W8 & Deploy

Mark Lawrence

How Microsoft IT Deployed Windows 8 and Windows 8.1

Principal Program ManagerMicrosoft IT

Agenda

How Microsoft IT Deployed Windows 8 and Windows 8.1

• About Microsoft and Microsoft IT• Windows OS Image Creation and Distribution• Windows 8 Install Experience (Demonstration)• System Center Configuration Manager: Deploy and Update• Update to Windows 8.1 (CLICK, CLICK, DONE)• Lessons Learned

About Microsoft and Microsoft IT

Microsoft IT environments

2M Remote connects per month.97K Virtual Smart Cards

95Modern Apps Developed35 – IT 60+ by non-IT

311k System Center managed devices

120ksmartphone devices

33kMSFT users of Yammer - 6k message per day

20kSurface RT Devices on the Network

SingaporeBrazil

JapanDublinRedmond

Corporate

Exchange

CorporateStaging

Extranet

Test Extranet

Perimeter Network

Windows Deployment

Windows Development

FTEs ~ 77k FTEs Small Office ~ 3.7k … Remote Office ~ 1.6k … Mobile ~ 13.5k

Total ~ 18k

Microsoft internal user profile assessments

Corporate Campus

Low bandwidth Small Office

Corp Net Connected via tunnel

Products file share only

Mix of Wired and Wireless Native Connection

When Mobile – DA and VPN

Good bandwidth

Internet - Remote Office

Products file share only

Mix of Wired and Wireless Native Connection

Always Mobile - DA and VPN

Metered Networks -possible poor bandwidth

Internet - Remote Office

Products file share only

Mix of Wired and Wireless Native Connection

Always Mobile - VPN to control network usage

Good bandwidth

Corp Net Connected

WDS, OSD, and Products file share

Mix of Wired (WDS & OSD) and Wireless (Products file share) Native Connection

When Mobile - DA preferred solution

6

Mobile

Windows OS Image Creation and Distribution

Microsoft IT Windows 7 install experiences

f12

Software CompatibilityUser-driven by reviewing software compatibility on website

Data MigrationPrimary solution: in-place data migration

Users needing to migrate using USB or server shares is a self-driven solution using Windows Easy Transfer in Windows Backup or manually coping files

Hardware CompatibilityUser-driven by reviewing hardware compatibility on website

Network InstallUser-driven by reviewing options on website

Use f12 for WDS (and later OSD)

Copy image from server share and install locally

Remote users must make a remote connection into corporate office, copy down image, and install locally

Remote Domain Join & ProvisioningUser-driven, multistep process requiring VPN connection, join the domain, and reboots

Microsoft IT Windows 8 deployment goals

Lay groundwork for successful Windows adoption and Enterprise roll-out

Address key deployment pain points Demonstrate best practices for an enterprise Windows OS

deployment

User Experience

Line of Business Applications

(compatibility)

Data-Safe Deployment

UserReadiness

Image Delivery

Planning Windows 8 OS image architecture

10

WDS

USB

OSD

Factory Image

IT E

asy

Inst

alle

r

Azure

Microsoft IT ImageIT

Bra

ndin

g

MDT LTI/UDI Optional Applications

Settings

Drivers Payload

Maintenance Scripts

In Place Data Migration

Base.wim

UnAttend.xml

QFEs / PatchesBoot Drivers Modern Apps

Office IT Service Apps

BitLocker Pre-provisioning

Microsoft Deployment Toolkit imaging workflow

Application executables, scripts pointing to network

location or web

Control files (XMLs) define the Image

Applications, Packages, Drivers,

Task Sequence & Operating Systems

Scripts perform individual tasks. For Example, updating

unattend.xml or configuring BitLocker

Encryption

Task Sequence Engine, which is responsible to

perform tasks in a pre-defined order.

Image replication topology

20 Replication Servers

211 Branch Office Endpoint Servers

Hub Servers1 Master Server

25 Servers in Regional Data CentersReplication backbone infrastructure

200+ Sites with various

network connections

DemoMicrosoft Windows 8 Installation Experience using Microsoft IT Easy Installer• Microsoft Deployment Toolkit - Light Touch Install • User State Migration Tool for User Data Migration• Task Sequence to install Microsoft Office Professional Plus 2013

Click-To-Run• Task Sequence for BitLocker Drive Encryption• NOTE: IT Easy Installer available through Microsoft Consulting

Services engagement

System Center Configuration Manager: Deploy and Update

Unified management infrastructure at Microsoft

15

Redmond Site 175k

Clients

Redmond Site 290k

Clients

North & South

America50k Clients

Europe, MidEast, Africa

50k Clients

Australia & Asia

75k Clients

Device Mgmt.

Site

MS Online Directory Services (MSODS)

Active Directory

Federation Server 2.0

MS Online Directory

Sync (DirSync)

AD

User Discovery

Intune Subscriptio

n

Connector Site role

Infrastructure• 6 Primary Sites• 13 Secondary Sites• 250 Distribution

PointsPCs & Devices• ~340,000 clients• ~125k mobile devices

(EAS)Users• ~98k FTEs• ~82k Vendors

ConfigMgr 2012 R2

Patching Services• WSUS – Production• WU/MU – Labs

Pull and Push OS Installations

16

Windows 8.1 OS Update and OS Deployment Supported By:• System Center 2012 R2 Configuration Manager• System Center 2012 Configuration Manager Service Pack 1 (with

CU3)

Pull Installations

Microsoft IT chose to use a self-service method for Update, where users initiate the upgrade from a distribution point at their convenience.

Push Installations

Because Configuration Manager supports “push” installations, the Windows 8.1 Update can be applied to systems in the environment as a scheduled activity.

Update to Windows 8.1 (CLICK, CLICK, DONE)

18

Applications installs at Microsoft

A history of enabling self-service user experiences

Early daysFile share for Microsoft apps: \\productsLOB apps & 3rd party apps distributed through multiple channel

Over time, improved user search to find applicationsSimple web UI (http://productsweb) put on top of \\products sharesContent replicated globally with DFS to ease installation times LOB apps – most moved to web apps, so ‘distribution’ not needed

Today: Systems Center Configuration Manager - Applications Catalog

Self-service integrated with ConfigMgr: http://GetApps Application CatalogUnified Device Management integration with Company Portal (WinPhone/RT)

19

Deploying OS Update Application Package

• SCCM: Launch Windows Setup.exe + Parameters:• /auto:upgrade - Setup will run without user intervention• /noautoexit - If an error is encountered during setup, don’t exit.

Instead wait at appropriate wizard screen for user input.

• /performdu - Automatically download any applicable dynamic updates.

Note: The /auto:upgrade switch causes Setup to skip OOBE. As a result the auto update setting for the Store is turned off. Re-enable via registry key:

HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate [AutoDownload] Value = 1

Windows 8.1

Package

SCCM OS Update: User Experience

User initiates

the installatio

n

Policy request

sent to the manageme

nt point

Package downloade

d from distributio

n point

Windows Setup.exe is started

Policy RequestManagement

Point

Distribution Point

Windows 8.1 PolicySystem Center

Configuration Manager

Primary Site

21

User Experiences with Enterprise OS Update

Update the Enterprise OS

Updates Windows 8 Enterprise OS to Windows 8.1 Enterprise Edition

INSTALL button launches Setup.exe using /auto:upgrade /performDU

Original OS WIM is applied (not a custom image); User Data & Settings & Applications remain in-place

Upgrade results for Preview 8.1:

• Over 27K PCs in less than 60 days

• Support tickets reduced +30%

Lessons Learned

Support for UEFI in the Image and Infrastructure Windows Recovery & OS Refresh / Reset Drive Partitioning

Inventory of LOB Applications Modern IE & Desktop IE Compatibility Modes

Understand User Configuration – Partitions & Drives Data Security – Plan to address EFS and BitLocker Offline verses Online – State Capture

Lessons Learned

Data Migration

Image

LOB Apps

User Readiness

User Education Social Networking Assistance Communications

For More Information

About Microsoft IT – TechNet – IT Showcase:

Microsoft IT Showcase Webcasts http://content5.catalog.video.msn.com/e2/ds/99c392b1-ac7a-4aff-89d3-ef6d7a742e9a.mp4

Delivering and Deploying Windows 8

http://technet.microsoft.com/en-us/windows/hh974336

Using Windows 8 Technologies to Safely and Easily Migrate User Data

http://content5.catalog.video.msn.com/e2/ds/d7dacdef-4398-4f86-b117-ab6c014ff81b.wmv

An Internal Community Support Forum to Foster Early Adoption

http://technet.microsoft.com/en-US/video/how-msit-designs-a-community-support-model-using-pointers

LOB Application Compatibility Testing Whitepaper

http://download.microsoft.com/download/4/e/8/4e8c1b99-54f1-4be7-8e9b-78024015848d/LOBApplicationCompatibilityTesting_TWP.doc

Questions?

EvaluationCreate a Text message on your phone and send it to 1919 with the content:

WC301 5 5 5 I liked it a lotSession Code

MarkPerformance

(1 to 5)

Match of technical Level

(1 to 5)

Relevance(1 to 5) Comments

(optional)

Evaluation Scale: 1 = Very bad 2 = Bad 3 = Relevant 4 = Good 5 = Very Good!

Questions:• Speaker Performance• Relevance according to your work • Match of technical level according to

published level• Comments

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation.  Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation.  MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Thank you