssupport.microsoft.com/webcasts//

Your feedback is sincerely appreciated. Please send any Your feedback is sincerely appreciated. Please send any

comments or suggestions about the Support comments or suggestions about the Support

WebCasts to WebCasts to supweb@microsoft.comsupweb@microsoft.com. .