Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Windows 8 Client Part 1 "The OS internals for IT-Pro's"

1,945 views

Published on

More info on http://techdays.be

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Windows 8 Client Part 1 "The OS internals for IT-Pro's"

  1. 1. Windows 8 Client Part 1"The OS internals for IT-Pros"Tom DecaluwéInfrastructure Manager Contact me:Macintosh Retail Group tom@decaluwe.eu http://trycatch.be/blogs/decaluwet
  2. 2. Windows 8 slow adoption- Touch UI- Different- Disruptive leap- Bad economical times- We just migrated to Windows 7- Apple is better- Lack of “devices”- Lack of “time” for IT pro’s Keala group
  3. 3. Enthusiasm
  4. 4. My Promise “I’ll show every one of you at least 1 feature to be enthusiastic about”
  5. 5. The ecosystem
  6. 6. Lab for the Day 192.168.1.1 DEMONET 192.168.1.50
  7. 7. What we will Cover
  8. 8. What we will Cover
  9. 9. The History
  10. 10. 27 years of evolution V1.0 1985 16 Bit V1.0 1985 16 Bit V3.1 V2000 XP 1992 2001 V6 V7 2007 2009 V8 2012 V8 V7 2012?
  11. 11. Windows 8 Editions • Windows 8 X86 PC • Windows 8 Pro • Windows 8 Enterprise ARM • Windows RT / WOA
  12. 12. Setup Experience
  13. 13. Upgrade speedWin7 vs Win8• Win 7 => 4 wizards +/- 60 screens• Win 8 => one wizard +/- 11 clicksUpgrade Performance• Win 7 => moved file by file,…• Win 8 => moves the whole folder in one go,…
  14. 14. Source and Destinations ISO VHD USB Virtual USB Hard disk VHD Machine (Win To GO)
  15. 15. The simple and detailed upgrade UI
  16. 16. Windows To Go
  17. 17. How it differs from a normal pc• Internal disks disabled• TPM not used => replaced with pre-operating system boot password• No hibernation• No Recovery Environment• No Push button reset• Disabled windows Store• No MAK activationYou have limited hard disk space, like SSD but worse ;-)
  18. 18. Some usage scenarios-Contractors that bring their own PC-Shared PC’s-Quick DR-Home computing / BYOD-…
  19. 19. Computer roamingWindows uniquely identifies computers based on constant characteristics of the machinefirmware -SMBIOS UUID if present or certain SMBIOS stringsThis ID is used to ensure when Windows returns to a computer, only the necessary set ofdrivers are loadedWhen roaming to a new computer drivers are installed on the first boot, similar to the first timeyou boot a generalized Windows image System Partition - Boot Files Operating System Partition - Apps, Data, Settings • FAT32 File System • 300MB • NTFS File System • Legacy Boot Manager (Bootmgr) • UEFI Boot Manager (Bootmgfw.efi)
  20. 20. Boot Disk RemovalBoot disk removal is detected by the USB stackThe kernel freezes the systemThe stack will wait 60 seconds for the boot disk to return and then power down the systemIf the boot disk is returned, the system will resumePut it back in the same USB port
  21. 21. DEMO
  22. 22. Quick DR Keep all personal data, Metro style apps, and important settings from the PC, and reinstall Windows. Remove all personal data, apps, and settings from the PC, and reinstall Windows Recovery Environment
  23. 23. Reset you PC Remove everything and start from scratch1. Win RE - Boots into the Windows Recovery Environment2. Win RE - Erases and formats3. Win RE - Installs a fresh copy4. PC restarts into the newly installed OS
  24. 24. Refresh your PC Fix a problem with your computer It’s a reinstall without losing your data, settings, and Metro style apps1. Boots into Windows RE2. Win RE scans the hard drive for your data, settings, and apps, and puts them aside (on the same drive).3. Win RE installs a fresh copy of Windows.4. Win RE restores the data, settings, and apps,5. The PC clean boots
  25. 25. Kept or removed?Kept Removed• Wireless network connections • File type associations• Mobile broadband connections • Display settings• BitLocker and BitLocker To Go • Windows Firewall settings settings • Classic apps• Drive letter assignments• Personalization settings such as lock screen background and desktop wallpaper• Metro apps (not the classic apps)
  26. 26. Include the appsRefresh from a previous statemkdir C:RefreshImagerecimg -CreateImage C:RefreshImage
  27. 27. DEMO
  28. 28. Windows 8 Boot
  29. 29. Pre-OS environment Win7
  30. 30. Bios vs UEFI boot speed Explorer Ready Windows 7 Service & App POST OS Initialization Initialization Explorer ReadyWindows 8 POS Service & T App Init Device Initialization Hiberfile Read (Session0) End-users judge their pc performance according to boot speed
  31. 31. Power -> logon Seamless single graphics transition Post with highest supported native from firmware to native OS driver resolution Clean, high-resolution branding elements persist through OS boot User View OEM OEM Logo Logo Boot Phase Device POST Hiber Resume Explorer Init. Init. Seconds 2s 4s 6s 7s
  32. 32. How to shutdown Shutdown => system kernel hibernate Restart => full restart null boot shutdown /s /full /t 0 => force full shutdown without hibernate file
  33. 33. 3 Security Components for boot
  34. 34. UEFI secure boot “Protects against bootkits by verifying the boot loader before loading” Step1: MS creates a signature of the boot loader and pre-stages it onto PC’s MS RSA2048 key pair Priv Pub Boot loader Hash sig SHA256 Encrypt
  35. 35. UEFI secure bootStep2:UEFI firmware database are pre-staged on Windows 8 logo devices • db: sig database, keys you trust • dbx: forbidden signature database, blacklist a loader or key • KEK: key exchange keys, to update db or dbx • PK: platform key => to update KEKFor windows 8 certified devices they must adhere to the hardware certification requirements => KEK andDB must contain a Microsoft key, secure boot must be enabled out of the box.
  36. 36. Measured boot Creates a log with hash of everything that was loaded BIOS Hash of next item(s) Boot loader Kernel Kernel initializes ELAM can look at the hashes of the drivers and decide Early Early to load yes/no before loading early drivers into memory Early Drivers Drivers Drivers
  37. 37. Remote AttestationAllow a boot log to be evaluated and enforce a policy Measured boot log Client Attestation Server TOKEN
  38. 38. All 3 components UEFI POST Win8Boot loader Measured boot log Attestation Windows server ELAM Kernel Anti- 3rd party Windows TOKEN Malware software logon software
  39. 39. Connected state
  40. 40. Connected Standby Screen On Screen Off Shutdow n (Active) (Connected Standby) User not User present present, and using User not present, no context device still connected savedNew Windows power stateThe PC’s screen is off, but the device remains in a very low idle stateThe network adapter maintains a connection to the networkMetro style apps continue to receive live tile updates and toast notificationsBackground Tasks and Push Notifications enable customers to receive real-timecommunication via apps such as email, IM and VoIP
  41. 41. Power consumption
  42. 42. Consistent plow powerLess than 5% battery drain over 16 hour period in Connected Standby
  43. 43. App model for connected standby App model is right by design for power Apps are suspended when the computer enters Connected Standby Apps may register background activity in Background Tasks Notifications API allows suspended apps to handle incoming events from the cloud Pattern matching and wake used for push notifications and real-time apps
  44. 44. Win File system
  45. 45. Storage Spaces Resilience Thin provisioning - mirror Logical vs physical size 10GB vs 4 GB - Parity
  46. 46. DEMO
  47. 47. Checkdisk Win7Only two states Fix corruption with a minimum of downtime- Volume is healthy- Volume is not healthy => volume goes offline ReFS => no longer requires fixing offlineFix time was directly related to #files on the volumeA disk has 2 health states A disk has 4 health states
  48. 48. 4 Point Health State
  49. 49. Check phase
  50. 50. BitLocker- Support Encrypted Hard Drive to offload cryptography to disk processor- BitLocker Pre-provisioning in WinPE environment- Used space encryption- Standard user PIN change- Network Unlock
  51. 51. Storage Optimizer- Trim Support for SSD
  52. 52. Virtualisation
  53. 53. Client Hyper-V- Same technology as Windows Server 2012- Requirements - 64-bit system - SLAT (second level address translation) - 4 GB RAM* We are missing seamless apps
  54. 54. Overview
  55. 55. Cheat sheet
  56. 56. I want to hear your questions1. After this session2. On the booth floor3. This evening during the ask the experts4. By email: tom@decaluwe.eu
  57. 57. Windows 8 is great! Share yourenthusiasm
  58. 58. END“Part 1”

×