You are on page 1of 11

Managing HP WES7 Thin Clients using Microsoft System Center Configuration Manager 2007 and Embedded Device Manager

2011
Technical white paper

Table of contents Abstract .......................................................................................................................................2 Feature overview ..........................................................................................................................2 Configuration ...............................................................................................................................3 Server requirements...................................................................................................................3 Client requirements ...................................................................................................................3 Additional reading ....................................................................................................................3 Enhanced Thin Client Inventory functionality.....................................................................................4 Distributing software to a Thin Client or group of Thin Clients.............................................................4 Distributing Configuration Packages to a Thin Client or group of Thin Clients .......................................4 Imaging with SCCM 2007 ............................................................................................................5 Capturing an image ..................................................................................................................5 Deploying an image..................................................................................................................6 Appendix A .................................................................................................................................8 Installing Advanced SCCM Client and EDM Client........................................................................8 Client requirements ...................................................................................................................8 Firewall considerations ..............................................................................................................8 Registry considerations ..............................................................................................................8 Client installation ......................................................................................................................8 Appendix B .................................................................................................................................9 Enabling the Write Filter in a Deployment Task Sequence ..............................................................9 For more information...................................................................................................................11

Abstract
This document describes how to use the Microsoft System Center Configuration Manager 2007 (SCCM), along with Windows Embedded Device Manager 2011 (EDM), to manage HP Thin Clients running Microsoft Windows Embedded Standard 7 (WES7). This document covers the enhanced functionality provided to SCCM by Microsoft EDM. These enhancements include:

Enhanced Thin Client Inventory functionality Write Filter aware configuration deployment Write Filter aware software deployment Imaging

Feature overview
Feature Asset Intelligence SCCM gives organizations better control over their IT infrastructure and assets through asset intelligence technologies that provide continuous views of existing hardware and software assets, including who is using them, and where. Software Update Management SCCM Software Update Management simplifies the complex task of delivering and managing updates to IT systems across the enterprise. IT administrators can deliver updates of Microsoft products, third-party applications, custom inhouse line-of-business applications, hardware drivers, and system BIOS to a variety of devices. Desired Configuration Management With SCCM Desired Configuration Management, organizations can ensure that IT systems comply with desired configuration states to improve availability, security, and performance network-wide. Software Distribution SCCM Software Distribution simplifies the complex task of distributing applications and updates to desktops, servers, laptops, and mobile devices across enterprise networks. Operating System Deployment Microsoft System Center Configuration Manager 2007 Operating System Deployment is a highly flexible, automated solution that allows IT administrators to fully deploy and configure servers and desktops from any previous state, including bare-metal deployments. Limited (Requires manual manipulation of Write Filter) Yes SCCM Partial SCCM + EDM Full

Limited (Requires manual manipulation of WF)

Yes

Limited (Requires manual manipulation of WF)

Yes

Yes (PXE Initiated)

Yes (PXE Initiated and Task Sequence initiated)

Configuration
Server requirements
Windows Server 2008 R2 with Active Directory (AD), Dynamic Host Configuration Protocol (DHCP), Domain
Name System (DNS) and Windows Deployment Services (WDS)

Microsoft SCCM 2007 SP2 Microsoft SQL Server 2008 R2 SP1 Windows EDM 2011

Client requirements
HP t5740e, t5570e with WES7 image version 6.1.7601.226 (or later) SCCM / EDM Clients Preinstalled
For older images, review the information in Appendix A.

Additional reading
For more information about Microsoft System Center Configuration Manager 2007, click here. For more information about Microsoft Embedded Device Manager 2011, click here. For more information about HP T5570e Mainstream Thin Clients, click here.

Enhanced Thin Client Inventory functionality


EDM adds a number of Thin Client-specific inventory reports to SCCM 2007 that enable an administrator to more accurately account for Thin Client resources. They include the following:

All devices running Windows Embedded Devices not able to complete an image deployment Devices reporting password settings Devices reporting Proxy Settings Devices reporting PXE status Devices reporting VPN Settings Devices reporting WiFi Settings Devices retrying an image deployment Devices waiting for image deployments Devices with an image deployment in progress Devices with deployed configuration package settings Devices with Enhanced Write Filter and related settings Devices with FBWF path exclusion list settings Devices with File-Based Write Filter and related settings Devices with Internet Explorer settings Devices with successful completion of an image deployment Status of Specific Image Deployment
For more information regarding EDM enhanced inventory functionality, review the Device Inventory section of the Microsoft Windows Embedded Device Manager Administration Guide, located here.

Distributing software to a Thin Client or group of Thin Clients


Microsoft SCCM 2007, with the addition of EDM 2011, enables the deployment of write filter aware task sequences, including the installation of software packages. For detailed documentation regarding EDM Write Filter management capabilities, review the Microsoft EDM Write Filter support guide, located here.

Distributing Configuration Packages to a Thin Client or group of Thin Clients


In addition to software deployment, Embedded Device Manager also enables the deployment of write filter aware configuration packages. Configuration options include the following:

Internet Explorer Settings Password Settings RDP Connection Settings Registry Settings VPN Settings WiFi Settings

Imaging with SCCM 2007


Microsoft SCCM 2007 provides robust support for Windows 7based operating systems. Special considerations must be taken into account when working with write-filter enabled devices. Three main methods are available for deploying images through SCCM: Media initiated deployment (HP Thin State is recommended), Task Sequence initiated deployment, and PXE initiated deployment. For more information about these deployment methods , click here. Regardless of which method is chosen, the steps outlined below are common to all deployment methods. To capture and deploy an image to your HP WES7 Thin Client, follow the steps outlined below.
Deployment Method Media / Task Sequence initiated (Live imaging, without using PXE). WEDM is required on the server and client Actions needed

1. Create Task Sequence Capture Media 2. Capture Reference Image 3. Import Reference Image into SCCM 4. Create Task Sequence for Deployment 5. Advertise to collection 1. Create Task Sequence Capture Media 2. Capture Reference Image 3. Import Reference Image into SCCM 4. Create Task Sequence for Deployment 5. Advertise to collection

PXE initiated

Capturing an image
Create Capture Media Task Sequence 6. Navigate to System Center Configuration Manager > Site Database> Computer Management > Operating System Deployment. 7. Right click on Task Sequence and choose Create Task Sequence Media. 8. Select Capture media and click Next. 9. Select the desired Media type and click Next. 10. Select the appropriate Boot image and click Next. The boot image must include the NIC driver specific to the Thin Client model. 11. On the Summary screen, click Next. 12. The wizard begins to create the capture media or ISO. 13. Click Close when the wizard has completed. 14. Burn the ISO on media. Capture WES 7 image from reference system (Local access to client is required) 1. Un-join the reference system from the domain, if necessary.

Note: The Administrator password must not be set.

2. Disable EWF and reboot. 3. Log on as Administrator and Stop EDM Write Filter Services using the Windows Services MSC. 4. Insert Task Sequence Capture Media. 5. If Autorun does not launch, manually browse to <Task Sequence Capture Media>:\SMS\bin and launch tsmbautorun.exe.

6. Follow the wizard. You can specify a network location for the WIM file provided your WINPE boot image has network connection capability (NIC driver installed). 7. Once completed, the wizard will close automatically. The system will reboot to load WINPE and initiate capture within two to five minutes. If necessary, remove the capture media to prevent the unit from booting from it. Importing Captured WES 7 Reference Image into SCCM 1. Create a shared folder on the SCCM server: C:\OSDeploy\OSImages\WES7.

Note: Give Everyone access to C:\OSDeploy.

2. Copy the captured reference WES 7 WIM file to C:\OSDeploy\OSImages\WES7. 3. Navigate to System Center Configuration Manager > Site Database > Computer Management > Operating System Deployment. 4. Right click on Operating System Images and select Add Operating System Image. 5. An Add Operating System Image Wizard appears. Enter the network path (UNC): \\<Server name>\OSDeploy\OSimages\WES7\<captured wim>.wim and click Next. 6. Click Next on the General page. 7. Click Next on the Summary page. 8. Click Close when the wizard completes. 9. Navigate to System Center Configuration Manager > Site Database > Computer Management > Operating System Deployment and expand the newly added Operating System image. 10. Right click on Distribution Points and select New Distribution Points. 11. A New Distribution Points Wizard appears. Click Next on the Welcome screen. 12. Select All on the Copy Package screen to copy the package to your distribution points, and then click Next. 13. Click Close when the wizard completes. 14. Navigate to System Center Configuration Manager > Site Database > Computer Management > Operating System Deployment and expand the newly added Operating System image > Package Status > Package Status > your SCCM site. The distribution points for your SCCM server should appear. Verify that the package Installed on the distribution points before proceeding to any deployments.

Deploying an image
Creating a Task Sequence for Deploying Reference WES 7 Image 1. Navigate to System Center Configuration Manager > Site Database > Computer Management > Operating System Deployment. 2. Right click on Task Sequence > New > Task Sequence. 3. A New Task Sequence Wizard appear. Select Install an existing image package and click Next. 4. Enter the Task Sequence Name, select the appropriate Boot image, and click Next. 5. At the Install the Windows Operating System screen, browse to the previously created WES 7 image package. 6. Select Partition and format the target computer before installing the operating system. Do not specify the Product Key. 7. Select Always use the same administrator password and enter the administrator password. Click Next. 8. Enter the preferred configuration at the Configure the Network screen and click Next. 9. At the Install the ConfigMgr client screen, click Browse and select Microsoft Configuration Manager Client Upgrade 4.0 ALL. 10. Click Next. 11. At the Configure State Migration screen, clear all settings and click Next. 12. At the Include Updates in Image screen, select Dont install any software updates and click Next.

13. Leave Install Software Packages empty and click Next. 14. Click Next on Summary. 15. Close the wizard when it completes. 16. Browse to the newly created deployment task sequence. Right click it and select Edit. 17. Select Partition Disk. Double-click on (Primary) Volume to edit its properties. 18. The Partition Properties window opens. Under Use a percentage of remaining free space, enter 95.

Note: Do not leave this value at 100, or deployment will fail due to Windows not being able to create the write filter partition at the end of the flash drive.

19. Select Quick format under formatting options. Click OK to close the window. 20. Click Apply and then OK to close the Task Sequence Editor.

Note: For Task Sequence initiated deployment on top of an existing OS, the Write Filter Must be disabled. This can be done by adding the Disable Write Filter as a first step under the Task Sequence Editor.

Advertising Task Sequence for Deploying WES 7 Image 1. Right-click on the newly created Task Sequence and select Advertise. 2. Choose the Collection to Advertise to. 3. Select Include members of sub collections and Make this task sequence available to boot media and PXE. Click Next. 4. Leave the default values for Schedule and click Next.

Note: For PXE initiated deployment, a Mandatory assignment schedule must be created.

5. At the Distribution Points screen, select Download content locally when needed by running task sequence.

Note: In most cases involving Thin Clients, there wont be enough disk space to store both the downloaded WIM and the extracted contents locally. In this case, choose Access content directly from a distribution point when needed by the running task sequence.

6. Leave the other two check boxes cleared. Click Next. 7. Leave the default values at the Interaction screen and click Next. 8. Leave the default values at the Security screen and click Next. 9. Click Next on Summary. 10. Click Close to close the wizard.

POST Deployment Tasks The deployed image will most likely require more customizations prior to first use. For example, the write filter will be in a disabled state, and domain membership and Auto Login are not set up. These types of customizations are best handled by running command lines or scripts at first boot. For more information on enabling the Enhanced write filter and an example script, see Appendix B.

Appendix A
Installing Advanced SCCM Client and EDM Client
For images that do not currently contain both the Microsoft SCCM and EDM clients, HP recommends that you preinstall these components into a Golden Master image prior to deployment. For detailed instructions regarding SCCM Client installation, review the Microsoft SCCM Documentation located here. For detailed instructions regarding EDM Client installation, review the Microsoft SCCM Documentation located here. For more information on required KB2516850, as well as the issue it resolves, please review the KB article located here. For more information on required KB2619310, as well as the issue it resolves, please review the KB article located here.

Client requirements
HP t5740e or other HP thin client with WES7 image version 6.1.7601.204 (SCCM / EDM installation required) SCCM/EDM client software Latest Microsoft QFEs

Firewall considerations
When using HP WES7 image builds prior to image 6.1.7601.226, the WES7 Advanced Firewall configuration must be altered to allow ports required by SCCM. Information regarding the SCCM 2007 port requirements may be found here.

Registry considerations
In order for the EDM client to restart a device that uses a RAM drive, including WES 7 Thin Clients, a registry key must be added by creating the following key / value: Key: HKLM\Software\Microsoft\EDM\ Value Type: RestartOptions:DWORD Value: 1

Client installation
When using HP WES7 image builds prior to image 6.1.7601.225, it is necessary to install both the SCCM and EDM clients as well as two required MS KBs. Installing the SCCM Client 1. On your WES7 Thin Client, log out while holding the Shift key. 2. Log on as the local Administrator (Password: Administrator). 3. Locate the SCCM client installer, and execute ccmsetup.exe. 4. The SCCM Client installs silently. Execute the installer only once. The Installation is complete when the Configuration Manager item appears in Control Panel.

Installing the Embedded Device Manager 2011 Client

Note: The MS EDM client functions as an addition to the SCCM Client. EDM provides for SCCM-integrated write-filter management.

1. Locate the EDM client installation .MSI file. 2. Execute EDMClient.msi. 3. Accept the defaults and complete the installation

Appendix B
Enabling the Write Filter in a Deployment Task Sequence
To enable the Writer Filter as part of the OS Deployment Process, HP recommends running command lines or scripts at the first startup of the system. The sequences below summarize the steps needed to enable the Writer Filter: 1. Edit the current Operating System Task Sequence to set Administrator auto login during deployment. 2. Use an Unattend XML file to create First Launch Commands. 3. Once OS deployment has been completed, the Task Sequence will exit, giving full control back to the OS. The script (see XML sample below) will execute the following: a. The Administrator will autologin after deployment with the following First Launch Commands: Enable Writer Filter BCD Fixup -The Enhanced and File Based Write Filter require that the IGNOREALLFAILS policy set in the Boot Configuration Data. This flag is required to prevent error dialogs regarding unsafe shutdowns during the boot process. Typically, in WES7, enabling the write filter automatically sets this policy in the BCD and prevent boot up errors.

Following a Deployment Task Sequence in SCCM, HP has identified that this BCD policy is not automatically set in the WES7 operating system. This occurs only when deploying an image via the Deployment Task Sequence. Other imaging methods outlined in this document do not require manually setting this BCD policy. b. c. Remove Administrator Autologin on next reboot or set User Autologin. Restart the system after 90 seconds.

4. After rebooting, the unit is now ready for use with the Write Filter enabled. First Launch Command snippet The following snippet is the First Launch Command to be included in the unattend.xml file under the <settings pass="oobeSystem"> section : <SynchronousCommand wcm:action="add"> <Order>1</Order> <CommandLine>ewfmgr c: /enable </CommandLine> <Description>Enable EWF WF </Description> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>2</Order> <CommandLine>bcdedit /set {current} bootstatuspolicy ignoreallfailures </CommandLine> <Description>Fix BCD </Description> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>3</Order> <CommandLine>autologcfg /u:User /p:User</CommandLine> <Description>Enables user Autologin</Description> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>4</Order> <CommandLine>shutdown -r -t 90</CommandLine> <Description>Restarts after 90 seconds</Description> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> </FirstLogonCommands>

10

For more information


For detailed documentation regarding EDM configuration management capabilities, review the Microsoft EDM Write Filter support guide located here.

Copyright 2011 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

4AA3-5713ENW, Created October 2011

You might also like