320 likes | 432 Views
Windows Vista Client Manageability. James O’Neill Evangelist Microsoft Corporation. Contents. Introducing Vista’s Management Goals Maintain PC Configuration User Account Control Resource Protection Simplify Configuration Management Group Policy Update Management
E N D
Windows Vista Client Manageability James O’NeillEvangelist Microsoft Corporation
Contents • Introducing Vista’s Management Goals • Maintain PC Configuration • User Account Control • Resource Protection • Simplify Configuration Management • Group Policy • Update Management • Desktop Troubleshooting & Task Automation • New / revamped tools
Management Features and Improvements in Windows Vista 3 Management Goals: • User Account Control • Windows Resource Protection • Group Policy Enhancements • Update Management Improvements • New WMI Providers and Windows Remote Management Maintain PC configuration Simplify Configuration Management Desktop Troubleshooting andTask Automation • New Event Viewer and Logging Infrastructure • New Task Scheduler • Reliability Analysis Component
Windows Vista Client Manageability Goal 1: Maintain PC Configuration
User Account Control • Lowers total cost of ownership by making it practical to run as standard user • PC is kept in known state • Restrict installations of unapproved software • Less downtime and higher productivity • Reduce need to re-image system “…a locked and well-managed PC can save 40%.” —Gartner, December 2005
Barriers to Deploying as Standard User Can user perform required tasks to be productive without help desk support? (Connect to network, add printer, etc.) Will existing 3rd party and LOB applications run for standard users? Does enterprise have required tools, processes, and policies to support and maintain desktops where users do not have administrator privileges?
Moving the mountain… • You will encounter hurdles during this effort. • Here are a few to watch out for: • Communication is key. • There are applications in your environment you probably don’t know about. • Standard Users need a deployment service. • Helpdesk is going to get more calls as you start the process. In Vista, Microsoft makes this easier.
Standard Users Can Do More • View system clock and calendar • Change time zone • Configure secure wireless (WEP/WPA) connection • Change power management settings • Create and configure a Virtual Private Network connection • Add printers and other devices that have the required drivers installed or allowed by IT policy • Disk defragmentation is a scheduled background process Shield icon consistently marks actions that require elevation 8
User Account Control • All users run as Standard User by default • Filtered token created during logon • Only specially marked apps get the unfiltered token • Explicit consent required for elevation • Predictable shell elevation paths • High application compatibility • Data redirection • Enabling legacy apps to run as standard user • Installer Detection
Elevation Model Administrator Privileges Ways to Request ElevationApplication markingSetup detectionCompatibility fix (shim)Compatibility assistantRun as administrator AdministratorAccount Standard User Privileges (Default) Standard UserAccount
Data Redirection for Legacy Apps • Legacy apps write to admin locations • HLKM\Software; • %SystemDrive%\Program Files etc. • Redirection removes need for elevation • Writes to HKLM go to HKCU redirected store • Writes to system directories redirected to per-user store • Copy-on-write • This is a crutch for legacy applications.
Windows Resource Protection • Maintain PC configuration by preventing potentially damaging system configuration changes • System files and registry settings protected from accidental changes by user or from software installers • Only OS Trusted Installer Service can change Windows Resource Protection resources • If modified, boot critical files are replaced with trusted copies
Windows Vista Client Manageability Goal 2: Simplify Configuration Management
Improvements in Group Policy for Windows Vista • Extends the reach of Group Policy with hundreds more settings • Reliably and efficiently apply policy • Easier to use
Extending Group Policy Reach Over 500 new settings across key areas
Improvements In Group PolicyApplied more reliably, and easier to use Reliable and Efficient Application of Policy Easier to Use Network aware application of Group Policy Support for editing Group Policy settings in Multilingual Environments Support for Multiple Local GPOs GPMC integrated into Windows Search and filter (Post Windows Vista) Templates (Post Windows Vista)
We’re Making Progress Reducing the Pain of Update Management… • Fewer updates delivered via Windows Update (WU) require reboots • Updates requiring a reboot reduced by at least 17% since August 2003 • Reduction in update delivery frequency from once a week to once a month • Consolidate multiple reboots into a single reboot when multiple patches requiring a reboot are installed together
… And Getting Even Better With Windows Vista • Patches can be applied directly to images • Auto-update everything • Platform technology to reduce reboots
Windows Vista and 2007 Office SystemFurther Reduce Disruptions from Reboots • Fewer reboots when using the Windows Add/Remove Programs feature • Corporate Developers can reduce reboots for installations and updates by using the Windows Installer • Automatically restart after a reboot due to an installation or update • Recreate application state upon restart Windows Installer (MSI) Key 2007 Microsoft Office applications (1) (1) Selected Microsoft applications that take advantage of Microsoft Office Restart Manager Word, Office Excel, Office Outlook, Office PowerPoint, and Internet Explorer
Windows Management Infrastructure (WMI) Enhancements Improve Manageability • Windows Vista includes 13 new WMI Providers: • BitLocker Drive Encryption • Trusted Platform Module • Boot Configuration Database • Intelligent Platform Management Interface • Windows Parental Controls • Network AccessProtocol Client • Others…
WinRM: Windows Remote Management • Firewall Friendly Remote Access Protocol (Replaces DCOM) • HTTP & HTTPS • Microsoft’s implementation of WS-Management Use Windows Remote Managementto Access WMI Information over the Internet
Windows Vista Client Manageability Goal 3: Desktop Troubleshooting and Task Automation
Productivity/Cost Implications • Productivity losses • Potential data loss • No IT awareness • Root problem not fixed All costs above and … • Help desk FTE cost • Additional productivity loss in time with helpdesk All costs above and … • One-off escalations often low priority • Little ability to track problems from changes (i.e., patch, new app) Desktop Crash! Reboot Most common end-user behavior >90%(1) + Resolve Known error fielded before Call Help Desk Few help desks equipped to resolve <10%(1) + Escalate Desktop Admin likely sees few crashes <5%(1) Lack of Awareness of End-User ProblemsUnreported issues drive productivity, costs, satisfaction (1) CER TAP participant interviews; MS Help desk qualitative discussions
New Event Logging Infrastructure:Windows Eventing 6.0 • Right data to diagnose problems • The right data…but not too much data • Improved supporting data and documentation for all events • Infrastructure supports Ad-hoc diagnosis and management tools • Schematized events (XML) provide richer information • Easy integration with management tools
User Experience in Event Viewer is Dramatically Improved • Single place to view events for all Windows Vista components • Focus on important events with filtering and custom views • Events are actionable • Associate a task with an event with a single click • Event Subscriptions • IT Professionals can subscribe to events and view them centrally • Based on Windows Remote Management
What’s New in Task Scheduler? • Power and flexibility • Sophisticated Scheduling Options with new triggers, conditional launch, and action chaining • Completely scriptable • Visibility • Task dashboard shows active and upcoming tasks • Improved reliability and resource allocation • Retry tasks in case of failure • Run when next available
Reliability Analysis Console • Helps you understand causes of crashes and hangs • Tracks frequency and type of user disruptions • Shows connections between application installs and other system events
User Account Control • Windows Resource Protection • Group Policy Enhancements • Update Management Improvements • New WMI Providers and Windows Remote Management • New Event Viewer and Logging Infrastructure • New Task Scheduler • Reliability Analysis Component Summary: Management Features &Improvements in Windows Vista Maintain PC configuration Simplify Configuration Management Desktop Troubleshooting andTask Automation
What else does TechNet give you? • FREE TechNet Newsletter” • FREE Events and Webcasts • FREE quarterly “TechNet” magazine • FREE comprehensive technical website • FREE TechNet Radio, Security Centre, Learning Paths and Virtual Labs • TechNet Plus Subscription DVD A range of tools and resources for IT professionals that let you plan, manage ,deploy To subscribe to the newsletter or just to find out more, please visit www.microsoft.com/uk/technet
Thank you for attending this TechNet Event http://www.microsoft.com/uk/technet PS (The evaluation form is now sent out electronically with your thank you e-mail. This can take up to 5 working days. Please do feedback as we read all the comments and use them to shape future event content)