1. Microsoft Virtualisation & Management Technologies
Steve Lamb & Matt McSpirit Microsoft UK

2. Agenda 09:30 Keynote: Virtualisation, System Center & GreenIT
10:00 Building, Clustering and Managing Hyper-v
11:00 Break
11:15 How to manage Microsoft and VMware estates
12:45 Lunch
13:30 Delivering Apps Virtually #1 (MDOP, VECD & VDI)
15:00 Break
15:15 Delivering Apps Virtually #2 (Terminal Services)
16:00 Ask the Experts
16:30 Close

3. Dependencies Create Complexity
1/18/2019 4:14 PM
Dependencies Create Complexity
Separation Creates Flexibility
Data, User settings
Applications OS
Hardware
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Virtualisation Solutions...
profile
Virtualisation
Document redirection
Offline files
Server
VirtualiSation
presentation
VirtualiSation
Management
Desktop
Virtualisation
Application VirtualiSation

5. Virtualisation Solutions...
Management

6. Building, Clustering & Managing...

7. Virtualisation Feature
Then and now...
Virtualisation Feature
Virtual Server 2005 R2
Hyper-V
32-bit Virtual Machines
Yes
64-bit Virtual Machines No
Multi Processor Virtual Machines
Yes, 4 core VMs
Virtual Machine Memory Support
3.6GB per VM
64GB per VM
Managed by System Center Virtual Machine Manager
Support for Microsoft Clustering Services
Host side backup support (VSS)
Scriptable / Extensible
Yes, COM
Yes, WMI
User Interface
Web Interface
MMC 3.0 Interface

8. More on Hyper-V...
Runs on any Intel-VT or AMD-V system with a “Designed for Windows” logo
Native x64 Hypervisor
X86 / x64 VMs
Up to 1 TB Parent Support
Up to 64GB VM Memory
Up to 4 CPU VMs
16 core host support
Pass-through disk access for VMs
New hardware sharing architecture (VSP/VSC)
Disk, networking, input, video
Robust networking
VLAN support, NAT, Quarantine

9. Monolithic vs. Microkernelized
monolithic hypervisor
Simpler than a modern kernel, but still complex
Contains its own drivers model
microkernelized hypervisor
Simple partitioning functionality
Increase reliability and minimize TCB
No third-party code
Drivers run within guests
VM 1
(“Admin”)
VM 2
VM 3
Any ‘Designed for Windows’ Hardware *
Hypervisor
VM 2
(“Child”)
VM 3
Virt.
Stack
VM 1 (“Parent”)
Hypervisor
Drivers
Drivers
Drivers
Drivers
Some Hardware
VMware
Hyper-V
microkernelized hypervisor has an inherently secure architecture with minimal attack surface
* With Intel-VT or AMD-V CPU technology, these are standard in today‘s servers

10. Hyper-V architecture Windows Server 2008, x64 Hyper-V
1/18/2019 4:14 PM
Hyper-V architecture
Provided by: OS
Parent Partition
Child Partitions
Hyper-V
Applications
Applications
Applications
VMBus
Hyper-V
VSP
VM Service
WMI Provider
VM Worker Processes
ISV / IHV / OEM
MS/ XenSource
User Mode
Windows Server 2008, x64
Windows Kernel
Windows
Drivers
Windows Server 2008, x64
Windows Kernel
Windows Server 2008, 2003
Windows Kernel
VSC
Non-Hypervisor Aware OS
Xen-Enabled Linux Kernel
Linux VSC
Hypercall Adapter
Windows
Drivers
First slide shows base OS running, W2K8 running in kernel mode then user mode shown above
Once you put the WSV role in place, this install becomes the parent partition, management partition. Drivers continue to run in parent partition. Even parent is virtualised.
In parent partition, in kernel mode we have W2K8, drivers, VSP, VMBus – this should be running Server Core. Then we have worker processes that manage each VM
The worker process on parent create a process to run each VM, has vrtualised devices, emulated devices etc.
WMI provider allows you to write own management tools. VMM interacts through WMI provider
Then bring up a VM – W2K8, has its kernel, and its VSC. Explain VSC / VSP. Don’t need any special drivers for hardware, this runs in parent partition as standard drivers. Child partition does not see physical devices in machine, it sees hardware that is presented into that virtual machine. Two ways to do this – emulation, as previous - In past we use to emulate standard IDE drive, DEC 2140 NIC etc – done for compat but its expensive for performance. Move to purely virtualised devices – thats what a VSC is, and this is second way.
You will see a Microsoft VSC device, we’re building them for input video network storage. For Vista, LHS, W2K3. VSC is purely Virutalized Service Client, synthetic device driver, you’ll see in device manager Microsoft Virtual NIC etc. We’re writing them
Next type is non hypervisor aware eg DOS whatever, so uses emulation. It runs with degraded performance due to lack of VSC.
Problem – customers expect to be able to run Linux (redhat and Suse) and expect it to be 1st class – hence agreement with XenSource. They have done some work to enable us to run Redhat and Suse as first class – Xen are writing the VSC’s for these, and we’re supporting.
End result is we have a single virt platform that can run the lot 
VMBus
Emulation
VMBus
Kernel Mode
“Designed for Windows” Server Hardware
MICROSOFT CONFIDENTIAL
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. The power of Hyper-V
Enlightenment/Para-virtualisation is the key to high performance
Allows the Guest OS to understand it’s being virtualised and co-operate to provide the best performance
Hyper-V is designed to utilise the virtualisation capabilities of Intel-VT and AMD-V enabled processors
Hardware Virtualisation allows high performance virtualisation of the Windows Guest OS
Server 2008, 2003 SP2, 2000 SP4, XP SP2/SP3, Vista SP1
Certain Xen-Enabled Linux Distributions
Novell SUSE SLES 10 SP2 & Red Hat Enterprise for now...
The future of virtualisation is Enlightenment/Para-virtualisation with hardware virtualisation assist

12. Hyper-V Storage Options

13. Server Virtualisation Licensing
By assigning a copy of WS 03/08 Enterprise:
4 free running Instances
Cumulative...
The same process with WS 03/08 Datacenter:
Unlimited running instances
Virtualisation Agnostic

14. Virtualisation Management
Depends on Scale:
Smaller - Hyper-V Manager
Mid-Market/Enterprise – SCVMM
Virtualisation Management is one part of a much bigger picture...

15. Demo My demo environment ->
System Center Virtual Machine Manager 2008

16. Virtualisation Solutions...
Management

17. Performance & Resource Optimisation (PRO)
Workload and application aware resource optimisation
Extensible through the Operations Manager 2007 MP framework
Create policies that VMM acts upon tips automatically or manually
Minimise downtime and accelerating time to resolution.
Enables partners to deliver value add to our mutual customers

18. System Center Pricing & Licensing
Virtual machine management is a key component of server management
Introducing the System Center Enterprise Server Management License
Provides comprehensive management for physical & virtual Windows Server & Storage environments, & includes:
System Center Virtual Machine Manager 2007*
System Center Operations Manager 2007 Enterprise Edition
System Center Data Protection Manager 2007 Enterprise Edition
System Center Configuration Manager 2007
Unlimited Virtualisation Rights
Server Management Suite Enterprise Full Application and Server Management (P&V)

19. System Center Scenario
By assigning an SMSE to the Physical box, it can be:
Patched/Updated (SCCM)
Monitored (SCOM)
Backed Up (SCDPM)
VMM Host (SCVMM)
VMM Server (SCVMM)
$1200
SMSE grants unlimited virtualisation rights...
Virtualisation Agnostic

20. Lunch
45 minutes...

21. Delivering Apps Virtually #1...

22. Desktop Virtualisation: Overview
Server-Based Virtualisation (VDI)
Client-Based Virtualisation
Network
Client
Server
Client
LAN Attached Clients
Mobile / Outside Perimeter

23. Microsoft VDI
Citrix XenDesktop / Quest VAS

24. Demo Windows Fundamentals for Legacy PCs XenDesktop
“Windows Fundamentals for Legacy PCs ("WinFLP") is a thin client operating system from Microsoft, based on Windows XP Embedded, but optimized for older, less powerful hardware. It was released on July 8, Windows Fundamentals for Legacy PCs is not a full-fledged general purpose operating system. It includes only certain functionality for local workloads such as security, management, document viewing related tasks and the .NET Framework. It is designed to work as a client-server solution with RDP clients or other third party clients such as Citrix ICA.”
XenDesktop

25. Licensing VDI –> Vista Enterprise Centralised Desktop

26. Desktop Virtualisation: Overview
Server-Based Virtualisation (VDI)
Client-Based Virtualisation
Network
Client
Server
Client
LAN Attached Clients
Mobile / Outside Perimeter

27. Break
15 minutes...

28. Delivering Apps Virtually #2...

29. TS Core Enhancements Vista: better together
Previous versions: 2 TS clients
Now: 1 integrated client
Network Level Authentication & Server Authentication
Display Improvements
Plug and Play device Redirection Framework
Single Sign-On

30. Demo Terminal Services RemoteApp Manager
Terminal Services RemoteApp Deployment
Terminal Services Web Access
Sharepoint 3.0 SP1 Integration

31. Role: Terminal Services Gateway
1/18/2019 4:14 PM
Role: Terminal Services Gateway
Allows secure seamless connection without VPN
Tunnels RDP over HTTPS - same as Outlook
Place TS behind multiple firewalls without opening multiple firewall ports other than 443
Provides Policy Control over:
Who can access what & optionally enforce smart card use and restrict device redirection
Allows access to:
Terminal Server Remote Desktops and Programs, Client and Server Remote Desktop
When should TS Gateway be used in place of VPN?
When no local copy of data is required & when bandwidth or application characteristics makes VPN experience poor
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. Terminal Services Gateway
Policies 3
TS Gateway authenticates user / checks health 4
Connection Complete – access to Machines/TS/Web Access 2
External firewall strips HTTP & passes RDP to TS Gateway 1
Client tries to connect to Terminal Servers
TS Gateway 3
Client 2 1
XP/Vista 4
Terminal Server
TS Web Access
internet
perimeter
internal

33. Terminal Services Easy Print4 1 2 3 4
The document prints to the local printer 1
User opens Microsoft Word running via Terminal Services 2
User wants to print the document to the local printer 3
TS Easy Print utilizes the client side print drivers, and the full print UI appears

34. Terminal Services Easy Print
NO PRINT DRIVER INSTALLATION ON TERMINAL SERVER REQUIRED FOR TS EASY PRINT
Guaranteed printer installation in TS session
TS Printer are scoped per session & all printer properties available in TS session
TS Policy to redirect ONLY default client printer
Works transparently between, say, X86 Client and X64 TS
Client Requirements:
On Client - XP SP3 + .NET 3.0 SP1, Vista SP1 (Includes .NET 3.0 SP1), IHV Printer Driver
In Future: Native XPS Printers = No IHV Drivers

35. TS Easy Print - Server Side
WinHEC 2006
1/18/2019 4:14 PM
TS Easy Print - Server Side
Provided by
Microsoft
ISV
Win32 App
WPF App
TS Easy Print XPS Driver
GDI to XPS
Conversion Module
XPS
Spool
File
XPS
RDP
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. TS Easy Print - Client Side
WinHEC 2006
1/18/2019 4:14 PM
TS Easy Print - Client Side
Provided by
Microsoft
IHV
TS Client (MSTSC)
XPS Printer Driver
RDP
TS Easy Print
Plug-in
XPS
Spool
File
.NET Framework 3.0 SP1
XPS to GDI
Conversion Module
Print Processor
EMF
Spool
File
GDI Printer Driver
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

37. Experience Security Manageability Platform
Resolution up to 4096x2048 & span multiple monitors
PnP Device Redirection Framework
Windows Presentation Foundation (WPF)
32-bit Color & new RDP compression
Display Data Prioritization
Experience
NAP Integration
Network Authentication
Single Sign-on for domain joined Vista clients
Ability to block pre RDP6 client
Per session & direct attached device isolation
Security
Per User CAL Tracking, Per Device CAL revocation
Spooler scalability improvements
Debug Logging available in all builds
New Session Broker capability (Farm Capability), Session Drain
Single Unified Win32 & Active X Client – serviced via Windows Update
Manageability
Investments in Windows and TS to eliminate potential attack vectors
Faster Login & Logoff
Profile corruption scenarios addressed
Leverage UAC for improved application compatibility
Platform

38. and to finish...
Microsoft delivers end-to-end Virtualization solutions…
…System Center provides the tools for integrated Infrastructure Management
"Virtualization without good management is more dangerous
than not using virtualization in the first place" Thomas Bittman, Gartner
Microsoft Virtual Server
Provides the virtual operating system that facilitates consolidated infrastructure, application, and branch office server workloads with rapid deployment and provisioning
Runs most major x86 operating systems in the virtual machine guest environment
Virtual machines utilize the Windows host operating system’s qualified device drivers, ensuring robust and stable device support and broad device compatibility
Virtual Machine Manager in Microsoft System Center
Manage Host configuration, Virtual Machine creation, library management, Intelligent VM placement, monitoring, rapid recovery , self provisioning and automation
Seamlessly manage virtual server environment with existing familiar physical server management tools
Provides complete scripted control of portable, connected virtual machines and enables easy automation of deployment, ongoing change and configuration
SoftGrid Application Virtualization (part of the Microsoft Desktop Optimization Pack)
Virtualize applications and deliver them as an on-demand, streaming service to desktop users
Simplify desktop images by decoupling application layer from image
Reduce number of server silos required to support Terminal Services
Centralize application permissions and control
Enables centralized patching & updating of applications
Virtual PC
Host legacy LOB applications
Host applications not compatible with desktop OS
Microsoft Terminal Services in Windows Server 2003 R2
Virtualize the presentation of entire desktops or specific applications
Provides an architecture for consolidation of applications and data in the data center, while providing broad access to local and remote users
Operations Manager in System Center
Comprehensive monitoring and reporting of host OS and guest Virtual machines, including discovery, state view, diagram view, alerts, tasks and performance
Identify good candidates for conversion to virtual machines based on specified memory and CPU requirements
Configuration Manager in System Center
Scalable migration and provisioning management
Manage patch and upgrades in physical, host and guest OS
Data Protection Manager in System Center
Captures data changes as they occur in real-time and synchronizes every 15 minutes to ensure Windows data and user productivity are protected
Enables IT administrators and end-users to easily recover data in minutes from easily accessible disk

39. Resources Matt’s blog – http://www.mattmcspirit.co.uk
Steve’s blog -
MS Virtualisation –
System Center -
VECD -

40. More Resources...
MDOP -
Terminal Services -
Evaluate WS
VDI Demo -

41. Even More Resources...
Virtualisation Blog -
Windows Server Blog -
TS Blog -
Perf Tuning for WS
System Center Blog -

42. Ask the Experts...? ?

43. © 2008 Microsoft Corporation. All rights reserved
© 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Server and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.