Enterprise Deployment for Windows: Difference between revisions

From Research
Jump to navigation Jump to search
Wilsonl (talk | contribs)
Wilsonl (talk | contribs)
Line 60: Line 60:
* scripted to add registry values to modify the following settings:
* scripted to add registry values to modify the following settings:
** Windows Update - Points to Lancer
** Windows Update - Points to Lancer
** [[http://support.microsoft.com/kb/299656 LAN Manager Hash]] - Disable
** [http://support.microsoft.com/kb/299656 LAN Manager Hash] - Disable
** NumLock - Defaults to ON so users can use NumPad for numeric input  
** NumLock - Defaults to ON so users can use NumPad for numeric input  
** Adobe Product Improvement Program  - Disable
** Adobe Product Improvement Program  - Disable

Revision as of 02:26, 24 March 2009

Due to the unique nature of SIAT Research, the deployment strategy for our Windows workstations is divided into 2 easy steps.

Licensing Restrictions

  • The software mentioned on this page can only be installed on SFU assets (ones with SFU asset bar-code label).
  • Administrators MUST verify the ownership of the workstations they are dealing with.
  • Installation media (and file server access) should NEVER be lent out to any user under any circumstances.
  • All concerns and exceptions to these practices should be directed to your supervisor or manager.

The 2-step Process

An administrator would begin the process with the installation DVD. No network connection is required in this step. If the workstation in question has a previous user (i.e. not new), the administrator should wipe the hard drive(s) clean to avoid any potential conflicts or privacy issues.

Once Windows is successfully installed, the administrator should update all device drivers, perform system-level setups, set appropriate local accounts and passwords, and join it to the RESEARCH domain. With the workstation on the domain, the administrator should continue the second step, which involves installation of software (with installation scripts) that are stored on the file server.

The deployment image is for a clean installation of Microsoft Windows to a PC. The purpose of the image is to consolidate all the various required software (from different media) to one central source. This eliminates disc swapping and makes automated/unattended installation possible, thus minimizing installation time and human attention.

The images shall be updated at least every 6 months.

Windows XP DVD image

DVD contents

  • Microsoft Windows XP Professional (32bit), VLK, SP3-integrated
    • customized with nLite deployment tool for unattended installation
    • injected with printer (HP Color LaserJet 4600, Lexmark T630, Lexmark T640) drivers
    • injected with device (LAN and Mass Storage mostly) drivers for most of our various platforms
    • injected with post-SP3 hotfixes
    • set in such a way that new account creation and built-in accounts (except the administrator account) are all disabled
    • included tons of more goodies that only administrators get to know ;)
  • Sassafras K2 Keyserver Client
    • customized MSI package with pre-configured settings [in progress]
  • McAfee VirusScan Enterprise 8
    • Scripted install?
  • Miscellaneous software utilities
  • Latest graphics card drivers
    • ATI Catalyst 9.1 (for all ATI graphics cards)
    • nVidia 175.19 (for legacy cards like GeForce 3, GeForce 4, FX5x00, etc.)
    • nVidia 182.06 (for new cards from GeForce 6 and newer)
    • DirectX 9.0c (for games?)
  • more to add later

Windows 7 DVD image

This section will be updated as we migrate to Windows 7 (64bit). Stay tuned.

DVD contents

Final DVD not available yet.

Server-based Software Deployment

This section covers information about software on the file server. Updates will be available as they become available.

WARNING: Testing in progress. Please ask Wilson BEFORE using these installation files.

Microsoft Office 2007 Enterprise Edition

  • patched with service pack 1
  • scripted to install everything except Outlook
  • scripted to add registry values to modify the following settings:
    • Windows Update - Points to Lancer
    • LAN Manager Hash - Disable
    • NumLock - Defaults to ON so users can use NumPad for numeric input
    • Adobe Product Improvement Program - Disable
  • configured to unattended install via special shortcut

Adobe Creative Suite 3 Master Collection

  • scripted to install everything
  • configured such that the destination folder is C:\Adobe\
  • configured to unattended install via special shortcut
  • includes clean-up script in separate folder (MUST run this prior to the installation if a previous version of Adobe product was present)

Adobe Creative Suite 4 Master Collection

  • scripted to install everything
  • configured such that the destination folder is C:\Adobe\
  • configured to unattended install via special shortcut
  • includes clean-up script in separate folder (MUST run this prior to the installation if a previous version of Adobe product was present)

Adobe Acrobat 9 Reader

  • configured such that the destination folder is C:\Adobe\
  • configured such that the Reader is for viewing PDF (and Acrobat Professional for creating/editing)
  • TBD
  • TBD

Microsoft Visio 2008 Professional

  • TBD
  • TBD

Microsoft Visual Studio 2008 Professional

  • disc missing... :(
  • TBD

Dassault Systemes SolidWorks 200X???

  • TBD
  • TBD

TechSmith Morae 3.0.1

  • Manager + Recorder + Remote Viewer
  • Setup files missing