黃河凱. Kaiser Huang 巨匠電腦北區 / 新竹認證中心認證講師國立新竹教育大學數位學習科技研究所在職生微軟原廠認證講師 MCT

Transcription

1 黃河凱 Kaiser Huang 巨匠電腦北區 / 新竹認證中心認證講師國立新竹教育大學數位學習科技研究所在職生微軟原廠認證講師 MCT 微軟嵌入式系統 TTT 教育認證講師 kai168@gmail.com. MCT, MCITP-SA/EA, MCTS-WS2008/CE6/XPe, LPIC

2 第一堂 : 系統安裝與升級設定的簡介 全新式安裝的步驟與方法 從 DVD 或 USB 開機裝置全新安裝 使用 Windows 部署服務 (WDS) 使用 DISM MDT 與 SCCM 完成 LTI 與 ZTI 自動化的全新式安裝 升級式的安裝 升級並取代現有的 Windows 版本 針對各系統版本的有效升級路徑 升級為 Windows 8.1 設定與檔案的保留 移轉式的安裝 就地升級 (In-place Upgrade) 與移轉式 (Migration) 安裝的差異 何謂 Windows To Go Windows 輕鬆傳輸 包含在 Windows ADK 的使用者狀態移轉工具 (USMT) Windows XP 移轉到 Windows 8.1 的流程

3 Windows XP 升級到 Windows 8.1 Options for Installing Windows 8.1 Methods for Performing a Clean Installation Upgrading to Windows 8.1 Supported Windows 8.1 Upgrade Paths Migrating to Windows 8.1 What Is Windows To Go? Booting from a Native Boot Virtual Hard Disk

4 啟動安裝程式的選項 全新式安裝 (Clean installation): Install Windows 8.1 on a new partition Replace an existing operating system on a partition 升級式安裝 (Upgrade installation): Replace an existing Windows version with Windows 8.1 All user applications, files, and settings are retained 移轉式安裝 (Migration): Move files and settings from an old operating system to Windows 8.1 Side-by-side or wipe-and-load 使用 MDT 與 SCCM 大量部署的自動安裝

5 全新式安裝的步驟與方法 (1) 從 DVD 或 USB 開機裝置全新安裝 : Deploying Windows 8.1 to few computers Run Setup.exe 使用 Windows 部署服務 (WDS): Requires the Windows DS role. Supports multicast deployments

6 全新式安裝的步驟與方法 (2) 使用 DISM MDT 與 SCCM 完成 LTI 與 ZTI 自動化的全新式安裝 : Windows PE and DISM.exe MDT: LTI Configuration Manager: ZTI Start the computer by using Windows PE Apply the image to the computer

7 升級式的安裝 升級並取代現有的 Windows 版本 : A Windows operating system must be installed on the computer Setup must be run from the existing Windows installation

8 針對各系統版本的有效升級路徑 Windows Server Windows XP SP2 Only clean installation Windows XP SP3 Windows Vista SP2 Clean installation Migration Upgrade Clean installation Migration Windows 7 Windows 8 Windows 8.1 Windows 8.1

9 升級為 Windows 8.1 設定與檔案的保留 Upgrading to Windows 8.1 Keep settings, personal files and apps Keep settings and personal files (data and system settings) Keep personal files only (data only) Windows XP SP3 Windows Vista SP2 Windows 7 Windows 8 Windows 8.1 Cross-architecture or cross-language upgrade is not supported

10 移轉式的安裝 A migration replaces a configuration with a new one: Selectively migrate portions of a previous configuration Migrate a configuration on the same computer (wipe-andload or refresh) or to a new computer (side-by-side) Source computer Destination computer Collect user state Restore user state Intermediate store

11 就地升級與移轉式安裝的差異 就地升級 (In-place pgrade): Preserves the environment Do not need to reinstall apps or transfer data Only certain upgrade paths are possible Used in small and home environments 移轉式 (Migration) 安裝 : Standardized environment Control what is migrated Clean up the environment Faster than upgrade Additional space required Apps must be reinstalled Migration may be possible even if upgrade is not Recommended solution for enterprises

12 何謂 Windows To Go? Run Windows 8.1 from a certified USB device: Only available with Windows 8.1 Enterprise Can customize environment and install applications, including Domain Join and DirectAccess Hosts internal disks are offline TPM is not used Windows Store is disabled by default Hibernate and sleep are disabled by default Windows RE is not available Push-button reset is not available Computer must allow start from USB

13 包含在 Windows ADK 的使用者狀態移轉工具 (USMT) Windows Setup Windows ADK: Windows SIM Windows PE USMT DISM DISM Windows PowerShell module Sysprep DiskPart Windows DS

14 映像檔的部署與安裝流程 1. Build the answer file: Unattended Windows 8.1 installation 2. Build the reference installation: Customize the installation, install and customize apps Generalize the installation 3. Create bootable Windows PE media 4. Capture the reference installation: Start the reference installation by using Windows PE 5. Optionally modify the captured image 6. Deploy the captured image: Use Windows PE, Windows DS, or another deployment method

15 使用答錄檔完成自動安裝的流程 Answer files provide answers to Windows Setup: Automates the installation process Provides settings that cannot be entered during setup: Settings are applied during setup phases Answers are stored in XML format: Use the /unattend parameter with Windows Setup Name the file Autounattend.xml to automate the setup Windows SIM: Used for creating, editing, and validating an answer file Requires a catalog of the Windows image: Catalog is not included on the Windows 8.1 DVD Catalog can be created on writable media

16 使用者資料與設定的移轉工具 What to migrate Identify which components are to be migrated User State to Migration the new operating system Tool (USMT) 4.0 Use one of the following migration tools: User Preferences Windows 輕鬆傳輸 (WET) 使用者狀態移轉工具 (USMT 4.0) Windows 7 Earlier Version of Windows User Data Application Settings Windows Easy Transfer (WET)

17 Windows XP 移轉到 Windows 8.1 的流程 Back Up Restore Back Restore Update Install up Windows Applications 8.1 Back Run the up Windows user state, 8.1 including: installation Install (setup.exe) Keep User your settings computer from: secure Windows by 8.1 keeping After up with Application installing current settings applications, Windows updates: 8.1, restore reinstall user all applications: state by using: product User Select data check for updates during Windows installation Install the DVD Easy compatible Transferversion of the Use Network applications one of share the following migration tools: Check User State for updates Migration after Tool installation Windows Easy Transfer User State Migration Tool Install Applications Update

18 第二堂 : 升級後的相容性與 Server 的整合管理 企業 Server 的整合管理 升級前, 退出網域與電腦名稱 升級後, 重新加入網域 群組原則與軟體派送 Windows Update 與 WSUS 安全性的實機操作

19 再一次新改版, 新增許多的全新功能 但 如何讓 IT 人輕鬆上手雲建置 Domain Controller cloning Enhanced Direct Access Safe Domain controller virtualization RID pool enhanced management Enhanced logging PowerShell 3.0 PowerShell Workflow PowerShell history Kerberos CBAC Compound identity Remote FX IP Address Management DHCP HA DA object recovery GUI ISCI Target Windows NIC teaming Virtualization, virtualization, virtualization 32 virtual processors per VM

20 全新雲建置 儲存空間 彈性檔案系統 (ReFS) 內建 iscsi 目標伺服器 VDI 遠端桌面基礎架構 IIS8 與應用程式平台 網路遠端管理與監控再進化 IDA 識別存取再簡化 Server Core 與 GUI 伺服器管理, 輕鬆轉換 Hyper-V 3.0 虛擬再強化

21 Hyper-V 3.0 特色 / 功能 新功能或更新功能 特色 / 功能 新功能或更新功能 用戶端 Hyper-V 新功能 簡化授權 新功能 動態記憶體 更新功能 SR-IOV 新功能 Windows PowerShell 的 Hyper-V 模組 Hyper-V 複本 新功能 新功能 存放區移轉 SMB 3.0 檔案共用上的存放區 新功能 新功能 匯入虛擬機器 更新功能 虛擬光纖通道 新功能 即時移轉 更新功能 虛擬硬碟格式 更新功能 資源計量 新功能 虛擬機器快照 更新功能 虛擬 NUMA 新功能 大幅提升規模並改善恢復功能 更新功能 虛擬交換器 更

22 安裝 Hyper-V 的要求 硬體需求 : 必須支援虛擬化 Intel-VT AMD-V 資料執行防止 處理程序將除了位置明確包含可執行的程式碼以外的所有記憶體位置標示為不能執行, 避免被病毒程式利用 SLAT ( Second Level Address Translation ) 可下載微軟提供的 COREINFO 程式判斷電腦是否支援 資源需求 記憶體 硬碟空間

23 常見的應用程式相容性的問題 Common Application Compatibility problems may relate to the following areas: Setup and installation of applications User Account Control Windows Resource Protection (WRP) Internet Explorer Protected Mode 64-bit architecture Windows Filtering Platform (WFP) Operating system version changes Kernel-mode drivers Deprecated components

24 常見的緩衝或替代的方法 常見的緩衝或替代的方法包括 : Modifying the application configuration Applying updates or service packs Upgrading the application Modifying the security configuration Running the application in a virtualized environment Using application compatibility features built into the operating system Selecting another application

25 更細部的 UAC 設定 Windows Vista UAC 只能開啓或關閉 其它要透過系統登錄來設定 Windows 7/8.1 提供更細部份設定

26 UAC 使用者帳戶控制系統防護 安全 省麻煩 使用者沒有辦法選擇使用者帳戶控制出現的時機與頻率使用者帳戶控制出現的頻率過於頻繁 惱人, 影響整體使用者經驗 使用者可以選擇使用者帳戶控制出現的時機與頻率, 達成安全與方便的平衡

27 不受入侵威脅 社會工程攻擊 減少不必要的通信 保護免受傷害 瀏覽器與 Web 伺服器漏洞 避免釣魚網站 惡意代碼 網絡欺詐 身份盜竊的危害 控制資訊 選擇與控制 清楚的資訊使用的通知 只提供需要的東西 國際網域名稱 封鎖彈出式窗 增加可用性 安全開發生命週期 延伸驗證的 SSL 憑證 SmartScreen 過濾 網域醒目提示 XSS 篩選器 / DEP/NX 預防 ClickJacking ActiveX 控制 親善的使用介面 容易注意到的通知 P3P 啟用的 cookie 控制 刪除瀏覽歷史紀錄 InPrivate 瀏覽與篩選

28 IE8 教學體驗 : WT.mc_id=shorturl

29 應用程式相容性工具 (ACT)

30 更新相容性修正程式 ( 又稱作 Shims) A shim is software, added to an existing application or other program, to provide some form of enhancement or stability In the application compatibility context, a shim refers to a compatibility fix Use the Compatibility Administrator Tool to: Search for a compatibility fix for an existing application Create a new compatibility fix To deploy a compatibility fix: Store the compatibility fix database locally or in a network location Use the Sdbinst.exe command-line tool to install the compatibility fix

31 新增與部署相容性的修正資料庫

32 MDOP 最適合大型企業使用的 Windows 版本 Direct Access BranchCache 同盟搜尋瀏覽 BitLocker BitLocker To Go AppLocker 安全性開發週期 PowerShell Windows 疑難排解平台部署工具 VDI 增強功能 效能 穩定性 相容性

33 Windows PowerShell 2.0 整合的程序化環境 群組原則程序化 Windows 除錯平台 可遠端的可靠資料 記錄使用者操作問題的工具 強化的群組原則情境 群組原則喜好

34 映像檔製作 傳送 遷移 部署映像檔服務與管理 新增 / 移除裝置與套件 WIM 與 VHD 映像檔管理 Windows 部署服務 (WDS) 多點串流傳送動態驅動程式配置 VHD 與 WIM 支援 使用者狀態轉移工具 (USMT) 原機升級檔案遷移離線檔案蒐集改善的使用者檔案偵測 Microsoft Assessment and Planning 整合的解決方案 Application Compatibility Toolkit 5.5 Microsoft Deployment Toolkit 2010

35 讓使用者在任何地方都充滿生產力 Office Home Office Home 當使用者不在辦公室時, 很難存取組織內部的資源 IT 想要管理更新與修補沒有與組織網路連結的行動電腦時, 將會是一個很大的挑戰 不管在組織內或組織外都具備相同的使用經驗透過一致的使用經驗存取組織網路資源提升行動工作者的生產力在基礎架構上的投資也讓服務行動電腦與派送更新和原則變得更加容易

36 IT 專家的優勢 一般使用者的優勢

37 讓使用者在任何地方都充滿生產力 在分組織透過 WAN 存取應用程式和資料非常緩慢慢速的連線影響使用者生產力改善網路效能不但昂貴且不容易實行 從檔案與網頁伺服器下載快取內容在分組織的使用者可以快速地開啟儲存在快取的檔案釋放網路頻寬給其他需要的使用者

38 IT 專家的優勢 有助於降低 WAN 使用率與成本 整個網路都強制施行資料加密 容易部署 一般使用者的優勢 縮短下載等待時間 = 提高生產力 結合其他的 Windows 8.1 功能, 可提升端對端的資訊工作者體驗

39 Distributed Cache Mode Distributed Hosted Cache Cache is distributed across client computers Additional client computers retrieve content from the first requesting client computer Get Beneficial for branch offices Get Data that do not have a local server with Windows Server 2008 R2 Main Office Hosted Cache Mode Get IDs Get Get Cache is on a server at the Data branch office Client computers Put retrieve content Data from the Get branch office server Beneficial Data for larger branch offices that have hardware resources for a local server with Windows Server 2008 R2 Data Data Client computers are configured to use only one caching mode at a time. Branch Branch Office Office Design by Kaiser@2010_kai168@gmail.com

40 Windows Server 2008R2/2012 R2 - required either in the main server location or at the branch office Windows 7/8.1 Enterprise - required on the client PCs Client Configuration Off by default Enable and configure manually or by Group Policy Caching mode to cooperative or hosted Host name of hosted cache server Set client cache size Set cache location on disk Firewall rules required Server Configuration Not installed by default Enable and configure manually or by Group Policy Enable for all file shares or on a file share by file share basis If enabled on a Web server, must be enabled for all Web sites Hosted cache equipped with a certificate trusted by client computers suitable for TLS Design by Kaiser@2010_kai168@gmail.com

41 Design by

42 讓使用者在任何地方都充滿生產力 目前桌面和企業搜尋方案都很好, 但缺乏整合使用者需要採取不同的步驟來尋找 PC 上和伺服器上面的資料難以探索資料的來源 一致的體驗, 從不同的地點包含 SharePoint 尋找資料 IT 可以將在企業搜尋範圍之內的偏好地點連結放置在開始功能表或是瀏覽器上

43 讓使用者在任何地方都充滿生產力

44 Windows Update 與 WSUS 安全性的實機操作 Windows Update is a service that automatically installs updates for Windows Improve security and reliability Improve how the computer works Help enhance computing experience

45 Configuring Windows Update Settings Update Change Windows History Settings Update Lists Choose Lists all updates how important Windows that and were can previously optional install installed updates Restore Hidden Updates Restore an update Install the update again Install updates options Windows Update Options: Change Install Settings: updates Allows automatically you to configure the way (recommended) you install the updates View Download Update updates History: but Allows let me you choose to view whether a list of all previous to install updates them Restore Check Hidden for updates Updates: but Allows let me you choose to reinstall whether an update to download and install them Access Windows Update by clicking Control Panel > System and Security > Windows Update

46 Windows Update Group Policy Settings Windows Update Group Policy is an administrative tool for managing user settings and computer settings across a network Access Group Policy Settings by clicking Control Panel > System and Security > Administrative Tools > Edit Group Policy