Windows to Go: Better (and easier!) in the RTM!

A couple of months ago I posted an article on Windows To Go (Windows To Go: This is going to be a game changer!) outlining the benefits and use cases for Windows to Go, as well as the steps to build your WTG key.  In the RTM release of Windows 8 it has gotten easier to build… no command line required!  Here’s what you do:

  1. SNAGHTML7498dFrom the Start screen type Windows to Go.  Make sure the context is set to Settings.
  2. Click on Windows to Go.
  3. Insert the USB 3.0 key that you will use for Windows to Go.  It should appear in the Create a Windows To Go workspace screen.  Select it and click Next.
  4. On the next screen you are asked to point to a Windows 8 image.  If you are using an ISO image rather than physical media make sure you mount it in Windows, and then navigate to the proper location.  Click Next.
  5. On the next screen you are asked if you want to set a BitLocker password.  Because it is assumed you will be using the Windows To Go key on multiple computers it used the same password technology as BitLocker to Go, rather than tying it to a TPM chip.  You can either check the option to Use BitLocker with my Windows To Go workspace, or click Skip.

image

The next screen is the Ready to create your Windows To Go workspace screen.  When you click Create Windows will start building your key.  Depending on the speed of your key and your USB ports (USB 3.0 is highly recommended, but not necessarily available) it can take between five and twenty minutes.  Be patient, when the progress bar is complete, you will have your very own Windows To Go key ready to go!

It really is easy… and when you are done you will be able to take all of your applications, data, and preferences with you to any computer you use… even older Windows 7 (or even Windows XP!) systems!

Remember that I mentioned that one of the advantages to using Windows To Go is the ability to use unsecured computers safely.  For that reason, when you boot into your Windows To Go key the local hard drives will be off-line.  Likewise, if you insert your Windows To Go key into a computer running another installation of Windows, your USB key will be off-line.

I said it before and I’ll say it again; Windows To Go is a real game changer.  It is one of my favourite features of Windows 8, and one that I expect will have a lot of corporations looking at the new operating system, especially for road warriors, remote workers, and other employees who need to work away from the office.

By the way, remember that you may still need to install hardware drivers for different computer systems, the way you do on traditional Windows installations.  If you are planning on using the WTG key on multiple systems you might need to plan for that.  Recently I did a demonstration of the Windows To Go technology at HP Canada, and had to download the driver for their 42” touch screen.  It was worth it though… Windows 8 on a huge touch screen ROCKS!

When your Windows To Go key is completed you will be prompted to either save and reboot, or reboot later.  If you are building an individual key then you may want to reboot in order to install device drivers.

SNAGHTML8c8374

For Bonus Points: Using the Microsoft Deployment Toolkit you can build your own image of Windows 8 which will include your applications, drivers, and domain settings.  If you are building Windows To Go keys for your organization this might be a better alternative!

Fair Winds and Following Seas…

For the last seven years I have been in awe of Michael Niehaus and the work that he has done on Microsoft Deployment Toolkit (nee Business Desktop Deployment).  When I met him five years ago I was in awe, and am glad to have had the opportunity to get to know him over the past few years.

Michael announced on his blog yesterday that he will be leaving the MDT team to join the Windows organization as a product marketing manager for enterprise deployment. (See post http://blogs.technet.com/b/mniehaus/archive/2012/08/02/one-journey-ends-another-begins.aspx)

I am sad that Michael is leaving the team, and wish him luck in his new role (where I expect I will still be able to work with him occasionally).  At the same time I want to wish him luck in his new role.  He is one of the good guys at Microsoft.

There was a time when my impression of Microsoft Deployment had two faces: Tim Mintner and Michael.  Tim left a couple of years ago, and then there was Michael.  And now there is a void.

Good luck to you Michael… I look forward to hearing all about the great new endeavours you will be working on… and I am glad you will still be blogging!

Microsoft Deployment Toolkit 2012 Released!

Today at MMS Microsoft released MDT 2012. MDT 2012 is the newest version of Microsoft Deployment Toolkit, a Solution Accelerator for operating system and application deployment. MDT 2012 supports deployment of Windows 7, Office 2010 and 365, and Windows Server 2008 R2 in addition to deployment of Windows Vista, Windows Server 2008, Windows Server 2003, and Windows XP. Once upon a time we called it BDD (Business Desktop Deployment).  To download it click on this link: http://www.microsoft.com/download/en/details.aspx?id=25175&WT.mc_id=rss_windows_allproducts

End of Days for Windows XP.

Quite a number of people have asked me why I continue to tweet the number of days until Microsoft ends support for one of it’s most successful operating systems ever, Windows XP.  Especially knowing that we seem to be a long way off – today is Friday August 12, 2011 and we are 969 days away from that day, nearly three years as someone recently pointed out.

The truth is that if you have one or two or even ten computers under your responsibility then planning and implementing the deployment plan of a new operating system is not that difficult or time consuming.  However if you have hundreds or thousands of them – numbers not uncommon even among small business IT consultants who service several clients, let alone IT Pros managing desktops for MORGs, LORGs, and Enterprises – then it is something that takes a great degree of forethought and planning.  Issues such as application compatibility, hardware lifecycles, and licenses must be determined, managed, and accounted for. 

How many companies are out there who don’t actually know what they have?  I often ask at my seminars what reasons people have for not having moved to Windows 7 yet, and among the most common (along with cost and application compatibility) is that it is daunting.  The thought of what people need to consider for such a project can be overwhelming if you don’t know what you have, because frankly how can you know where to start?

I used to work for a man named Jacob Haimovici who always said that if you cannot measure it, you cannot manage it.  It is absolutely true, especially in the world of IT where so often you cannot touch your assets, and the assets you can touch may contain any number of disparate components (hardware). 

The Microsoft Assessment and Planning Toolkit is a free tool from the Microsoft Solution Accelerators team is your first step to having an easier life as an IT Pro.  It is an agentless inventory, assessment, and reporting tool that can securely assess IT environments for various platform migrations—including Windows 7, Windows Server 2008 R2, and even virtualization with Hyper-V.  It inventories your environment including hardware and software, and lets you know what you have.  It creates spreadsheets for you of all of your assets, and lets you know what components are ready for Windows 7, which need mitigations, and which will need upgrading or replacing. 

I ran the MAP tool on the network at Meadowgreen Academy in Mississauga, Ontario before I embarked upon my migration plan, and determined quickly that none of their video cards supported Aero Glass; also a number of the machines did not have enough memory.  These were easily mitigated with a purchase order, and the school administrator was pleased that I discovered all of this up front, and did not wait until it was too late and they had to decide with a proverbial gun to their heads.

The MAP toolkit will also prepare the proposal documents with graphs and charts that speak the language of CxOs, which so many IT Pros cannot do.  Even those who do to a man hate preparing reports and proposals, so the MAP toolkit can be a real godsend.

I was golfing with a client in California a year ago and he told me he had to do a network inventory that afternoon for a new client.  When I asked him what tools he used he told me ‘a pen and paper.’  After I told him about MAP, he told me that before he took me to see the client he needed to run it by the boss.  The boss wanted to see it in action, so I pulled out my netbook (that’s all it takes – fully contained on a 1 GB netbook!), plugged it into their network.  Once they supplied me with the credentials the tool took a few minutes to run and generate the reports.  They were astounded to see the cost savings they could realize by virtualizing their servers!  When we looked at the count of client computers they told me I was off by five… until we determined that the sales team were at an off-site… with their laptops.

Of course, you may need more, and if you do, there are plenty of courses available to help you with your skills, including the highly popular ‘Updating Skills for Windows 7’ by Raymond Comvalius and myself, published by MVP Press.  There are certifications for Windows 7 as well as for Windows deployment, and if you look up the exam 70-681 you will see what the prerequisites are to become an MCTS: Windows 7 Deployment.  If courses aren’t right for you, check out books like Mastering Windows 7 Deployment by Aidan Finn, Darril Gibson and Kenneth van Surksum, which covers everything you will need, and more!

If you are the type to just hack away and figure it out, Microsoft has a whole plethora of free and simple tools that will help you with your deployment plan, including MDT, WDS, WAIK, SCCM, App-V, ACT, and more.  As we say, you can’t spell Deployment without them!  Believe me, once you take the first step, deployment is not as daunting as it might seem now.

The Wonder that is TechEd

The quiet of the Exhibitor Hall is disturbed by the sounds of preparation.  To my left there is a crew frantically working to fix something with a carpet.  There is some hammering, more yammering, and the sounds of carpet tape being unfurled. To my right there are two security agents talking, but they are too far off for me to know what about.  Somewhere in the distance the beeping of a crane reminds us that conference centres are a weird mix of indoors and out. Slowly… VERY slowly, the vendors and the booth bunnies are filtering in, mostly sitting around, many checking e-mail, others chatting quietly.

Day Two of TechEd North America is underway upstairs, with sessions and breakouts and hands-on-labs.  I rather suspect that many of the people attending those sessions are moderately hung-over, which would be par for the course for any major IT convention.

Thirteen hours ago, midway through my last shift in the Microsoft Springboard Booth, there were thousands of people milling about.  A great mixture of people wanting to learn, wanting to teach. A lot of people were out to collect swag for sure – at our booth they would range from asking for a box, reaching in and taking a box, to reaching in and trying to take a handful of boxes.  A few actually asked what was in the boxes, but to many that mattered less than getting something for free.  Some people, when they asked, would get a spun yarn about the contents… it breaks up the monotony. 

In truth, the best thing that we are giving away at the Springboard booth does not come in a box.  It doesn’t even come on the lanyards in the form of passes to the hottest party at TechEd (the Springboard Community Event!) but rather a link… www.microsoft.com/springboard, which is the link to the Springboard site, the best place for the IT Pro to learn about all things related to Windows 7, Office 2010, Internet Explorer 9, Desktop Deployment, Application Compatibility, and the Optimized Desktop.  It has articles, KBs, forums, and blogs.  Whether you are just now thinking about transitioning to Windows 7 and you need help planning your deployment, or if your entire org is on Windows 7 and you have questions about support, it’s there.

Of course TechEd is much bigger than our booth… the Microsoft pavilion is the center point, but if you look to the left and right (as well as the front and back!) you will see vendor booths, community booths, and more.  HP is here in full force, as is EMC… I count at least three CPLSes represented as well as several on-line and video learning companies – companies that sell practice exams and other exam-prep material.  There are vendors demoing their hardware, others selling software.  Of course the new trend is people selling cloud-based solutions, which until recently was geek-speak for vapourware, but now is a very real and viable solution, and critical in this day and age.

There is an entire section of the Exhibitor’s Floor dedicated to community… the MCT Lounge, the MVP Lounge… Blogger’s Row, Microsoft Learning, GITCA and other User Group services.  There is a stage where I saw Richard Campbell interviewing Mark Minasi yesterday, and of course the Microsoft Company Store, your one-stop shop for Microsoft-branded crap, but also a 20% discount off all books which ROCKS!

Upstairs there is a section devoted to exam-crams, as well as an entire exam center where I know of several people who have taken my advice to GET CERTIFIED!  One friend, I hope, will be taking his FIRST EVER certification exam exam today or tomorrow… and I will be there to be the first to congratulate him and welcome him to the MCP fold.

What are you looking for? If it has to do with IT then it is here in Atlanta, at Microsoft TechEd 2011 North America!

Get on the Bus!

For the third year in a row the Springboard Bus Tour will hit the road leading up to TechEd.  If you have never met the bus you are missing out, because it delivers expert advice, great learning, and huge career benefits to IT Pros.  It delivers answers to questions you may have been having about desktop deployment, virtualization, managing consumer-devices in the office, cloud solutions such as Intune and Office 365, Application Compatibility, and much more! MSW-Tour-CityBanners

This year I am very excited, because my city (my adopted city, really…) has been chosen as the launching point!  That’s right, on May 2nd we will be taking over the MaRS Centre, South Tower at 101 College Street in downtown Toronto, CANADA!  (Yes, I know there’s a typo on the registration page… we’re fixing it!

So if you live in the Golden Horseshoe – or really anywhere from London to Kingston, Buffalo to Orillia, come join us for a great day of Windows 7, Office, MDOP, and more!

REGISTER NOW and save your seat for this free day of technical demos, Q&A sessions, and real-world guidance from Microsoft experts. We’ll see you on the road… and make sure to come say hi to me, Sean, and the rest of the STEP MVPs!

Oh, and remember… if you are not in or around Toronto, the Springboard Series Tour Bus is making stops in Detroit, Chicago, Indianapolis, Dallas, and Columbus… so you still have a chance to catch up and learn!

MSW_Tour_AllupBanner

Creating a Multi-OS Deployment Point with MDT!

Hey folks,

I know for months you’ve been on me because the screen shots in my Multi-OS Deployment Share post were lost. Today I am glad to say that I have created a video of it for the DPE team, and am glad to share it with you here!

Remember, this video creates the deployment point only; in order to put it onto a USB key, you would follow the instructions in my post Creating a Bootable USB Key.

I created this demo using my trusty HP ProLiant server running Hyper-V, and as always relied on Camtasia Studio for recording the video. Thanks to HP and TechSmith for the help… couldn’t have done it without you! –M

The Student Has Become The Master!

Monday evening I attended the monthly user group meeting of the Wellington Waterloo IT Pro User Group (http://www.wwitpro.com/) in Kitchener, Ontario.  The topic for the evening was called Windows 7 Deployment as presented by Sean Kearney (yes, THE Sean Kearney, a.k.a. The Energized Tech, a.k.a. (the former) Friday Funny Guy!) from SWMI Consulting Group and www.powershell.ca.  The title of his presentation was ‘Busting the Myths: There is no simple way to upgrade from Windows XP to Windows 7.’  It was a great presentation… for a couple of reasons. 

In truth I know this presentation cold because I have presented it dozens of times… I brought it to Canada (it was originally a TechEd session done by Jay Ferron, Jeremy Chapman, and friends) for TechDays Canada, and have since presented it to dozens of audiences.  However to sit through it as presented by my colleague, who ‘learned deployment at my knee’ was great, to see not only that he really did get it, but also took my presentation, and truly made it his own.  It was great.

I have been working with Sean for a few years, and watching him evolve from the Friday Funny Guy into the Energized Tech has been great.  He truly has come a long way, to the point that I am willing to (and proud to!) have him represent my company, knowing that my reputation is at stake!

I met Sean about the same time that I met another good friend, Jacqueline Hutchinson.  At the time – early 2007 – I was visiting Toronto, and Jacqueline had recently taken over the president of WWITPro.  The group had been dropped in her lap, and she was doing her best to keep it going. Rick Claus asked me to spend a few hours with her and her team.  We sat down over Mongolian cuisine, and I gave them whatever wisdom and guidance I could.

Whatever challenges that user group leaders encounter (and there are plenty!) the greatest challenge to most groups traditionally has been what happens when the leader leaves.  Most groups are founded by people with strong personalities, and when they leave the void created has more often than not been the downfall of most groups that have tried.  To visit WWITPro, five years and three leaders later, and find it alive and well and thriving is really a testament to the power of community.

To be clear, I did not come to Waterloo to support Sean… he doesn’t need it; he knows his stuff, and does not need to be propped up.  I came to watch and enjoy (and deliver goodies and prizes from Microsoft and HP!), and to show my ongoing support for the IT Pro community in Canada.

I want to thank Sean for being such a huge community resource; he is a credit to his company, to the Microsoft MVP program, and to the Springboard Technical Experts Panel (STEP).  I also want to thank Terry Edwards, who stepped up and took over the group when it would have been just as easy to hope someone else would.  Being a user group leader may have its rewards, but it is also extremely taxing and demanding – and takes a huge chunk of time from their personal life.  Thanks Terry, and the rest of your team whose names I wish I knew to list here.

Oh… and thanks for the pizza!

Creating a Bootable USB Key

It seems that some of my articles got chopped during the move to WordPress.  Doh!  Here are the simple instructions to create a bootable USB key:

  1. Open a Command Prompt session with Administrator privileges.
  2. Run the Disk Partition utility (diskpart.exe)
  3. Type List Disk to see a list of drives on your computer.  Determine which is your USB key and select it. (Select Disk 2)
  4. Type Clean.
  5. Type Create Partition Primary.
  6. Type assign.
  7. Format the disk… I usually suggest using Windows Explorer using the Quick Format option.
  8. (back in DiskPart) type Active.
  9. Exit DiskPart and the Command Prompt.

At this point your USB key is bootable, and you simply have to copy the proper files onto it.  I generally create a Media Deployment Point in Microsoft Deployment Toolkit, and then copy the contents of the proper directory (x:\Media\Content) onto the key.

Have fun!

Mitch Visits One Police Plaza

A couple of weeks ago one attendee was a detective with the NYPD, and he offered to take me behind the scenes at One Police Plaza so that I could take a look at a few of the units that use information technology (IT) for a lot more than just paperwork and filing.

I had read about Detective Travis Rapp and his involvement with the Real Time Crime Center, which was our first stop.  Respectful to the television portrayals of this and similar units, it really is something to see.  From here police from anywhere in the city can call in and get information and support tracking suspects.  Imagine a thirty foot monitor controlled by a pit of computers manned by detectives who are expert in tracking suspects, licenses, cell-phones, weapons… and more importantly how these all fit together – where a suspect’s car and cell-phone are the suspect is surely not far, and if he (or she) has a history of weapons and/or violence may be the difference between officers being injured or coming away from an arrest safe.  I couldn’t help but think that if I was a ‘perp’ I wouldn’t want these systems (and the people who make it work!) on my trail…

Next we stopped in Computer Crimes, and I got to meet some of the skilled detectives who handle computers confiscated during arrests or seizure.  For obvious reasons I won’t disclose any of the tools of the trade that they use (many of which are discussed in some of my classes but some are not!) but as a veteran of the forensic side of IT I am suitably impressed by the professionalism of the team.  It is easy to imagine a room filled with geeks with thick glasses and pocket protectors.  The first thing I noticed when entering the back room was that they were first and foremost cops… badges, side-arms, and all.  Later I asked Detective Rapp as we discussed some of the stars of the team (of which he is a veteran) if the NYPD trained most of them from scratch, or did they look for officers with a background in IT.  I couldn’t imagine having a high success rate trying to train beat-cops to do what these people do.  At the same time I want to reiterate that these are all professionals, and there are no ‘former criminal hackers’ in the group.  Sorry Kevin, you’ll have to look elsewhere for your next job J

The last stop we made (I’m skipping a few floors) was the garage where we took cruiser Unit 1956 out for a spin – not a ‘ride-along’ that some people would crave, but a spin of the Panasonic Toughbook laptop that each cruiser has, and the software and communications tools they use to give every mobile unit another advantage on the job, whether chasing down suspects or issuing traffic citations.

The new DataMaxx software package that each unit has revolutionized the mobile unit, and seeing it in action was interesting; however the part that most appealed to me was that Detective Rapp would be making a video, user manual, and PowerPoint deck to train officers in the tool.

I should mention that Mo, who is responsible for deploying these ToughBooks, has done a brilliant job of locking them down.  He uses Microsoft Deployment Toolkit to create, manage, and deploy the images, customizing them and locking them down – both in the CMOS (blocking USB and such) and in the image itself.  He knows that a locked-down user environment not only prevents users from installing software – by definition in a secure, well-managed infrastructure unsanctioned – but also prevents tampering; both of these result in a more stable environment over the long term. 

In order to create the training materials that were required we used one of my favorite must-have tools – TechSmith’s SnagIt.  Even though you can screen-shot individual app windows with Windows 7, the SnagIt tool adds incredible functionality – editing, resizing, adding effects, and much more – before sending the image directly to either Microsoft Word, PowerPoint, or an e-mail (either as an attachment or an embedded image).

For the document Detective Rapp was creating he needed the screen shots sent to Word, but would eventually be creating the PowerPoint deck as well.  SnagIt maintains the screenshots in memory so that you can reuse them over and over – after exporting them to Word we could then export several captures shots to different slides or, even better, to a build-slide with animation.  The images will be properly sized and positioned automatically, all thanks to SnagIt and without having to resize and adjust any of the images in PowerPoint (which is not difficult, only more work).

The next step of building the training material will likely be to record training videos of the system, for which Detective Rapp will likely rely on another TechSmith tool, Camtasia Studio.  Unfortunately that will happen after I have left, but I know that he will have no problems with it because I have used the tool before and you have heard me rave about how easy and powerful it is.

As I walked back to my hotel from 1PP I couldn’t help but think that when they talk about ‘New York’s Finest’ they are not only talking about the bravest… they have some of the finest IT forensics and cyber-crimes people, some fine Windows Deployment guys, and use some fine tools all around.  For security reasons I only mention two of them in this piece (Microsoft Deployment Toolkit and TechSmith SnagIt).  I felt safer knowing that if they had taken the time to make sure they used the right tools for their IT, they were probably using the right tools for feet-on-the-ground law enforcement as well. 

Stay safe out there guys… New York’s Finest indeed!

Troubleshooting MDT Scripts

I have a Windows 7 Deployment Point DVD that I created using the Microsoft Deployment Toolkit 2010 for a client, and it has been a godsend during the past ten days.  Because the client wants to make copies to send to their remote locations around the country, I spent a couple of hours scripting as much as I could so that the process would be as simple as possible for the end-users, and so that the corporate computers around the country would all meet my (their) guidelines.  I tested the deployment media on physical hardware and there were absolutely no problems.  Now all that was left was for me to create a document to go with it.  To do this, I created a virtual machine within my Hyper-V laptop so that I could use TechSmith’s SnagIt tool to capture my screen shots.

…and I started getting an error telling me that ‘Windows could not parse or process unattend answer file [C:\Windows\Panther\unattend.xml] for pass [specialize]. The answer file is invalid.’

image

ARGH!

What am I to do?

Why did it work on physical hardware, and is not working in the virtual machine?

What’s different?

During my Troubleshooting LiteTouch Deployment using MDT session at TechDays Canada I remind my audience that if they get an error they shouldn’t close down the system when they get an error… there is so much to be learned from the files that might simply disappear if they are on the RAMDrive.  I pressed <Shift-F10> and looked for the guilty file, and sure enough, under the Specialize Pass section there was the error… the ComputerName field was FAR too long!

When scripting the deployment point one of the rules I included was the following lines to script the computer name to be the same as the serial number:

SkipComputerName=YES
computername=%SerialNumber%

The serial number for the Vostro laptops that the company bought is an 8 character Asset Tag.  This works perfectly because the maximum computer name can be is 15 characters.  Unfortunately the serial number of my Hyper-V virtual machine was much longer – in this case the string read:

<ComputerName>4524-0809-8640-9363-4363-6582-37</ComputerName>

Because of that the deployment was failing. 32 characters!  Of course this is not going to be limited to virtual machines.  Some vendors have longer serial numbers than others.  If you created a deployment point that works fine with your HPs that you want to use to deploy Windows 7 on a white-box PC, you may encounter the same issue.  If you have many systems that you are going to encounter the problem on then you probably will want to go back and recreate your deployment point, whether that be a USB key or (as was the case here) the ISO file.  However if you have a one-off machine that is outside the norm – say, a lab PC that you use to test applications – then for those of you who are adventurous, the following will work, and will save you doing all of that:

  1. Restart the machine as you did previously, initiating the deployment.
  2. Go through all of your screens until you get the ‘Ready to Begin’ screen, and click Begin.  The Task Sequence will start, and will go through the first few tasks pretty quickly.  When the Installing Windows… window comes up, your screen should look like the screenshot below.  At this point the Unattend.xml file that the deployment uses will have been generated and copied to the C Drive, into two distinct locations.
  3. image
  4. Press F8 to open a command prompt.
  5. Navigate to the first file location (C:\$Windows.~BT\Sources\Panther).
  6. type notepad Unattend.xml.
  7. In the Notepad window search for the string <ComputerName>.
  8. Change the string between <ComputerName> and </ComputerName> to an acceptable name (fewer than 15 characters).
  9. Save the file and exit from Notepad.
  10. Navigate to the second file location (C:\MININT)
  11. Repeat steps 6-9
  12. Type exit.

(NOTE: Typing EXIT is crucial, as the open command prompt window will prevent the Windows Installation from rebooting the system.)

Now: In the event that you get an error that the deployment is suspended, you might have to wipe the disk first… use these steps only in a clean install scenario, because it will wipe any data on the drive!

  1. Restart the virtual machine from the DVD.
  2. When Windows PE comes up, press F8.  When the command prompt (will you people finally realize this is NOT DOS!!) comes up type diskpart to start the Disk Partition tool.
  3. Within the Disk Partition tool type list disk.
  4. Make sure you pick the disk that you are installing Windows on and type Select Disk # (where # is the number of the disk).
  5. Type CLEAN

As soon as the partition is wiped you can reboot the computer and restart your deployment.

I hope this helps… now go forth and deploy, and script-sin no more!

%d bloggers like this: