Windows 2008 R2 & Windows7
Download as PPTX, PDF2 likes611 views
This document provides a summary of a presentation on migrating Windows XP systems to Windows 7 and securing Windows 7 environments. The presentation includes sessions on migrating to Windows 7 using deployment tools like Windows Easy Transfer and USMT, securing Windows 7 in a Windows Server 2008 R2 environment using features like NAP and DirectAccess, and new Active Directory capabilities in Windows Server 2008 R2 like the AD Administrative Center and recycle bin. It discusses tools, demonstrations, and best practices for migration and management.
Windows 2008 R2 & Windows7
- 1. Migrating Windows XP to Windows 7: Get it done using Microsoft Deployment ToolsHarold WongIT Pro Evangelist Microsoft Corporationblogs.technet.com/haroldwong
- 2. Event Schedule8:30am – Introduction and Welcome8:45am –Session 1: Migrating Windows XP to Windows 7: Get it done using Microsoft Deployment Tools9:40 – Break 9:55 –Session 2: Securing Windows 7 in a Windows Server 2008 R2 Environment10:40 – Break 10:55 –Session 3: New Features in Windows Server 2008 R2 Directory Services– Drawing Afternoon MSDN will be here so stick around if you can
- 3. Migrating Windows XP to Windows 7:
- 4. AgendaWindows Easy TransferDeployment ToolsUsing USMT Hard-link MigrationSummary of Deployment Solutions
- 5. Windows Easy TransferEasily Move Files and SettingsSupports Windows 2000, Windows XP and Windows VistaTransfer done with:CableUSB DriveBetween Computers in a Network
- 7. Deployment ToolsAutomated Installation Toolkit (AIK)User State Migration Tool (USMT)Microsoft Deployment Toolkit (MDT 2010)
- 8. Automated Installation Toolkit (AIK)Windows System Image Manager (WSIM)ImageXDeployment Image Servicing and Management (DISM) Windows Preinstallation Environment (WinPE) User State Migration Tool (USMT)
- 9. User State Migration ToolMigrates Files and SettingsComputer Replacement and Computer Refresh MigrationsScriptableHard-Link Migration StoreBenefits and Limitations
- 10. Microsoft Deployment Toolkit 2010Unified tools and processes Reduced deployment time“Lite-touch” deployments leveraging Windows deployment tools“Zero-touch” deployments leveraging System Center Configuration Manager 2007 and Windows deployment tools. Support for Windows 7, Windows Server R2.
- 11. “Lite-Touch” High-Volume DeploymentClient Migration Store – AIK and USMTConnected to WORKGROUPSource ComputerRun ScanStateand copies user state to shared folder on Windows 7 ClientDestination ComputerRunLoadStateon new Windows 7 platform and restores Windows XP user state from shared folder on Windows 7 ClientDestination ComputerRunLoadStateon new Widows 7 platform and restores Windows Vista user state from shared folder on Windows 7 ClientSource ComputerRun ScanStateand copies user state to shared folder on Windows 7 Client
- 12. Demo“Lite-Touch” High-Volume Deployment using the User State Migration Tool’s (USMT) Scanstate and Loadstate
- 13. “Zero-Touch” High-Volume DeploymentMigration Store ServerDecommissionDestination ComputerUse Log-on Script, batch file or non-Microsoft technology to run LoadStateon new Windows 7 platform and restores Windows XP user state from serverSource ComputerUse Log-on Script, batch file or non-Microsoft technology to run ScanStateand copies user state to network serverSource ComputerUse Log-on Script, batch file or non-Microsoft technology to run ScanStateand copies user state to network serverDestination ComputerUse Log-on Script, batch file or non-Microsoft technology to runLoadStateon new Windows 7 platform and restores Windows Vista user state from serverSource ComputerUse Log-on Script, batch file or non-Microsoft technology to run ScanStateand copies user state to network server
- 14. Summary of Deployment SolutionsSlide 14
- 15. SummaryMany Deployment Tools and options for all scenarios from a single PC to 1,000sEasy Transfer makes it simple to move user dataNew Hard-link Migration Option in USMT
- 16. TechNet Plus Direct SubscriptionThe ultimate resource for IT professionals. TechNet Plus provides convenient access to full-version Microsoft evaluation software—without time limits! The annual subscription also includes Professional Support incidents, a technical information library, and many other resources for evaluating, deploying, and maintaining Microsoft software.Microsoft software licensed for evaluation purposes.Beta software. Professional Support Incidents.Managed Newsgroup Support. Technical resources for Microsoft products.. Microsoft eLearning courses.Online Concierge Chat. Want a 25% Discount on a new Subscription?Use Discount Code TMSAM04
- 17. IT Pro Momentum InvitationA Microsoft program focused on supporting “early adopters” – IT professionals who bet on the newest technologies to drive business value for their companies and advance in their careers Are you?Interested in learning more about the newest Microsoft technologies?Need help to evaluate different Microsoft products and features? Willing to test and pilot in production Microsoft beta products?Would like to have access to exclusive forums and Microsoft product support?Want to share your early adoption experience with the IT Pro community world-wide?If you answered ‘yes’ for all the questions above, IT Pro Momentum can help!Send email with “Add to Momentum” in the subjectHarold.wong@microsoft.com
- 19. Resources for Windows 7 DeploymentWindows 7 Deployment Guidehttp://technet.microsoft.com/en-us/library/dd349337(WS.10).aspxMicrosoft Deployment Toolkit 2010https://connect.microsoft.com/content/content.aspx?ContentID=12463&SiteID=14
- 20. Break Time: 15 minutes
- 21. Securing Windows® 7 in a Windows Server® 2008 R2 Environment
- 22. What Will We Cover?Better TogetherUser Interface ImprovementsDirectAccess and Terminal Services GatewayHealth Policies
- 23. AgendaReviewing Network Access ProtectionExamining Deployment ImprovementsExploring Configuration and ManagementViewing Network Access Protection Integration Improvements
- 24. Business and Technical BenefitsReduce the risk of network security threats
- 25. Business and Technical BenefitsReduce the risk of network security threatsSafeguard sensitive data and intellectual property
- 26. Business and Technical BenefitsReduce the risk of network security threatsSafeguard sensitive data and intellectual propertyExtend the value of existing investments
- 27. RemediationServersExample: PatchNetwork Access ProtectionCorporate NetworkPolicy Serverssuch as: Patch, AV1DHCP, VPNSwitch/Router WindowsClientRestrictedNetworkNPSClient requests access to network and presents current health state1
- 28. RemediationServersExample: PatchNetwork Access ProtectionCorporate NetworkPolicy Serverssuch as: Patch, AV12DHCP, VPNSwitch/Router WindowsClientRestrictedNetworkNPSDHCP, VPN or Switch/Router relays health status to Microsoft Network Policy Server (RADIUS)2
- 29. RemediationServersExample: PatchNetwork Access ProtectionCorporate NetworkPolicy Serverssuch as: Patch, AV312DHCP, VPNSwitch/Router WindowsClientRestrictedNetworkNPSNetwork Policy Server (NPS) validates against IT-defined health policy3
- 30. RemediationServersExample: PatchNetwork Access ProtectionCorporate NetworkPolicy Serverssuch as: Patch, AV312Not policy compliant4DHCP, VPNSwitch/Router WindowsClientRestrictedNetworkNPSIf not policy compliant, client is put in a restricted VLAN and given access to fix up resources to download patches, configurations, signatures (Repeat 1-4)4
- 31. RemediationServersExample: PatchNetwork Access ProtectionCorporate NetworkPolicy Serverssuch as: Patch, AV312Not policy compliant4DHCP, VPNSwitch/Router WindowsClientRestrictedNetworkNPSPolicy compliant5If policy compliant, client is granted full access to corporate network5
- 33. Install NAP
- 34. Configure BasicsAgendaReviewing Network Access ProtectionExamining Deployment ImprovementsExploring Configuration and ManagementViewing Network Access Protection Integration Improvements
- 35. NPS UpdatesNPS TemplatesNetwork Policy ServerLogging ImprovementsUTF-8
- 36. AgendaReviewing Network Access ProtectionExamining Deployment ImprovementsExploring Configuration and ManagementViewing Network Access Protection Integration Improvements
- 37. Multiple SHV PolicyA single server can now enforce a number of different health policies using a single system health validator (SHV)Requires SHV updates for Windows Server 2008 R2
- 38. New NAP Client User InterfaceMessaging Integration with Action Center Tray IconIntegration with Windows 7 Action Center
- 39. AgendaReviewing Network Access ProtectionExamining Deployment ImprovementsExploring Configuration and ManagementViewing Network Access Protection Integration Improvements
- 40. Integration ImprovementsRemote Desktop GatewayMicrosoft Confidential
- 41. Integration ImprovementsRemote Desktop GatewayDirectAccessMicrosoft Confidential
- 42. Integration ImprovementsRemote Desktop GatewayDirectAccessMicrosoft® Forefront™ code name StirlingMicrosoft Confidential
- 43. DirectAccess Technical DetailsIPv6 DevicesIPv4 DevicesIT desktop managementIPv6 Transition ServicesInternetDirectAccessServerIPSec encryption and authentication. 2 Tunnels are established - DirectAccess Server acts as gatewaySupports variety of remote network protocolsWindows 7 Client
- 44. DirectAccess Technical DetailsIPv6 DevicesIPv4 DevicesIT desktop managementIPv6 Transition ServicesAD Group Policy, NAP, software updatesInternetDirectAccessServerIPSec encryption and authentication. 2 Tunnels are established - DirectAccess Server acts as gatewaySupports variety of remote network protocolsWindows 7 Client
- 45. DirectAccess Technical DetailsDirect connectivity to IPv6-based Intranet resourcesIPv6 DevicesIPv4 DevicesIT desktop managementNative IPv6 with IPSecIPv6 Transition ServicesAD Group Policy, NAP, software updatesInternetDirectAccessServerIPSec encryption and authentication. 2 Tunnels are established - DirectAccess Server acts as gatewaySupports variety of remote network protocolsWindows 7 Client
- 46. DirectAccess Technical DetailsDirect connectivity to IPv6-based Intranet resourcesIPv6 DevicesIPv4 DevicesSupport IPv4 via 6to4 transition services or NAT-PTIT desktop managementNative IPv6 with IPSecIPv6 Transition ServicesAD Group Policy, NAP, software updatesInternetDirectAccessServerIPSec encryption and authentication. 2 Tunnels are established - DirectAccess Server acts as gatewaySupports variety of remote network protocolsWindows 7 Client
- 47. Demonstration: Direct Access - End User ExperienceDirectAccessSession SummaryBetter TogetherUser Interface ImprovementsDirectAccess and Terminal Services GatewayHealth Policies
- 48. Break Time: 15 minutes
- 49. Active Directory Domain Services in Windows Server 2008 R2 Technical Overview
- 50. What Will We Cover?Identity Management and Simplified Management Capabilities Improved Management of User AccountsEnhanced Windows Management Deployments
- 51. What Will We Cover? Identity Management and Simplified Management Capabilities Improved Management of User AccountsEnhanced Windows Management Deployments
- 52. AgendaActive Directory Overview Active Directory Management Managing Active Directory DeploymentsIdentity and Access Management
- 53. Solutions That Address IT Pro ChallengesNew Windows PowerShell cmdletsConsole Enhancements
- 54. Solutions That Address IT Pro ChallengesNew Windows PowerShell cmdletsConsole EnhancementsTask-OrientedBetter Management
- 55. Solutions That Address IT Pro ChallengesNew Windows PowerShell cmdletsConsole EnhancementsTask-OrientedBetter Management Analyzers Expanded to All Core Windows Server 2008 R2 Roles
- 56. Solutions That Address IT Pro ChallengesWindows Server 2008 R2 Forest Functional LevelNew Windows PowerShell cmdletsConsole EnhancementsDeals with Accidental Object DeletionDeals with Mapping of Various PropertiesDeals with Pre-Provisioning of Computer AccountsDeals with Managed Service AccountsTask-OrientedBetter Management Analyzers Expanded to All Core Windows Server 2008 R2 Roles
- 57. AgendaActive Directory Overview Active Directory ManagementManaging Active Directory DeploymentsIdentity and Access Management
- 58. Active Directory Administrative CenterCustomizable GUI
- 59. Active Directory Administrative CenterCustomizable GUI
- 60. Active Directory Administrative CenterCustomizable GUI
- 62. Create an Organizational UnitCreate a UserCreate a New Group and Add a UserDemonstration: Creating Objects Using Active Directory Administrative Center
- 63. Active Directory Recycle BinReduces Downtime and EffortAD Objects Are PreservedFunctional for AD DS and AD LDSUse LDP.exe or Windows PowerShell Cmdlets
- 64. Active Directory Recycle Bin—NotesReduces Downtime and EffortAD Objects Are PreservedFunctional for AD DS and AD LDSUse LDP.exe or Windows PowerShell CmdletsSetup RequirementsAdprep must be used for Windows Server 2003 and Windows Server 2008 forestAll domain controllers in your Active Directory forest are running Windows Server 2008 R2Raise the functional level of your Active Directory forest to Windows Server 2008 R2
- 65. Active Directory Recycle Bin—NotesReduces Downtime and EffortAD Objects Are PreservedFunctional for AD DS and AD LDSUse LDP.exe or Windows PowerShell CmdletsSetup RequirementsAdprep must be used for Windows Server 2003 and Windows Server 2008 forestAll domain controllers in your Active Directory forest are running Windows Server 2008 R2Raise the functional level of your Active Directory forest to Windows Server 2008 R2In this release, the process of enabling Active Directory Recycle Bin is irreversible. After you enable Active Directory Recycle Bin in your environment, you cannot disable it.
- 66. Enable Active Directory Recycle BinView Objects That Are in the Deleted Objects ContainerRestore Deleted ObjectsDemonstration: Working with the Active Directory Recycle Bin
- 67. AgendaActive Directory Overview Active Directory Management Managing Active Directory DeploymentsIdentity and Access Management
- 68. Best Practices Analyzer1BPA Run Time
- 69. Best Practices AnalyzerAD DS BPA Windows PowerShell Script1BPA Run Time
- 70. AD DS BPA scans verify:DNS rules
- 71. Operation master connectivity rules
- 72. Operation master ownership rules
- 73. Number of controllers in the domain
- 77. Virtual machine configuration rulesBest Practices AnalyzerAD DS BPA Windows PowerShell Script1BPA Run Time
- 78. Best Practices Analyzer—NotesAD DS BPA scans verify:DNS rules
- 79. Operation master connectivity rules
- 80. Operation master ownership rules
- 81. Number of controllers in the domain
- 85. Virtual machine configuration rulesSchema2BPA Run TimeAD DS BPA Windows PowerShell ScriptDocument1BPA Run Time
- 86. Best Practices Analyzer—NotesAD DS BPA scans verify:DNS rules
- 87. Operation master connectivity rules
- 88. Operation master ownership rules
- 89. Number of controllers in the domain
- 93. Virtual machine configuration rulesSchema2BPA Run TimeAD DS BPA Windows PowerShell ScriptDocument3BPA Run TimeAD DS BPARules Set1BPA Run Time
- 94. Best Practices Analyzer—NotesAD DS BPA scans verify:DNS rules
- 95. Operation master connectivity rules
- 96. Operation master ownership rules
- 97. Number of controllers in the domain
- 101. Virtual machine configuration rulesSchema2BPA Run TimeAD DS BPA Windows PowerShell ScriptDocument3BPA Run TimeAD DS BPAReportAD DS BPARules Set1BPA Run TimeAD DS BPAGuidance
- 102. AgendaActive Directory Overview Active Directory Management Managing Active Directory DeploymentsIdentity and Access Management
- 103. Offline Domain JoinDjoin.exeReduces time and effort for large-scale deploymentsEstablishes trust between operating system and Active Directory Domain
- 104. Offline Domain JoinDjoin.exeReduces time and effort for large-scale deploymentsEstablishes trust between operating system and Active Directory DomainAdvantagesAD state changes are completed without network traffic to the computerComputer state changes are completed without any network traffic to a domain controllerEach change can be completed at different times
- 105. Offline Domain Join —NotesDjoin.exeReduces time and effort for large-scale deploymentsEstablishes trust between operating system and Active Directory DomainAdvantagesAD state changes are completed without network traffic to the computerComputer state changes are completed without any network traffic to a domain controllerEach change can be completed at different timesSpecial ConsiderationsRun on Windows® 7 or Windows Server 2008 R2Must have user rights to join workstation to the domainDefaults target domain controller running a version of Windows Server 2008 R2
- 106. Perform an Offline Domain JoinDemonstration: Using Offline Domain Join
- 107. Management of Service AccountsLess Disruption of ServiceReduce Recurrent Administrative TasksDomain-Based Service Accounts Managed by ADEnhanced SecurityLocal AccountsSQLIIS
- 108. Management of Service AccountsLess Disruption of ServiceReduce Recurrent Administrative TasksDomain-Based Service Accounts Managed by ADEnhanced SecurityManaged ServiceAccountLocal AccountsSQLIIS
- 109. Management of Service AccountsLess Disruption of ServiceReduce Recurrent Administrative TasksDomain-Based Service Accounts Managed by ADEnhanced SecurityManaged ServiceAccountVirtual AccountsLocal AccountsSQLIIS
- 110. Management of Service AccountsLess Disruption of ServiceReduce Recurrent Administrative TasksDomain-Based Service Accounts Managed by ADEnhanced SecurityAdministrative BenefitsCreate class domain accountsAccounts are now reset automaticallySPN management tasks are not completedCan be delegated to non-administratorsManaged ServiceAccountVirtual AccountsLocal AccountsSQLIIS
- 111. Session SummaryActive Directory Domain Services improves management capabilities that automate Active Directory tasks
- 112. The new Active Directory Administrative Console and Windows PowerShell module allow for flexible discovery and output
- 113. Use and implement the new features of Windows Server 2008 R2 Domain Services