Remote Installations Services.

The most efficient method of deploying Windows 2000 Professional is to use remote installation. You can perform remote installations of Windows 2000 Professional if you have a Windows 2000 Server infrastructure in place and the computers in your network support remote boot.

Remote installation is the process of connecting to a server running Remote Installation Services, called the RIS server, and then starting either an automated installation of Windows 2000 Professional or a pre-prepared image restore on a local computer. Remote installation enables administrators to install Windows 2000 Professional on client computers throughout a network from a central location. This reduces the time administrators spend visiting all the computers in a network, thereby reducing the cost of deploying Windows 2000 Professional.

RIS provides the following benefits:

·         Enables remote installation of Windows 2000 Professional.

·         Simplifies server image management by eliminating hardware-specific images and by detecting Plug and Play hardware during setup.

·         Supports recovery of the operating system and computer in the event of computer failure.

·         Retains security settings after restarting the destination computer.

·         Reduces TCO by allowing either users or technical staff to install the operating system on individual computers.

RIS is available only on computers running one of the Windows 2000 Server family of products. The RIS server can be a domain controller or a member server. The below table lists the network services required for RIS and their RIS function. These network services don't have to be installed on the same computer as RIS, but they must be available somewhere on the network.

Network service	RIS function
DNS Service	RIS relies on the DNS server for locating both the directory service and client computer accounts.
DHCP Service	Client computers that can perform a network boot receive an IP address from the DHCP server.
Active Directory directory services	RIS relies on the directory services based on Active Directory technology in Windows 2000 for locating existing client computers as well as existing RIS servers.

Remote installation requires that RIS (included on the Windows 2000 Server CD-ROM) be installed on a volume that is shared over the network. This shared volume must meet the following criteria:

·         The shared volume can't be on the same drive that is running Windows 2000 Server.

·         The shared volume must be large enough to hold the RIS software and the various Windows 2000 Professional images.

·         The shared volume must be formatted with the Microsoft Windows 2000 File System (NTFS).

Using the Remote Installation Services Setup Wizard

The Remote Installation Services Setup wizard does the following:

·         Installs the RIS software

·         Creates the remote installation folder and copies the Windows 2000 Professional installation files to the server

·         Adds .SIF files, which are a variation of an Unattend.txt file

·         Configures the Client Installation wizard screens that will appear during a remote installation

·         Updates the registry

·         Starts the required Remote Installation Services

The RIS server can be a domain controller or a stand-alone server that is a member of a domain containing Active Directory directory services

·         Click Start, and then click Run.

·         In the Open box, type risetup and then click OK.

When prompted, supply the information provided in the following table.

Remote Installation Folder Location	Specify the NTFS partition and folder on the RIS server where you want to install the supporting files and the initial CD-based image. The location that you supply cannot be on a Distributed file system (Dfs) shared folder or an Encrypted File System (EFS) volume.
Initial Settings	Specify how the RIS server will respond to client computers. You can set the server so that it: Does not respond to any client requests. This is the default setting. Responds to all client requests by selecting the Respond to client computers requesting service check box. Responds only to requests from clients that have pre-staged computer accounts by selecting both the Respond to client computers requesting service and the Do not respond to unknown client computers check boxes.
Installation Source Files Location	Specify the location of the Windows 2000 Professional source files that will create the initial CD-based image. These files can come from either a compact disc or a network shared folder. You must create an initial CD-based image before you can start RIS. This is true even if you plan on offering only RIPrep images to users.
Windows Installation Image Folder Name	Specify the name of the folder within the RIS installation folder on the RIS server where the initial CD-based image will be created.
Friendly Description and Help Text	Specify the description and explanatory text for the initial CD-based image. This information will appear when the user logs on to the RIS server and selects this image from the list that appears in the Client Installation wizard.

Authorising the RIS Server.

The RIS Server must be authorised within Active Directory before it can start responding to client requests.  This prevents someone from setting up an addition RIS server that could install unauthorised images on client computers.

To authorise a RIS Server in Active Directory, perform the following steps:

·         Open DHCP from the Administrative Tools menu.

·         In the Console tree, right-click DHCP, and then click Manage authorized servers.

·         In the Manage authorized servers dialogue box, click Authorize and type in the name or IP address of the RIS server when prompted.

Configuring the RIS Server.

Once RIS has been authorised, it is possible to customise how the RIS Server responds to client requests for service.  This can include pre-defining computer names and OU locations, pre-staging computer accounts, and specifying installation options.

In Active Directory Users and Computers, right-click the name of the RIS server, and then click Properties. In the Properties dialog box for the server, click the Remote Install tab, and then click Advanced Settings.

Within the New Clients tab you are able to define standard policies to new clients setup.  Client Computer Name can be defined by using one of the options are creating a custom name using the Customize button and entering a naming string that can contain the below variables.

Variable	Value used in computer name
%Username	User logon name
%First	User first name
%Last	User last name
%#	Incremental number
%MAC	Address of the network adapter

The Client Computer Account Location allows you specify the location where new computer accounts will be created within the Active Directory.  It is important that the users setting up the computer have permission to create Computer Objects within the area of Active Directory that you specify, unless the Computer Accounts have been pre-setup in Active Directory.

Default directory service location	Creates new computer accounts in the Computers container.
Same location as the user setting up the computer	Creates new computer accounts in the same OU as the user account of the person who is performing the remote installation.
A specific directory service location	Creates new computer accounts in a specified OU.

The Images tab gives you a list of available Images (either as CD-Images or pre-prepared images) that have been installed on the RIS Server.  You can add new configuration options on existing images by associating a new answer file with an existing image.  To add a configuration click on Add, when the Add wizard starts, click Associate a new answer file to an existing image, and then click Next. On the Unattended Setup Answer File Source page, select the location of the answer file by clicking one of the options that the following table describes, and then click Next.

Click this option	To
Windows image sample files	Select from the sample image files that are installed with RIS.
Another remote installation server	Copy an answer file from another RIS server.
An alternate location	Specify a local or universal naming convention (UNC) path to answer file.

Follow the on-screen directions to finish the association.

You can create additional answer files (.SIF) by using the Setup Manager Wizard to create a text file that contains the information that the user would usually need to supply during setup.  This uses the same format as the unattend.txt files used for unattended installation of Windows NT or 2000 and supports a new [RemoteInstall] section that contains the repartition parameter.

It is possible to restrict images by using NTFS permissions on the answer files.  By default Everyone has access to the answer files.

Configuring Client Installation Options

The installation options that are presented to users in the Client Installation wizard can be configured by using Group Policy. For example, you could create one Group Policy object (GPO) at the domain level that provides users with a minimal set of installation options, and another for users within a specific OU, which provides the users with additional options. If Group Policy settings conflict, the GPO created at the OU level will override the GPO created at the domain level.

To configure client installation options, perform the following steps:

·         In Active Directory Users and Computers, right-click the name of the site, domain, or OU where you want to apply the policy, and then click Properties.

·         In the Properties dialog box, click the Group Policy tab. Create a new GPO or click an existing GPO, and then click Edit.

·         In the Group Policy console, expand User Configuration, expand Windows Settings, and then click Remote Installation Services.

·         In the details pane, double-click Choice Options.

Pre-staging Client Computers

Pre-staging a client computer means pre-configuring a computer account for the client computer and optionally assigning it to a designated RIS server. If you assign a client computer to a RIS server, only the designated server responds to service requests from that client computer.  Pre-staging is primarily done for security reasons. When used with the Do not respond to unknown clients client support option, it prevents unknown RIS client computers from obtaining images, thereby preventing users from joining unauthorised computers to the domain or from bringing in their home computers and illegally installing Windows 2000 Professional.

Pre-staging can also provide load balancing when using multiple RIS Servers. By directing specific client computers to receive images from designated RIS servers, you can ensure that no single server responds to a disproportionate number of installation requests.

Before you can pre-stage a client computer, you need to know the globally unique identifier (GUID) of the computer. The GUID is provided by the manufacturer as part of the Pre-Boot Execution Environment (PXE) specification. The information is generally located In the BIOS of the client computer or on a sticker within the PC.  For some computers the GUID is the MAC address of the network adapter, padded with enough zeros at the front to make it a 32 character string.

To pre-stage a client computer by using the GUID of the computer.

·         In Active Directory Users and Computers, right-click the OU where you want to create the computer account, point to New, and then click Computer.

·         In the Create New Object - (Computer) dialog box, type a computer name, and then click Next.

·         Select This is a managed computer check box, type the GUID of the computer, and then click Next.

·         Under Specify the remote installation server to support this client, click The following remote installation server. Type the fully qualified domain name (FQDN) of the designated RIS server.  Click Next, and then click Finish.

It is possible to Pre-Stage a Client Computer with an Unknown GUID

·         Start the RIS client computer by using a network service startup, and then log on to the RIS server.

·         When prompted, select a setup option, and then press ENTER.

·         When prompted, select an image, and then press ENTER.

·         At the Warning screen, press ENTER.

The GUID will appear on the screen and the computer account is now pre-staged. If you want to assign the client computer to a designated RIS server, you can do so in the Properties dialog box of the RIS client computer.  You must turn off the computer to prevent it from receiving an image.

Creating a Pre-prepared image (RIPrep).

An alternative to deploying CD-Based images using the fresh install approach, is to define pre-prepared images.  These are fastest to deploy a complete image to a client in that you can pre install applications, make changes to windows settings and define desktops that would then be contained within the image.

The process involves firstly setting up a Computer with Windows 2000 Professional and applying all software and custom setting that you require (it is important that all changes are made prior to taking the image as changes cannot be made later).  It is also advisable to ensure that the changes are mirrored for new users by copying the setup profile into the default user profile.

Make sure that you are logged on to the source computer as an Administrator.

·         Right-click My Computer, and then click Properties.

·         In the System Properties dialog box, click the User Profiles tab, click the local Administrator profile from the list labeled Profiles stored on this computer, and then click Copy To.

·         The Copy To dialog box appears.  Type the path to the Default User folder (This path is typically C:\Documents and Settings\Default User)

·         Click Change to display the Choose User dialog box.

·         In the List Names From box, click the local computer.

·         In the Names box, click Everyone, and then click Add.

·         Click OK twice to close the Copy to dialog box.

You can then run the RIPrep program(\\Ris_Server\reminst\admin\i386\riprep.exe) to create to image files on the RIS Server.  Prior to creating the image the program removes all unique settings (such as the SID, the computer name and any unique registry entries).  The image file is accompanied by an answer file.

Comparing CD-Based and Pre-prepared images.

CD-based image	Pre-prepared image
A default image is created automatically when the RIS server is configured.	You must create the image by using the Remote Installation Preparation wizard.
It can contain only the operating system. Applications can be deployed separately by using Group Policy.	It can contain the operating system and applications.
The image is based on the default settings of the operating system. An answer file is required to customise the image.	The image is based on a preconfigured source computer. Making additional changes requires you to deploy the image to a client computer, configure the client computer, and then recreate the image.
It performs a full over-the-network setup by copying all of the files in the image to a temporary folder on the local hard disk before running the Setup program.	It copies only the necessary files and registry keys to the client computer, making it the fastest way to deploy an operating system and applications.
You can deploy it to any computer with a supported hardware abstraction layer (HAL).	You can deploy it to any computer with the same HAL as the source computer.

Remote Installation on Client Machine.

Client computers that support remote installation must have one of the following configurations:

·         A configuration meeting the Net PC specification

·         A network interface card with a PXE boot ROM and BIOS support for starting from the PXE boot ROM

·         A supported network interface card and a remote installation boot disk

If the network interface card in a client isn't equipped with a PXE boot ROM or the BIOS doesn't allow starting from the network interface card, create a remote installation boot disk. The boot disk simulates the PXE boot process. Windows 2000 ships with the Windows 2000 Remote Boot Disk Generator that allows you to easily create a boot disk.

You start the Windows 2000 Remote Boot Disk Generator by running Rbfg.exe. The Rbfg.exe file is located in the RemoteInstall\admin\i386 folder on the Remote Installation Server. These boot floppies support only the PCI-based network adapters listed in the Adapters List. To see the list of the supported network adapters, click the Adapter List button.

To perform a remote installation on a client computer, users must request a network service startup by pressing F12 after they turn on their computers, or by starting their computers with the RIS Startup disk. After the client computer establishes a connection with a RIS server, the user is prompted to press F12 again to download and start the Client Installation wizard. The Client Installation wizard prompts the user to log on to a domain and then provides the user with a list of available installation options.

The Following table describes the options available:

Option	Description
Automatic Setup	Users can choose which image to install. If only one image is available, the user is not prompted.
Custom Setup	Users can override the automatic computer naming process, in addition to the default location within Active Directory where client computer accounts will be created. Technical support personnel can use this option to install a client computer for someone else.
Restart a Previous Setup Attempt	Users can restart the operating system installation process. Select this option if the previous installation attempt failed. The option will not start copying files where the previous installation attempt failed; however, the user is not prompted to answer any questions within the Client Installation wizard from the previous setup attempt.
Maintenance and Troubleshooting	Users can gain access to third-party maintenance and troubleshooting utilities.

Installing Remote Installation Services

To install Remote Installation Services on a computer running Windows 2000 Server

·         Log on as Administrator, and insert the Windows 2000 Server CD-ROM into your CD-ROM drive.

·         Open Control Panel, and double-click Add/Remove Programs.

The Add/Remove Programs window appears.

·         Click Add/Remove Windows Components.

The Windows Components page of the Windows Components Wizard appears.

·         Select the Remote Installation Services check box in the Components box, and then click Next.

Setup installs and configures Remote Installation Services.

The Completing The Windows Components Wizard page appears.

·         Click Finish.

The System Settings Change dialog box appears, indicating that you must reboot before the new settings will take effect.

·         Remove the Windows 2000 Server CD-ROM from your CD-ROM drive and click Yes.

Configuring Remote Installation Services

To configure Remote Installation Services

·         Log on as Administrator.

·         The Microsoft Windows 2000 Configure Your Server screen appears, indicating that you have selected components that require additional configuration

·         Click Finish Setup.

·         The Add/Remove Programs window appears, indicating that you now need to configure Remote Installation Services.

·         Click Configure.

·         The Remote Installation Services Setup Wizard appears.

·         Insert the Windows 2000 Professional CD-ROM in the CD-ROM drive of the server. If the Microsoft Windows 2000 CD dialog box appears, click Exit.

·         Read the information on the welcome screen and then click Next.

·         The Remote Installation Folder Location page appears.

·         Notice that the drive on which you create the Remote Installation folder can't be the system drive and must be formatted with NTFS version 5 or later.

·         Type the path to host your RIS images in the Path box, and click Next.

·         Select the Respond To Client Computers Requesting Service check box and then click Next.

·         The Installation Source Files Location page appears.

·         Enter the path to the installation source files and then click Next.

·         The Windows Installation Image Folder Name page appears.

·         Click Next to accept the default name of Win2000.pro.

·         The Friendly Description And Help Text page appears.

·         Click Next to accept the default friendly description and help text.

·         The Review Settings page appears.

·         Review the information and then click Finish.

·         It will take several minutes for the following steps to complete:

·         The remote installation folder is created.

·         The files needed by the services are copied.

·         The Windows installation files are copied.

·         The Client Installation Wizard screen files are updated.

·         A new unattended Setup answer file is created.

·         Remote Installation Services is created.

·         The registry is updated.

·         The required remote installation services are started.

·         When all the tasks are completed, click Done, and close any open windows.

Creating a Remote Boot Disk

·         Log on as Administrator.

·         Click Start and then click Run.

The Run dialog box appears.

·         Type E:\RISdirectory\Admin\i386\rbfg in the Open box.

·         Click OK.

The Windows 2000 Remote Boot Disk Generator dialog box appears.

·         Read the information in the Windows 2000 Remote Boot Disk Generator dialog box and then click Adapter List.

·         Scroll through the list of supported adapters, and then click OK to return to the Windows 2000 Remote Boot Disk Generator dialog box.

·         Insert a formatted 3.5-inch floppy into your floppy disk drive.

·         Click Create Disk.

·         A Windows 2000 Remote Boot Disk Generator dialog box appears, prompting you to create another boot floppy.

·         Click No.

·         Click Close to close the Windows 2000 Remote Boot Disk Generator dialog box.