Enterprise Deployment for Windows: Difference between revisions
Line 12: | Line 12: | ||
=== Updates === | === Updates === | ||
The images shall be updated at least every 6 months. Latest update was done in ''' | The images shall be updated at least every 6 months. Latest update was done in '''August 2009'''. | ||
=== Licensing Restrictions === | === Licensing Restrictions === |
Revision as of 02:15, 18 August 2009
Due to the unique nature of SIAT Research, the deployment strategy for our Windows workstations is divided into 2 easy steps.
Introduction
The 2-step Process
An administrator would first begin the process with the installation DVD. No network connection is required in this step. If the workstation in question has a previous user (i.e. not new), the administrator should wipe the hard drive(s) clean to avoid any potential conflicts or privacy issues.
Once Windows is successfully installed, the administrator should update all device drivers, perform system-level setups, set appropriate local accounts and passwords, and join it to the RESEARCH domain.
With the workstation on the domain, the administrator should continue the second step, which involves installation of software (with installation scripts) that are stored on the file server.
The deployment image is for a clean installation of Microsoft Windows to a PC. The purpose of the image is to consolidate all the various required software (from different media) to one central source. This eliminates disc swapping and makes automated/unattended installation possible, thus minimizing installation time and human attention.
Updates
The images shall be updated at least every 6 months. Latest update was done in August 2009.
Licensing Restrictions
- The software mentioned on this page can only be installed on SFU assets (ones with SFU asset bar-code label).
- Administrators MUST verify the ownership of the workstations they are dealing with.
- Installation media (and file server access) should NEVER be lent out to any user under any circumstances.
- All concerns and exceptions to these practices should be directed to your supervisor or manager.
Windows XP DVD image
DVD contents
- Microsoft Windows XP Professional (32bit), VLK, SP3-integrated
- customized with nLite deployment tool for unattended installation
- injected with the drivers for:
- audio chips, from various manufacturers
- chipsets, from various manufacturers
- mass storage devices, from various manufacturers
- network interface cards/chips, from various manufacturers
- HP Color LaserJet 4600
- HP Color LaserJet 2820 All-In-One
- Lexmark T630
- Lexmark T640
- injected with utility applications such as:
- Microsoft DirectX Runtimes 9.0c (Mar-2009)
- Microsoft Windows XP post-SP3 hotfixes
- Microsoft .Net Framework 3.5 SP1
- Microsoft Windows Installer 4.5
- Microsoft Internet Explorer 8
- Microsoft Windows Live Messenger 2009
- Microsoft Windows Media Player 11
- Mozilla Firefox 3.0.11
- Filezilla Client 3.2.4
- Sun Java Development Kit (JDK) 6.14
- set in such a way that new account creation and built-in accounts (except the administrator account) are all disabled
- included tons of more goodies that only administrators get to know ;)
- Sassafras K2 Keyserver Client
- customized MSI package with pre-configured settings
- configured to unattended install
- Host DNS Name = research-keyserver.iat.sfu.ca
- More information on the Sassafras Client
- McAfee VirusScan Enterprise 8.0
- configured to unattended install via MS-DOS batch script
- configured to automatically restart computer when setup ends
- patched to version 16 (last, end-of-support version)
- updated with latest virus definitions using McAfee SDAT
- Nero 7 Essentials, Micro-Edition
- configured to unattended install via MS-DOS batch script
- Miscellaneous software utilities
- Common drivers
- ATI Catalyst 9.1
- nVidia 175.19 (for legacy cards like GeForce 3, GeForce 4, FX5x00, etc.)
- nVidia 182.08 (for new cards from GeForce 6 and newer)
- nVidia nForce 05.10 (for nForce2 motherboards)
- nVidia nForce 15.23 (for nForce4 motherboards)
- DirectX 9.0c (Mar-2009)
- named XPP386UI_SFU
- Windows XP, Professional, SP3, x86 (32-bit), Unattended Installation, for Simon Fraser University (SFU)
Windows 7 DVD image
This section will be updated as we migrate to Windows 7 (64bit). Stay tuned.
DVD contents
Final DVD not available yet.
Release Candidate DVD was obtained on May 5 2009. Beta testing will be done on a 64-bit platform.
Microsoft is anticipating that Windows 7 will be available to customers in time for the holiday shopping season.
Server-based Software Deployment
This section covers information about software on the file server. Updates will be available as they become available.
Adobe Acrobat 9 Reader
- configured such that the destination folder is C:\Adobe\
- configured such that the Reader is for viewing PDF (and Acrobat Professional for creating/editing)
- configured to unattended install via special shortcut
Adobe Creative Suite 3 Master Collection
- scripted to install everything
- configured such that the destination folder is C:\Adobe\
- configured to unattended install via special shortcut
- includes clean-up script in separate folder (MUST run this prior to the installation if a previous version of Adobe product was present)
- SSE2 (or better) processor is required for Premiere, Encore, and After Effects
Adobe Creative Suite 4 Master Collection
- scripted to install everything
- configured such that the destination folder is C:\Adobe\
- configured to unattended install via special shortcut
- includes clean-up script in separate folder (MUST run this prior to the installation if a previous version of Adobe product was present)
- SSE2 (or better) processor is required for Premiere, Encore, and After Effects
- Minimum 2GB of memory is required
Autodesk AutoCAD Architecture Suite 2009
- TBA
Autodesk Maya 2008
- manual installation only
Microsoft Office 2007 Enterprise Edition
- patched with service pack 2
- scripted to install everything except Outlook
- scripted to add registry values to modify the following settings:
- Windows Update - Points to Lancer
- LAN Manager Hash - Disable
- NumLock - Defaults to ON so users can use NumPad for numeric input
- Adobe Product Improvement Program - Disable
- configured to unattended install via special shortcut
Microsoft Visio 2007 Professional
- patched with service pack 2
- configured to unattended install via special shortcut
Microsoft Visual Studio 2008 Professional
- got disc, now working on integration of SP1 and MSDN updates
- TBD
Dassault Systemes SolidWorks 2008 Office Premium
- upgraded to SP5.0
- configured to unattended install via special shortcut
TechSmith Morae 3.1.0
- Manager - for viewing and analysing recorded data
- Recorder - for recording
- Observer - for viewing user remotely