1. ©2006 Microsoft Corporation. All rights reserved. CLI220 Windows Vista Client Manageability Presented by Mark Minasi Created by David Zipkin Product Manager Windows Vista Microsoft Corporation

2. ©2006 Microsoft Corporation. All rights reserved. User Account Control Windows Resource Protection New Event Viewer and Logging Infrastructure New Task Scheduler Reliability Analysis Component Maintain PC configuration Desktop Troubleshooting and Task Automation Group Policy Enhancements Update Management Improvements New WMI Providers and Windows Remote Management Simplify Configuration Management 3 Management Goals: Management Features and Improvements in Windows Vista

3. ©2006 Microsoft Corporation. All rights reserved. Goal 1: Maintain PC Configuration

4. ©2006 Microsoft Corporation. All rights reserved. “…a locked and well-managed PC can save 40%.” —Gartner, December 2005 User Account Control Lowers total cost of ownership by making it practical to run as standard user PC is kept in known state Restrict installations of unapproved software Less downtime and higher productivity Reduce need to re-image system

5. ©2006 Microsoft Corporation. All rights reserved. Demo: User Account Control Administrator experience Group policy controls Standard user experience

6. ©2006 Microsoft Corporation. All rights reserved. Windows Resource Protection Maintain PC configuration by preventing potentially damaging system configuration changes System files and registry settings protected from accidental changes by the user or from software installers Only the OS Trusted Installer Service can change Windows Resource Protection resources If modified, boot critical files are replaced with trusted copies

7. ©2006 Microsoft Corporation. All rights reserved. Demo: Windows Resource Protection New name, old technology Try to delete calc.exe Examine permissions And if we were to take control and delete it…

8. ©2006 Microsoft Corporation. All rights reserved. Goal 2: Simplify Configuration Management

9. ©2006 Microsoft Corporation. All rights reserved. Improvements in Group Policy for Windows Vista Extends the reach of Group Policy with hundreds more settings Reliably and efficiently apply policy Easier to use

10. ©2006 Microsoft Corporation. All rights reserved. Power Management Device Installation and Usage Internet Explorer IPSEC & Windows Firewall Printer Deployment Troubleshooting & Diagnostics User Account Control iSCSI Windows Defender Windows Error Reporting Remote Assistance Terminal Services GlobalizationShellTablet Over 500 new settings across key areas Extending the Reach of Group Policy

11. ©2006 Microsoft Corporation. All rights reserved. Improvements In Group Policy Applied more reliably, and easier to use Network aware application of Group Policy Support for editing Group Policy settings in Multilingual Environments Support for Multiple Local GPOs Reliable and Efficient Application of Policy Easier to Use GPMC integrated into Windows Search and filter (Post Windows Vista) Templates (Post Windows Vista)

12. ©2006 Microsoft Corporation. All rights reserved. Demo: Using GP for device control Goal: kill CD-ROM drive Open device manager, find CD-rom, Properties Details, look for Hardware Ids and Compatible Ids Note them Uninstall hardware In Gpedit, go to Computer Configuration / Administrative Templates / System / Driver Installation /Device Installation Restrictions Prevent installation of devices that match any of these device IDs Punch in ID gpupdate /force rescan for changes

13. ©2006 Microsoft Corporation. All rights reserved. Search and Filter Prototype Interface…coming soon Search and Filter Will Make it Easier to Find the Right Settings

14. ©2006 Microsoft Corporation. All rights reserved. Search and Filter Prototype Interface…coming soon Templates Will Facilitate Policy Creation

15. ©2006 Microsoft Corporation. All rights reserved. We’re Making Progress Reducing the Pain of Update Management… Fewer updates delivered via Windows Update (WU) require reboots Updates requiring a reboot reduced by at least 17% since August 2003 Reduction in update delivery frequency from once a week to once a month Consolidate multiple reboots into a single reboot when multiple patches requiring a reboot are installed together

16. ©2006 Microsoft Corporation. All rights reserved. …And Getting Even Better With Windows Vista Patches can be applied directly to images Auto-update everything Platform technology to reduce reboots

17. ©2006 Microsoft Corporation. All rights reserved. Windows Installer (MSI) Key 2007 Microsoft Office applications (1) Fewer reboots when using the Windows Add/Remove Programs feature Corporate Developers can reduce reboots for installations and updates by using the Windows Installer Automatically restart after a reboot due to an installation or update Recreate application state upon restart (1)Selected Microsoft applications that take advantage of Microsoft Office Restart Manager Word, Office Excel, Office Outlook, Office PowerPoint, and Internet Explorer Windows Vista and 2007 Office System Further Reduce Disruption From Reboots

18. ©2006 Microsoft Corporation. All rights reserved. Windows Vista includes 13 new WMI Providers: BitLocker Drive Encryption Trusted Platform Module Boot Configuration Database Intelligent Platform Management Interface Windows Parental Controls Network Access Protocol Client Others… Windows Management Infrastructure (WMI) Enhancements Improve Manageability

19. ©2006 Microsoft Corporation. All rights reserved. Use Windows Remote Management to Access WMI Information over the Internet WinRM - Windows Remote Management Firewall Friendly Remote Access Protocol (Replaces DCOM) HTTP & HTTPS Microsoft’s implementation of WS-Management

20. ©2006 Microsoft Corporation. All rights reserved. Goal 3: Desktop Troubleshooting and Task Automation

21. ©2006 Microsoft Corporation. All rights reserved.

22. New Event Logging Infrastructure - Windows Eventing 6.0 Right data to diagnose problems The right data…but not too much data Improved supporting data and documentation for all events Infrastructure supports Ad-hoc diagnosis and management tools Schematized events (XML) provide richer information Easy integration with management tools

23. ©2006 Microsoft Corporation. All rights reserved. User Experience in Event Viewer is Dramatically Improved Single place to view events for all Windows Vista components Focus on important events with filtering and custom views Events are actionable Associate a task with an event with a single click Event Subscriptions IT Professionals can subscribe to events and view them centrally Based on Windows Remote Management

24. ©2006 Microsoft Corporation. All rights reserved. What’s New in Task Scheduler? Power and flexibility Sophisticated Scheduling Options with new triggers, conditional launch, and action chaining Completely scriptable Visibility Task dashboard shows active and upcoming tasks Improved reliability and resource allocation Retry tasks in case of failure Run when next available

25. ©2006 Microsoft Corporation. All rights reserved. Reliability Analysis Console Helps you understand causes of crashes and hangs Tracks frequency and type of user disruptions Shows connections between application installs and other system events

26. ©2006 Microsoft Corporation. All rights reserved. Demo: Task Scheduler Creating a task Task view options Options to re-run a scheduled task Ability to start it immediately Edit capabilities

27. ©2006 Microsoft Corporation. All rights reserved. Demo: Event Viewer Greater granularity XML message format Event triggers Event forwarding

28. ©2006 Microsoft Corporation. All rights reserved. User Account Control Windows Resource Protection New Event Viewer and Logging Infrastructure New Task Scheduler Reliability Analysis Component Maintain PC configuration Desktop Troubleshooting and Task Automation Group Policy Enhancements Update Management Improvements New WMI Providers and Windows Remote Management Simplify Configuration Management 3 Management Goals: Management Features and Improvements in Windows Vista

29. ©2006 Microsoft Corporation. All rights reserved. Demo: Reliability Monitor Built on Reliability Analysis Component An MMC snap-in Clickable graph format and front-end to Event Viewer

30. Thanks for attending! I hope you liked this introduction to new client management technologies Please fill out an evaluation! You can find me at help@minasi.com Find my online newsletter and forum at www.minasi.com