how microsoft it deployed windows 8 and windows 8.1 about microsoft and microsoft it windows os...
TRANSCRIPT
W8 & Deploy
Mark Lawrence
How Microsoft IT Deployed Windows 8 and Windows 8.1
Principal Program ManagerMicrosoft IT
Agenda
How Microsoft IT Deployed Windows 8 and Windows 8.1
• About Microsoft and Microsoft IT• Windows OS Image Creation and Distribution• Windows 8 Install Experience (Demonstration)• System Center Configuration Manager: Deploy and Update• Update to Windows 8.1 (CLICK, CLICK, DONE)• Lessons Learned
About Microsoft and Microsoft IT
Microsoft IT environments
2M Remote connects per month.97K Virtual Smart Cards
95Modern Apps Developed35 – IT 60+ by non-IT
311k System Center managed devices
120ksmartphone devices
33kMSFT users of Yammer - 6k message per day
20kSurface RT Devices on the Network
SingaporeBrazil
JapanDublinRedmond
Corporate
Exchange
CorporateStaging
Extranet
Test Extranet
Perimeter Network
Windows Deployment
Windows Development
FTEs ~ 77k FTEs Small Office ~ 3.7k … Remote Office ~ 1.6k … Mobile ~ 13.5k
Total ~ 18k
Microsoft internal user profile assessments
Corporate Campus
Low bandwidth Small Office
Corp Net Connected via tunnel
Products file share only
Mix of Wired and Wireless Native Connection
When Mobile – DA and VPN
Good bandwidth
Internet - Remote Office
Products file share only
Mix of Wired and Wireless Native Connection
Always Mobile - DA and VPN
Metered Networks -possible poor bandwidth
Internet - Remote Office
Products file share only
Mix of Wired and Wireless Native Connection
Always Mobile - VPN to control network usage
Good bandwidth
Corp Net Connected
WDS, OSD, and Products file share
Mix of Wired (WDS & OSD) and Wireless (Products file share) Native Connection
When Mobile - DA preferred solution
6
Mobile
Windows OS Image Creation and Distribution
Microsoft IT Windows 7 install experiences
f12
Software CompatibilityUser-driven by reviewing software compatibility on website
Data MigrationPrimary solution: in-place data migration
Users needing to migrate using USB or server shares is a self-driven solution using Windows Easy Transfer in Windows Backup or manually coping files
Hardware CompatibilityUser-driven by reviewing hardware compatibility on website
Network InstallUser-driven by reviewing options on website
Use f12 for WDS (and later OSD)
Copy image from server share and install locally
Remote users must make a remote connection into corporate office, copy down image, and install locally
Remote Domain Join & ProvisioningUser-driven, multistep process requiring VPN connection, join the domain, and reboots
Microsoft IT Windows 8 deployment goals
Lay groundwork for successful Windows adoption and Enterprise roll-out
Address key deployment pain points Demonstrate best practices for an enterprise Windows OS
deployment
User Experience
Line of Business Applications
(compatibility)
Data-Safe Deployment
UserReadiness
Image Delivery
Planning Windows 8 OS image architecture
10
WDS
USB
OSD
Factory Image
IT E
asy
Inst
alle
r
Azure
Microsoft IT ImageIT
Bra
ndin
g
MDT LTI/UDI Optional Applications
Settings
Drivers Payload
Maintenance Scripts
In Place Data Migration
Base.wim
UnAttend.xml
QFEs / PatchesBoot Drivers Modern Apps
Office IT Service Apps
BitLocker Pre-provisioning
Microsoft Deployment Toolkit imaging workflow
Application executables, scripts pointing to network
location or web
Control files (XMLs) define the Image
Applications, Packages, Drivers,
Task Sequence & Operating Systems
Scripts perform individual tasks. For Example, updating
unattend.xml or configuring BitLocker
Encryption
Task Sequence Engine, which is responsible to
perform tasks in a pre-defined order.
Image replication topology
20 Replication Servers
211 Branch Office Endpoint Servers
Hub Servers1 Master Server
25 Servers in Regional Data CentersReplication backbone infrastructure
200+ Sites with various
network connections
DemoMicrosoft Windows 8 Installation Experience using Microsoft IT Easy Installer• Microsoft Deployment Toolkit - Light Touch Install • User State Migration Tool for User Data Migration• Task Sequence to install Microsoft Office Professional Plus 2013
Click-To-Run• Task Sequence for BitLocker Drive Encryption• NOTE: IT Easy Installer available through Microsoft Consulting
Services engagement
System Center Configuration Manager: Deploy and Update
Unified management infrastructure at Microsoft
15
Redmond Site 175k
Clients
Redmond Site 290k
Clients
North & South
America50k Clients
Europe, MidEast, Africa
50k Clients
Australia & Asia
75k Clients
Device Mgmt.
Site
MS Online Directory Services (MSODS)
Active Directory
Federation Server 2.0
MS Online Directory
Sync (DirSync)
AD
User Discovery
Intune Subscriptio
n
Connector Site role
Infrastructure• 6 Primary Sites• 13 Secondary Sites• 250 Distribution
PointsPCs & Devices• ~340,000 clients• ~125k mobile devices
(EAS)Users• ~98k FTEs• ~82k Vendors
ConfigMgr 2012 R2
Patching Services• WSUS – Production• WU/MU – Labs
Pull and Push OS Installations
16
Windows 8.1 OS Update and OS Deployment Supported By:• System Center 2012 R2 Configuration Manager• System Center 2012 Configuration Manager Service Pack 1 (with
CU3)
Pull Installations
Microsoft IT chose to use a self-service method for Update, where users initiate the upgrade from a distribution point at their convenience.
Push Installations
Because Configuration Manager supports “push” installations, the Windows 8.1 Update can be applied to systems in the environment as a scheduled activity.
Update to Windows 8.1 (CLICK, CLICK, DONE)
18
Applications installs at Microsoft
A history of enabling self-service user experiences
Early daysFile share for Microsoft apps: \\productsLOB apps & 3rd party apps distributed through multiple channel
Over time, improved user search to find applicationsSimple web UI (http://productsweb) put on top of \\products sharesContent replicated globally with DFS to ease installation times LOB apps – most moved to web apps, so ‘distribution’ not needed
Today: Systems Center Configuration Manager - Applications Catalog
Self-service integrated with ConfigMgr: http://GetApps Application CatalogUnified Device Management integration with Company Portal (WinPhone/RT)
19
Deploying OS Update Application Package
• SCCM: Launch Windows Setup.exe + Parameters:• /auto:upgrade - Setup will run without user intervention• /noautoexit - If an error is encountered during setup, don’t exit.
Instead wait at appropriate wizard screen for user input.
• /performdu - Automatically download any applicable dynamic updates.
Note: The /auto:upgrade switch causes Setup to skip OOBE. As a result the auto update setting for the Store is turned off. Re-enable via registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate [AutoDownload] Value = 1
Windows 8.1
Package
SCCM OS Update: User Experience
User initiates
the installatio
n
Policy request
sent to the manageme
nt point
Package downloade
d from distributio
n point
Windows Setup.exe is started
Policy RequestManagement
Point
Distribution Point
Windows 8.1 PolicySystem Center
Configuration Manager
Primary Site
21
User Experiences with Enterprise OS Update
Update the Enterprise OS
Updates Windows 8 Enterprise OS to Windows 8.1 Enterprise Edition
INSTALL button launches Setup.exe using /auto:upgrade /performDU
Original OS WIM is applied (not a custom image); User Data & Settings & Applications remain in-place
Upgrade results for Preview 8.1:
• Over 27K PCs in less than 60 days
• Support tickets reduced +30%
Lessons Learned
Support for UEFI in the Image and Infrastructure Windows Recovery & OS Refresh / Reset Drive Partitioning
Inventory of LOB Applications Modern IE & Desktop IE Compatibility Modes
Understand User Configuration – Partitions & Drives Data Security – Plan to address EFS and BitLocker Offline verses Online – State Capture
Lessons Learned
Data Migration
Image
LOB Apps
User Readiness
User Education Social Networking Assistance Communications
For More Information
About Microsoft IT – TechNet – IT Showcase:
Microsoft IT Showcase Webcasts http://content5.catalog.video.msn.com/e2/ds/99c392b1-ac7a-4aff-89d3-ef6d7a742e9a.mp4
Delivering and Deploying Windows 8
http://technet.microsoft.com/en-us/windows/hh974336
Using Windows 8 Technologies to Safely and Easily Migrate User Data
http://content5.catalog.video.msn.com/e2/ds/d7dacdef-4398-4f86-b117-ab6c014ff81b.wmv
An Internal Community Support Forum to Foster Early Adoption
http://technet.microsoft.com/en-US/video/how-msit-designs-a-community-support-model-using-pointers
LOB Application Compatibility Testing Whitepaper
http://download.microsoft.com/download/4/e/8/4e8c1b99-54f1-4be7-8e9b-78024015848d/LOBApplicationCompatibilityTesting_TWP.doc
Questions?
EvaluationCreate a Text message on your phone and send it to 1919 with the content:
WC301 5 5 5 I liked it a lotSession Code
MarkPerformance
(1 to 5)
Match of technical Level
(1 to 5)
Relevance(1 to 5) Comments
(optional)
Evaluation Scale: 1 = Very bad 2 = Bad 3 = Relevant 4 = Good 5 = Very Good!
Questions:• Speaker Performance• Relevance according to your work • Match of technical level according to
published level• Comments
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Thank you