Deploy windows devices and apps (70-695) osd infrastructure download

Although scheduling was touched on briefly earlier when discussing multicast deployment, the scheduling options are examined in greater detail here. The skills measured on the exam specifically call out the configuration of scheduling. When configuring a Scheduled-Cast transmission, two options are available:.

The Microsoft Virtual Academy offers free online courses delivered by industry experts, including a course relevant to this exam. An important but often overlooked aspect of automated operating system deployments is security. Consider some security considerations to take into account during your deployment planning.

You should use one or more of the following methods to enhance the security of your company images:. Filters You can use filters to narrow down the computers that can use an install image. By default, not many filters are applied, and any computer can use any image as long as the appropriate permissions are in place. Filters can be inclusive so that only the computers that match a filter can use an install image. In addition, filters can exclude computers that match a filter so that only computers that do not match the filter can use an install image.

You can add filters based on the following computer characteristics:. Permissions There are two places to configure permissions. The advanced permissions, which show more granular permission entries, show that authenticated users have the following permissions:.

Multiple WDS servers For environments in which you need to restrict WDS imaging to local IT administrators, you can create geographically based security groups and configure the WDS images so that only the local group can deploy images.

In such cases, you should deploy a WDS server in each geographic location that plans to use automated operating system deployments.

Although not related to restricting who can receive images, it is important to know that WDS servers do not communicate with each other or share a common configuration. Thus, setting up and maintaining an infrastructure with multiple WDS servers requires extra administrative effort when compared to solutions such as MDT with linked deployment shares. For example, as discussed earlier in this chapter, you can configure the PXE response so that WDS responds only to prestaged computers, or you can configure WDS to respond to all computers but then require an administrator to approve unknown computers manually.

If you configure the PXE response so that an administrator must approve unknown computers, the administrator will have three options in the WDS console for the unknown devices:. Often, in high-security environments, you should take advantage of most or all of the WDS security options. Combining multiple security methods in your solution is known as a layered security approach. Tailspin Toys has two offices.

One office is in San Francisco and the other office is in New York. The offices are connected by a megabit Mb network. Each office has about client computers, half of which are portable computers. All client computers run Windows 7 Enterprise.

The company plans to upgrade all portable computers to Windows 8. The management team wants to automate the installation process. To minimize disruption, users will be reimaged independently, a couple of computers at a time. You decide to use WDS to automate the deployments. To help you assess your knowledge, answer the following questions:. Connect with us to learn more. We're sorry! We don't recognize your username or password. Please try again. The work is protected by local and international copyright laws and is provided solely for the use of instructors in teaching their courses and assessing student learning.

You have successfully signed out and will be required to sign back in should you need to download more resources. Covers Exam , which is a required exam for the new MCSE credential: Enterprise App and Device Deployment and Management Organizes its coverage by the exam objectives Features strategic, what-if scenarios to challenge the exam candidate. If you find an error, you can report it to us through our Submit errata page. Sign in. Your cart. This eBook includes the following formats, accessible from your Account page after purchase: EPUB The open industry format known for its reflowable content and usability on supported mobile devices.

The output indicates what device drivers have already been applied with their associated time stamp. Now you apply the drivers. Run the following command to add the desired device drivers, as shown in Figure This switch is not necessary if you are adding signed drivers.

This is a good opportunity to rerun the DISM command with Get-Drivers to confirm that the device drivers are listed and have a matching time stamp. Run the following command to unmount the image, as shown in Figure :.

Up to this point, you have explored the processes for mounting an image, applying packages and drivers, saving those changes, and dismounting the image. You can run each of the commands manually or add it to a script to help automate routine maintenance. Another option is to implement an answer file that provides options for an unattended installation. An answer file is an XML-based file that contains setting definitions and values to use during Windows Setup.

During this pass, any settings defined in the answer file will be triggered automatically. This can include tasks such as installing packages, software updates, and device drivers.

Applying an answer file to your image can reduce the overhead incurred with manually applying changes. Using this solution offers a few key benefits:. Simplicity With this configuration, drivers can be added on the fly, without the need to update the image and reseed it to your deployment architecture. Speed Uploading new drivers to their source location makes them immediately available to any new image deployments.

Consistency Using the same answer file in all your images ensures that all deployments are consistent with the desired configuration. This tool ensures that the answer file is formatted properly based on the operating system, and it includes a built-in error checker. In the following example, you see two sections of a sample answer file, demonstrating the solution for package and driver management. The USB drives were limited on storage, so image size was an important factor for the deployments.

In this environment, the customer had to support a variety of computer models from multiple vendors. At one point, we had driver support for 16 hardware models.

This was when a properly formatted answer file came in handy. I set up a centralized network share with each hardware model and then pointed the answer file to the share.

This approach prevented unnecessary image bloat and gave the customer the flexibility to update the drivers in an easy way. Type the path to the share and then click Open. Three folders are created in the distribution share as part of this process. Next, populate the Packages folder with the packages. Adding a driver source location to the answer file is another quick addition. Follow these steps:. In the Windows Image pane, expand Components and then add the following component to pass 2 — offline servicing:.

In the main window, as shown in Figure , right-click the new component and then click Insert New PathAndCredentials. Fill in the appropriate fields. After creating a working answer file, you can use DISM to apply the settings to the image. Applying an answer file in this way will only apply the offlineServicing configuration pass and any included packages.

The following example applies the newly created unattend. The same fundamentals about mounting the image, committing the changes, and then dismounting apply in this scenario.

Run the following command to apply the unattend. With the answer file applied, the image now references the settings that have been defined. The mount action requires you to define an empty mount folder.

After the image is mounted to that folder, the file system is accessible for additional servicing. At this point, manipulating files and folders is a very simple task. In various scenarios, servicing files and folders can be useful. Some examples include:. Creating a task-specific directory structure This could include something as simple as a folder at the root path, called XYZ Setup.

Files necessary for your image deployment could then be saved to this directory, ensuring their availability during the image sequence.

You can then use an answer file to call those files. Embedding an answer file This enables you to use the other sections of an answer file to simplify your deployment further. Items such as partitioning a disk drive or configuring a time zone could be set with the answer file. During an early deployment of Windows 7, I had a customer that was heavily dispersed geographically and lacked a reliable way of mirroring its central network share to all its remote offices.

This made it difficult to use network share points for retrieving image content such as packages. In this scenario, we decided that storing the basic setup scripts and applications in a directory at the root of the image was a suitable solution. This made the image size larger but gave the customer an all-in-one solution. The deployment team was able to image computers in offices with very poor connectivity.

The only activity that required connectivity was joining the Active Directory Domain Services domain. To accomplish this, I created a setup folder at the root of the image, stored all the necessary components there, and used the RunSynchronous command in their answer file to execute a series of scripts that handled the setup and cleanup procedures.

In the following example, a Windows 8. The cleanup routine is captured using the SetupComplete. After Windows is installed, but before the logon screen appears, Windows Setup searches for the SetupComplete.

If the file is found, it will run automatically, using local system privileges. The actions are recorded in the Setupact. Open File Explorer and navigate to the mounted image directory structure. Create a text file named SetupComplete. Open the text file, type the following two lines, as shown in Figure , and then save the changes:.

With these changes applied, this image now references the embedded answer file during deployment. After the image deployment completes, the SetupComplete script runs and removes the answer file. Most content within an answer file is viewable in plaintext, so removing the file is a good security practice. Major content updates such as service packs and update rollups can put a snag in your image deployment process. When it is time to include these updates in your image, you can take a few directions.

DISM offers a solution for servicing existing images, enabling you to install these major content updates without rebuilding from scratch. First, understand the files incorporated with the update that you need to apply. The following example uses Windows 8. This update is also required to receive future updates from Microsoft. The Knowledge Base article for this update indicates that Update 1 consists of a series of Microsoft update files.

Retrieve the associated update files and prepare a workspace for updating the existing image. These updates are installed in sequence and then reviewed using the Get-Packages command.

Download the necessary update files and store them in a directory titled Update1. With the image updated, a few additional steps need to be completed. The image needs to be installed on a reference computer and booted to complete the first-boot initialization pass associated with Update 1. Going through this process helps you in the following areas:. Complete initial patch startup Without booting the image, you see that subsequent deployments have delays at startup while the system initializes.

Cleanup files Update content can quickly become outdated or replaced by future rollups. Cleaning these files up after installation can save hard-drive space and reduce the image footprint. Validating and testing Booting the image gives you an opportunity to verify that the updates were installed successfully and that Windows is reporting the proper version.

In audit mode, allow Windows to finish initializing and then confirm that the updates are installed properly. At this stage, you are ready to recapture the image. To do this, run Sysprep first and then boot into Windows PE to begin the capture process. Boot the computer by using a Windows PE boot image. This is necessary to capture the image. The updated image is saved to the network path you provided. From there, you can reapply any answer files, packages, or drivers.

Note that this updating scenario is only one example, but generally, any large-scale changes should be validated on a reference computer and recaptured to ensure a working baseline. Application management is a suitable topic to address now that you are more familiar with the capabilities of DISM.

A variety of techniques for servicing a Windows image have been covered, most of which can be used to manage embedded applications. These are some of the available options that have been reviewed:.

This requires a compatible. Mount an image and apply an answer file that installs or updates applications. The answer file can be used to run commands or execute a script that updates the target applications. Mount an image and modify the application through file and folder access. This is more ideal for configuration-based files such as. Mount an image and incorporate the SetupComplete script, which can be used to install or update applications after an image deployment.

A topic not yet addressed in detail is Windows features. DISM is tightly integrated with the Windows Feature component, enabling you to service feature changes in online and offline images. DISM provides options for displaying all available Windows features, displaying status enabled or disabled , and allowing you to enable or disable them. The following example reviews the available servicing options related to Windows features.

The focus is on retrieving a list of available features and enabling the Telnet client in Windows 8. You can use these same steps for an offline image by using the corresponding options. Run the following command to retrieve a list of all available Windows features, as shown in Figure The output provides Feature Name and State enabled or disabled. Run the following command to retrieve more information about the Telnet client, as shown in Figure :.

You can service an offline image to enable or disable specific features by mounting the image and applying the desired changes. Alternatively, you can incorporate these changes by using an answer file. Select the new component in the main window, as shown in Figure Toggle the appropriate features for your deployment to their proper state and save your changes.

Thought experiment: Maintaining and updating images at Tailspin Toys. Tailspin Toys has hired you to help update a series of Windows images. This is a small organization of employees in a single office. Tailspin Toys has a mixed environment and supports both a Windows 7 image and a Windows 8. The team has asked you to implement a maintenance solution to assist with monthly image updates.

You need to prepare an updated image that can be serviced more easily. To help you plan better for the project, answer the following questions:. The system administrator at Tailspin Toys has manually injected dozens of drivers into the Windows images, many of which are now outdated. Which method can you use to uninstall the drivers? The Windows 7 image is lacking Service Pack 1, but the image has very little customization. How would you go about providing an updated Windows 7 image that includes Service Pack 1?

Tailspin Toys needs a solution that allows it to update drivers and packages without regularly updating its Windows image. What addition can you make to the images to alleviate the need to update the image regularly? DISM supports adding and removing Windows features. Adding and removing Windows features can be performed with online and offline images.

Unattended answer files can be implemented to enable and disable the appropriate Windows features. Windows updates and device drivers are serviceable products that can be applied to offline images by using DISM. DISM can retrieve applied updates and drivers from offline and online images. An unattended answer file can be applied to an offline image to simplify package and driver updates. Windows images mounted with DISM can be manipulated at a file and folder level.

Major content updates and patch rollups can be implemented using DISM. Audit mode is a preproduction environment that enables an administrator to customize an image and validate changes. DISM can be used to capture a reference computer and save the image to a local or remote location by using the Capture-Image command. DISM requires elevated permissions to run.

Which of the following file types does DISM support for online and offline servicing? You need to apply the latest Windows updates to an existing install image. Which of the following sequences of tasks should you use? Mount the image, apply the updates, unmount the image, and commit the changes.

Mount the image, apply the updates, commit the changes, and unmount the image. Apply the updates, mount the image, commit the changes, and unmount the image. Apply the updates, mount the image, unmount the image, and commit the changes. This section contains the solutions to the thought experiments and answers to the lesson review questions in this chapter. You should always try to minimize the total number of images when requirements allow.

Often, moving to a single image for client computers and a single image for servers is an optimal scenario for administrators. Based on the scenario of just having to deploy Windows 8.

You can deploy the development tools after the install image. You can use VHD-based install images for the developers. This would enable them to boot to multiple versions of Windows as part of their testing.

A VHD-based install image enables simplified booting of different operating systems on the same hardware. If you just used a dedicated developer image, a thick image would be good, as long as you were okay with having multiple Windows 8.

However, a hybrid image might be the best approach. A hybrid image enables users to attain core functionality immediately following the image process. Office is often included in a hybrid image along with the core security software. A thin image would also meet the requirements, but users would have to wait longer to attain functionality after the deployment process completes. Correct: The users need basic operating system functionality only.

A thin image will give them the functionality they need while minimizing the image file size. Incorrect: A thick image will give users the basic operating system functionality they need, but the image size will not be minimized, which is a requirement.

Incorrect: A hybrid image will give users the basic operating system functionality they need, but the image size, although smaller than a thick image, will not be minimized. Correct: A VHD-based thin image will meet the requirements of giving users basic operating system functionality and minimizing the image file size. Correct: To deploy a default installation of Windows 8. Incorrect: The boot. Incorrect: The install. Incorrect: You need an install image for Windows 8. Thus, you need a minimum of two images.

You do not need to have more than one install image for Windows 8. Correct: At least two images are required. Because the question calls for minimizing the total number of images, you should use two images.

You need one image to install Windows 8. Incorrect: Three images are more than you need. You need an install image for Windows 8. Incorrect: Four images are more than you need. Correct: A thin image meets the requirements as long as the application is packaged after deployment.

Correct: A hybrid image meets the requirements as long as the application is packaged after deployment. You should add the common applications the entire company uses to the hybrid image and package the other applications for deployment outside of the image. Incorrect: A thick image goes against the requirement to minimize license costs.

Correct: To perform a capture or an installation, you need a boot image. Correct: You need an install image to deploy Windows. The requirements call for a Windows Server R2 deployment and a Windows 8. You should use Configuration Manager because it will meet the requirement to automate as many of the tasks as possible.

By using the Build And Capture A Reference Operating System Image template, you can automate the deployment of the reference computer and the capture in a single task sequence. From there, you will have access to several troubleshooting tools, including tools such as DiskPart. When you boot to PXE, you see all the boot images available to you on the server.

This includes standard boot images and capture images. The only way to differentiate between boot images and capture images is by the name that you give each image when you create it. It is important to give your images descriptive names to ensure that you are using the appropriate image type and image in a given situation.