Windows 7 Deployment Procedures in 802.1X Wired Networks
|
|
- Martin Rice
- 8 years ago
- Views:
Transcription
1 Windows 7 Deployment Procedures in 802.1X Wired Networks Lite Touch and Zero Touch Version 0.1 Draft Prepared by David Marín Hebra Consultant THE PROCEDURES DESCRIBED IN THIS DOCUMENT ARE CURRENTLY UNSUPPORTED BY MICROSOFT, AND ARE THE RESULT OF WORK
2 Revisions and Signatures Registry of Changes Date Author Version Reference 02/03/2010 David Marín 0.1 Draft Initial Version Reviewers Name Approved Version Position Date Página 1
3 Table of Contents 1 Introduction Procedures WinPE Phase Requirements Procedure Integration in Lite Touch Deployment (MDT) Integration in Zero Touch Deployment (SCCM + MDT) Windows 7 Phase Procedure Integration in Lite Touch Deployment (MDT) Integration in Zero Touch Deployment (SCCM + MDT)... 9 Página 2
4 1 Introduction Traditionally, Microsoft operating system deployment has always had a very important blocker, installation across 802.1x wired networks. Consequently, in any company that used a wired 802.1x network it has never been possible to deploy desktops from Distribution Points with the old BDD Business Desktop Deployment and the new MDT Microsoft Deployment Toolkit (Lite Touch). Neither was it possible from SMS 2003 nor SCCM 2007 Infrastructure (Zero Touch). The only solution was based on implementing network segments not secured by 802.1x authentication, in which the desktops were first deployed, and then moved to their final 802.1x VLANs. Customers really didn t like this approach and they didn t really consider it as an acceptable workaround. The principal cause of this problem has always been that WinPE never offered support for 802.1x authentication, consequently complicating any deployment projects. However, in December of 2009, the WinPE product group developed and published the necessary add-ins for versions 2.1 and 3.0 of WinPE; available here: WinPE 2.1: WinPE 3.0: I have personally been waiting for this support for years, in order to be able to help large companies with their operating system deployment projects, which were until now on hold because of this problem. So, when the support engineers ed me the other day to notify me of the release of these hotfixes, they made my life professionally, anyway However, it was not all roses. The problem I next encountered was that I soon realized that, in order to make it play nicely, the process was rather more complex that I originally thought. It took a large effort on my part through all the testing and debugging. As a consequence, I want to share with everyone the required steps in order to take the pain out of the implementation. This document describes all the required steps for implementation, for both LiteTouch (LTI) and ZeroTouch (ZTI) with SCCM. Página 3
5 2 Procedures As an introduction, I ll start by explaining that in order for the client computers to be able to connect to an 802.1x network, they will need to authenticate themselves in one of two ways: User based: A user name and password is required. Machine based: A machine certificate is necessary; typically this is received when the computer joins the domain. Following on from this, the problem of deploying automatically a computer to an 802.1x network and subsequently into a domain can be divided into two parts: WinPE phase: Firstly, we need WinPE to launch the deployment and process the first part of the MDT or SCCM OSD task sequence (for example: create and format partitions, install the operating system image file etc.). WinPE needs to authenticate itself on the network (normally receiving an IP from DHCP in the process). Because WinPE cannot belong to an Active Directory domain, this part of the process requires user-based authentication using the valid credentials of a domain user. Windows 7 Phase: Once WinPE is granted access to the network, and the operating system image has been installed, the next step of the deployment will be the first boot-up of Windows 7. Once booted, the MDT or SCCM Task Sequence will be initialized on Windows 7 in order to continue with the deployment process. However, this phase can only continue if the operating system is granted access on the 802.1x network so that Windows 7 can connect to the MDT or SCCM servers. Normally, in these cases, in order to obtain access to the cabled network to be able to join the computer to the domain, the computer needs to firstly configure itself to use user-based authentication, providing a valid domain username and password (normally a pop-up window appears requesting credentials manually). Afterwards, once joined to the domain, the computer will receive the necessary certificates and configurations so that the authentication mode can be changed automatically to machine-based, using certificates. The fundamental task here is to automatically configure the user-based authentication by providing the necessary credentials upon boot of Windows 7, and before any deployment task in the task sequence is run. 2.1 WinPE Phase In this section, I ll explain firstly the requirements and then the steps needed to configure WinPE 3.0 with 802.1x support Requirements 1. The initial step is to obtain the relevant Hotfix that provides the 802.1x support for WinPE from the Microsoft website. For this exercise, we need the file Windows6.1-KB x86.cab. Página 4
6 2. The next step is to configure an already installed Windows 7 computer to have access to the 802.1x network using user-based authentication that you want to use with WinPE. The network administrator can provide the necessary information, an example is shown below: 3. Following on, the authentication profile needs to be exported to an XML file. For this, you use the following netsh command: a. netsh lan export profile folder=d:\8021xuser interface="local Area Connection" This will create the file D:\8021XUser\Local Area Connection.xml that contains the 802.1x user-based authentication profile. Página 5
7 4. For the above example, two certificates are also required from the Root Certificate Authority (CA). As shown in the earlier screenshots: a. CATest1.cer b. CATest2.cer 5. Valid domain user credentials are now required. For example: a. Domain: Contoso b. User: User8021X c. Password: Password8021X 6. On the next page, you ll see the contents of an XML file. You need to take this text and paste it into Notepad, and save it as Wired-WinPE-UserData-PEAP-MSChapv2.xml. In this file, you will need to place the above credentials. Note: It is important that you understand the security implications of placing the credentials of a valid Active Directory user account in this XML file, which is ultimately available for anyone to read (assuming that they know where to look). The necessary measure should be taken to ensure that security is maintained. The contents of the file will be similar to what is shown next: Página 6
8 COMPLETED SOLELY AND EXCLUSIVELY BY THE AUTHOR. PLEASE DO NOT CONTACT MICROSOFT SUPPORT FOR ANY HELP WHATSOEVER <?xml version="1.0"?> <EapHostUserCredentials xmlns=" xmlns:eapcommon=" xmlns:baseeap=" <EapMethod> <eapcommon:type>25</eapcommon:type> <eapcommon:authorid>0</eapcommon:authorid> </EapMethod> <Credentials xmlns:eapuser=" xmlns:xsi=" xmlns:baseeap=" xmlns:mspeap=" xmlns:mschapv2=" <baseeap:eap> <baseeap:type>25</baseeap:type> <MsPeap:EapType> <MsPeap:RoutingIdentity>Contoso\User8021X </MsPeap:RoutingIdentity> <baseeap:eap> <baseeap:type>26</baseeap:type> <MsChapV2:EapType> <MsChapV2:Username>User8021X</MsChapV2:Username> <MsChapV2:Password>Password8021X</MsChapV2:Password> <MsChapV2:LogonDomain>Contoso</MsChapV2:LogonDomain> </MsChapV2:EapType> </baseeap:eap> </MsPeap:EapType> </baseeap:eap> </Credentials> </EapHostUserCredentials> Página 1
9 7. From a Windows 7 machine with the same architecture as the WinPE that it is being planned to build (x86 or amd64), we save the files using the Certutil utility: a. C:\Windows\System32\Certutil.exe b. C:\Windows\System32\en-US\Certutil.exe.mui 8. Finally it is necessary to use a machine with the Microsoft Windows AIK v2.0 installed Procedure Offline Part (WinPE WIM) On the machine with the WAIK 2.0 installed, generate a WinPE instance, or use an already generated WinPE. Follow the following steps: 1. Mount the WinPE WIM file to a folder on the file system so that the 802.1x Hotfix can be applied to the image. Typically the following commands are used from the WAIK command prompt: a. dism /mount-wim /WimFile:C:\CustomPEx86\winpe.wim /index:1 /mountdir:c:\mount b. dism /image:c:\mount /add-package /PackagePath:"F:\802.1X\Fix\Windows6.1- KB x86.cab" 2. Following on, the Certutil utility files need to be copied to their corresponding folders in the mounted image: a. Certutil.exe c:\mount\windows\system32 b. Certutil.exe.mui c:\mount\windows\en-us 3. A new folder (For Instance: c:\mount\8021x ) should be created in the root of the WinPE image, where the necessary files for the 802.1x functionality need to be copied. These are: a. Root CA Certificates CATest1.cer and CATest2.cer b x user-based authentication profile file Local Area Connection.xml c. XML file which contains the 802.1x user-based authentication profile credentials Wired-WinPE-UserData-PEAP-MSChapv2.xml 4. Finally the WinPE WIM file should be unmounted, committing the changes: a. dism /unmount-wim /MountDir:C:\mount /commit Online Part (Already Booted WinPE) A test machine should now be used, which you need to boot into WinPE with the image file that you just modified. Once booted, enter the following commands into the command prompt window that automatically opens. These steps will configure the user-based authentication. Página 1
10 1. Start the service Wired AUTOCONFIG (DOT3SVC) Service. This service is absolutely necessary for IEEE 802.1x authentication. It is strange, but in WinPE 3.0 and Windows 7 this service has a configuration of MANUAL, instead of AUTOMATIC. a. net start dot3svc 2. The next step is to import the necessary Root CA Certificates: a. x:\windows\system32\certutil.exe -addstore root x:\8021x\catest1.cer b. x:\windows\system32\certutil.exe -addstore root x:\8021x\catest2.cer 3. Now it is the time to import the 802.1x user-based authentication profile: a. netsh lan add profile filename="x:\8021x\ Local Area Connection.xml " interface="local Area Connection" 4. Afterwards the XML file which contains the 802.1x user-based authentication profile credentials should be imported: a. netsh lan set eapuserdata filename=x:\8021x\wired-winpe-userdata-peap- MSChapv2.xml allusers=yes interface="local Area Connection" 5. After all the previous steps are completed, the 802.1x user-based authentication should have been successfully established an IP address from a DHCP Server should have been obtained. You can double-check this with the following command: a. Ipconfig /renew Obviously once you ve tested the successful 802.1x user-based authentication process; it would be advisable to build a script in order to automate all the steps that have been just detailed. Once automated, the user-based 802.1x authentication process must be integrated into the WinPE Boot processes implemented by MDT (Lite Touch Deployment) and SCCM + MDT (Zero Touch Deployment) Integration in Lite Touch Deployment (MDT) There are several different ways of adding custom commands to the Boot Process of WinPE. First, I ll explain how to do it for MDT Lite Touch: The file x:\windows\system32\winpeshl.ini controls the WinPE boot process. By default, it contains the following lines: Página 2
11 In Lite Touch Deployments the executable BDDRun.exe is the one that launches the set of actions that occur in WinPE during the deployment process. BDDRun.exe will initialize WinPE and after that it will execute synchronously the commands that appear in the file X:\Unattend.xml. This file by default contains: So that the script X:\Deploy\Scripts\Litetouch.wsf will be launched and with it the Deployment Wizard and the Deployment Task Sequence will also be run. Therefore, if we want to follow the same philosophy as the default WinPE boot process for MDT Lite Touch deployments, in order to add a script that launches all the steps described previously in this document to configure the 802.1X user authentication (assuming that this script is called X:\8021x\Configure8021XUser.wsf ) just before the execution of the deployment wizard and global process, you need to change the X:\Unattend.xml file as shown below: Página 3
12 2.1.4 Integration in Zero Touch Deployment (SCCM + MDT) As mentioned earlier, there are different ways to include custom commands in the WinPE boot process. Let s now look at the default WinPE boot process in Zero Touch Deployments (SCCM + MDT): For SCCM, the file x:\windows\system32\winpeshl.ini, controls the boot process: So the first process launched in WinPE will be TSBootShell.exe, which will initialize WinPE and start the Deployment Process, calling in turn other executables from folder X:\sms\bin\i386. From that moment on it is not easy to follow the process flow in WinPE because we have several executables calling each other to complete the Deployment task sequence. Hence, if we want to follow the same philosophy as the default WinPE boot process for Zero Touch (SCCM + MDT) deployments, in order to add a script that launches all the steps described previously Página 4
13 in this document to achieve the 802.1X user authentication (assuming that the script is called X:\8021x\Configure8021XUser.wsf ), just before the execution of the global deployment process you need to change the x:\windows\system32\winpeshl.ini file as shown below: NOTES: o o You can see that the first process to be launched will be WPEInit.exe in order to initialize WinPE network subsystem. After that it will be the 802.1x authentication script. In the last step TSBootShell will be given control to implement the Deployment process. It is important to understand the syntax of the commands in this file. The executable and its parameters are all together, separated by, commas: o %SYSTEMDRIVE%\Windows\System32\wscript.exe, %SYSTEMDRIVE%\8021X\CUSTOM_WinPEConfigure8021X.wsf 2.2 Windows 7 Phase Once the Windows 7 operating System image has been installed on the computer, it will boot. At this point it s necessary for it to be granted access on the 802.1x network in order to launch and continue with the deployment task sequence in MDT or SCCM + MDT. Due to the fact that it doesn t belong to the domain yet, authentication will first be user-based so that the computer can connect to the MDT or SCCM server in order to continue with the task sequence. In this task sequence, you need to add an additional task so that, once the computer is in the domain, the authentication mode can be switched to machine-based. This can be achieved using an Active Directory GPO, or directly via a task in the task sequence (importing an authentication profile that was previously exported from a reference machine) Procedure The content of the folder that was added to the earlier modified WinPE image ( X:\8021x ) is needed. This folder contains the necessary files for the 802.1X authentication. These are: 1. Root CA Certificates CATest1.cer y CATest2.cer x user-based authentication profile file Local Area Connection.xml 3. XML file which contains the 802.1x user-based authentication profile credentials Wired- WinPE-UserData-PEAP-MSChapv2.xml Página 5
14 You will need to add a task to the task sequence so that this folder is copied from the X: drive to the local C: drive. This task should be actioned in the WinPE phase once the operating system image is applied, and before the computer restarts. The folder could be copied to a temporary location, such as C:\Windows\Temp\8021x. Once all the files are available, the user-based authentication process in Windows 7 will be quite similar to the one in WinPE (Online Part): 1. First of all, the service Wired AUTOCONFIG (DOT3SVC) Service will be started. Sample command could be: a. net start dot3svc NOTE: It is highly recommended to change the Configuration of this Service from MANUAL to AUTOMATIC, using a vbs script or any other mechanism. 2. The next step will be to import the necessary Root CA Certificates: a. C:\windows\system32\certutil.exe -addstore root C:\Windows\Temp\8021X\CATest1.cer b. C:\windows\system32\certutil.exe -addstore root C:\Windows\Temp\8021X\CATest2.cer NOTE: The CertUtil utility is part of Windows 7. If you prefer, these Root CA Certificates could also be included as part of the Windows 7 corporate Image. 3. Afterwards the XML file which contains the 802.1x user-based authentication profile credentials needs to be imported: c. netsh lan add profile filename="c:\windows\temp\8021x\ Local Area Connection.xml " interface="local Area Connection" 4. Afterwards the XML file which contains the 802.1x user-based authentication profile credentials needs to be imported: d. netsh lan set eapuserdata filename=c:\windows\temp\8021x\wired-winpe- UserData-PEAP-MSChapv2.xml allusers=yes interface="local Area Connection" VERY IMPORTANT NOTE: At this point (4) I should point out that Microsoft client operating systems (Windows 7, Windows Vista, Windows XP) do not support Out-of-the-box this method to import 802.1x credentials. The normal behavior is that, once the user-based authentication profile is configured, a popup window appears asking for credentials. However, a new Hotfix for Windows 7 has been developed that allows of this method to import the 802.1x user-based authentication profile credentials. More information in this article: o You cannot connect to an 802.1x wired network when you run an automated build process Página 6
15 In conclusion, it is absolutely necessary that the reference Windows 7 image (WIM) that will be deployed to computers includes this hotfix that will allow the execution of the command in point After all these previous steps, the 802.1x user-based authentication should have been successfully configured and it has been possible to get an IP address from a DHCP Server. Sample command could be: a. Ipconfig /renew As before, once you have tested this part, you can automate it with a script and include it in the task sequence for integration with MDT (Lite Touch) y SCCM + MDT (Zero Touch) Integration in Lite Touch Deployment (MDT) The first step is to copy the folder X:\8021x from WinPE to a temporary location on the C: on the computer, for example: C:\Windows\Temp\8021x. This step must be launched once the operating system has been applied, and before the computer reboots. In the below example, you can see an example of how I have achieved this. The task Copy Files 802.1X runs a script that copies the folder: The 802.1x user-based authentication should occur before launching the task sequence. In MDT LiteTouch the task sequence is continued once the autologon happens, as configured in the Página 7
16 Unattend.xml file. The exact step where this auto-start of the task sequence is configured is in the node oobesystem" \ "Microsoft-Windows-Shell-Setup". For example: If we follow the same philosophy as before, in order to introduce a new step, we need to add our own script here. Assuming that the script is called C:\Windows\Temp\8021X\Configure8021XUser.wsf, an example is shown below: Página 8
17 You should remember to include in the task sequence an additional task that deletes this folder once the deployment completes. This is important because the XML file that is saved there contains the credentials of a valid Active Directory user account Integration in Zero Touch Deployment (SCCM + MDT) As before, the first step is to copy the folder X:\802.1x that WinPE contains to the temporary location, for example c:\windows\temp\8021x. This step must be launched once the operating system has been applied, and before the computer reboots. For this, I have used the task Copy Files 802.1X as shown below: Página 9
18 The user-based 802.1x authentication should occur before any task sequence is launched. In SCCM + MDT the task sequence is launched in the background, before any logon window is even presented on the desktop. Because of this, using the steps detailed previously (the node oobesystem \ Microsoft-Windows-Shell-Setup \ FirstLogonCommands) will not work. Instead, your configuration script should be placed here: <settings pass="specialize"> \ <component name="microsoft-windows-deployment" processorarchitecture="x86" publickeytoken="31bf3856ad364e35" language="neutral" versionscope="nonsxs" xmlns:wcm=" xmlns:xsi=" \ <RunSynchronous> Once completed, assuming that the script is called C:\Windows\Temp\8021X\Configure8021XUser.wsf, the Unattend.xml file will look like the one shown below: Página 10
19 You should remember to include in the task sequence an additional task that deletes this folder once the deployment completes. This is important because the XML file that is saved there contains the credentials of a valid Active Directory user account. Página 11
Planning and Managing Windows 7 Desktop Deployments and Environments
Planning and Managing Windows 7 Desktop Deployments and Environments Course Number: 6294A Course Length: 5 Days Course Overview This five-day course is intended for desktop administrators who want to specialize
IT-Pruefungen.de. Hochwertige Qualität, neueste Prüfungsunterlagen. http://www.it-pruefungen.de
IT-Pruefungen.de Hochwertige Qualität, neueste Prüfungsunterlagen http://www.it-pruefungen.de Exam : 70-681 Title : TS: Windows 7 and Office 2010, Deploying Version : Demo 1. You have a single-domain Active
Planning and Managing Windows 7 Desktop Deployments & Environments - 6294 Version 7
Planning and Managing Windows 7 Desktop Deployments & Environments - 6294 Version 7 Note This course is not scheduled to be released until January of 2010. Overview This five-day instructor-led course
Planning and Managing Windows 7 Desktop Deployments and Environments
Planning and Managing Windows 7 Desktop Deployments and Environments Course Details Duration: Course code: 5 Days M6294 Overview: This five-day instructor-led course is intended for desktop administrators
Planning and Managing Windows 7 Desktop Deployments and Environments
Planning and Managing Windows 7 Desktop s and s Introduction This five-day instructor-led course is intended for desktop administrators who want to specialize in desktop deployment, configuration, and
NE-6294A Planning and Managing Windows 7 Desktop Deployments and Environments
NE-6294A Planning and Managing Windows 7 Desktop s and s Summary Duration Vendor Audience 5 Days Microsoft IT Professionals Published Level Technology 04 January 2010 300 Windows 7 Delivery Method Instructor-led
Creating a custom WinPE Boot.wim
Contents Creating a custom winpe boot.wim- SCCM Creating a bootable USB Drive Creating a winpe boot.wim with parameter errors Creating a custom WinPE Boot.wim When using System Center Configuration Manager
MS-6294- Planning and Managing Windows 7 Desktop Deployment and Environments
MS-6294- Planning and Managing Windows 7 Desktop Deployment and Environments Table of Contents Introduction Audience At Completion Prerequisites Microsoft Certified Professional Exams Student Materials
Implementing a Desktop Infrastructure Course 20415B; 5 days, Instructor-led
Implementing a Desktop Infrastructure Course 20415B; 5 days, Instructor-led Course Description This 5-day instructor-led course provides you with the skills and knowledge needed to plan, design, and implement
Password Manager Windows Desktop Client
Password Manager Windows Desktop Client EmpowerID provides an extension that allows organizations to plug into Password Manager to customize the Windows logon experience beyond that supplied by the standard
Http://www.passcert.com
Http://www.passcert.com Exam: 70-681 Title : TS: Windows 7 and Office 2010, Deploying Version : DEMO 1 / 8 1. You have a single-domain Active Directory Domain Services (AD DS) forest. All servers run Windows
What's New with Servicing in Windows Embedded Standard 7
What's New with Servicing in Windows Embedded Standard 7 Contents Overview... 1 History... 1 Tools... 2 Methods... 5 Summary... 7 Overview Servicing a Windows Embedded Device can mean many things depending
Course 20415:Implementing a Desktop Infrastructure
Course 20415:Implementing a Desktop Infrastructure Type:Course Audience(s):IT Professionals Technology:Windows Server Level:300 This Revision:B Delivery method: Instructor-led (classroom) Length:5 days
Windows 10 and Enterprise Mobility
Windows 10 and Enterprise Mobility Deploying Windows 10 using Microsoft Deployment Toolkit The exercises in this lab guide show how to deploy Windows 10 by using Microsoft Deployment Toolkit (MDT) 2013
(Exam 70-680): Configuring
Microsoft MCTS Self-Paced Training Kit (Exam 70-680): Configuring Windows? Ian McLean Orin Thomas Contents Introduction Lab Setup Instructions Hardware Requirements Using the DVD xxv How to Install the
McAfee Endpoint Encryption for PC 6.2
EETech User Guide McAfee Endpoint Encryption for PC 6.2 For use with epolicy Orchestrator 4.5, 4.6 Software COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS
Out n About! for Outlook Electronic In/Out Status Board. Administrators Guide. Version 3.x
Out n About! for Outlook Electronic In/Out Status Board Administrators Guide Version 3.x Contents Introduction... 1 Welcome... 1 Administration... 1 System Design... 1 Installation... 3 System Requirements...
Paragon Recovery Media Builder
PARAGON Software GmbH Heinrich-von-Stephan-Str. 5c 79100 Freiburg, Germany Tel. +49 (0) 761 59018201 Fax +49 (0) 761 59018130 Internet www.paragon-software.com E-mail sales@paragon-software.com Paragon
Windows XP User guide for wired network v1.1
User guide for wired network v1.1 Pagina 1 di 10 Wired configuration guide v1.1 Instructions for 1 Introduction These instructions are intended only for the native Microsoft tool for wired networks (supplicant).
In the Active Directory Domain Services Window, click Active Directory Domain Services.
Installing the Active Directory Domain Services Role Press the Ctrl-Alt-Del on the xxrwdc computer. Log in as the default administrator of the local computer with the username Administrator and cisisthebest!
TrueEdit Remote Connection Brief
MicroPress Server Configuration Guide for Remote Applications Date Issued: February 3, 2009 Document Number: 45082597 TrueEdit Remote Connection Brief Background TrueEdit Remote (TER) is actually the same
Step by step guide for connecting PC to wired LAN at dormitories of University of Pardubice
Step by step guide for connecting PC to wired LAN at dormitories of University of Pardubice English version Version 1.1 July 2008 Information Cente University of Pardubice Content A. Windows XP... 2 B.
Using Logon Agent for Transparent User Identification
Using Logon Agent for Transparent User Identification Websense Logon Agent (also called Authentication Server) identifies users in real time, as they log on to domains. Logon Agent works with the Websense
LDAP Implementation AP561x KVM Switches. All content in this presentation is protected 2008 American Power Conversion Corporation
LDAP Implementation AP561x KVM Switches All content in this presentation is protected 2008 American Power Conversion Corporation LDAP Implementation Does not require LDAP Schema to be touched! Uses existing
Course Syllabus. Deploying Microsoft Windows Server 2008. Key Data. Audience. At Course Completion
Key Data Product #: 6418B Course Syllabus Deploying Microsoft Windows Server 2008 This 3-day instructor-led course provides students with an understanding of migrating and deploying Windows Server 2008
Active Directory integration with CloudByte ElastiStor
Active Directory integration with CloudByte ElastiStor Prerequisite Change the time and the time zone of the Active Directory Server to the VSM time and time zone. Enabling Active Directory at VSM level
Planning and Managing Windows 7 Desktop Deployments and Environments
Planning and Managing Windows 7 Desktop Deployments and Environments Elements of this syllabus are subject to change. Course Details Course Code: 6294 Duration: 5 Day(s) Release Date: Mid January 10 Notes:
Syllabus 20695 Windows Enterprise Desktop Deployment. Subject Description: Subject Hours: Performance Objectives: Prerequisites
Syllabus 20695 Windows Enterprise Desktop Deployment Subject Description: Subject Hours: Performance Objectives: Prerequisites After completing this course, students will be able to: Assess the network
Course Outline. Implementing a Desktop Infrastructure Course 20415B: 5 days Instructor Led
Implementing a Desktop Infrastructure Course 20415B: 5 days Instructor Led About this Course This 5-day instructor-led course provides you with the skills and knowledge needed to plan, design, and implement
Quick Start Guide. User Manual. 1 March 2012
Quick Start Guide User Manual 1 March 2012 This document outlines the steps to install SAMLite system into a single box of server and configure it to run for passive collection (domain login script). This
SecureW2 Client for Windows User Guide. Version 3.1
SecureW2 Client for Windows User Guide Version 3.1 The software described in this document is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Copyright
20415 - Implementing a Desktop Infrastructure
20415 - Implementing a Desktop Infrastructure Duration: 5 days Course Price: $2,975 Software Assurance Eligible Course Description Course Overview This 5-day instructor-led training course provides you
Active Directory Infrastructure Design Document
Active Directory Infrastructure Design Document Written By Sainath KEV Microsoft MVP Directory Services Microsoft Author TechNet Magazine, Microsoft Operations Framework Microsoft Speaker - Singapore Document
Troubleshooting smart card logon authentication on active directory
Troubleshooting smart card logon authentication on active directory Version 1.0 Prepared by: "Vincent Le Toux" Date: 2014-06-11 1 Table of Contents Table of Contents Revision History Error messages The
1. Installation Overview
Quick Install Guide 1. Installation Overview Thank you for selecting Bitdefender Business Solutions to protect your business. This document enables you to quickly get started with the installation of Bitdefender
Microsoft Diagnostics and Recovery Toolset 7 Evaluation Guide
Microsoft Diagnostics and Recovery Toolset 7 Evaluation Guide White Paper Descriptor This document provides administrators with information and steps-by-step technique for deploying Microsoft Diagnostics
Sideload Windows Store Apps in Windows 8
Sideload Windows Store Apps in Windows 8 1. Introduction Windows Store apps bring a new dimension to the user experience, supporting multitouch and traditional keyboard and mouse user input. Organizations
Windows Intune Walkthrough: Windows Phone 8 Management
Windows Intune Walkthrough: Windows Phone 8 Management This document will review all the necessary steps to setup and manage Windows Phone 8 using the Windows Intune service. Note: If you want to test
Paragon Protect & Restore
PARAGON Software GmbH Heinrich-von-Stephan-Str. 5c 79100 Freiburg, Germany Tel. +49 (0) 761 59018201 Fax +49 (0) 761 59018130 Email sales@paragon-software.com Product website : www.protect-restore.com
Team Foundation Server 2012 Installation Guide
Team Foundation Server 2012 Installation Guide Page 1 of 143 Team Foundation Server 2012 Installation Guide Benjamin Day benday@benday.com v1.0.0 November 15, 2012 Team Foundation Server 2012 Installation
Installation Notes for Outpost Network Security (ONS) version 3.2
Outpost Network Security Installation Notes version 3.2 Page 1 Installation Notes for Outpost Network Security (ONS) version 3.2 Contents Installation Notes for Outpost Network Security (ONS) version 3.2...
Deploy Windows 7 Using Microsoft s FREE Deployment Tools. Rhonda J. Layfield Sr. Deployment Architect Deployment Done Right
Deploy Windows 7 Using Microsoft s FREE Deployment Tools Rhonda J. Layfield Sr. Deployment Architect Deployment Done Right Rhonda Layfield I live in Washington DC in the States Been in the IT industry
Preparing a Windows 7 Gold Image for Unidesk
Preparing a Windows 7 Gold Image for Unidesk What is a Unidesk gold image? In Unidesk, a gold image is, essentially, a virtual machine that contains the base operating system and usually, not much more
How To - Implement Single Sign On Authentication with Active Directory
How To - Implement Single Sign On Authentication with Active Directory Applicable to English version of Windows This article describes how to implement single sign on authentication with Active Directory
DeployStudio Server Quick Install
DeployStudio Server Quick Install v1.7.0 The DeployStudio Team info@deploystudio.com Requirements OS X 10.7.5 to 10.11.1 DeployStudioServer_v1.7.x.pkg and later NetBoot based deployment 100 Mb/s switched
Computer Science and Engineering Windows Cisco VPN Client Installation and Setup Guide
Computer Science and Engineering Windows Cisco VPN Client Installation and Setup Guide This document will guide you through the installation of the Cisco VPN Client for Microsoft Windows XP and Vista.
User Manual. Onsight Management Suite Version 5.1. Another Innovation by Librestream
User Manual Onsight Management Suite Version 5.1 Another Innovation by Librestream Doc #: 400075-06 May 2012 Information in this document is subject to change without notice. Reproduction in any manner
Migration Strategies and Tools for the HP Print Server Appliance
white paper HP Print Server Appliance 4250 July 2003 Migration Strategies and Tools for the HP Print Server Appliance (Web Jetadmin version 7.2 and above; PSA Firmware version 2.4.x and above) Overview
Outpost Network Security
Administrator Guide Reference Outpost Network Security Office Firewall Software from Agnitum Abstract This document provides information on deploying Outpost Network Security in a corporate network. It
RTX64 2014 Runtime with Service Pack 2 WES7 DEPLOYMENT GUIDE
RTX64 2014 Runtime with Service Pack 2 WES7 DEPLOYMENT GUIDE Copyright 1996-2015 by IntervalZero, Inc. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any
SPECOPS DEPLOY / OS 4.6 DOCUMENTATION
Technical documentation: SPECOPS DEPLOY / OS 4.6 DOCUMENTATION By Shay Byrne, Product Manager 1 Getting Started... 4 1.1 Specops Deploy / OS Supported Configurations...4 1.2 Specops Deploy and Active Directory...
Windows" 7 Desktop Support
Windows" 7 Desktop Support and Administration Real World Skills for MCITP Certification and Beyond Darril Gibson WILEY Wiley Publishing, Inc. Contents Introduction xxiii Chapter 1 Planning for the Installation
Dial-up Installation for CWOPA Users (Windows Operating System)
Dial-up Installation for CWOPA Users (Windows Operating System) 1 Table of Contents Download and Install Digital Certificates... 3 Internet Explorer 8/9 Certificate Installation.3 Windows XP Instructions
ILTA 2013 - HAND 6B. Upgrading and Deploying. Windows Server 2012. In the Legal Environment
ILTA 2013 - HAND 6B Upgrading and Deploying Windows Server 2012 In the Legal Environment Table of Contents Purpose of This Lab... 3 Lab Environment... 3 Presenter... 3 Exercise 1 Add Roles and Features...
Deployment of Keepit for Windows
Deployment of Keepit for Windows Keepit A/S October 13, 2010 1 Introduction When deploying Keepit in larger setups with many desktops and servers, installing Keepit individually on each computer is cumbersome
Hadoop Data Warehouse Manual
Ruben Vervaeke & Jonas Lesy 1 Hadoop Data Warehouse Manual To start off, we d like to advise you to read the thesis written about this project before applying any changes to the setup! The thesis can be
Device LinkUP + Desktop LP Guide RDP
Device LinkUP + Desktop LP Guide RDP Version 2.1 January 2016 Copyright 2015 iwebgate. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval
How To Install And Configure Windows Server 2003 On A Student Computer
Course: WIN310 Student Lab Setup Guide Microsoft Windows Server 2003 Network Infrastructure (70-291) ISBN: 0-470-06887-6 STUDENT COMPUTER SETUP Hardware Requirements All hardware must be on the Microsoft
HELP DOCUMENTATION E-SSOM INSTALLATION GUIDE
HELP DOCUMENTATION E-SSOM INSTALLATION GUIDE Copyright 1998-2013 Tools4ever B.V. All rights reserved. No part of the contents of this user guide may be reproduced or transmitted in any form or by any means
Deploying Windows Server 2008
Deploying Windows Server 2008 MOC6418 About this Course This 3-day instructor-led course provides students with an understanding of migrating and deploying Windows Server 2008 including installation, configuration,
Microsoft Virtual Labs. Administering the IIS 7 File Transfer Protocol (FTP) Server
Microsoft Virtual Labs Administering the IIS 7 File Transfer Protocol (FTP) Server Table of Contents Exercise 1 Installing the Microsoft FTP Publishing Service for the IIS 7... 1 Exercise 2 Introducing
Setting Up a Backup Domain Controller
Setting Up a Backup Domain Controller June 27, 2012 Copyright 2012 by World Class CAD, LLC. All Rights Reserved. A Backup Domain Controller After setting up a primary domain controller, we will want to
Quick Start Guide. IT Management On-Demand
1 Quick Start Guide Quick Start Guide IT Management On-Demand Introduction... 2 Getting Started... 3 Planning Your Deployment... 5 Performing a Test Deployment... 6 Enterprise Deployment Options... 8 Remote
Windows Embedded Standard 7 Technical Overview
Windows Embedded Standard 7 Technical Overview Introduction Windows Embedded Standard 7 is the next generation platform in the product family that includes Windows XP Embedded and Windows Embedded Standard
Server Sentinel Client Workstation
Server Sentinel Client Workstation Installation and Reinstallation Guide Server Sentinel 4.4.3 and Higher April 2008 . unisys imagine it. done. Server Sentinel Client Workstation Installation and Reinstallation
MCTS Guide to Microsoft Windows 7. Chapter 13 Enterprise Computing
MCTS Guide to Microsoft Windows 7 Chapter 13 Enterprise Computing Objectives Understand Active Directory Use Group Policy to control Windows 7 Control device installation with Group Policy settings Plan
Exclaimer Signature Manager 2.0 User Manual
Exclaimer Exclaimer UK +44 (0) 1252 531 422 USA 1-888-450-9631 info@exclaimer.com Contents GETTING STARTED... 10 Signature Manager Overview... 11 How Does it Work?... 11 But That's Not All...... 12 And
Jetico Central Manager. Administrator Guide
Jetico Central Manager Administrator Guide Introduction Deployment, updating and control of client software can be a time consuming and expensive task for companies and organizations because of the number
Course: Deploying Windows Server 2008
Page 1 of 6 Course: Deploying Windows Server 2008 Course 6418B Duration: 3 Days About this Course This 3-day instructor-led course provides students with an understanding of migrating and deploying Windows
SETTING UP ACTIVE DIRECTORY (AD) ON WINDOWS 2008 FOR DOCUMENTUM @ EROOM
SETTING UP ACTIVE DIRECTORY (AD) ON WINDOWS 2008 FOR DOCUMENTUM @ EROOM Abstract This paper explains how to setup Active directory service on windows server 2008.This guide also explains about how to install
Veritas Cluster Server Database Agent for Microsoft SQL Configuration Guide
Veritas Cluster Server Database Agent for Microsoft SQL Configuration Guide Windows 2000, Windows Server 2003 5.0 11293743 Veritas Cluster Server Database Agent for Microsoft SQL Configuration Guide Copyright
Desktop Surveillance Help
Desktop Surveillance Help Table of Contents About... 9 What s New... 10 System Requirements... 11 Updating from Desktop Surveillance 2.6 to Desktop Surveillance 3.2... 13 Program Structure... 14 Getting
Kaseya 2. User Guide. Version R8. English
Kaseya 2 Discovery User Guide Version R8 English September 19, 2014 Agreement The purchase and use of all Software and Services is subject to the Agreement as defined in Kaseya s Click-Accept EULATOS as
SyncLockStatus Evaluator s Guide
SyncLockStatus Evaluator s Guide 2011 Table of Contents Introduction... 2 System Requirements... 2 Required Microsoft Components... 2 Contact Information... 3 SyncLockStatus Architecture... 3 SyncLockStatus
Installation Overview
Contents Installation Overview... 2 How to Install Ad-Aware Management Server... 3 How to Deploy the Ad-Aware Security Solutions... 5 General Deployment Conditions... 5 Deploying Ad-Aware Management Agent...
Direct Storage Access Using NetApp SnapDrive. Installation & Administration Guide
Direct Storage Access Using NetApp SnapDrive Installation & Administration Guide SnapDrive overview... 3 What SnapDrive does... 3 What SnapDrive does not do... 3 Recommendations for using SnapDrive...
Deploying BitDefender Client Security and BitDefender Windows Server Solutions
Deploying BitDefender Client Security and BitDefender Windows Server Solutions Quick Install Guide Copyright 2010 BitDefender; 1. Installation Overview Thank you for selecting BitDefender Business Solutions
CYCLOPE let s talk productivity
Cyclope 6 Installation Guide CYCLOPE let s talk productivity Cyclope Employee Surveillance Solution is provided by Cyclope Series 2003-2014 1 P age Table of Contents 1. Cyclope Employee Surveillance Solution
6 Oracle Business Activity Monitoring
6 Oracle Business Activity Monitoring This chapter describes issues associated with Oracle Business Activity Monitoring (BAM). It includes the following topics: Section 6.1, "Supported Platforms" Section
Configuring the Active Directory Plug-in
Wazza s QuickStart Configuring the Active Directory Plug-in Mac OS X 10.3.4 Background Using the Mac OS X 10.3.x built-in Active Directory (AD) plug-in, Mac users can authenticate with a Windows Active
StarMOBILE Network Configuration Guide. A guide to configuring your StarMOBILE system for networking
StarMOBILE Network Configuration Guide A guide to configuring your StarMOBILE system for networking INTRODUCTION... 3 BEFORE YOU BEGIN... 3 1) CONFIRM YOU HAVE THE LATEST SOFTWARE... 3 2) INSTALL THE STARMOBILE
Special Edition for FastTrack Software
08/14 The magazine for professional system and networkadministration Special Edition for FastTrack Software Tested: FastTrack Automation Studio www.it-administrator.com TESTS I FastTrack Automation Studio
Digipass Plug-In for IAS. IAS Plug-In IAS. Microsoft's Internet Authentication Service. Installation Guide
Digipass Plug-In for IAS IAS Plug-In IAS Microsoft's Internet Authentication Service Installation Guide Disclaimer of Warranties and Limitations of Liabilities Disclaimer of Warranties and Limitations
Installing and Configuring Remote Desktop Connection Client for Mac
Installing and Configuring Remote Desktop Connection Client for Mac Microsoft Remote Desktop Connection Client for Mac comes bundled with Microsoft Office 2011 for Mac, but you can also get it for free
Active Directory 2008 Operations
The Essentials Series Active Directory 2008 Operations sponsored by by Greg Shields Understanding Active Directory Recovery in Windows Server 2008...1 Backing Up AD...1 Full Server Recovery of a Domain
Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Question Number (ID) : 1 (jaamsp_mngnwi-025) Lisa would like to configure five of her 15 Web servers, which are running Microsoft Windows Server 2003, Web Edition, to always receive specific IP addresses
Required Virtual Interface Maps to... mgmt0. virtual network = mgmt0 wan0. virtual network = wan0 mgmt1. network adapter not connected lan0
VXOA VIRTUAL APPLIANCES Microsoft Hyper-V Hypervisor Router Mode (Out-of-Path Deployment) 2013 Silver Peak Systems, Inc. Assumptions Windows 2008 server is installed and Hyper-V server is running. This
Installation instructions for MERLIN Dashboard
Installation instructions for MERLIN Dashboard Contents Installation Prerequisites:... 2 Procedure to manually backup and restore Views and Settings in AxOEE Manager... 3 For XP users go to:... 3 For Vista
MS 50292: Administering and Maintaining Windows 7
MS 50292: Administering and Maintaining Windows 7 Description: This five-day instructor-led course provides students with the knowledge and skills to successfully administer, maintain, and troubleshoot
Acronis Backup & Recovery 10 Server for Windows. Installation Guide
Acronis Backup & Recovery 10 Server for Windows Installation Guide Table of Contents 1. Installation of Acronis Backup & Recovery 10... 3 1.1. Acronis Backup & Recovery 10 components... 3 1.1.1. Agent
SCUP 2011 Installation and Configuration Guide
SCUP 2011 Installation and Configuration Guide Author: Kent Agerlund Create date: 09/06-2011 Change date: 14/06-201 Document version no.: 1.1 Written by Kent Agerlund, Coretech A/S Page 1 of 48 Document
Deploy two-tier hierarchy of PKI
Windows Server 2012 Deploy two-tier hierarchy of PKI Hands On Lab Type the Abstract This document contains instructions to deploy two-tier PKI hierarchy which an Offline Root Certification Authority and
Pcounter for Windows
Pcounter for Windows Pcounter Client and Printer Distribution Guide Copyright 2014 A.N.D. Technologies 4104 24 th Street #627 San Francisco, CA 94114 USA E-Mail: support@pcounter.com Web: http://www.pcounter.com
SafeGuard Enterprise Web Helpdesk. Product version: 6.1
SafeGuard Enterprise Web Helpdesk Product version: 6.1 Document date: February 2014 Contents 1 SafeGuard web-based Challenge/Response...3 2 Scope of Web Helpdesk...4 3 Installation...5 4 Allow Web Helpdesk
WINDOWS SERVER HACKS. HLuHB Darmstadt. O'REILLY 5 Beijing Cambridge Farnham Koln Paris Sebastopol Taipei Tokyo
WINDOWS SERVER HACKS HLuHB Darmstadt 15899417 O'REILLY 5 Beijing Cambridge Farnham Koln Paris Sebastopol Taipei Tokyo Contents Credits Foreword Preface vii xvii xix Chapter 1. General Administration 1
70-413: Designing and Implementing a Server Infrastructure
70-413: Designing and Implementing a Server Infrastructure Course Overview This course covers everything you need to know about designing and implementing a server infrastructure. Students will learn about
AT&T Global Network Client Domain Logon Guide. Version 9.6
Version 9.6 AT&T Global Network Client Domain Logon Guide 2015 AT&T Intellectual Property. All rights reserved. AT&T, the AT&T logo and all other AT&T marks contained herein are trademarks of AT&T Intellectual
BUILDER 3.0 Installation Guide with Microsoft SQL Server 2005 Express Edition January 2008
BUILDER 3.0 Installation Guide with Microsoft SQL Server 2005 Express Edition January 2008 BUILDER 3.0 1 Table of Contents Chapter 1: Installation Overview... 3 Introduction... 3 Minimum Requirements...
Introduction. This white paper provides technical information on how to approach these steps with Symantec Antivirus Corporate edition.
Introduction The process of updating virus definitions on workstations protected by Deep Freeze Enterprise involves three fundamental steps: 1. Rebooting the workstations into a Thawed state so the updates
Wireless Network Configuration Guide
CIT Table of Contents Introduction... 1 General Wireless Settings... 1 1. Windows XP Wireless Configuration... 2 2. Windows XP Intel Pro Wireless Tool... 7 3. Windows Vista Using the Windows Wireless Tools...