Windows 7 Prerequisites and Co

[] September 3, 2009

A practical guide to evaluating and deploying

This guide is not designed to replace the content and methodologies officially provided by Microsoft.

Whilst every effort has been made to ensure the information in this document is accurate, all information is subject to change and should not be considered in any way to be an official statement of fact, accuracy or commitment from Microsoft.

Updated September 2009

Adam HallAccount Technology StrategistMicrosoft New Zealand

| Publicly available information


Table of ContentsIntroduction and Background................................................................................................................3

The Windows 7 Editions........................................................................................................................4

Windows 7 Feature Chart......................................................................................................................5

Working with the new UI.......................................................................................................................9

Prerequisites for Deployment.............................................................................................................12

SCCM 2007 SP2 or SCCM 2007 R2 SP2.............................................................................................12

Microsoft Deployment Toolkit.........................................................................................................12

Group Policy Settings.......................................................................................................................12

ACT..................................................................................................................................................12

Testing the new Windows 7 Features..................................................................................................13

Planning...............................................................................................................................................13

Login Scripts and Group Policy Preferences.....................................................................................13

Printer Drivers.................................................................................................................................14

Hardware and Drivers......................................................................................................................14

Testing.................................................................................................................................................14

Application Compatibility................................................................................................................14

Anti-Virus.........................................................................................................................................14

VPN..................................................................................................................................................15

Intranet / IE8...................................................................................................................................15

Deployment.........................................................................................................................................15

WAIK................................................................................................................................................15

MDOP..............................................................................................................................................15

USMT...............................................................................................................................................16

Supported Operating Systems.....................................................................................................16

Activation / KMS / MAK...................................................................................................................17

KMS.............................................................................................................................................17

MAK.............................................................................................................................................17

Capability Requirements.....................................................................................................................18

Defining Current and Desired States...............................................................................................18

Measuring Success...........................................................................................................................18



Introduction and BackgroundThis document provides guidance and information on how to get started with an evaluation of Windows 7 in an Enterprise environment.

This guide is not designed to replace the content and methodologies officially provided by Microsoft.

The content in this document is to ensure that appropriate consideration is given to the evaluation of Windows 7, and many of the common areas that may require remediation, changes or updates.

Whilst every effort has been made to ensure the information in this document is accurate, all information is subject to change and should not be considered in any way to be an official statement of fact, accuracy or commitment from Microsoft.

Listed below are some initial resources that you should read prior to starting any testing or evaluation of Windows 7.

Quick Start Checklist http://technet.microsoft.com/en-nz/library/dd560775(en-us).aspx

Windows 7 deployment FAQ http://technet.microsoft.com/en-nz/library/dd744519(en-us).aspx

Upgrading from previous versions http://technet.microsoft.com/en-nz/library/dd446674(en-us).aspx

How to start a Windows 7 Pilot http://technet.microsoft.com/en-nz/library/dd744251(en-us).aspx

Windows 7 Feature Walkthroughs http://technet.microsoft.com/en-us/windows/dd320282.aspx?ITPID=tnflash


http://technet.microsoft.com/en-us/windows/dd320282.aspx?ITPID=tnflash

http://technet.microsoft.com/en-us/windows/dd320282.aspx?ITPID=tnflash

http://technet.microsoft.com/en-nz/library/dd744251(en-us).aspx





The Windows 7 EditionsWindows 7 Starter OEM OnlyWindows 7 Starter will only be available pre-installed on computers through system integrators and computer manufacturers. Windows 7 Starter will have the least amount of functionality as compared to the other five Windows 7 editions and will only be available in the 32-bit version.

Windows 7 Home Basic Emerging Markets OnlyWindows 7 Home Basic will only be available in emerging markets such as Brazil, Mexico, Thailand, and Pakistan. Windows 7 Home Basic includes the same features of Windows 7 Starter plus additional functionality like fast user switching and support for 64-bit chipsets.

Windows 7 Home Premium Home UsersWindows 7 Home Premium is targeted to consumers and the home market. It contains all of the features of Windows 7 Home Basic plus additional functionality like multi-touch and Windows Media Center.

Windows 7 Professional Home and Small Business UsersWindows 7 Professional is targeted towards IT enthusiasts and small business users. It includes all of the features of Windows 7 Home Premium and adds critical business functionality like the ability to join a domain and utilize file system encryption. Windows 7 Professional will be available through retail, OEM, and volume licensing channels.

Windows 7 Enterprise Enterprise UsersWindows 7 Enterprise enables all features of the Windows 7 operating system. Windows 7 Enterprise is targeted for enterprise customers and will only be available through volume licensing channels. Windows 7 Enterprise includes all of the features of Windows 7 Professional and adds additional functionality crucial to enterprise customers like multilingual user interface language packs, BitLockerTM drive encryption, and DirectAccessTM.

Windows 7 Ultimate Home UsersWindows 7 Ultimate contains the same features as Windows 7 Enterprise but will only be available through retail and OEM channels.



Windows 7 Feature Chart

FeaturesHome

PremiumProfessional Ultimate Enterprise

Retail, OEM, and Volume Licensing Volume Licensing32-Bit and 64-Bit Versions Yes Yes Yes YesPhysical Processor Support (Core Processor Support) 2 (Unlimited) 2 (Unlimited) 2 (Unlimited) 2 (Unlimited)Create and Join a Home Group Yes Yes Yes YesTablet PC Functionality Yes Yes Yes YesMultiple Monitor Support Yes Yes Yes YesDocument Libraries Yes Yes Yes YesFast User Switching Yes Yes Yes YesWindows Search Yes Yes Yes YesWindows Mobility Center Yes Yes Yes YesWindows Aero, Taskbar, & Jump Lists Yes Yes Yes YesLive Thumbnail Previews Yes Yes Yes YesMulti-Touch Yes Yes Yes YesPremium Games Included Yes Yes Yes YesWindows Media Center Yes Yes Yes YesCreate & Play DVDs Yes Yes Yes YesDevice Stage Yes Yes Yes YesAction Center Yes Yes Yes YesEncrypting File System No Yes Yes YesLocation Aware Printing No Yes Yes YesRemote Desktop Host No Yes Yes YesDomain Join & Group Policy Controls No Yes Yes YesWindows XP Mode No Yes Yes YesAppLockerTM No No Yes YesBitLockerTM & BitLocker to GoTM No No Yes YesBranchCacheTM No No Yes YesDirectAccessTM No No Yes YesSubsystem for UNIX-based Applications (SUA) No No Yes YesEnterprise Search Scopes No No Yes YesMultilingual User Interface Language Packs (MUI) No No Yes YesLicense Rights for 4 Windows Virtual Machines No No Yes YesVirtual Hard Disk Booting No No Yes YesVolume Activation / Volume Licensing No Yes No YesLicense Rights for Network Booting of Windows No No No Yes

Note: Starter and Home Basic were not included in the comparison chart above due to their limited applicability to business users.



Windows 7 Enterprise - Business Benefits

Capability Windows 7 Technology What it Does Examples of Uses

Data Protection(Vista Improved)

BitLockerTM Encrypts the contents of the hard drive

Encrypt hard drives on portable PCs to protect sensitive company information in the event the

PC is stolen or lost. Data on the hard drive cannot be read without the proper credentials.

Data Protection(New in 7!)

BitLocker to GoTM

Extends BitLockerTM

encryption to portable USB storage devices

Automatically encrypt USB flash drives plugged into a PC. If an encrypted flash drive is lost or

stolen the data will be unreadable without the proper credentials.

Application Control

(Vista Improved)AppLockerTM

Prevents the installation of unauthorized

applications onto a user’s PC

Prevent users from running applications that destabilize their desktop environment and

increase help desk costs

Optimization 1

(New in 7!)BranchCacheTM

Improves application responsiveness and file copy performance for users in remote offices

Install BranchCacheTM servers in remote offices to greatly reduce the amount of time a user must wait for large file copy operations to complete

Remote Access 1

(New in 7!) DirectAccessTM

Allows for seamless access to corporate

network resources for mobile users without

the need for implementing a virtual private network (VPN)

With DirectAccess remote users can access corporate file shares, internal Web sites and applications without connecting to a virtual

private network

Application Compatibility

(New in 7!)Windows XP Mode

Run Windows XP applications directly from a Windows 7-based PC without

compatibility conflicts

Run applications requiring Internet Explorer 6 alongside applications requiring Internet Explorer

8, all on the same PC

Application Compatibility 2

(Vista Improved)

Enterprise Desktop Virtualization (MED-V)

The same benefits of Windows XP Mode but

with full enterprise management capabilities

Run applications requiring Internet Explorer 6 alongside applications requiring Internet Explorer

8, all on the same PC.

User Productivity(New in 7!)

Native ISO Format Support

Provides the ability to burn ISO files to

physical media without the need for 3rd party drivers or applications

Help Desk technicians can burn system images directly from an ISO file onto CD or DVD for PC

installation

1BranchCacheTM and DirectAccessTM require Windows Server 2008 R2.

2MED-V requires the Microsoft Desktop Optimization Pack (MDOP).



Windows 7 Enterprise - Business Benefits


User Productivity(New in 7!)

Native support for popular video codecs and DVD

playback

Windows 7 comes pre-installed with many

popular video codecs including DivX, Xvid,

H.264, and AAC

Users can play popular video formats like QuickTime (.MOV) and MPEG directly from Windows Media

Player. DVD movie playback also works seamlessly without 3rd party drivers.

Search(New in 7!)

Enterprise Search Scopes

Enables users to quickly find what they are

looking for by accessing documents stored in file shares, SharePoint sites,

and Web applications through a single user

interface

Users can search for documents simultaneously on their PC and SharePoint intranet portals through the

Windows 7 search control

Management(New in 7!) PowerShell 2.0

Provides IT administrators powerful command-line

tools, like PowerShell Remoting, to access a PC

for IT management purposes

With PowerShell Remoting IT administrators can run commands on remote PCs to assist in diagnosing a

problem, installing an application, or running a background process to collect support data. Since PowerShell commands are scripted, they can be

stored and re-used – minimizing the time required to solve recurring issues.

Deployment(Vista Improved)

Windows Imaging File Format (WIM)

A file-based image format that is much smaller in

size over previous Windows system image

technologies. WIM allows for IT administrators to

update the WIM file without having to destroy

and then recreate the entire file.

With a WIM image, IT administrators can add or remove drivers without having to re-create the entire

image file. Administrators can even store multiple system images inside a single WIM file.

Deployment(New in 7!)

Virtual Hard Disk Booting (Boot from VHD)

Allows IT administrators to deploy an entire

Windows 7 operating system in just one file

Help Desk personnel can use VHD files to quickly build and test Windows 7 system images. Image files can be

easily transferred and backed up due to their single file structure and compressed file size.

Management(New in 7!) Action Center

A central location for collecting and dealing

with notifications about PC system health and the

starting point for diagnosing and solving

issues with thesystem

Action Center incorporates system alerts from 10 Windows 7 functional areas, like User Account Control and security alerts, into one notification area using a

common user interface. This can assist in the gathering of information to reduce Help Desk calls.

Windows 7 Enterprise - Business Benefits | Publicly available information



Deployment(Vista Improved)

User State Management Tool (USMT)

Safely migrate user accounts, operating

system and application settings from Windows XP or Windows Vista to

Windows 7

Use USMT to migrate a user’s files and settings including documents and folders, browser

favorites, email messages and contacts, and Windows personalization settings – having the

potential to reduce costly desktop visits by Help Desk personnel

Management(New in 7!)

Problem Steps Recorder

Enables end users to record their

interactions with a troublesome

application and provide a detailed screen-by-

screen capture to support personnel

Help Desk staff can quickly identify application problems by viewing the actual steps taken by

the end user within the application – decreasing time spent on identifying issues and reducing end

user frustration

Security(Vista Improved) Windows Firewall

Provides a host-based firewall solution that

allows or blocks network traffic according to its

configuration. Works to protect PCs from

network-based viruses and malware.

Use Windows 7’s improved firewall management to define separate protection profiles for work,

home, and public connectivity



Working with the new UI



Prerequisites for DeploymentThere are a number of infrastructure technology components that need to be in place prior to you being able to deploy Windows 7 into production.

SCCM 2007 SP2 or SCCM 2007 R2 SP2From a Microsoft deployment capability standpoint, Service Pack 2 for SCCM 2007 and SCCM 2007 R2 will be required. This is available from the end of September 2009.

If you use another deployment and management solution, you will need to check with the vendor of that solution regarding their ability to deploy Windows 7.

Microsoft Deployment ToolkitThere will be a new release of the MDT (2010) that fully supports Windows 7.

What’s new in Deployment Tools http://technet.microsoft.com/en-nz/library/dd744386(en-us).aspx

Windows Deployment Services http://technet.microsoft.com/en-nz/library/dd348499(en-us).aspx

Group Policy SettingsThere are a new set of GPO template for Windows 7. Some of these are for greater granularity of settings, and there are new settings for the new Windows 7 Features.

What’s new in Group Policy http://technet.microsoft.com/en-us/library/dd367853(WS.10).aspx

Group Policy Reference Sheet for Server 2008 R2 and Windows 7

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb#tm

ACTThe Application Compatibility Toolkit (ACT) is a set of tools to validate applications, devices and computers before moving to a new version of Windows operating system. It allows the user to test and mitigate application issues to make them compatible with new operating system versions or updates.

The tool provides access to fixes to many compatibility issues already diagnosed and reported by the global testing and deployment projects. You can also create your own compatibility fixes after the issue has been diagnosed.

It works by collecting information on new compatibility issues through an installed agent and updates to a shared repository (SQL database).





http://technet.microsoft.com/en-us/library/dd367853(WS.10).aspx

http://technet.microsoft.com/en-us/library/dd367853(WS.10).aspx




ACT 5.5 information http://technet.microsoft.com/en-nz/library/cc722055(en-us).aspx

ACT 5.5 Download http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=24da89e9-b581-47b0-b45e-492dd6da2971

Testing the new Windows 7 Features

Bitlocker step-by-step guide http://technet.microsoft.com/en-us/library/cc732725.aspx

AppLocker step-by-step guide http://technet.microsoft.com/en-nz/library/dd723686(en-us).aspx

Branch Cache adoption guide http://technet.microsoft.com/en-nz/library/dd637762(en-us).aspx

Branch Cache demonstration guide http://technet.microsoft.com/en-nz/windows/dd573290(en-us).aspx

How Microsoft IT does DirectAccess http://technet.microsoft.com/en-us/library/dd819155.aspx

Direct Access adopters guide http://www.microsoft.com/downloads/details.aspx?familyid=2fdc531d-9138-454f-a820-78211755b52a&displaylang=en

Direct Access demonstration video http://technet.microsoft.com/en-nz/windows/dd572177(en-us).aspx

Boot from VHD demo http://technet.microsoft.com/en-us/windows/dd758779.aspxHow to set up Boot from VHD http://blogs.technet.com/canitpro/archive/2009/01/13/

windows-7-boot-from-vhd.aspx

Planning There are many things that are tested as part of rolling out any new OS but here are a few that tend to fall through the cracks.

Login Scripts and Group Policy Preferences Login scripts have traditionally been used to perform tasks as the user logs on. Mapping Drives, connecting printers, copying down configuration files, all sorts of things.


http://blogs.technet.com/canitpro/archive/2009/01/13/windows-7-boot-from-vhd.aspx

http://blogs.technet.com/canitpro/archive/2009/01/13/windows-7-boot-from-vhd.aspx

http://technet.microsoft.com/en-us/windows/dd758779.aspx

http://technet.microsoft.com/en-nz/windows/dd572177(en-us).aspx


http://www.microsoft.com/downloads/details.aspx?familyid=2fdc531d-9138-454f-a820-78211755b52a&displaylang=en



http://technet.microsoft.com/en-us/library/dd819155.aspx







http://technet.microsoft.com/en-us/library/cc732725.aspx

http://technet.microsoft.com/en-nz/library/cc722055(en-us).aspx


Active Directory introduced some new functionality like logoff scripts and we now offer Group Policy Preferences (GPP). GPP can take away most if not all of your requirements for a login script, with the additional benefit that as a GPO the refresh cycles apply.

Requirements:

For managing Group Policy preferences: Windows Server 2008 or later, or Windows Vista with Service Pack 1 or later

For being managed with Group Policy preferences: Windows Server 2008, Windows Vista, Windows Server 2003 with Service Pack 1, or Windows XP with Service Pack 2, or later

Group Policy Preferences Overview http://www.microsoft.com/downloads/details.aspx?FamilyID=42e30e3f-6f01-4610-9d6e-f6e0fb7a0790&DisplayLang=en

Printer DriversAn area that is often overlooked is an analysis of the requirements for new print drivers.

If you have Windows Vista deployed, then most of the drivers should work on Windows 7, however you should test this thoroughly. You should also check with your print manufacturer for their intentions to provide Windows 7 drivers.

Hardware and DriversThe Windows 7 Beta and Release Candidate phases showed that the ecosystem for Windows 7 is very strong with a very high level of compatibility on a wide range of hardware.

A large majority of devices will work with Vista drivers, however you should check with your hardware vendor on their timeframes for providing updated drivers.

Testing

Application Compatibility Once you have your ACT reports back, you should have a fairly good base to begin your testing and remediation.

Application testing is a large topic, and dependent on how you deploy your applications will depend on your level and amount of testing required.

If you are using the Desktop Optimization pack and leveraging App-V and MED-V, you should be in a position of certainty that you can roll out Windows 7. App-V will remove any issues between applications, and MED-V removes any issues with OS version incompatibilities.


http://www.microsoft.com/downloads/details.aspx?FamilyID=42e30e3f-6f01-4610-9d6e-f6e0fb7a0790&DisplayLang=en




There are some scenarios where these solutions will not remove the issues, however these are well documented.

Anti-Virus You will need an updated version of your anti-virus engine that is Windows 7 compliant. Please check with your provider.

Forefront has been tested and deployed within Microsoft.

VPNWindows 7 provides a built in VPN solution with Direct Access, but if you wish to remain using your current VPN solution you may require an updated client. Please check with your provider.

Intranet / IE8Windows 7 includes IE8 built-in. If you have tested your application and intranets with IE7 you should be in a strong position for compatibility with Windows 7. However if you currently run IE6 you will no doubt have some remediation requirements.

You can leverage MED-V to publish out IE6.

Deployment

WAIKThe Windows Automated Installation Kit (WAIK) provides a set of tools, scripts and utilities that allow you to configure your build and get it ready for deployment.

Using the WAIK http://technet.microsoft.com/en-nz/library/dd349348(en-us).aspx

Download the WAIK http://www.microsoft.com/downloads/details.aspx?familyid=60A07E71-0ACB-453A-8035-D30EAD27EF72&displaylang=en

MDOPThe Microsoft Desktop Optimization Pack (MDOP) provides a suite of tools to manage and enhance the desktop environment.

The tools in the suite are:

Application Virtualization (App-V) turns applications into centrally managed services that are never installed, never conflict and are streamed on-demand

Asset Inventory Service (AIS) translates software service into business intelligence and instantly depicts a complete portfolio of the desktop software


http://www.microsoft.com/downloads/details.aspx?familyid=60A07E71-0ACB-453A-8035-D30EAD27EF72&displaylang=en

http://www.microsoft.com/downloads/details.aspx?familyid=60A07E71-0ACB-453A-8035-D30EAD27EF72&displaylang=en



Diagnostics and Recovery Toolset (DaRT) reduces downtime and accelerates desktop repair, recovery, and troubleshooting of unbootable Windows-based Systems

Advanced Group Policy Management (AGPM) provides governance and control over group policy through robust change management and role-based administration tools

System Center Desktop Error Monitoring (DEM) enables proactive problem management by analyzing and reporting on application and system crashes

Enterprise Desktop Virtualization (MEDV) enhances deployment and management of Virtual PC images on a Windows Desktop while also providing a seamless user experience on a Virtual PC environment independent of the local desktop configuration and operating system

Desktop Optimization Overview

http://www.microsoft.com/windows/enterprise/products/mdop.aspx

USMTThe User State Migration Tool (USMT) captures a snapshot of a users ‘personality’ – their settings, background, favourites, documents and so forth that can be restored to a new machine. The USMT can also be used when refreshing the desktop image in-place (i.e. a rebuild rather than a migration) by hard-linking data rather than moving and restoring.

The USMT is included in the Windows Automated Installation Kit (WAIK).

Supported Operating SystemsThe USMT does not have any explicit RAM or CPU speed requirements for either the source or destination computers. If your computer complies with the system requirements of the operating system, it also complies with the requirements for USMT.

You need an intermediate store location large enough to hold all of the migrated data and settings, and the same amount of hard disk space on the destination computer for the migrated files and settings.

The following table lists the operating systems supported in USMT 4.0.

Operating Systems ScanState (source computer)

LoadState (destination computer)

Windows XP Professional XWindows XP Professional x64 Edition X32-bit versions of Windows Vista X X64-bit versions of Windows Vista X X32-bit versions of Windows 7 X X64-bit versions of Windows 7 X XNote:

You can migrate a 32-bit operating system to a 64-bit operating system. However, you cannot migrate a 64-bit operating system to a 32-bit operating system.


http://www.microsoft.com/windows/enterprise/products/mdop.aspx


USMT 4.0 does not support any of the Windows Server operating systems, Windows 2000, or any of the starter editions for Windows XP, Windows Vista, or Windows 7. In addition, USMT 4.0 only supports migration from Windows XP with Service Pack 2 or Service Pack 3.

USMT 4.0 http://technet.microsoft.com/en-nz/library/dd560801(en-us).aspx

What’s new in USMT 4.0 http://technet.microsoft.com/en-nz/library/dd560752(en-us,WS.10).aspx

Activation / KMS / MAKAll copies of Windows 7 must be activated. For home users and small businesses this is a manual process for each machine.

For Corporate and Enterprise customers, there are two automated options – KMS and MAK.

KMSKey Management Service (KMS) uses a KMS key to establish an activation service that is hosted locally in your environment. The KMS key is used only to activate a computer that you designate as the KMS host to enable KMS. After the service is established, your Windows Vista and Windows Server 2008 systems can activate by connecting to the KMS host.

No keys are used to activate the KMS client systems. Systems activated via KMS must reactivate at least once every six months by connecting to the KMS host. A minimum number of physical KMS client machines is required and must be maintained for activation of KMS clients to occur.

KMS 1.2 is required to activate Server 2008 R2 and Windows 7.

KMS 1.2 Download http://support.microsoft.com/kb/968915

MAKA MAK is used for one-time activation of a computer with Microsoft's hosted activation services. There are two ways to activate computers using a MAK.

MAK Independent activation requires each computer to independently connect and activate with Microsoft, either over the Internet or by telephone.

With MAK Proxy Activation, a computer acting as the MAK proxy gathers activation information from multiple computers on the network and then sends a centralized activation request to Microsoft's hosted activation services on their behalf. A free application, the Volume Activation Management Tool (VAMT), enables you to do a MAK Proxy Activation.

Volume Activation information https://partner.microsoft.com/40029209


http://support.microsoft.com/kb/968915

http://technet.microsoft.com/en-nz/library/dd560752(en-us,WS.10).aspx

http://technet.microsoft.com/en-nz/library/dd560752(en-us,WS.10).aspx



Activation FAQ http://www.microsoft.com/licensing/existing-customers/product-activation-faq.aspx

Volume Activation resources http://technet.microsoft.com/en-us/library/cc303274.aspx

Capability RequirementsOne of the very useful tools that Microsoft provides is the Infrastructure Optimization (IO) model. This is a capability model that allows you to determine what maturity level your technology environment is at.

From a desktop OS point of view, you can measure what capability and maturity you have now before the upgrade, and then measure again after the migration to see how you have progressed.

This is what the IO model looks like as at October 2009:

Defining Current and Desired StatesThere is an incredible amount of information provided at http://www.microsoftio.com and also if you are a Microsoft managed account, your Account Technology Strategist can do this with and for you.

A good start is to map out your current state, and then define the capabilities you want then measure within the model what effect that will have.

Measuring SuccessOne benefit that this process can provide is the ability to measure on a documented scale what success you have had and the benefits that the organization has obtained.


http://www.microsoftio.com/



http://www.microsoft.com/licensing/existing-customers/product-activation-faq.aspx

http://www.microsoft.com/licensing/existing-customers/product-activation-faq.aspx


In the diagram below, you can see the mapping of where a customer was prior to a desktop rollout, and where they moved to.

This provides a nice graphical representation of the gains made.


Windows 7 Prerequisites and Co

Documents

Transcript of Windows 7 Prerequisites and Co