1. What’s New in the Windows Deployment Tools Rhonda Layfield Sr. Deployment Architect Rhonda@DeploymentDR.com

2. Rhonda Layfield  30 + years in IT  7x Setup & Deployment MVP  International Presenter  Trainer  Consultant  @DeploymentDr.com  www.DeploymentDr.com

3. Overview  New Image Sizes and Speed  Core Deployment Tools  Windows AIK vs Windows ADK  WinPE 5.0  USMT  Performance Toolkit  Assessment Tools  BitLocker  UEFI  Tools – MDT 2013 and SCCM 2012 R2

4. Windows 8.1 Windows 7 Image size: 1.97GB image (WIM), 7.87GB expanded Installation time (new): 15 minutes Upgrade time (from Vista): 30 minutes Windows 8 Image size: 1.96GB image (WIM), 7.76GB expanded Installation time (new): 10 minutes Upgrade time (from Windows 7): 20 minutes Windows 8.1 Image size: 2.13GB image (WIM), 7.65GB expanded Installation time (new): ~10 minutes Upgrade time (from Windows 8): ~20 minutes

5. Windows 8.1: Deployment Options Capture data settings, and apps Remove existing OS Install new OS image Restore data, settings, and apps Windows Setup Capture data and settings Remove existing OS Install new OS image Install apps Restore data and settings USMT DISM Deployment Tools (MDT, ConfigMgr)

6. Core Deployment Tools The Assessment and Deployment Kit (ADK) replaces the Windows Automated Installation Kit (AIK) Supports older hardware (e.g. no NX/PAE/SSE support) and OSes Required for ConfigMgr 2007 and ConfigMgr 2012 RTM, works with MDT 2012 Update 1 Includes Windows PE 3.1, USMT 4.0 Windows AIK for Windows 7 SP1 Requires NX/PAE/SSE hardware support Required for ConfigMgr 2012 SP1, recommended for MDT 2012 Update 1 Includes Windows PE 4.0, USMT 5.0 Avoid installing on the same machine as Windows AIK Windows ADK for Windows 8 Incremental updates to the latest tools Includes Windows PE 8.1 and USMT “6.3” Required for MDT 2013 and ConfigMgr 2012 R2 Windows ADK for Windows 8.1

7. Windows AIK vs. ADK Windows AIK Windows PE 3.x USMT 4.0 Windows System Image Manager DISM ImageX ADK 8.1 Windows PE 5.0 USMT “6.3” Windows System Image Manager DISM ImageX* Application Compatibility Toolkit Volume Activation Management Tool Windows Performance Toolkit Windows Assessment Toolkit * ImageX is “deprecated,” replaced by DISM

8. ADK: Windows PE 5.0 Minor enhancements: scratch space was set to 32 MB now 512MB for >=1GB RAM, 32MB otherwise Previously only 128 GB of RAM supported. Now up to 4TB of RAM with x64 (still 64GB for x86) Profiling support removed New capabilities in Windows PE 4.0:.NET Framework 4.5, PowerShell feature packs BitLocker pre-provisioning enablement Compatibility issues with Windows 7 SETUP.EXE Requires appropriate hardware support Needs NX/PAE/SSE processor support (not present in very old or low- end CPUs, also not supported by Vmware 5.0)

9. ADK: USMT “6.3” Windows XPWindows VistaWindows 7Windows 8Windows 8.1 Windows XPUSMT 3USMT 4USMT 4, 5USMT 5Not supported Windows VistaNot supportedUSMT 4USMT 4, 5USMT 5Not supported Windows 7Not supported USMT 4, 5, “6.3”USMT 5, “6.3”USMT “6.3” Windows 8Not supported USMT 5, “6.3”USMT “6.3” Windows 8.1Not supported USMT “6.3”

10. ADK: Deployment Image Servicing and Management (DISM) Minor enhancements for Windows 8.1 Export compressed recovery image (/Export-Image) Cleanup base components when superceded (/StartComponentCleanup /ResetBase) \SXS folder never deleted any old versions of updates /ResetBase deletes the original update or hotfix Run on Master Images New features from Windows 8: Taking over for ImageX, which is depricated Support for VHD and WIM files PowerShell cmdlets for some operations Windows 8 application provisioning and installation (Sideloading and Store apps)

11. ADK: Windows Performance Toolkit Captures and analyzes information to help troubleshoot Windows performance issues Slow boot GPO processing delays Application performance issues Two main tools: Created for OEMs to ensure Windows 8 runs properly on their hardware. Windows Performance Recorder, to capture information Replaces XPERF.EXE and XBOOTMGR.EXE Windows Performance Analyzer, to view and analyze captured data Replaces XPERFVIEW.EXE

12. ADK: Assessment Tools Purpose : Gather metrics to determine if a system is running optimally Use in lab environments to validate image, drivers, applications, configuration, etc. Expected scenario: Create your “master” image Deploy to each supported computer model Automatically run assessments and gather results Analyze results

13. BitLocker Enhancements Pre-provisioning Encrypt disk before the operating system is installed Initiated from Windows PE 4.0 or higher Protectors get added once the OS is running Encrypt only used space Automatic network unlock on trusted wired networks Standard users can reset PINs Trusted network – no PIN Untrusted network - PIN

14. UEFI is important New disk layout GPT instead of MBR Requires multiple partitions BCD is not on disk Requires FAT32 boot partition, media New version for Windows 8 logo machines UEFI 2.3.1 Faster POST, faster boot Will be able to support PXE No cross-platform deployments Need to use matching boot image (even for ConfigMgr) x64 machines won’t support x86 OS via UEFI boot

15. Secure Boot Layer of security on top of UEFI UEFI verifies the boot loader Can be configured to only load verified files Required for Windows 8 hardware certification Yes, you can still boot other OSes (with x86 and x64) Turn off in the firmware for OSes that don’t support it Use newer OS distributions that do

16. Windows Store apps Install via an “Enterprise App Store” using:  System Center 2012 Configuration Manager SP1  Windows Intune Provision using the Microsoft Deployment Toolkit 2012 or DISM  Include in sysprepped image  Customize Start screen layout Provisioning Installation Enterprise side loading requirements Windows 8 Enterprise, domain joined or with a separate side load product key Windows 8 Pro or Windows RT, with a separate side load product key

17. Refresh and Reset Your PC Successor to Windows RE New recovery options: “Reset your PC” = Remove all personal data, apps, and settings from the PC, and reinstall Windows. Reinstalling the OS from an image, not preserving anything “Refresh your PC” = Keep all personal data, Windows 8 apps, and important settings from the PC, and reinstall Windows. Traditional (non-Metro) apps will need to be reinstalled Common denominator: You need an image to restore (locally) Not intended for enterprise use

18. Slates and tablets New deployment challenges: No keyboard Touch screen-only Often no wired networking Expected usage: Attach a USB keyboard Use an Ethernet dongle or USB storage

19. Disk partitioning DISKPART is “deprecated” Still supported, but eventually may go away New PowerShell functionality Present in Windows PE as well You can continue to use DISKPART – for now

20. Roles and Features Supported mechanisms: DISM /Enable-Feature ServerManager PowerShell module Older tools were “deprecated” with Windows Server 2008 R2: ServerManagerCmd.exe OCSetup.exe MDT 2012 Update 1 moves to supported mechanisms As appropriate for the OS With UI improvements to show appropriate roles based on a selected OS Adds support for uninstalling too

21. MDT 2013

22. Configuration Manager 2012 R2 Support for new versions Adds support for Windows 8.1, Windows Server 2012 R2 deployment Requires the new ADK 8.1 release New Windows 8 functionality: Installation of Windows 8 applications BitLocker Pre-Provisioning UEFI support

23. Next Sessions  Deploying Windows 8.1 Using SCCM 2012 R2 - 14:15

24. What We Covered  New Image Sizes and Speed  Core Deployment Tools  Windows AIK vs Windows ADK  WinPE 5.0  USMT  Performance Toolkit  Assessment Tools  BitLocker  UEFI  Tools – MDT 2013 and SCCM 2012 R2