Whitepaper: Using MDT 2010 To Deploy Windows 7

I’ve just published a guide on how to use the free Microsoft Deployment Toolkit 2010 to deploy Windows 7.  Using this document you’ll be able to capture customised sysprepped images and “upgrade” existing computers, e.g. migrate XP machines to Windows 7 using a light touch client.

MDT is very powerful, allowing you to manage client and server operating systems using customised task sequences, a set of steps processed in order.  I was a doubter (sorry, Rhonda, I should have believed you!) at first but I’m a believer now.

By the way, I used Word 2010 CTP to write this document.  I’m used to Word 2007 so this was a breeze with there being no big changes for basic usage.  The only trouble I had with the CTP (it is pre-beta) was that the footers kept getting new lines for some unknown reason so I had to keep deleting them.

“I’ve been doing operating system deployment of one form of another since 1998 when I first started using Ghost to clone NT 4.0 workstations. I’ve used a variety of tools since then including a custom routine to deploy NT 4.0 using Novadigm EDM, Windows 2000/2003 Remote Installation Services (RIS), ImageX from Windows Automated Installation Kit and Windows Deployment Services (WDS). As time has gone by there have been some changes.

Operating System (OS) deployment had always been a form of IT black magic. I can’t be certain why. I know that documentation used to be non-existent or incomprehensible. If you downloaded Microsoft Business Desktop Deployment accelerator you installed it, ran it, tried to use it, scratched your head wondering what you were doing wrong, followed a rats nest of hyperlinks and quickly gave up. Microsoft just seemed to be unable to clearly communicate how to efficiently deploy operating systems. Most organisations only create a new standard operating system build once every few years. There are plenty of organisations that deployed XP back in 2002-2003 and have no plans to change their standard soon. That means their engineers never develop OS deployment skills. If a change is needed then consultants or contractors are brought in and they do the engineering, leaving a set of operations guides behind. There’s a set of people out there who either don’t have time to learn the skills (I can sympathise!). But worse, I think there’s also a set of people who really don’t care; they’ll do the sneaker-net thing quite “happily” or continue to (probably) illegally use Ghost to deploy operating systems – Hey! You actually need to buy a Ghost license for each machine built with Ghost and an auditor really can detect a fingerprint on the hard disk of “ghosted” workstations.

Microsoft did attempt to simplify things. Documentation has improved but it’s still not there yet as can be seen in the MDT documentation where there are gaps and misleading instructions. The tools have gotten better too. Adding drivers to the pre-installation phase of RIS was a nightmare to figure out. It got better with the “Panther” based installation tools that were released with Vista and Server 2008. That involved using Microsoft’s WAIK to build a Windows PE image (your boot up media) and add drivers into that using command line tools. The current generation of tools allow you to build libraries of drivers and add them via a GUI.

This document is going to focus on Microsoft Deployment Toolkit (MDT) 2010. I’ll be looking at deploying Windows 7 seeing as that’s the new desktop operating system from Microsoft. Everything we look at here will be possible with Windows Vista, Windows Server 2008 and Windows Server 2008 R2. They all share the same basic installation functionality. MDT is going to be the tool you’ll be most often recommended to use for deploying Windows 7. Why? There are a lot of reasons:

  • It’s 100% free.
  • It allows you to do light-touch clean installations of and upgrades to Windows 7.
  • It uses task sequences to perform the installs. These are a sequence of instructions that can include other tasks.
  • Using task sequences you can add drivers, patches and applications to you Windows 7 PC’s, enable BitLocker, etc.
  • The task sequences are 100% customisable. You can do anything that you can do from command line or from a script. Many of the default actions are VBS scripts.
  • You cannot upgrade from XP to Windows 7. That’ll be a problem for those who have data on their PC’s. Using task sequences and the User Migration Toolkit you can capture the user state of the PC, put a clean install of Windows 7 on the machine and restore the user state, effectively performing an upgrade.
  • It’s very lightweight, e.g. my labs have been machines with 512MB of RAM. MDT is really a glorified file share/set of file shares. Consultants/contractors could create a virtual machine and transport their VHD/VMDK to customer sites to do their work. The great thing about VHD/VMDK is that it can be copied. Over time you’ll build up a library of drivers and task sequences that you can reuse again and again.

Here’s what I’m going to try cover in this document. We’ll install MDT 2010. We’ll get to the point where we can deploy a standard installation of Windows 7, capture a customised template image and be able to deploy an “upgrade” from Windows XP using a user state capture/restore. I’ll add in a few tricks to make things easier. I’ll show you how to create a light touch installation requiring minimal interaction and how to dispense with the need to create bootable USB/DVD media to boot up machines for the deployment process. My lab will be running on VMware Workstation so you’ll see how I added drivers for it. The process is pretty similar on Hyper-V (which I have also done previously).

Disclaimer: I won’t claim to be a deployment guru. There’s other people out there who know this stuff better than I do. But I can show you how to get started with MDT and how to deploy Windows 7 with it.

I’m using the current (at the time of writing) release candidate (RC) of MDT 2010 so some things may change by the time you read this.”

The document continues

Security On Your Terms

Microsoft published some security feature documentation for Windows 7:

  • Security on your terms overview: This article describes some of the new or changed security features in Windows 7. These features include the new Action Center and the updated UAC. This article also describes how Windows 7 extends BitLocker Drive Encryption to portable storage devices.
  • Security Frequently Asked Questions (FAQ): This topic answers questions about security in Windows 7, which includes features like Security Development Lifecycle, User Account Control, Kernel Patch Protection, Windows Service Hardening, Address Space Layout Randomization, and Data Execution Prevention.
  • Security on your terms walkthrough: The step-by-step instructions in this walkthrough provide a brief tour of new security features in Windows 7.

Location Aware Printing

Microsoft published some documentation on a new feature in Windows 7 Professional (and higher) called Location Aware Printing.  This is a very cool feature.  Imagine you’re a laptop user working in multiple sites.  You use printers in each of those sites.  Location Aware Printing will detect your network location and set your default printer accordingly.  This saves time and helps Office out too – it sets up document layouts based on your default printer.

  1. Location Aware Printing: The Location Aware Printing Walkthrough provides a brief tour of the new Location Aware Printing feature in Windows 7 (available in Windows 7 Professional or higher). These instructions assume that your computer is connected to at least two networks. Location Aware Printing Frequently Asked Questions answers questions about using the Location Aware Printing feature in Windows 7.
  2. Location Aware Printing Walkthrough: The step-by-step instructions in this walkthrough provide a brief tour of the new Location Aware Printing feature in Windows 7 (available in Windows 7 Professional or higher).
  3. Location Aware Printing Frequently Asked Questions: This topic answers questions about using the Location Aware Printing feature in Windows 7.

Windows 7 Language Packs Available

This was posted by MS yesterday.  Note that you need software assurance on the desktop to avail of Windows 7 Enterprise Edition.

“As of this morning, August 25th, the following language packs are available for download from Windows Update. Please note Traditional Chinese –Taiwan will be released at a later date.

These language packs are available to our enterprise customers running Windows 7 Enterprise and Windows 7 Ultimate RTM versions only. Customers on the Windows 7 Release Candidate are not eligible for these language packs.

For information on the general availability of Windows 7 Ultimate and all other version, please refer to Brandon’s post here.

Languages:

  • Arabic
  • Brazilian Portuguese
  • Bulgarian
  • Chinese – Simplified
  • Chinese – Traditional – Hong Kong
  • Croatian
  • Czech
  • Danish
  • Dutch
  • English
  • Estonian
  • Finnish
  • French
  • German
  • Greek
  • Hebrew
  • Hindi
  • Hungarian
  • Italian
  • Japanese
  • Korean
  • Lithuanian
  • Norwegian
  • Polish
  • Portuguese
  • Romanian
  • Russian
  • Serbian Latin
  • Slovak
  • Slovenian
  • Spanish
  • Swedish
  • Thai
  • Turkish
  • Ukrainian”

MDT 2010: “Upgrade” From XP to Windows 7

I’ve just wrapped up doing some work with Microsoft Deployment Toolkit 2010 Beta 2.  I was looking for a way to migrate from XP to Windows 7.  The process would be something like:

  • Capture the user state of the XP machine
  • Format the disk
  • Deploy Windows 7
  • Restore the user state

I kept looking for a difficult answer and it just wasn’t working for me.  I was about to give up for the night when I had a peek at the default task for deploying an operating system.  After toying around with task sequences for a week I was getting to grips with the basics.  I couldn’t believe what I was seeing.  This default task sequence would do everything I wanted and more:

  • Driver injection
  • Application installation
  • Patching

Impressive!  I fired up my XP VM and ran the LiteTouch script from the deployment share on the MDT server.  It started up the MDT GUI and asked me a few questions.  I answered them an sat back.  In less than 20 minutes I had a Windows 7 VM that had all of the user data that was previously on the XP VM.  Perfecto!

I’m rebuilding the server with MDT 2010 RC now.  This continues to be much simpler than I was expecting.  I keep looking for hard ways to do things only to find the solution is simple.

Using MDT 2010 To Upgrade From XP to Windows 7

Microsoft has posted two videos that you can download.  The first shows how to set up the beta 2 build of the Microsoft Deployment Toolkit.  The second shows how to do a migration from XP to Windows 7.

Yes; that’s a migration.  You cannot do an in-place upgrade.  The migration uses a light-touch approach to capture the user state, replace the operating system and restore the user state.  A prepared image can be deployed, containing all of the required applications.  Your task sequence (that does the work) can be configured to perform other post-install steps.

If you want a zero touch approach then look at ConfigMgr with the latest service pack for Windows 7 support.

Using Microsoft Deployment Toolkit 2010

I set up MDT 2010 Beta (from Microsoft Connect) tonight for the first time on some Hyper-V virtual machines.  The idea is to get to a point where I can take an XP PC, capture the user state, deploy Windows 7 and restore the user state.

My first experience with MS’s advanced OS deployment tools was back when Windows Server 2003 SP2 was in beta/RC stages.  I was researching WDS to write a whitepaper for this blog.  I downloaded the BDD and quickly abandoned it.  It was a circular maze with no start point.  It was awful.  I know that the Deployment team got feedback that they had produced less than stellar documentation.  I personally think that was part of the problem with businesses not accepting Vista with open arms.

I need to say here that I have never used MDT before.  I’ve only ever seen deployment MVP, Rhonda Layfield, demo it.

So I downloaded the tiny MDT 2010 installer.  Of course, it needs the humungous WAIK for Windows 7/Windows Server 2003 ISO (I think it’s 1.6GB now).  I also needed the Windows 7 ISO.

I set up 3 VM’s:

  • A DC running DNS and DHCP
  • A MDT server
  • A blank PC

I installed WAIK and MDT 2010 on the MDT server.  Nothing went wrong there.  I fired up the Workbench.  It’s pretty simply laid out.  Documentation is the first thing you see – INCLUDING a start up guide for a lab! *round of applause *

Steps to configure MDT to do a simple Lite Touch deployment:

  • Create a MDT deployment share: this creates a set of folders in the share and in the workbench.  There are tasks associated with the folders.
  • Import the OS image: provide the DVD and point at the root.
  • Import your drivers: I had extracted the CAB from the Hyper-V Integration Components ISO into the C:Temp folder.  I pointed at this.  All the drivers were imported.  Do this for your PC and laptop (and server because you can deploy a server OS using MDT too!) drivers.
  • Create a task sequence: This is the set of steps that will be performed.  I went with the “Standard Client Task Sequence” to test out my implementation.
  • Update the deployment share: This creates Lite Touch boot image WIM’s and ISO’s for each of the supported CPU architectures.

I then took the ISO for my OS architecture (x86) provided it as media for the blank PC VM hardware configuration and booted it up.  I was asked to pick a task (e.g. deploy and OS), log in, pick a task sequence and then sit back.  Windows 7 was installed and then logged in automatically.

I reckon I could have alternatively taken my boot image WIM and stuck it up on a WDS server … that’s next in the lab.  I also want to go ahead and extend this:

  • Capture a Windows 7 OS image with all the typical office apps.
  • Create a task sequence to: 1) capture an XP user state 2) deploy my captured Windows 7 image and 3) restore the captured user state.

I’ll update the blog as things progress.

Technorati Tags: ,

 

del.icio.us Tags: ,