CLI220 Mark Minasi

CLI220Windows Vista Client Manageability: 

CLI220 Windows Vista Client Manageability Presented by Mark Minasi Created by David Zipkin Product Manager Windows Vista Microsoft Corporation

Management Features and Improvements in Windows Vista: 

User Account Control Windows Resource Protection New Event Viewer and Logging Infrastructure New Task Scheduler Reliability Analysis Component Maintain PC configuration Desktop Troubleshooting and Task Automation Group Policy Enhancements Update Management Improvements New WMI Providers and Windows Remote Management Simplify Configuration Management 3 Management Goals: Management Features and Improvements in Windows Vista

Goal 1: Maintain PC Configuration: 

Goal 1: Maintain PC Configuration

User Account Control: 

'…a locked and well-managed PC can save 40%.' —Gartner, December 2005 User Account Control Lowers total cost of ownership by making it practical to run as standard user PC is kept in known state Restrict installations of unapproved software Less downtime and higher productivity Reduce need to re-image system

Demo: User Account Control: 

Demo: User Account Control Administrator experience Group policy controls Standard user experience

Windows Resource Protection: 

Windows Resource Protection Maintain PC configuration by preventing potentially damaging system configuration changes System files and registry settings protected from accidental changes by the user or from software installers Only the OS Trusted Installer Service can change Windows Resource Protection resources If modified, boot critical files are replaced with trusted copies

Demo: Windows Resource Protection: 

Demo: Windows Resource Protection New name, old technology Try to delete calc.exe Examine permissions And if we were to take control and delete it…

Goal 2: Simplify Configuration Management: 

Goal 2: Simplify Configuration Management

Improvements in Group Policy for Windows Vista: 

Improvements in Group Policy for Windows Vista Extends the reach of Group Policy with hundreds more settings Reliably and efficiently apply policy Easier to use

Extending the Reach of Group Policy: 

Over 500 new settings across key areas Extending the Reach of Group Policy

Improvements In Group PolicyApplied more reliably, and easier to use: 

Improvements In Group Policy Applied more reliably, and easier to use Network aware application of Group Policy Support for editing Group Policy settings in Multilingual Environments Support for Multiple Local GPOs Reliable and Efficient Application of Policy Easier to Use GPMC integrated into Windows Search and filter (Post Windows Vista) Templates (Post Windows Vista)

Demo: Using GP for device control: 

Demo: Using GP for device control Goal: kill CD-ROM drive Open device manager, find CD-rom, Properties Details, look for Hardware Ids and Compatible Ids Note them Uninstall hardware In Gpedit, go to Computer Configuration / Administrative Templates / System / Driver Installation /Device Installation Restrictions Prevent installation of devices that match any of these device IDs Punch in ID gpupdate /force rescan for changes

Search and Filter Will Make it Easier to Find the Right Settings: 

Search and Filter Prototype Interface…coming soon Search and Filter Will Make it Easier to Find the Right Settings

Templates Will Facilitate Policy Creation: 

Search and Filter Prototype Interface…coming soon Templates Will Facilitate Policy Creation

We’re Making Progress Reducing the Pain of Update Management…: 

We’re Making Progress Reducing the Pain of Update Management… Fewer updates delivered via Windows Update (WU) require reboots Updates requiring a reboot reduced by at least 17% since August 2003 Reduction in update delivery frequency from once a week to once a month Consolidate multiple reboots into a single reboot when multiple patches requiring a reboot are installed together

…And Getting Even Better With Windows Vista: 

…And Getting Even Better With Windows Vista Patches can be applied directly to images Auto-update everything Platform technology to reduce reboots

Windows Vista and 2007 Office SystemFurther Reduce Disruption From Reboots : 

Windows Installer (MSI) Key 2007 Microsoft Office applications (1) Fewer reboots when using the Windows Add/Remove Programs feature Corporate Developers can reduce reboots for installations and updates by using the Windows Installer Automatically restart after a reboot due to an installation or update Recreate application state upon restart (1) Selected Microsoft applications that take advantage of Microsoft Office Restart Manager Word, Office Excel, Office Outlook, Office PowerPoint, and Internet Explorer Windows Vista and 2007 Office System Further Reduce Disruption From Reboots

Windows Management Infrastructure (WMI) Enhancements Improve Manageability: 

Windows Vista includes 13 new WMI Providers: BitLocker Drive Encryption Trusted Platform Module Boot Configuration Database Intelligent Platform Management Interface Windows Parental Controls Network Access Protocol Client Others… Windows Management Infrastructure (WMI) Enhancements Improve Manageability

WinRM - Windows Remote Management: 

Use Windows Remote Management to Access WMI Information over the Internet WinRM - Windows Remote Management Firewall Friendly Remote Access Protocol (Replaces DCOM) HTTP andamp; HTTPS Microsoft’s implementation of WS-Management

Goal 3: Desktop Troubleshooting and Task Automation: 

Goal 3: Desktop Troubleshooting and Task Automation

Slide21: 

New Event Logging Infrastructure - Windows Eventing 6.0: 

New Event Logging Infrastructure - Windows Eventing 6.0 Right data to diagnose problems The right data…but not too much data Improved supporting data and documentation for all events Infrastructure supports Ad-hoc diagnosis and management tools Schematized events (XML) provide richer information Easy integration with management tools

User Experience in Event Viewer is Dramatically Improved: 

User Experience in Event Viewer is Dramatically Improved Single place to view events for all Windows Vista components Focus on important events with filtering and custom views Events are actionable Associate a task with an event with a single click Event Subscriptions IT Professionals can subscribe to events and view them centrally Based on Windows Remote Management

What’s New in Task Scheduler?: 

What’s New in Task Scheduler? Power and flexibility Sophisticated Scheduling Options with new triggers, conditional launch, and action chaining Completely scriptable Visibility Task dashboard shows active and upcoming tasks Improved reliability and resource allocation Retry tasks in case of failure Run when next available

Reliability Analysis Console: 

Reliability Analysis Console Helps you understand causes of crashes and hangs Tracks frequency and type of user disruptions Shows connections between application installs and other system events

Demo: Task Scheduler: 

Demo: Task Scheduler Creating a task Task view options Options to re-run a scheduled task Ability to start it immediately Edit capabilities

Demo: Event Viewer: 

Demo: Event Viewer Greater granularity XML message format Event triggers Event forwarding

Management Features and Improvements in Windows Vista: 

User Account Control Windows Resource Protection New Event Viewer and Logging Infrastructure New Task Scheduler Reliability Analysis Component Maintain PC configuration Desktop Troubleshooting and Task Automation Group Policy Enhancements Update Management Improvements New WMI Providers and Windows Remote Management Simplify Configuration Management 3 Management Goals: Management Features and Improvements in Windows Vista

Demo: Reliability Monitor: 

Demo: Reliability Monitor Built on Reliability Analysis Component An MMC snap-in Clickable graph format and front-end to Event Viewer

Thanks for attending!: 

Thanks for attending! I hope you liked this introduction to new client management technologies Please fill out an evaluation! You can find me at help@minasi.com Find my online newsletter and forum at www.minasi.com