1. Lionel Cau Snr Consultant & MS Practice Mger Sogeti Switzerland

2. 3 branches of a star, 3 stars of a branch ! Strategic planning Migration projects Virtualization and costs Performs a complete assessment evaluates your maturity level, delivers a ready to use and relevant IT director plan Microsoft Infrastructure Optimisation (MIO) Microsoft Infrastructure Optimisation (MIO) A complete project management kit helping you in a short time frame to evaluate, prepare, organize and build a Vista migration eXcellence in Migration Projet (XMP) eXcellence in Migration Projet (XMP) Combines virtualization benefits with a quality focused and a cost reducing approach SoftGrid RightShore MIT: Always keeping in mind technology and methodology

3. MDOP overview What’s included, how to purchase ? SoftGrid technology basics MSAV 4.5 Dynamic Virtualization Extending scalability Globalization Security Application Virtualization and SCCM integration Virtualization and costs Sequencing best practices Tips and tricks

5. System Center Virtual App Server System Center DEM Operations Manager 2007 Translating software inventory into business intelligence Enhancing group policy through change management Dynamically streaming software as a centrally managed service Proactively managing application and operating system failures Powerful tools to accelerate desktop repair ALERT: Application X has failed App Inventory Assets Manage Group Policies Virtualize and Stream Apps Monitor Crashes Repair Desktops

6. Applications are virtualized per instance: Files (incl System Files) Registry Fonts.ini COM/DCOM objects Services Semaphores, Mutexes Name Spaces Applications do not get installed or alter the operating system Yet Tasks process locally on the host computer Dramatically reduces application conflicts and regression testing

7. Application Virtualization Sequencer Virtualizes applications Application Virtualization Server Delivers applications Application Virtualization Client Runs Applications

8. Lionel Cau Snr Consultant & MS Practice Mger Sogeti Switzerland

9. Application isolation and management Conflicts and dependencies resolved Active Update Diverse Client Base Supports Windows XP Pro, Windows Vista, Windows Server 2003 and 2008 Terminal Services, and Vista Enterprise Centralized Desktop Permission Based User clicks on desktop shortcuts - authentication, authorization and licensing checked every time users launch a virtual application Centrally Served and On Demand Delivery The first time the Server delivers “just enough” code (20-40%) to client or TS machine. As more code is needed, it is dynamically delivered. Locally Executed App executes on desktop, laptop and/or Terminal Server, not on the Server Cached for Performance App code is cached for repeat use Options to cache at login or on first launch Disconnected Use Support Entire set of applications are cached for limited time before expiring

10. Multiple versions of the same application Office 2007 and Office 2003 Branched versions of the same application Office 2003 and Office 2003 SP1 Multiple JRE Versions Multiple MDAC versions Multiple Oracle Drivers Different configurations of the same application Same database client, two different target database configurations Virtual configurations of local applications Internet Explorer add-ins (JRE, ActiveX, etc.)

12. Administrative option to allow for combinations of virtual environments called Dynamic Suite Composition Combined Virtual Environment Introducing Dynamic Suite Composition (DSC) Applications known to not conflict may be administratively set up to share the same virtual environment. Mandatory and optional dependency configuration options as controlled via OSD Virtual applications may now share common dependencies Benefits: Achieve one to many Greatly improve the ability deploy and manage an application with multiple plug ins and/or add ins Reduce cost of patching dependent application (i.e. plug ins, middleware, etc) Improve management of plug in distribution to different user groups

13. 2: Introducing Dynamic Suite Composition (DSC)

14. Current distributed deployment is not mature No branch office support Each SoftGrid site is managed as a separate entity Internet facing scenarios are not supported  Lightweight Server Currently, there are few interoperability with Electronic Software Delivery systems Dual management infrastructure No easy way of making sure the entire application is in cache before user goes offline  MSI utility and SCCM 2007 integration Current scalability challenges

15. Distributed Deployment Local DB per server Replicated package content Managed as separate entities SQL replication NOT supported Questions Replication over the wan … Streaming over the wan ? ODBC over the wan !!?

16. Application Virtualization Streaming Server New server role in the 4.5 release Provides application streaming services only No dependency on configuration database or Active Directory No desktop configuration service No UI: registry or GPO based management Supports RTSP://, RTSPS:// and FILE:// Security based on ACLs No integrated replication mecanism Integrates with ESD solutions

17. MSAV MANAGEMENT SERVER Characteristics Publishing Service Streaming Delivery Package/Active Upgrade Requires Active Directory and SQL Server When to Use Virtual app specific publishing is needed and ESD publishing will not work Per user assignment and configuration of virtual apps User controlled refresh capability Rapid application deployment during the production day System Center Application Virtualization Management Server Considerations Not good for a distributed branch environment (AD and/or SQL) No replication of DB records Separate management from ESD system

18. MSAV LIGHTWEIGHT SERVER Characteristics No Publishing Service Streaming Delivery Only Package/Active Upgrade No SQL or Active Directory No metring or licensing nor UI ACL Control of application Detection interval for new apps When to Use Alternate publishing is available (ESD, Script, etc.) but streaming is still desired Lower server maintenance option which is good for the branch Package/Active Upgrades still desired System Center Application Virtualization Lightweight Server Considerations Content must be replicated through ESD or other means Complete updated SFT must be replicated to sites

19. Group Policy configurable client registry paths for resource paths controlling virtual application resource locations Overrides OSD and Application Record root paths Can be FILE://, RTSP://, RTSPS:// Appends resource specific information to overridden path Example: OSD Path is RTSPS://FullServer.Apps.Com/Content/MyApp/MyApp.SFT ASR is set to RTSPS://BranchServer.Apps.Com/ Client will use RTSPS://BranchServer.Apps.Com/Content/MyApp/MyApp.SFT Configurable Source Roots for Virtual Application Components RootDescriptionClient Registry Location – HKLM\Software\Microsoft SoftGrid\4.5\Client\Configuration\ Application Source Root (ASR)SFT package location ApplicationSourceRoot REG_SZ OSD Source Root (OSR)OSD file locationOSDSourceRoot REG_SZ Icon Source Root (ISR)Icon file locationIconSourceRoot REG_SZ

20. Two remarks there: Beware to replication considerations related to updates VECD and MSAV: technically and licensing speaking Streaming Delivery for the Enterprise

21. MSI WRAPPING OF MSAV FILES Characteristics New sequencer option Interoperability with SMS 2003 R2 and SCCM 2007 Server is not required Virtual applications can be inventoried via Add/Remove Third party ESD systems may also control virtual applications Standalone mode virtual applications may be delivered via media or from a file share When to Use When no expectation of a streaming server Interoperability with ESD without requiring a new infrastructure Detached Delivery of Virtual Applications Considerations Specific application virtualization client mode Streaming, licensing and metering functions as well as active upgrade are not enabled

22. Lionel Cau Snr Consultant & MS Practice Mger Sogeti Switzerland

23. Better features Background Streaming Auto-load options (on first launch, on login) Windows Server 2008 Terminal Services Support (x86 only) Better Standards & CEC Support Microsoft Update for all Application Virtualization components (client, server, sequencer) Microsoft Update support for virtualized applications at sequencing time (not available at run time) Volume Shadow Copy Service (VSS) Writer support Better Management System Center Operations Manager 2007 Management Pack ADM Template & WMI Provider for Client Best Practice Analyzer / Desired Configuration Monitoring Better Diagnostics & Reporting Watson Integration on Client and Server Event Log Support on Client and Server Supportability Enhancements

24. Globalization and Localization Features Installing on any supported OS language* Mixed language environments (server/client) Detecting & respecting the user locale & regional settings (implies that all the resource files for all languages are available) Sequencing non-English/Localized applications Foreign language Active Directory and server support Brazilian Portuguese Chinese – Simplified, Chinese – Traditional Dutch (Client Only) French German Italian Japanese Korean Russian Spanish

25. Release developed in compliance with Microsoft Security Initiatives (TwC, SWI, SDL) Enable Internet facing scenario No VPN required MS App Virt Client is on an Untrusted network MS App Virt Server is on an Untrusted network Secure by Default configuration out of the box Client privileges locked down TLS Support via Schannel (on by default) Kerberos support Server Authentication Increased security as a whole

27. Integrate SoftGrid 4.5 feature set into the release of System Center Configuration Manager 2007 R2 SP1 Make managing virtual applications the same experience for the SCCM administrator as managing standard or “physical” software Requires SCCM 2007 R2 SP1 and MSAV 4.5 Server Side: Copy the Application Virtualization Streaming Server (lightweight component) to the Primary Site Server use Distribution Point (DP) properties page to enable the streaming component to be installed and configured on the DP Client Side: Customers must first deploy the SoftGrid 4.5 client to workstations Enable virtual application deployment for the Advertised Programs Client Agent Sends client policy to enable virtual applications on client computers Maintain the dynamic nature of SoftGrid virtualization Version checking, user-based targeting, streaming

28. SFTMIME (ADD, CONFIGURE, DELETE) SFTMIME (ADD, CONFIGURE, DELETE) WMI Provider (Get properties for Packages and Applications) WMI Provider (Get properties for Packages and Applications) SoftGrid Client Agent (SFTTray) SoftGrid Client Agent (SFTTray) SCCM Advanced Client (Desktop publishing, inventory) SCCM Advanced Client (Desktop publishing, inventory) SoftGrid Registry SCCM launch handler (Vapplauncher)

29. A SCCM administrator uses the New Advertisement Wizard and can specify things like the following: The collection of machines that the package should be delivered to The time at which it should be delivered Should it be mandatorily delivered or should the user or users have an option to install or reject the package? When delivered, should it be added as a streaming virtual application or a locally available virtual application (“stream from DP” or “Download and Execute”) Stream from DP – SFT file is accessed from the distribution point and stays on the distribution point download and execute - the SFT file is downloaded and is local to the client computer

30. Scenario: the virtual package is revised with a new update SCCM administrator updates the source contents of the SCCM package and updates the distribution points with the new, sequenced output SCCM uses Binary Delta Replication for both site to site and site to DP data transfer to update the package on the DP SCCM R2 supports differential updates for recomposing full package on DP (4.5 sequencer is now able to produce delta.sft) Administrator re-runs advertisements With streaming delivery, the next time the end-user launches the application, the server will deliver the updated virtual application(s) With local delivery, changes are downloaded via BITS and RDC to the local SCCM cache and then applied locally when they are completely downloaded

32. Application virtualization: benefits Minimize application conflicts and regression testing Simplify OS migrations and patching Build business continuity for applications Intelligently manage desktops including security Reduce PC management costs Accelerate application availability and deployment Application virtualization: costs Licensing Training Distributed architecture design and setup Client distribution (TS or local) Sequencing Maintenance

33. Microsoft Application Virtualization Clients VECD Terminal server Desktop Microsoft Application Virtualization Clients VECD Terminal server Desktop Microsoft Application Virtualization Clients VECD Terminal server Desktop Standalone Microsoft Application Virtualization Client System Center Application Virtualization Streaming Server System Center Application Virtualization Management Server SMS/SCCM Distribution Point SMS/SCCM Management Console Microsoft Application Virtualization Management Console SMS/SCCM Database Microsoft Application Virtualization Database Active Directory Management Web Service Microsoft Application Virtualization Sequencer Streaming + manifest SMS/SCCM application delivery Virtualized application MSI-wrapped virtualized application Application delivery via MSI on CD Windows application

34. Albeit process gets rid of many setup’s issues, there are others things to consider because of virtualisation’s mecanism

35. Identify and categorize applications criticity, impact, business lines features and relationships setup phase, execution phase reduce number of applications ! Build or formalize your DSL sources and licences maintain one identification form per application including main tests to perform and history assign at least one contact per application technical contact and/or super user

36. Sequencer should be placed in an isolated environment No agents or background applications (Search, WSUS, AV…) Virtual machine or physical CPU Must have a second drive with a letter that matches the virtual drive used by the client (Default is drive Q) Use naming conventions Understand what should be inside FB1 and FB2 Understand what is VFS, MNT and VREG Do not hesitate to modify OSD files Beware of licensing requirements Beware of upgrading scenarios Build Tests scenarios: sequencing is like packaging in a lot of ways Deploy to a staging environment

37. Lionel Cau Snr Consultant & MS Practice Mger Sogeti Switzerland

38. Guidelines Baselines Collaborate Tests Recipes Updates Maintain SLAs

40. Request and Delivery Process: 1: Requests for packaging are submitted by customer 2: Sogeti’s Service Delivery Manager valids requests and identify application technical specifications 3: Sogeti’s Service Delivery Manager gather all required sources files and licences in order to complete request 4: Once requests are planned, files are uploaded to dedicated offshore secured ftp/file server for customer project 5: Sequencers download files from ftp/file server on dedicated virtual application server for customer project 6: Packages are created and tested on virtual application Server 7: Tests are performed till requirements are achieved including tests on Vista machine 8: Sequencers store packages + recipes + applications related documents on ftp/file server 9: Sequenced packages are downloaded to customer’s file server 10: Sogeti’s Service Delivery Manager manages delivery + fullfills request history and incident management

42. Integration with AD Distributed deployment Availability, Capacity, Scalability Security Backup and DRP Command line tools and automation Integration with ESD Roaming users and site awareness Mobile users and disconnected mode Integration with TS/Citrix Documentation, knowledge base, white papers Troubleshooting tools and techniques Users’ communities, blogs and forums References, case studies, analysts and product adoption Dedicated 3rd party utilities Dedicated 3rd party service offerings

43. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.