Current location - Quotes Website - Personality signature - Detailed explanation of the strategy of enterprise deploying Windows7
Detailed explanation of the strategy of enterprise deploying Windows7
According to Wang Yinan, today, when deploying Windows7, enterprises mainly face three problems. On the one hand, the cost is too high, on the other hand, the security is low, and on the other hand, the system cannot be restored quickly. For example, the workload of system installation is large, the repeated workload and time of software installation are large, and it is difficult to unify the time; However, due to the differences in hardware standards and the diversity of software, image storage costs are high and image maintenance is difficult. Non-standard deployment has low security and it is difficult to install critical updates. ...

In order to solve these problems, Microsoft launched a unified deployment solution, established a perfect process under the guidance of MSF architecture, established a unified image based on WIM image, centralized deployment with MD T20 10 as the core of the architecture, and realized software standardization with unified management as the goal. Through such a unified deployment infrastructure, enterprises can improve deployment reliability through perfect deployment process, facilitate maintenance and storage through flexible mirror version control, reduce repetitive workload through contactless automatic deployment, reduce maintenance and management costs through software standardization, and finally achieve the purpose of improving user efficiency and ensuring data security.

On the deployment tool, Microsoft launched the Application Compatibility Factory (ACF) project. The program was initiated by Microsoft and implemented by Microsoft certified service partners. It aims to help Microsoft key customers comprehensively test the compatibility and stability of applications during the process of upgrading their operating systems to Windows 7. Through comprehensive testing and evaluation, the risks of application migration are determined, system-level faults are eliminated in time, and enterprises are assisted to prepare for business line applications during system platform migration.

In the process of deployment, Microsoft Map Toolkit can help enterprises to evaluate the current it architecture (hardware and software), with the aim of clarifying what technical assistance Microsoft can provide for enterprises. MAP developed from the early Vista hardware evaluation plan accelerator can help those enterprises that have deployed Vista and Office 2007 to evaluate the readiness of desktop computing architecture. It consists of a series of automation tools and instructions, which can accelerate the adoption of Microsoft technology in the stage of integration planning, server migration or desktop preparation.

In addition, Microsoft also provides a tool to help identify and manage the entire application-Act. The cost and time of solving program compatibility can be greatly reduced. User state transition tools can greatly simplify the migration process. Capture desktop configuration information, program settings, user accounts and files, and then easily transfer them to the new Windows system. You can use it to gradually delete and load migration settings.

MDT (Microsoft Deployment Toolkit) is a solution accelerator for operating system and application deployment. It integrates the tools and processes needed for desktop and server deployment into a common deployment console and guide set, which effectively saves deployment time, provides standard system images, and improves security and configuration management. The new features of version 20 10, such as flexible driver management, optimized user interface workflow and Windows PowerShell, can simplify deployment and make your work easier.

At the salon, Wang Yinan systematically introduced a series of tools launched by Microsoft in the help system deployment. During the follow-up Q&A session, Wang Yinan actively interacted with users of participating enterprises to help them solve problems in the actual deployment process.

Ten services that Win7 system must open

1. antivirus software service

2.DNS client

Official explanation: DNS Client Service (dnscache) caches the name of Domain Name System (DNS) and registers the complete computer name of the computer. If the service is stopped, DNS name resolution will continue. However, the query results of DNS names will not be cached, and the computer name will not be registered. If you stop this service, your computer will not be able to interpret DNS information and use domain names to log on to websites.

3. Network connection

Official explanation: Manage the objects in the network and dial-up connection folder, where you can view local area networks and remote connections.

If this service is stopped, you will not be able to configure the network, create network links and surf the Internet.

4. Plug and Play

Official explanation: It enables computers to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will cause system instability.

5. Print spooler system

Official explanation: Load the file into memory for later printing. Without it, you can't treasure other people's cards. This is a printing service.

6. Remote procedure call

Official explanation: RPCSS service is the service control manager of COM and DCOM servers. It performs object activation requests of COM and DCOM servers, object exporter parsing and distributed garbage collection. If this service is stopped or disabled, programs using COM or DCOM will not work properly. It is strongly recommended that you let the RPCSS service run. This is very important (that is, very important). If you ban him, your system won't start.

7. Workstation

Official explanation: Use SMB protocol to create and maintain the connection between client network and remote server. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. As the name implies, if you ban it, your computer will disappear into the intranet, not to mention playing Microsoft's network resources with medie.

8. Network Location Awareness (NLA)

Official explanation: Collect and store network configuration information, and notify the program when the information is modified. If this service is stopped, configuration information may not be available. If this service is disabled, all services that explicitly depend on it will fail to start.

This is a wireless network link, but banning it will cause many problems.

9.DHCP client

Official explanation: Register and update the IP address of this computer. If this service is stopped, computers will not be able to receive dynamic IP addresses and DNS updates. If this service is disabled, all services that explicitly depend on it will fail to start.

DHCP service is forbidden, you must set the IP manually.

10. Encryption service

Official explanation: it provides four kinds of management services: directory database service, which is used to confirm the signature of Windows files and allow the installation of new programs; Protected root service for adding and deleting certificates of trusted root certification authorities from this computer; Automatic root certificate update service, which is used to retrieve the root certificate from Windows Update and enable SSL. Key service, used to help register this computer to obtain a certificate. If this service is stopped, these management services will not work properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Banning this encryption service will lead to the decline of computer security index, unable to automatically update and unable to use ssl;;