1 Windows 7 Manageability Corey Hynes President, Technical Lead HynesITe, Inc Music by DreamensionN 2 Windows Eventing Task Scheduler WS/MAN Network Diagnostics Memory Diagnostics Reliability Monitor Startup Repair Tool Removable Storage Control Power Management Windows Firewall Multiple Local GPOs ADMX Windows Vista Manageability Increased Automation to Reduce Costs Reduce Help Desk Calls and Keep Users Productive Flexible Administrative Control 3 Enterprise-scale Scripting Engine Scripting Group Policy Richer Support Tools Customized Troubleshooting Enhanced Group Policy Scenarios Group Policy Preferences Windows 7 Manageability Increased Automation to Reduce Costs Reduce Help Desk Calls and Keep Users Productive Flexible Administrative Control 4 Before Windows 7 Easier to Use Built-in graphical editor/debugger Easier to Extend Develop CMDLETs via PowerShell Able To Manage Across The Enterprise Remotable 1:1 (interactive) and 1:many PowerShell can respond when specific system events occur Windows 7 Enhancements Automate tasks easily with PowerShell Learn scripting easier with graphical interface Quickly configure settings or run tasks in real-time Customer Value Increase Automation PowerShell In-Box Windows Eventing integrated with Task Scheduler to provide automation based on events No built-in scripted automation Administrators needed to deploy PowerShell or use other complex scripting languages to automate common tasks 5 Windows PowerShell Make windows the easiest platform for IT pros to implement unpredicted scenarios with the right level of quality 6 State Of The Software Phenomenal rate of adoption Over 2.6 million downloads Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008 Adopted by Exchange, SQL Server, SCOM, SCVMM, and SCDPM CEC 2009 requirement Dozens of 3rd party tools, ISVs, and partners Strong community engagement, 27 PowerShell MVPs Shipped with Windows Server 2008 Mailbox Statistics Database Management Recipient Management An Example of Increased IT Productivity Exchange 2003 (VBScript) Exchange 2007 (PowerShell) 7 8 PowerShell V2 Themes GUI over PowerShell Command Line and GUI GUI teaches command line Standardizes access to managed elements Production Scripting Easy to use Safe to operate Easy to share and support Universal Code Execution Model In the foreground or background On one or more machines In restricted or unrestricted environments, using impersonation or supplied credentials Initiated by user input or by events Community Feedback Enhance the language Tweak the engine Add and enhance Cmdlets 9 Before Windows 7 Automate Group Policy Object Management Execute Logon, Logoff, Startup, Shutdown scripts Configuration of registry-based Group Policy settings PowerShell Scripting of Group Policy Frequent request for richer GP management Reduces time and risk of error Enables quicker and more efficient logon/startup scripting Customer Value Increase Automation Scripting Group Policy GPMC had API to automate management of Group Policy Objects, but difficult for non-developers to use 10 Windows 7 Builds On Windows Vista Tools To Resolve Issues Quicker Keep Users Productive Richer support tools Reliability Monitor Reliability data is exposed via APIs for remote collection Integration of Reliability Monitor and Problem Reports and Solutions to better correlate system changes and events Resource Monitor SysInternals Process Explorer features integrated into Resource Monitor for clearer identification of process issues Windows Recovery Environment Windows Recovery Environment (WinRE) easily deployed via normal setup on all PCs Restore to OEM or IT image without data loss or reimage with recent system backup System Restore Users will now be able to view the list of software changes before rolling their PC back Restore points will be available from system backups allowing users to roll-back to a point further back in time Problem Steps Recorder Users can record steps taken when an issue occurs, giving help desk screen shots and comments to help resolve issues 11 Windows Vista Introduced Troubleshooting To Address Common Issues In-box diagnostics based on PowerShell scripts for low-overhead, flexible development Authoring tools to create and package troubleshooting packages Additional troubleshooting packages available on-demand from MS for users to browse and search, managed by Group Policy, delivered via web services Run troubleshooting remotely Windows 7 Delivers a Comprehensive and Extensible Troubleshooting Platform Automatically run maintenance tasks Enable end-user to execute common troubleshooting tasks before calling Help Desk Provide Help Desk with tools to quickly resolve issues Diagnostics can grow in complexity as IT requires Customer Value Keep Users Productive Customized troubleshooting Network Connectivity Proactive Disk Protection Memory Analysis 12 How Troubleshooting Works Set computer and software configuration to the user desired state Determine what the user wants through the description (e.g., cannot hear sound) Compare each current configuration with a list of known good configurations for sound (e.g., not muted, audible volume settings, ) If there is a mismatch, set the current configuration to the good configuration Verify existing state has been set to good state User Or Application Initiated Users or application determines that a problem exists User or application initiates troubleshooting Troubleshooting verifies that components and component versions support user desired state Determine the components of interest through the description (e.g., cannot see glass) Detect hardware is present (e.g., right video card for desired visual effects) Detect drivers are present If a component is missing troubleshooting can Inform the user to get the right component Proceed to configuration if right components are present 13 Windows 7 Troubleshooting Implementation Windows Troubleshooting is done via Troubleshooting Packs Troubleshooting Packs are programs that Determine if the right components are available to get to the user desired state Set configuration to the user desired state Verify the configuration is in the desired state 14 Built-in Windows Troubleshooting Packs are discoverable User detects a problem and initiates troubleshooting to fix the problem Scheduled Troubleshooting detects a problem and informs the user to initiate troubleshooting An application detects a problem and prompts the user to initiate troubleshooting User browsing Help sees a troubleshooter link relevant to his problem and clicks on it Windows Troubleshooting is user or application initiated Windows 7 Troubleshooting User Features From Action Center Categories, Sorted list view, Search From Help Help topics link to troubleshooting packs A standard and consistent GUI wizard with pre-defined set of interactions 15 ManageableManageable Run interactively through command line Execute silently, through an answer file Local or Remote Multiple Execution Methods Can be published on a web site and downloaded to run Can be stored on a share and run Easily Deployed Windows 7 Troubleshooting Admin Features Signed by certificate that chains up to trusted root GP can limit which packs to run based on publisher 16 Windows Troubleshooting Platform 17 Data Protection Scenarios Configure OS, application options not GP-enabled Provides flexibility for IT and end-users Reduces costs of logon scripts New scenarios Power Management Scheduled tasks Group Policy Preferences Simplify Configuration Management Group Policy Enhancements Application Management Auditing Encryption of Removable Storage Devices 18 Desktop Auditing Simplified configuration results in lower TCO Demonstrate why a person has access to specific information Understand why a person has been denied access to specific information Track all changes made by specific people or groups Enhanced AuditingEnhanced Auditing Granular auditing complex to configure Auditing access and privilege use for a group of usersChallenges New XML based events Fine grained support for audit of administrative privilege Simplified filtering of noise to find the event youre looking for Tasks tied to events 19 Application Control Eliminate unwanted/unknown applications in your network Enforce application standardization within your organization Easily create and manage flexible rules using Group Policy AppLocker TM Users can install and run non-standard applications Even standard users can install some types of software Unauthorized applications may: Introduce malware Increase helpdesk calls Reduce user productivity Undermine compliance efforts 20 AppLocker TM Simple Rule Structure: Allow, Exception & Deny Publisher Rules Product Publisher, Name, Filename & Version Multiple Policies Executables, installers, scripts & DLLs Rule creation tools & wizard Audit only mode AppLocker TM Enterprise Legacy SRP Business & Enterprise 21 Policy Versus Preference 22 Remote Access for Mobile Workers Access Information Anywhere Same experience accessing corporate resources inside and outside the office Seamless connection increases productivity of mobile users Easy to service mobile PCs and distribute updates and polices DirectAccess TM Difficult for users to access corporate resources from outside the office Challenging for IT to manage, update, patch mobile PCs while disconnected from company network 23 Enterprise-scale Scripting Engine Scripting Group Policy Richer Support Tools Customized Troubleshooting Enhanced Group Policy Scenarios Group Policy Preferences Windows 7 Manageability Increased Automation to Reduce Costs Reduce Help Desk Calls and Keep Users Productive Flexible Administrative Control 24 DirectAccess and Troubleshooting 25 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.