cli220 windows vista client manageability

©2006 Microsoft Corporation. All rights reserved.

CLI220CLI220Windows Vista Client Windows Vista Client ManageabilityManageability

Presented by Mark MinasiPresented by Mark Minasi

Created by David ZipkinCreated by David ZipkinProduct ManagerProduct ManagerWindows VistaWindows VistaMicrosoft CorporationMicrosoft Corporation


User Account ControlUser Account ControlWindows Resource ProtectionWindows Resource Protection

New Event Viewer and Logging New Event Viewer and Logging InfrastructureInfrastructureNew Task SchedulerNew Task SchedulerReliability Analysis ComponentReliability Analysis Component

Maintain PC configurationMaintain PC configuration

Desktop Troubleshooting and Desktop Troubleshooting and Task AutomationTask Automation

Group Policy EnhancementsGroup Policy EnhancementsUpdate Management ImprovementsUpdate Management ImprovementsNew WMI Providers and Windows New WMI Providers and Windows Remote ManagementRemote Management

Simplify Configuration Simplify Configuration Management Management

3 Management Goals:3 Management Goals:

Management Features and Management Features and Improvements in Windows VistaImprovements in Windows Vista


Goal 1: Maintain PC Configuration


“…“…a locked and well-managed PC can save 40%.” a locked and well-managed PC can save 40%.” ——Gartner, December 2005Gartner, December 2005

User Account ControlUser Account ControlLowers total cost of ownership by making it Lowers total cost of ownership by making it practical to run as standard userpractical to run as standard user

PC is kept in known state PC is kept in known state Restrict installations of unapproved softwareRestrict installations of unapproved softwareLess downtime and higher productivityLess downtime and higher productivityReduce need to re-image systemReduce need to re-image system


Demo: User Account ControlDemo: User Account ControlAdministrator experienceAdministrator experienceGroup policy controlsGroup policy controlsStandard user experienceStandard user experience


Windows Resource ProtectionWindows Resource ProtectionMaintain PC configuration by preventing Maintain PC configuration by preventing potentially damaging system configuration potentially damaging system configuration changeschanges

System files and registry settings protected System files and registry settings protected from accidental changes by the user or from from accidental changes by the user or from software installerssoftware installersOnly the OS Trusted Installer Service can Only the OS Trusted Installer Service can change Windows Resource Protection resourceschange Windows Resource Protection resourcesIf modified, boot critical files are replaced If modified, boot critical files are replaced with trusted copieswith trusted copies


Demo: Windows Resource Demo: Windows Resource ProtectionProtection

New name, old technologyNew name, old technologyTry to delete calc.exeTry to delete calc.exeExamine permissionsExamine permissionsAnd if we were to take control and delete And if we were to take control and delete it…it…


Goal 2: Simplify Configuration Management


Improvements in Group Policy Improvements in Group Policy for Windows Vistafor Windows Vista

Extends the reach of Group Policy with Extends the reach of Group Policy with hundreds more settingshundreds more settingsReliably and efficiently apply policyReliably and efficiently apply policyEasier to useEasier to use


Power Power ManagementManagement

Device Device Installation Installation and Usageand Usage

Internet Internet ExplorerExplorer

IPSEC & IPSEC & Windows Windows FirewallFirewall

Printer Printer DeploymentDeployment

TroubleshootiTroubleshooting & ng &

DiagnosticsDiagnostics

User User Account Account ControlControl

iSCSIiSCSIWindows Windows DefenderDefender

Windows Windows Error Error

ReportingReporting

Remote Remote AssistanceAssistance

Terminal Terminal ServicesServices

GlobalizatioGlobalizationn ShellShell TabletTablet

Over 500 new settings across key areasOver 500 new settings across key areas

Extending the Reach of Extending the Reach of Group PolicyGroup Policy


Improvements In Group PolicyImprovements In Group PolicyApplied more reliably, and easier to useApplied more reliably, and easier to use

Network aware application Network aware application of Group Policyof Group Policy

Support for editing Group Policy Support for editing Group Policy settings in Multilingual settings in Multilingual

EnvironmentsEnvironments

Support for Multiple Local GPOsSupport for Multiple Local GPOs

Reliable and Efficient Reliable and Efficient Application of PolicyApplication of Policy Easier to UseEasier to Use

GPMC integrated into WindowsGPMC integrated into Windows

Search and filter (Post Windows Vista)Search and filter (Post Windows Vista)

Templates (Post Windows Vista)Templates (Post Windows Vista)


Demo: Using GP for device Demo: Using GP for device controlcontrol

Goal: kill CD-ROM driveGoal: kill CD-ROM driveOpen device manager, find CD-rom, PropertiesOpen device manager, find CD-rom, PropertiesDetails, look for Hardware Ids and Compatible IdsDetails, look for Hardware Ids and Compatible IdsNote themNote themUninstall hardwareUninstall hardwareIn Gpedit, go to Computer Configuration / In Gpedit, go to Computer Configuration / Administrative Templates / System / Driver Administrative Templates / System / Driver Installation /Device Installation RestrictionsInstallation /Device Installation RestrictionsPrevent installation of devices that match any of Prevent installation of devices that match any of these device IDsthese device IDsPunch in IDPunch in IDgpupdate /forcegpupdate /forcerescan for changesrescan for changes

©2006 Microsoft Corporation. All rights reserved.Search and Filter Prototype Interface…coming soonSearch and Filter Prototype Interface…coming soon

Search and Filter Will Make it Search and Filter Will Make it Easier to Find the Right Easier to Find the Right SettingsSettings

©2006 Microsoft Corporation. All rights reserved.Search and Filter Prototype Interface…coming soonSearch and Filter Prototype Interface…coming soon

Templates Will Facilitate Templates Will Facilitate Policy CreationPolicy Creation


We’re Making Progress We’re Making Progress Reducing the Pain of Update Reducing the Pain of Update Management…Management…

Fewer updates delivered via Windows Fewer updates delivered via Windows Update (WU) require rebootsUpdate (WU) require reboots

Updates requiring a reboot reduced by at least Updates requiring a reboot reduced by at least 17% since August 200317% since August 2003

Reduction in update delivery frequency Reduction in update delivery frequency from once a week to once a monthfrom once a week to once a monthConsolidate multiple reboots into a single Consolidate multiple reboots into a single reboot when multiple patches requiring a reboot when multiple patches requiring a reboot are installed togetherreboot are installed together


……And Getting Even Better With And Getting Even Better With Windows VistaWindows Vista

Patches can be applied directly to imagesPatches can be applied directly to imagesAuto-update everythingAuto-update everythingPlatform technology to reduce rebootsPlatform technology to reduce reboots


Windows Windows Installer Installer (MSI)(MSI)

Key 2007 Key 2007 Microsoft Microsoft Office Office applications applications (1)(1)

Fewer reboots when using the Windows Fewer reboots when using the Windows Add/Remove Programs featureAdd/Remove Programs feature

Corporate Developers can reduce reboots Corporate Developers can reduce reboots for installations and updates by using the for installations and updates by using the Windows InstallerWindows Installer

Automatically restart after a reboot due Automatically restart after a reboot due to to an installation or updatean installation or update

Recreate application state upon restartRecreate application state upon restart(1)(1) Selected Microsoft applications that take advantage of Microsoft Office Restart Manager Word, Office Excel, Selected Microsoft applications that take advantage of Microsoft Office Restart Manager Word, Office Excel,

Office Outlook, Office PowerPoint, and Internet ExplorerOffice Outlook, Office PowerPoint, and Internet Explorer

Windows Vista and 2007 Office Windows Vista and 2007 Office SystemSystemFurther Reduce Disruption From Further Reduce Disruption From Reboots Reboots


Windows Vista includes 13 new WMI Windows Vista includes 13 new WMI Providers:Providers:

BitLocker Drive Encryption BitLocker Drive Encryption Trusted Platform Module Trusted Platform Module Boot Configuration Database Boot Configuration Database Intelligent Platform Intelligent Platform Management InterfaceManagement InterfaceWindows Parental Controls Windows Parental Controls Network Access Network Access Protocol Client Protocol Client Others…Others…

Windows Management Infrastructure Windows Management Infrastructure (WMI) Enhancements Improve (WMI) Enhancements Improve ManageabilityManageability


Use Windows Remote Management to Use Windows Remote Management to Access WMI Information Access WMI Information

over the Internetover the Internet

WinRM - Windows WinRM - Windows Remote ManagementRemote Management

Firewall Friendly Remote Access Protocol Firewall Friendly Remote Access Protocol (Replaces DCOM)(Replaces DCOM)

HTTP & HTTPSHTTP & HTTPSMicrosoft’s implementation of WS-ManagementMicrosoft’s implementation of WS-Management


Goal 3: Desktop Troubleshooting and Task Automation


New Event Logging New Event Logging Infrastructure - Windows Infrastructure - Windows Eventing 6.0Eventing 6.0

Right data to diagnose problemsRight data to diagnose problemsThe right data…but not too much dataThe right data…but not too much dataImproved supporting data and documentation Improved supporting data and documentation for all eventsfor all events

Infrastructure supports Ad-hoc diagnosis Infrastructure supports Ad-hoc diagnosis and management toolsand management tools

Schematized events (XML) provide Schematized events (XML) provide richer informationricher informationEasy integration with management toolsEasy integration with management tools


User Experience in Event User Experience in Event Viewer is Dramatically Viewer is Dramatically ImprovedImproved

Single place to view events for all Windows Single place to view events for all Windows

Vista componentsVista componentsFocus on important events with filtering Focus on important events with filtering and custom viewsand custom viewsEvents are actionableEvents are actionable

Associate a task with an event with a single Associate a task with an event with a single clickclick

Event SubscriptionsEvent SubscriptionsIT Professionals can subscribe to events and IT Professionals can subscribe to events and view view them centrallythem centrallyBased on Windows Remote ManagementBased on Windows Remote Management


What’s New in Task Scheduler?What’s New in Task Scheduler?Power and flexibilityPower and flexibility

Sophisticated Scheduling Options with new Sophisticated Scheduling Options with new triggers, conditional launch, and action chainingtriggers, conditional launch, and action chainingCompletely scriptableCompletely scriptable

VisibilityVisibilityTask dashboard shows active and upcoming Task dashboard shows active and upcoming taskstasks

Improved reliability and resource allocationImproved reliability and resource allocationRetry tasks in case of failureRetry tasks in case of failureRun when next availableRun when next available


Reliability Analysis ConsoleReliability Analysis ConsoleHelps you understand causes of crashes Helps you understand causes of crashes and hangsand hangs

Tracks frequency and type of user disruptionsTracks frequency and type of user disruptionsShows connections between application installs Shows connections between application installs and other system eventsand other system events


Demo: Task SchedulerDemo: Task SchedulerCreating a taskCreating a taskTask view optionsTask view optionsOptions to re-run a scheduled taskOptions to re-run a scheduled taskAbility to start it immediatelyAbility to start it immediatelyEdit capabilitiesEdit capabilities


Demo: Event ViewerDemo: Event ViewerGreater granularityGreater granularityXML message format XML message format Event triggersEvent triggersEvent forwardingEvent forwarding


User Account ControlUser Account ControlWindows Resource ProtectionWindows Resource Protection

New Event Viewer and Logging New Event Viewer and Logging InfrastructureInfrastructureNew Task SchedulerNew Task SchedulerReliability Analysis ComponentReliability Analysis Component

Maintain PC configurationMaintain PC configuration

Desktop Troubleshooting and Desktop Troubleshooting and Task AutomationTask Automation

Group Policy EnhancementsGroup Policy EnhancementsUpdate Management ImprovementsUpdate Management ImprovementsNew WMI Providers and Windows New WMI Providers and Windows Remote ManagementRemote Management

Simplify Configuration Simplify Configuration Management Management

3 Management Goals:3 Management Goals:

Management Features and Management Features and Improvements in Windows VistaImprovements in Windows Vista


Demo: Reliability MonitorDemo: Reliability MonitorBuilt on Reliability Analysis ComponentBuilt on Reliability Analysis ComponentAn MMC snap-inAn MMC snap-inClickable graph format and front-end to Clickable graph format and front-end to Event ViewerEvent Viewer

Thanks for attending!Thanks for attending!I hope you liked this introduction to new I hope you liked this introduction to new client management technologiesclient management technologiesPlease fill out an evaluation!Please fill out an evaluation!You can find me at [email protected] can find me at [email protected] my online newsletter and forum at Find my online newsletter and forum at www.minasi.comwww.minasi.com

cli220 windows vista client manageability

Documents