Enterprise Deployment for Windows

Due to the unique nature of SIAT Research, the deployment strategy for our Windows workstations is divided into 2 easy steps.

Introduction

The 2-step Process

An administrator would first begin the process with the installation DVD. No network connection is required in this step. If the workstation in question has a previous user (i.e. not new), the administrator should wipe the hard drive(s) clean to avoid any potential conflicts or privacy issues.

Once Windows is successfully installed, the administrator should update all device drivers, perform system-level setups, set appropriate local accounts and passwords, and join it to the RESEARCH domain.

With the workstation on the domain, the administrator should continue the second step, which involves installation of software (with installation scripts) that are stored on the file server.

The deployment image is for a clean installation of Microsoft Windows to a PC. The purpose of the image is to consolidate all the various required software (from different media) to one central source. This eliminates disc swapping and makes automated/unattended installation possible, thus minimizing installation time and human attention.

Updates

The images shall be updated at least every 6 months. Latest update was done in April 2009.

Licensing Restrictions

• The software mentioned on this page can only be installed on SFU assets (ones with SFU asset bar-code label).
• Administrators MUST verify the ownership of the workstations they are dealing with.
• Installation media (and file server access) should NEVER be lent out to any user under any circumstances.
• All concerns and exceptions to these practices should be directed to your supervisor or manager.

Windows XP DVD image

DVD contents

• Microsoft Windows XP Professional (32bit), VLK, SP3-integrated
  • customized with nLite deployment tool for unattended installation
  • injected with the drivers for:
    • audio chips, from various manufacturers
    • chipsets, from various manufacturers
    • mass storage devices, from various manufacturers
    • network interface cards/chips, from various manufacturers
    • HP Color LaserJet 4600
    • HP Color LaserJet 2820 All-In-One
    • Lexmark T630
    • Lexmark T640
  • injected with utility applications such as:
    • Microsoft DirectX Runtimes 9.0c (Mar-2009)
    • Microsoft Windows XP post-SP3 hotfixes
    • Microsoft .Net Framework 3.5 SP1
    • Microsoft Windows Installer 4.5
    • Microsoft Internet Explorer 8
    • Microsoft Windows Live Messenger 2009
    • Microsoft Windows Media Player 11
    • Mozilla Firefox 3.0.9
    • Filezilla Client 3.2.4
    • Sun Java Development Kit (JDK) 6.13
  • set in such a way that new account creation and built-in accounts (except the administrator account) are all disabled
  • included tons of more goodies that only administrators get to know ;)
• Sassafras K2 Keyserver Client
  • customized MSI package with pre-configured settings
  • configured to unattended install
• McAfee VirusScan Enterprise 8.0
  • configured to unattended install via MS-DOS batch script
  • configured to automatically restart computer when setup ends
  • patched to version 16 (last, end-of-support version)
  • updated with latest virus definitions using McAfee SDAT
• Nero 7 Essentials, Micro-Edition
  • configured to unattended install via MS-DOS batch script
• Miscellaneous software utilities
• Common drivers
  • ATI Catalyst 9.1
  • nVidia 175.19 (for legacy cards like GeForce 3, GeForce 4, FX5x00, etc.)
  • nVidia 182.08 (for new cards from GeForce 6 and newer)
  • nVidia nForce 05.10 (for nForce2 motherboards)
  • nVidia nForce 15.23 (for nForce4 motherboards)
  • DirectX 9.0c (Mar-2009)
• named XPP386UI_SFU
  • Windows XP, Professional, SP3, x86 (32-bit), Unattended Installation, for Simon Fraser University (SFU)

Windows 7 DVD image

This section will be updated as we migrate to Windows 7 (64bit). Stay tuned.

DVD contents

Final DVD not available yet. Release Candidate DVD will be available May 5 2009.

Server-based Software Deployment

This section covers information about software on the file server. Updates will be available as they become available.

Adobe Acrobat 9 Reader

• configured such that the destination folder is C:\Adobe\
• configured such that the Reader is for viewing PDF (and Acrobat Professional for creating/editing)
• configured to unattended install via special shortcut

Adobe Creative Suite 3 Master Collection

• scripted to install everything
• configured such that the destination folder is C:\Adobe\
• configured to unattended install via special shortcut
• includes clean-up script in separate folder (MUST run this prior to the installation if a previous version of Adobe product was present)

Adobe Creative Suite 4 Master Collection

• scripted to install everything
• configured such that the destination folder is C:\Adobe\
• configured to unattended install via special shortcut
• includes clean-up script in separate folder (MUST run this prior to the installation if a previous version of Adobe product was present)

Autodesk Maya 2008

• manual installation only

Microsoft Office 2007 Enterprise Edition

• patched with service pack 2
• scripted to install everything except Outlook
• scripted to add registry values to modify the following settings:
  • Windows Update - Points to Lancer
  • LAN Manager Hash - Disable
  • NumLock - Defaults to ON so users can use NumPad for numeric input
  • Adobe Product Improvement Program - Disable
• configured to unattended install via special shortcut

Microsoft Visio 2007 Professional

• configured to unattended install via special shortcut

Microsoft Visual Studio 2008 Professional

• got disc, now working on integration of SP1 and MSDN updates
• TBD

Dassault Systemes SolidWorks 2008 Office Premium

• upgraded to SP5.0
• configured to unattended install via special shortcut

TechSmith Morae 3.0.1

• Manager + Recorder + Remote Viewer
• Setup files missing