Howard Chow -...

Howard ChowMicrosoft MVP

What Do We Have For You…Intro to WDS (WinPE and Image files)

Installing WDS

Configuring WDSDHCP and WDS

Pre-staging clients

Adding Images

Client Side of WDSPXE Booting

Deploying an image

More To Cover…

The Network and how you deploy your imageMulticast Transmissions in R2

Automating the Installations

Create an Image

Modifying the Image

Best Practices, tips n tricks and lessons gained from Microsoft Services

Image deployment flow with WDS (And it’s exactly what we are showing today)1. Prepare a Windows 7 image for distribution

2. Configure WDS1. DHCP settings, PXE settings

2. Boot image creation

3. Capture and upload the Windows 7 image to WDS

4. Boot a bare metal client to receive the Windows 7 image

5. Boot a bare metal client to receive the Windows 7 image - unattend

Preparing Image for WDS –SYSPREP a Windows 7 Image

demo

Why Use WDS?

Performs network-based installations

Deploys Windows images to bare metal computers

Supports mixed Windows environments

Reduces deployment cost - FREE

Utilizes standard Windows technologiesWindows PE

.wim files

.vhd files

Windows Pre Installation Environmentaka…WinPE

Scaled down version of the Windows 7 Kernel

Boots into and runs from RAMX: drive (default driver letter)

Reboots every 72 hours

Command Line Interface Only

Can be converted to a bootable .ISO and placed on:CD, DVD, USB Flash Drive, external HD

You can create your own or use the boot.wim from W7 or Server 2008 R2 DVD (\Sources folder)

.Wim Side Trip

One of Microsoft’s image format

On WDS .wims are stored in image groups

Multiple images stored in a single image groupSingle instancing

No redundant file storage

Service image offlineApply patches quick and easily

VHD Image Formats - NEW

You can create a .vhd, apply a .wim to it and tell bcdedit to boot that OS

Mounting a VHD is called “attaching"

Un-Mounting a .VHD is called “detaching”

Diskpart & Imagex are the basic tools of choice to work with .vhd

.vhd images can contain more than one partition

Back To WDS:Requirements

WDS server must be a member of an Active Directory domain

DHCP

DNS

NTFS partition on which to store images

WDS on Server 2003

Installing WDS on a 2003 SP1 Server Install RIS

Install patch from the WAIK: windows_deployment_services_update.exe

Installing WDS on a 2003 SP2 ServerControl Panel / Add/Remove Programs / Windows Components / WDS

WDS on Server 2008 (& 2008 R2)

Installing WDS on a 2008 serverServer Manager

Add Roles

Select Windows Deployment Services from the list of roles

2 checked boxesDeployment Server

Transport Server

Need both for a full WDS installation

Configuring WDS – Welcome

WDS snap-in

Expand WDS

Right-click your server “Configure Server”

Store Your Images

Adding The Images

Within the WDS snap-in

Add Boot imagesThese are WinPEs

Add .Wim Install imagesImage groups and single instancing

Capture an ImageModel machine configured exactly the way you want it:

Install an OS

Add and configure Applications

Desktop settings

SYSPREP-reseal switch

-generalize

PXE Boot to a Capture Image

Creating An Image Using WDSCreate a Capture Image

WDS snap-in -> open Boot Images

R-click one W7 or 2008 R2 boot.wim from DVD /Sources

Choose to Create Capture Image…Give it a name, description and path to store it

When the wizard completes add the newly created Capture Boot Image to your list of Boot Images

Adding a .VHD

Cannot be added in the UI

Use WDSUtil cli

Need a vhd image group

Can’t mix vhds and wims

No single instancing occurrs

WDSUtil /verbose /progress /add-image /imagefile:<Path> /imagetype:install / imagegroup:VHD

WDSUtil & VHD

Configuring WDS:Creating boot, capture and install imagesStarting the capture image

demo

WDS And DHCP on The Same Server?

In a Perfect WDS World

Bare-MetalDHCP/WDS

Discover IP

Acknowledge

WDS & DHCP

3 Scenarios1. WDS and DHCP on the same subnet/ different

servers Client will find WDS by broadcasting

2. WDS and DHCP on different subnets Client find WDS through options 66 and 67 set in DHCP

3. WDS & DHCP on same server Client must find WDS through Option 60 in DHCP

WDS & DHCP Same Subnet

Bare-Metal

DHCP

WDS

Discover IP/PXE Server


WDS & DHCP Different Subnets

Bare-Metal

DHCP

WDS


Acknowledge

Request

WDS & DHCP on The Same Machine

Bare-MetalWDS/DHCPDiscover IP

Acknowledge

DHCP Configuration – Separate BOX

Option 66 and type in the computer name of the WDS

Option 67 and type in '\boot\x86\wdsnbp.com‘

Option 43 – 010400000000FF

WDS Server Responds To…

Known Clients: Pre-staged in ADUC

Pre-staging The GUID

Which WDS Server?

Starting the capture process

demo

From the Client

PXE boot screens

Pending Devices

Message from Administrator

Client Wizard

PXE boot

Unknown Clients & Approval

Unknown Clients

Message From Administrator

How do you set a message from the administrator?

On the WDS server from a command prompt type:

WDSUtil /set-server /AutoAddPolicy/message:"To contact your network administrator please dial 123-4567“

Pending Devices

Can’t use PXE

Create a Discover Image

WDS snap-in -> expand Boot Images

R-click a boot image W7 or 2008 R2 boot.wim from DVD /Sources

Choose to Create Discover Image…Give it a name, description, path to store it and name of WDS server to connect to

Using the WAIK tools create a bootable .ISO that contains the new discover .wim

Burn to CD/DVD, USB, external HD

Boot the WDS Client to receive the image

demo

Traffic On The Network

WDS sends packet 1 to client1



WDS sends packet 1 to all clients

WDS sends packet 1 to client1,

client5 client9, client22

WDS Server 2008 R2 Multicast Enhancements

Multiple Stream TransferMultiple streams of traffic

Optimized rates based onclient connection

Client Auto RemovalSlower clients can be dropped to unicast or entirely (only in standard multicast)

Boot Image MulticastWindows PE boot images can use multicast (clients with EFI)

Fast

Medium

Slow

Clients

Multicast

WDS Server

Multicast Transmission

First client joins “transmission”

Clients

WDS Server


Waiting for other clients to join…

Multicast

Clients with multiple transfer speeds

WDS Server


Additional clients join stream

Multicast

Fastest Medium Slowest Medium


WDS Server


More clients to join

Multicast

FastestMedium Slowest Medium FastestMedium Medium


WDS Server

Multicast

Last clients complete…

Multicast

Medium MediumSlowest

Clients

WDS Server

Multicast

All clients complete. Transmission ends.

Multicast

Creating Multicast Transmissions

2 ways to create a multicast transmission from within the WDS snap-in

Right-click Multicast Transmissions and choose Create Multicast Transmission

ORDrill down to your Install Image and right-click the image then choose Create Multicast Transmission

THENName the Multicast Transmission

Choose the image

Automatic OR Scheduled Cast?

Automate The InstallationCustomize your own file using WSIM tool from WAIK

Server 2003 & XPWinnt.sif

Sysprep.inf

Server 2008, Vista and later OsesWindows System Image Manager (WSIM)

.xml scripts

Image Capture Process

Mount the image (imagex) capture boot image, copy wdscapture.inf to Windows\system32\, re-insert to WDS

Sample unattend files: http://technet.microsoft.com/en-us/library/cc732280(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc732280(WS.10).aspx





Unattend.xml scriptsYou will need 2 scripts

WinPE PhaseLanguage of installation

Keyboard layout

Credentials for Image

Which Image to install

Disk Configuration (partitioning)

Where to install the image

The rest of the installation (specialize and OOBE)Computer name

User account

Time zone

Where To Put The Scripts

WinPE script (WDS Client)Unattend.xml

Store script in RemoteInstall\WDSClientUnattendfolder

WDS snap-in -> R-click server -> Properties Client tab

Enable unattended installation

Browse to WinPE script

Sets the script for all computers of that architecture

Sets the script for all architectureWDSUTIL /Set-Server /WDSUnattend /Policy:enabled/File:wdsclientunattend\unattend.xml /Architecture:<arch>.

Scripts For a Specific Machine

New computer must be pre-staged in ADUC

On WDS server cmd type:WDSUtil /Set-Device /Device:computername/ID:GUID or MAC /WDSClientUnattend:path & name of unattend.xml

Example:

WDSUtil /Set-Device /Device:Client1 /ID:{8FD14D56-A2B0-6F06-2A00-FD3979EC51A1} /WDSClientUnattend:C:\UF\Unattend.xml

The Image Script

Properties of the Image file in WDSGeneral tab

Allow image to install in unattended mode

Select File

Browse to answer file

Can be stored anywhere

Can be named anything you choose

For XP / 2003Save SYSPREP.INF to the $OEM$ structure of the image (D:\RemoteInstall\Images\Windows XP\winxpsp2\$OEM$\$1\sysprep\sysprep.inf).

Boot the WDS Client to receive the image - Unattend mode

demo

Modifying an Image.vhd can be serviced offline

RemoteInstall folderImages

Find your .vhd

Use Diskpart to attach the vhd

Use DISM to add packages, drivers, enable/disable windows components

.wim can be patched using WSIM scriptsAdd your packages to the Install script

OR

Disable image / export image /service offline with DISM

Logs to Check

The logs that contain useful troubleshooting information are found in the %Windows% folder.

Setupact.log

Setuperr.log

Verbose loggingDeployment Services Diagnostics logs (event viewer)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WDSServer\Providers\WdsImgSrv\ClientLogging

Enabled (0 / 1)

LogLevel (0 / 1 / 2 / 3)

What we CoveredInstalling & configuring WDS

Pre-staging clients

Adding .vhd vs .wim images

Customizing PXE boot process

Deploying an image

Multicast transmissions

Automating the Installations

Create and modifying an image

Performance and troubleshooting logs

Thomas Leung & Chris TsuiMicrosoft ServicesMicrosoft Hong Kong LimitedSession Code: WCL332

Windows 7 DeploymentTips and Tricks in Reality World

Image Deployment

Image DeploymentTraditional Image Cloning

Model A

Model B

Image A

Image BSysprep

Image DeploymentDynamic Driver Provisioning

Client

WDS Server

WIM Images Drivers

Driver targeting to match drivers to hardware

Reduces image size and centralizes deployment driver management

Product Activation

Image Deployment


Product ActivationKey Management Service (KMS)

KMS Host KMS Client

InternalExternal

O n e T i m e

DNS

Product Activation

Image Deployment

User State Migration


User State MigrationHard-link Migration Store

For use in computer-refresh only

Enables local file migration without copying or moving files

Scans the computer for user files and settings then creates a directory of links to those files using hard-links

Hard-links are then remapped into the appropriate locations in new operating system

Processes migration jobs in less time using megabytes of disk space instead of gigabytes

Product Activation

Deployment Image

Domain Group Policy

Object



Domain Group Policy ObjectRemote Server Administration Tools (RSAT)

Windows 7 joins Windows Server 2003 Domain

Install Microsoft Remote Server Administration Tools (RSAT)

Open Group Policy Management Tools to create Group Policy Object

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d

Product Activation

Image Deployment

Domain Group Policy

ObjectGroup Policy Script



Group Policy ScriptAdministrative Token vs Limited User Token

Admin

User

1

Group Policy Script

Printer

Drive

Failed

OK

Windows Explorer protects

your machine against malware

Group Policy ScriptTechnical Suggestions

Don’t add users to the local Administrators group on the workstation

Detect Windows 7 and create a scheduled task run a logon script via Task Scheduler

Product Activation

Image Deployment

Domain Group Policy

ObjectGroup Policy Script



Microsoft ServicesEnterprise Services Portfolio

TechnicalConsultingServices

TechnicalSupportServices

StrategyConsultingServices

Enterprise Strategy ConsultingIT Planning

Platform Value Realization

Enterprise-wide Architecture

Business Architecture

Program Planning & Management

Microsoft Consulting ServicesAssessment & Review Services

Planning, Architecture & Design Services

Operations Consulting

Customized Engagements

Microsoft Services Premier SupportDirect Support Relationship

Preventative Services

Problem Resolution Support

Knowledge Transfer and Workshops

© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS,

IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Howard Chow -...

Documents

Transcript of Howard Chow -...