Win7 Features, Issues and Migration - Overview

8/7/2019 Win7 Features, Issues and Migration - Overview

1/48

Migration3/12/2011 Tata Consultancy Services | Internal 1


2/48

Introductions

Overview of Windows 7 features

Migration Steps Available Tools and Resources

Questions

2

Agenda


3/48

WINDOWS 7 FEATURES

Why would you move to Windows 7?


4/48

Works The Way You WantWorks The Way You Want Get More DoneGet More Done Safeguard Your WorkSafeguard Your Work

FundamentalsFaster and more reliable

CompatibilityWindows XP Mode*

NetworkingHomeGroup

Domain Join and Group

Policy ControlTroubleshooting

Action Center

Problem Steps Recorder

Ease of Use andProductivity

Windows Desktop Search

Enhanced Taskbar

Snap, Peek, Shake

Libraries

IE8 Accelerators

MobilityLocation-Aware Printing

Mobility Center with

Presentation Settings

Remote Desktop Host

Offline Files

SecurityStreamlined UACIE8 Malware and

Phishing Protection,

SmartScreen Filter

Windows Defender

BackupAdvanced Backup

Restore Previous FileVersions

Encrypting File System

Windows 7 Professional offers enhancements over

previous versions


5/48

Make End UsersMake End UsersProductive AnywhereProductive Anywhere

ImproveImproveSecurity andSecurity and

ControlControl

Streamline PCStreamline PCManagementManagement

Windows 7 Enterprise builds on Professional

Performance | Reliability | CompatibilityPerformance | Reliability | Compatibility


6/48

BranchCachecan help organizations better manage

network bandwidth

Working in concert with Windows Server 2008 R2, BranchCache will save

network bandwidth and allow users to be more productive

One user will download a network delivered file (e.g. PowerPoint

presentation)

Subsequent user access to these same files will be pulled from the localcache (local server or client machines), eliminating download times

Access rights to the file are controlled by Active Directory and referenced

throughout the process

Transparent to user


7/48

Direct Accessprovides userstransparentaccessto internal

networkresourceswhenevertheyareconnectedto the Internet

Provides users transparent access to internal networkresources whenever they are connected to the Internet

Enables IT professionals to manage remote computers

outside of the office

Establishes a bi-directional connection that enables

the client computer to remain current with company

policies and to receive software updates

Does not require a VPN connection

Supports multifactor authentication methods

Configurable to restrict which servers, users, and

individual applications are accessible


8/48

BitLocker offers some verycompelling functionality

BitLocker drive encryption functionality in Windows 7 delivers an

improved experience for IT professionals and end users, including

The ability to right-click on a drive to enable BitLocker protection

Automatic creation of the required hidden boot partition

Improved key management

Windows 7 also introduces BitLocker To Go

Provides data protection for removable storage devices such as USB

flash drives

BitLocker To Go gives IT professionals better control over how

removable storage devices can be used

For example, IT Professionals can require data protection for writing to

any removable storage device while allowing unprotected storage

devices to be used in a read-only mode.


9/48

AppLocker provides organizationswithawayto better

manageapplications

AppLocker enforces application controls

A flexible, easy to administer mechanism that allows IT professionals to

specify what is allowed to run in the desktop infrastructure

Gives users the ability to run applications, installation programs and

scripts that they require to be productive

IT professionals can enforce application standardization within their

organization while providing improved security, as well as operational and

compliance benefits


10/48

Problem Steps Recorder allowsend usersandhelpdeskresourcesto

graphicallydisplayproblemsandresolutionsinto an HTML file

Enables users to record their interactions with an application and provide

a detailed screen-by-screen view with accompanying information

This same functionality can be used by the Help Desk to show a user how

to resolve a problem

This technology provides many benefits: Reduces Help Desk time troubleshooting

Increases end user satisfaction

User productivity can be restored faster

Problem Steps Recorder.zip


11/48

The service should be running only if it

has something to do

Network-related service without

connectivity

USB-related service without USBdevices

File transfer service with firewall port

closed

Trigger-start services are started when

needed

Responsible for stopping when idle ordone

Trigger Startservicesimprovesperformanceinstead of

wastingresources


12/48

12

Security messagesare morecustomizableto reduceannoying

permissionrequests

User Account Control (UAC) was introduced in Windows Vista

In Windows 7, the number of operating system applications and tasks that

require elevation is reduced

Standard users can do more than before and will see fewer elevation

prompts


13/48

13

User AccessControlnotificationisnowcustomizable


14/48

WhatWhat is Compatibility Issue ?is Compatibility Issue ?

Before you deploy Windows 7, you should understand how

some applications may break on the new OS. Then youll beprepared to choose the best solution to fix your broken

application


15/48

User Access Control

Windows Resource Protection

Internet Explorer Protected Mode

OS and IE Versioning

New Folder Locations

Session 0 Isolation

3/12/2011 Tata Consultancy Services | Internal 15

Mostcommoncompatibilityissues


16/48

All interactive users, including members of the Administrators group, run

as standard users.

User Account Control (UAC) is the mechanism through which users can

elevate applications to full administrator privileges.

Because of UAC, applications that require administrator rights or check foradministrator privileges behave differently in Windows 7, even when run

by a user as administrator


USER ACCESS CONTROL


17/48



18/48



19/48



20/48

Windows Resource Protection (WRP) is designed to protect the system in

a read-only state to increase system stability, predictability, and reliability.

This will affect specific files, folders, and registry keys.

Updates to protected resources are restricted to the operating-system

trusted installers (Trusted Installer group), such as Windows Servicing. This helps to protect features and applications that ship with the

operating system from any impact of other applications and

administrators.

This impact can be an issue for custom installations not detected as set up

by Windows 7 when applications try to replace WRP files and registrysettings and check for specific versions and values.


WINDOWS RESOURCE PROTECTION


21/48



22/48

Windows Internet Explorer 8 processes run in IEPM with greatly restricted

privileges to help protect users from attack.

Internet Explorer Protected Mode (IEPM) significantly reduces the ability

of an attack to write, alter, or destroy data on the users computer, or to

install malicious code. This could affect ActiveX controls and other script code that try to modify

higher integrity-level objects.


INTERNET EXPLORER PROTECTED MODE


23/48



24/48



25/48

Many applications check the version of the operating system and behave

differently or fail to run when an unexpected version number is detected.

You can resolve this issue by setting appropriate compatibility modes or

applying versioning shims (application-compatibility fixes).


OS AND IE VERSIONING


26/48

User folders, My Documents folders, and folders with localization have

changed since Windows XP.

Applications with hard-coded paths may fail.

You can mitigate this by using directory junctions or by replacing hard-

coded paths with appropriate API calls to get folder locations


NEW FOLDER LOCATIONS


27/48

In earlier versions of the Windows operating system, services andapplications ran in the same session as the first user who logs on to theconsole (Session 0).

To help protect against malicious agents in Windows 7, Session 0 has beenisolated from other sessions.

This could impact services that communicate with applications usingwindow messages.


SESSION 0 ISOLATION


28/48


XP Mode


29/48


IN WINDOWS 7


30/48



31/48



32/48



33/48

MIGRATION STEPS

Where to begin?

33


34/48

Migrationshould followstandardproject management

practices

Phase 1 Discovery

Review where you are and where youre going

Phase 2 Design

Build your image, application, and deployment processes

Phase 3 Test

Ensure application and hardware compatibility and validate deployment

procedures

Phase 4 Deploy

Look for automation options to keep costs down

Train your users and your support resources

Phase 5 Project closure

Optimize environment and document standard operating procedures


35/48

Phase 1 Discovery

Inventory your hardware environment

Inventory your applications

Research where users keep their data

Review your images and image processes to understand variables

Review Windows 7 features and decide on version

Research additional tools (SCCM, AIT, etc.)

35

The firststepinplanningis finding outwhereyou are

andwhereyouregoing


36/48

Phase 2 Design

Define what hardware youll need to run Windows 7

Standardize business applications and versions

Define how data will be handled

Create Windows Images

Develop deployment processes to automate as much as possible

Develop initial deployment schedule

Design any management tools youll be using

36

When you designyour migration,look beyondthe

projectto optimizesteadystate efficiency


37/48

Phase 3 Test

Application compatibility

Hardware sufficiency

Deployment processes

Validate help desk knowledge

Network bandwidth

Develop alternate solutions as necessary

37

Finding aproblem duringtesting vs. findingaproblem

inproductionisinfinitelylessexpensive


38/48

ApplicationCompatibilityisgreatlyenhancedin

Windows 7

Windows makes every effort!

Thousands of applications have compatibility shims applied by the

system

Even more applications are thoroughly tested

Windows 7 (32-bit) can still run 16-bit MS-DOS programs

Almost 25 years later!

Most applications work just fine on new Windows versions

Some dont, so youll need to find these and come up with solutions

Windows XP Mode eases migration significantly

Virtual instance of Microsoft Windows XP to allow XP-dependent

applications a safe place to run within Windows 7


39/48


Step 1- Inventorycollection/Testing


40/48


Step 2- Remediatingthe failedapplications


41/48

MAKING THE APPLICATIONS WORK

File system\Registry setting changes

Post installation registry or INI file tweaks based on user location

Supporting drivers, printers, desktop shortcuts, etc..

Here comes the need for Standard User Analyzer from ACT.



42/48


Step 3- Alternativesolutions forapplicationthat

cannot beremediated


43/48

Automatingdeploymentkeepscostsdownandreduces

humanerror factor

Phase 4 Deploy

Look to use automated tools

Build a SINGLE image with Operating System only and layer

applications on top

Standardize deployment processes and tools for use beyond theproject

Meaningful and timely communications to your end users will improve

project success


44/48

TOOLS AND RESOURCES

To do the job right, you need the right tool


45/48

Inventory & Assessment

Microsoft Assessment and Planning Toolkit (free)

Application Compatibility Toolkit (free)

System Center Configuration Manager and System Center Essentials

Asset Inventory Service

Automated Installation Toolkit (AIK)

Windows System Image Manager

Deployment Image Servicing and Management

Windows Pre-installation Environment User State Migration Tool

45

Manytoolsareavailableto automatedeployment-

relatedtasks


46/48

Microsoft Deployment Toolkit (MDT) This tool helps you create images andautomate the OS and application installations, data migration, and desktop

configuration process.

Windows Deployment Services (WDS) is a technology from Microsoft for

network-based installation of Windows operating systems. It is the successorto Remote Installation Services. WDS is intended to be used for remotely

deploying Windows 7

Microsoft System Center (SCCM 2007) This is a family of products for large

organizations that provides end-to-end deployment and managementsupport.

Other MethodsOther Methods


47/48

QUERIES


48/48

Date post:	08-Apr-2018
Category:	Documents
Upload:	basheerk80
View:	222 times
Download:	0 times