4/22/2014 MICROSOFT DEPLOYMENT TOOLKIT 2013 DEPLOYMENT MADE SIMPLE

Transcription

1 MICROSOFT DEPLOYMENT TOOLKIT 2013 DEPLOYMENT MADE SIMPLE 1

2 ABOUT ME CERTIFIED DEPLOYMENT SPECIALIST 12+ YEARS IN INDUSTRY AND I LOVE QUESTIONS FORGET EVERYTHING YOU THINK YOU KNOW ESPECIALLY IF IT S ABOUT SECTOR BASED DISK CLONING DISK CLONING HAS GONE THE WAY OF THE FLOPPY WE HAVE21ST CENTURY TOOLS FOR OS DEPLOYS 2

3 Undated File Photo - Primitive Man and His Disk Cloning Tools. circa 1995 DEATH TO GHOST! LONG LIVE MDT! LIMITATIONS OF SECTOR BASED DISK CLONING: NEARLY IMPOSSIBLE TO MOVE BETWEEN HARDWARE NUMEROUS, LARGE, INEFFICIENT IMAGES FUNDAMENTALLY DESTRUCTIVE PROCESS LACK OF TRUE OFFLINE SERVICING SLOW, TEDIOUS & NO AUTOMATION 3

4 DEATH TO GHOST! LONG LIVE MDT! AS OFAPRIL 30, 2013, SYMANTEC HAS DISCONTINUED SALES OF NORTON GHOST 4

5 LONG, LONG AGO Win95 GHOST WinXP BDD1.0 XPSP2 BDD2.0 Vista BDD2007 VistaSP1 MDT2008 Win7 MDT2010 Win8 MDT2012 Win8.1 MDT2013 WHAT DOES MDT DO? BUILDS CAPTURES DEPLOYS ALL DYNAMICALLY! 5

6 DYNAMIC DEPLOYMENTS? NAMING SOFTWARE DOMAIN JOINING DESKTOPS LAPTOPS SO WHAT IS MDT EXACTLY? MORE THAN JUST AN IMAGING SYSTEM IT S AN AUTOMATED SYSTEMS INSTALLATION FRAMEWORK! 6

7 WHY USE MDT? AUTOMATE DEPLOYMENTS SPEED UP DEPLOYMENTS IMPROVE STANDARDIZATION SCALABLE DEPLOYMENTS REDUCE IMAGE COUNT & OVERHEAD WHY USE MDT? TIME IS MONEY FOOLISH ASSUMPTION TALE OF TWO TIMESHEETS 7

8 WHY USE MDT? A WELL TUNED MDT CONFIG CAN: PXE BOOT ACROSS NETWORK (NO CD/UFD) SAVE USER DATA TO LOCAL DISK USING HARDLINKS IMAGE AND NAME WORKSTATION INJECT DRIVERS AND INSTALL APPS RESTORE USER DATA AND RESTORE ADMIN GROUPS UPDATE FROM WSUS, ACTIVATE WINDOWS & OFFICE JOIN DOMAIN IN THE CORRECT OU & PUSH POLICY ALL OF THIS IS COMPLETELY AUTOMATED IN LESS THAN AN HOUR! SAY GOODBYE TO STANDARD IMAGING 8

9 9

10 WHAT DO I NEED? REQUIRES Win7/8 Server 08/12 THREE FLAVORS LTI / UDI / ZTI 10

11 ALPHABET SOUP LTI LITE TOUCH INSTALL ZTI ZERO TOUCH INSTALL (SCCM ONLY) UDI USER DRIVEN INSTALL (SCCM ONLY) ALPHABET SOUP OF DEPLOYMENT AIK OLD VISTA/7 TOOLS ADK NEW WIN 8 TOOLS MDT AUTOMATION PLATFORM WDS SERVER ROLE (PXE / MULTICAST) USMT - USER STATE MIGRATION TOOL 11

12 ALPHABET SOUP OF DEPLOYMENT ADK MDT WDS DEPLOYMENT TERMINOLOGY IMAGE "...A COLLECTION OF FILES AND FOLDERS THAT DUPLICATES THE ORIGINAL FILE AND FOLDER STRUCTURE OF AN EXISTING COMPUTER, INCLUDING THE FILE AND FOLDER STRUCTURE OF THE OPERATING SYSTEM" SOURCE : (OPERATING SYSTEM DEPLOYMENT TERMINOLOGY) 12

13 THICK? THIN? OR HYBRID? THICK All Apps Monolithic Less Flexible Lots of em HYBRID Best of Both Office & Updates THIN Core OS More Flex Few or One Install.wim 13

14 DEPLOYMENT TERMINOLOGY SYSPREP " PREPARATION OF AN IMAGE FOR DEPLOYMENT TO MULTIPLE TARGET COMPUTERS. SYSPREP GENERALIZES THE REFERENCE COMPUTER BY REMOVING ALL COMPUTER-SPECIFIC INFORMATION SUCH AS SECURITY IDENTIFIERS, NETWORK ADDRESSES, AND THE COMPUTER NAME." SOURCE : (OPERATING SYSTEM DEPLOYMENT TERMINOLOGY) 14

15 POP QUIZ! TO ENSURE A REFERENCE IMAGE CAN RUN ON BOTH LAPTOPS AND DESKTOPS, AND ACROSS VENDORS... BUILD IT IN A VIRTUAL ENVIRONMENT! IT IS CONSIDERED A BEST PRACTICE TO ENGINEER YOUR MASTER IMAGE FOR A VIRTUAL MACHINE TO MAINTAIN THE MOST GENERIC IMAGE POSSIBLE SO THAT IT WORKS WELL IN MDT, SCCM, AND VMM. SOURCE: MS VIRTUAL ACADEMY 15

16 TAKE CONTROL OF DRIVERS! THREE APPROACHES: OLD SCHOOL THICK IMAGES PLUG AND PRAY TOTAL CONTROL TOTAL CONTROL DON'T WORRY ABOUT DRIVERS IN YOUR REFERENCE BUILD, MDT CAN BE CONFIGURED TO INJECT DRIVERS DYNAMICALLY INTO THE IMAGE FILE AT DEPLOY TIME. THIS ENSURES THAT ONLY THE RIGHT DRIVERS ARE INJECTED TO THE RIGHT SYSTEMS AT DEPLOY TIME. 16

17 TAKE CONTROL OF DRIVERS! 17

18 Make Model Model Model Arch. Make Model Model Model OS Make Model Model Model Arch. Make Model Model Model 18

19 Win 7 Win 8 Win PE x86 Win 7 x64 x86 Win 8 x64 x86 Win PE x64 19

20 Make x86 Make Win 7 Make x64 Make Make x86 Make Win 8 Make x64 Make Make x86 Make Win PE Make x64 Make Make Model Model Model Model x86 Make Model Model Model Model Win 7 Make Model Model Model Model x64 Make Model Model Model Model Make Model Model Model Model x86 Make Model Model Model Model Win 8 Make Model Model Model Model x64 Make Model Model Model Model Make Model Model Model Model x86 Make Model Model Model Model Win PE Make Model Model Model Model x64 Make Model Model Model Model 20

21 21

22 TAKE CONTROL OF DRIVERS! ONE WOULD FIND THE WIN7 64 BIT DRIVERS FOR THE HP 8300 IN: WINDOWS 7\X64\HEWLETT-PACKARD\HP COMPAQ ELITE 8300 SFF. THIS MAY SEEM LIKE OVERKILL AT FIRST, BUT IT PAYS OFF IN DIVIDENDS TAKE CONTROL OF DRIVERS! SET A SINGLE VARIABLE DRIVERGROUP001=WINDOWS 7\X64\%MAKE%\%MODEL% 22

23 TEST LAB / DEMO CONFIG WINDOWS SERVER 2012 HYPER-V 3.0 MDT 2012 UPDATE 1 ADK 8.1 WDS 2012 INSTALLING MDT SELECT VERSION (X86 VS. X64) INSTALL ADK THEN MDT OPTIONAL: WDS 23

24 INSTALLING MDT 2012 WINDOWS 7+ WORKSTATION INSTALL - OK DEDICATED SERVER PREFERRED (WDS ROLE) 24

25 25

26 26

27 ASSESSMENT AND DEPLOYMENT KIT (ADK) REPLACES AIK FOR WIN7 DEPLOYS WIN 7 & 8 DOES NOT DEPLOY XP & VISTA DOES NOT PLAY WELL WITH AIK DOWNLOAD IS SMALL PULLS DOWN TOOLS YOU WANT THESE TOOLS ARE NOT SMALL 27

28 28

29 29

30 30

31 BUILDING A SHARE CREATE - SHARE & FOLDER STRUCTURE IMPORT - APPS, DRIVERS, OS & PACKAGES BUILD - TASK SEQUENCE CONFIGURE - INI FILES, SCRATCH, BOOT UPDATE - GENERATE THE LTI MEDIA 31

32 32

33 33

34 34

35 35

36 POPULATING YOUR SHARE FEED THE BEAST OPERATING SYSTEM TASK SEQUENCE APPS & DRIVERS CAN COME LATER 36

37 37

38 38

39 39

40 40

41 41

42 42

43 43

44 CREATE TASK SEQUENCE CONFIGURE THE STEPS 44

45 45

46 46

47 47

48 48

49 TASK SEQUENCES MORE THAN MEETS THE EYE THE "ASSEMBLY LINE" OF MDT 49

50 50

51 51

52 TWEAK THE SHARE AUTOMATE YOUR AUTOMATION PLATFORM! 52

53 53

54 54

55 UPDATING YOUR SHARE BUILDS AND/OR RE-BUILDS BOOT MEDIA ONLY REALLY NEEDED WHEN BOOT.INI CHANGED OR BOOT DRIVERS ARE UPDATED NO NEED TO UPDATE WHEN CUSTOMSETTINGS.INI CHANGES 55

56 56

57 57

58 58

59 59

60 60

61 BOOT LITE TOUCH MEDIA MDT IN ACTION BOOT TO WIM OR ISO USB GOOD, CD BAD 61

62 62

63 63

64 64

65 65

66 66

67 67

68 68

69 69

70 70

71 71

72 72

73 73

74 74

75 ADVANCED MDT GOING PRODUCTION WITH APPLICATIONS TWEAKS, TIPS, & TROUBLESHOOTING TESTING & ACTIVATING IMPROVED AUTOMATION DATABASE SETUP WHAT ELSE CAN IT DEPLOY? WINDOWS 8 SERVERS VIRTUAL MACHINES AND THIN PCS 75

76 Q & A DEPLOYMENT SHARES BUILD SHARE DEPLOYMENT SHARE TEST SHARE 76

77 APPLICATIONS OFFICE CAN GO IN IMAGE W/ UPDATES AND CORE APPS ADD SUPPLEMENTARY APPS AFTER APPLYING IMAGE THIS GIVES YOU FLEXIBILITY APPLICATIONS THE CATCH: COMMANDLINE SYNTAX MSI > INSTALLSHEILD> EXECUTABLE GOOGLE, VM, TRIAL & ERROR ITNINJA.COM CHEATSHEETS 77

78 ADD OFFICE 2013 TO MDT

79 79

80 80

81 81

82 82

83 ADD ADOBE READER TO MDT

84 84

85 85

86 86

87 87

88 WAIT! GO BACK! MSIEXEC.EXE /QB- /L*VX %LOGPATH%\<FILE>.LOG REBOOT=REALLYSUPPRESS UILEVEL=67 ALLUSERS=2 /I FILENAME.MSI FUN WITH INI FILES! INSIDE \\SERVER\SHARE$\CONTROL BOOTSTRAP.INI CUSTOMSETTINGS.INI 88

89 BOOTSTRAP.INI CONTROLS WHERE SYSTEM LOOKS ONLY A FEW CUSTOMIZATIONS HERE CUSTOMSETTINGS.INI THE BRAIN OF THE DEPLOYMENT CORE OF THE AUTOMATION LOTS OF THE RULES ARE BENT HERE 89

90 BENDING THE RULES SKIPPING STEPS IN MDT WIZARD SET GLOBAL SETTINGS FOR SHARE WSUS CONFIG & TWEAKS 90

91 91

92 92

93 93

94 TESTING MDT ALWAYS TEST IN VM THIS SAVES TIME SNAPSHOTS ARE KEY ADDITIONAL RESOURCES DEPLOYMENT ARTIST - YOUTUBE DEPLOYMENT SOUP - TECHNET DEPLOYMENT BUNNY GOOGLE 94

95 ADDITIONAL RESOURCES ADDITIONAL RESOURCES 95

96 ADDITIONAL RESOURCES ADDITIONAL RESOURCES 96

97 ADDITIONAL RESOURCES Q & A 97