T4L – NSW DET SOET4L – NSW DET SOE

NSW DET SOENSW DET SOE

SOE was developed in open consultation with TAFE, Schools, Other personnel

Developed to provide single BASE image across DET Schools TAFE Admin

Consultation took place online in Term 4, 2004.

Ongoing consultation to improve SOE http://nsi.tafensw.edu.au/ictstandards/.

SOE was developed in open consultation with TAFE, Schools, Other personnel

Developed to provide single BASE image across DET Schools TAFE Admin

Consultation took place online in Term 4, 2004.

Ongoing consultation to improve SOE http://nsi.tafensw.edu.au/ictstandards/.

Why an SOE?Why an SOE?

Common environment Standard base image across

RegionReduce support requirementsConsistency across regionExisting solutions implemented

meeting school requirements.

Common environment Standard base image across

RegionReduce support requirementsConsistency across regionExisting solutions implemented

meeting school requirements.

What is in the SOE (Apple)What is in the SOE (Apple)

OS-X 10.3.8MS Office 2004Symantec

Antivirus 9.03Appleworks 6

OS-X 10.3.8MS Office 2004Symantec

Antivirus 9.03Appleworks 6

Acrobat 7 Worldbook 2004 iLife

GaragebandiMovieiPhotoiDVD.

Acrobat 7 Worldbook 2004 iLife

GaragebandiMovieiPhotoiDVD.

What is in the SOE (Win)What is in the SOE (Win)

MS Windows XP Service Pack 2MS Office 2003 + FrontPage 2003,

SP1MS Photo Story 3MS Encarta Reference Library

2005 (for K-6)Symantec Antivirus Corporate

Edition 9.0 (V10 in SOE 2.7).

MS Windows XP Service Pack 2MS Office 2003 + FrontPage 2003,

SP1MS Photo Story 3MS Encarta Reference Library

2005 (for K-6)Symantec Antivirus Corporate

Edition 9.0 (V10 in SOE 2.7).

What is in the SOE (Cont)What is in the SOE (Cont)

Acrobat Reader 7 Java RuntimeQuicktimeCD/DVD Authoring Software

Nero - (ASI)DVD Player (ASI- Power DVD)Recovery SystemWebservices SwitcherAll known security patches.

Acrobat Reader 7 Java RuntimeQuicktimeCD/DVD Authoring Software

Nero - (ASI)DVD Player (ASI- Power DVD)Recovery SystemWebservices SwitcherAll known security patches.

What else is on the HDDWhat else is on the HDD

C:\Detapps\SupportDrivers to support Vendor’s modelNovell Client & Zenworks Desktop

AgentSupport ScriptsAltiris ClientFirefox.

C:\Detapps\SupportDrivers to support Vendor’s modelNovell Client & Zenworks Desktop

AgentSupport ScriptsAltiris ClientFirefox.

SOE – SecuritySOE – Security

Service Pack 2 Installed + all security patches up to date of SOE build

SAV Definitions as of Build DateSUS and SAV set to get updates

from ITD by defaultSAV is “Lightly Managed”Can be changed to point to school

servers if local SUS/WUS/SAV server exists.

Service Pack 2 Installed + all security patches up to date of SOE build

SAV Definitions as of Build DateSUS and SAV set to get updates

from ITD by defaultSAV is “Lightly Managed”Can be changed to point to school

servers if local SUS/WUS/SAV server exists.

SOE – 1 Unit – HDDSOE – 1 Unit – HDD

3 PartitionsC: Sysvol 40 GbRecovery Partition (Hidden)

20 GbUnused Partition – for later use

20 GbCD/DVD drive mapped to z:.

3 PartitionsC: Sysvol 40 GbRecovery Partition (Hidden)

20 GbUnused Partition – for later use

20 GbCD/DVD drive mapped to z:.

SOE – 1.5 Unit – HDDSOE – 1.5 Unit – HDD

Drive 1 - 3 PartitionsC: Sysvol 40 GbRecovery Partition (Hidden)

20 GbUnused Partition – for later use

20 GbDrive 2 – 120 Gb

For video filesCD/DVD drive mapped to z:.

Drive 1 - 3 PartitionsC: Sysvol 40 GbRecovery Partition (Hidden)

20 GbUnused Partition – for later use

20 GbDrive 2 – 120 Gb

For video filesCD/DVD drive mapped to z:.

SOE – 1 Unit Laptop– HDDSOE – 1 Unit Laptop– HDD

1 PartitionNo Recovery system due to drive

space.CD/DVD drive mapped to z:.

1 PartitionNo Recovery system due to drive

space.CD/DVD drive mapped to z:.

Setting Up - 1st time or After restore to Original

Setting Up - 1st time or After restore to Original

Computers must be plugged into network when first turned on (or restored to Original)

Detects IP settings if DHCP presentIf no DHCP detected – prompts for

school codePrompts for Computer Name

SR<code><building><number>SR4488B012

Name must be < 15 Characters.

Computers must be plugged into network when first turned on (or restored to Original)

Detects IP settings if DHCP presentIf no DHCP detected – prompts for

school codePrompts for Computer Name

SR<code><building><number>SR4488B012

Name must be < 15 Characters.

Setting UpSetting Up

If script does not runDownload and run UpdatePC.exehttp://esdt.det.nsw.edu.au.

If script does not runDownload and run UpdatePC.exehttp://esdt.det.nsw.edu.au.

UpdatePC ScriptUpdatePC Script

Updates SAVSynchronises system time to DET

Time ServerApplies any updates to SOEBuilds recover menuCreates Student UserSets Administrator Password to

<Scode>local.

Updates SAVSynchronises system time to DET

Time ServerApplies any updates to SOEBuilds recover menuCreates Student UserSets Administrator Password to

<Scode>local.

Setting up (cont)Setting up (cont)

Join Windows Domain (If required) Install Novell Client + Zenworks (If

required) Install local licensed software Install and configure printers

Capture a current recovery image.

Join Windows Domain (If required) Install Novell Client + Zenworks (If

required) Install local licensed software Install and configure printers

Capture a current recovery image.

To Change the Boot Menu time

To Change the Boot Menu time

Original Rollout image Boot time menu set to 30 Seconds

Suggest time be changed to 5 Sec.

Original Rollout image Boot time menu set to 30 Seconds

Suggest time be changed to 5 Sec.

Recovery SystemRecovery System

Boot menu displays 2 optionsMicrosoft XP ProfessionalRebuild

RebuildQuick Restore from Current imageRestricted

Restore from Current, Previous, OriginalCreate new Current imageRun Ghost Console.

Boot menu displays 2 optionsMicrosoft XP ProfessionalRebuild

RebuildQuick Restore from Current imageRestricted

Restore from Current, Previous, OriginalCreate new Current imageRun Ghost Console.

Windows DomainsWindows Domains

If the PC has been joined to a Windows domain you must run the following registry patch BEFORE capturing an image.C:\DETapps\Support\Source\~scripts\dompassw.reg

By default, Windows automatically changes the password on the local computer account at regular intervals

When you restore an image it will have an 'old' domain computer account password and so the Windows domain will reject the computer ie. prevent the PC from rejoining the domain again

NB. This is the domain computer account and NOT a user account.

If the PC has been joined to a Windows domain you must run the following registry patch BEFORE capturing an image.C:\DETapps\Support\Source\~scripts\dompassw.reg

By default, Windows automatically changes the password on the local computer account at regular intervals

When you restore an image it will have an 'old' domain computer account password and so the Windows domain will reject the computer ie. prevent the PC from rejoining the domain again

NB. This is the domain computer account and NOT a user account.

Ghosting T4L ComputersGhosting T4L Computers

Can not boot from a floppy disk as previously.

Network drivers need to be added to recovery partitionASIRecoveryUpdate.exe

After image deployment, the rebuild menu may need fixing - recoveryfix.bat.

Can not boot from a floppy disk as previously.

Network drivers need to be added to recovery partitionASIRecoveryUpdate.exe

After image deployment, the rebuild menu may need fixing - recoveryfix.bat.

Preparing a Workstation for Ghosting

Preparing a Workstation for Ghosting

Start and commission WorkstationCreate a new local admin user –

BuildLogin as build Install all required softwareStart and configure all applicationsLogin as admin user (not build)Copy Build profile to default userSeal computer with sysprep OR use

NEWSID after restart.

Start and commission WorkstationCreate a new local admin user –

BuildLogin as build Install all required softwareStart and configure all applicationsLogin as admin user (not build)Copy Build profile to default userSeal computer with sysprep OR use

NEWSID after restart.

Ghosting WorkstationsGhosting Workstations

Restart computer and choose RebuildChoose restricted:ConsoleSelect MultcastStart Multicast server from

workstationTake imageDistribute imageRestart each computer

If sysprep was not used, use NEWSIDRun recoveryfix.bat

Restart computer and choose RebuildChoose restricted:ConsoleSelect MultcastStart Multicast server from

workstationTake imageDistribute imageRestart each computer

If sysprep was not used, use NEWSIDRun recoveryfix.bat

ProblemsProblems

Refer to ESDT site.FAQ

http://esdt.det.nsw.edu.au.

Refer to ESDT site.FAQ

http://esdt.det.nsw.edu.au.

Known IssuesKnown Issues

UpdatePC.exe needs to be run on all T4L PCs.Must be connected to Net

Site MisidentifiedDownload and run rerun.exe

Internet ProblemsDownload and run Webregfix.exe.

UpdatePC.exe needs to be run on all T4L PCs.Must be connected to Net

Site MisidentifiedDownload and run rerun.exe

Internet ProblemsDownload and run Webregfix.exe.