Windows 7 Language Packs Available

As of this morning, August 25th, the following language packs are available for download from Windows Update. Please note Traditional Chinese –Taiwan will be released at a later date.

These language packs are available to our enterprise customers running Windows 7 Enterprise and Windows 7 Ultimate RTM versions only. Customers on the Windows 7 Release Candidate are not eligible for these language packs.

For information on the general availability of Windows 7 Ultimate and all other version, please refer to Brandon’s post here.

Languages:

  • Arabic
  • Brazilian Portuguese
  • Bulgarian
  • Chinese – Simplified
  • Chinese – Traditional – Hong Kong
  • Croatian
  • Czech
  • Danish
  • Dutch
  • English
  • Estonian
  • Finnish
  • French
  • German
  • Greek
  • Hebrew
  • Hindi
  • Hungarian
  • Italian
  • Japanese
  • Korean
  • Lithuanian
  • Norwegian
  • Polish
  • Portuguese
  • Romanian
  • Russian
  • Serbian Latin
  • Slovak
  • Slovenian
  • Spanish
  • Swedish
  • Thai
  • Turkish
  • Ukrainian


Microsoft Deployment Toolkit 2010 Release Candidate Now Available for Download

We are pleased to announce the immediate availability of the release candidate of MDT 2010.  This release contains numerous bug fixes since MDT 2010 Beta 2. MDT 2010 RC has been tested and will work with Windows 7 RTM and Windows Server 2008 R2 RTM as well as all previously supported operating systems. 

A BIG thank you goes out to all who tested and have given feedback for MDT 2010 Beta 2 (see our post here). We were able to fix several bugs and push through some design changes based on your feedback. Now is the time for you to verify the bug fixes and continue to provide feedback as we work towards the release of MDT 2010.

As with any release please make sure you read through the release notes to understand the known issues with this release and make sure you have a backup of your deployment environment before you upgrade to MDT 2010 RC.

If you have not signed up on Microsoft Connect you can still do so here. If already a member, click here to get the Release Candidate of MDT 2010.


Understanding Windows 7 AppLocker

Our guest blogger is Daniel Nerenberg. He is an MCT,MCSA,MCSE,MCTS,MVP, STEP Member and an independent consultant based in Montreal. He is also the President of the Montreal IT pro user group. Daniel has written and consulted on the topics of Windows deployment, application virtualization, and Windows infrastructure.

Window 7 RTM has been available for just a few weeks now, but already IT Pros everywhere are diving into great new features. One of the more exciting features introduced in Windows 7 is AppLocker. Many of you know about Software Restriction Policies, they allow you to block the execution of a program by file name or hash calculation. You probably also know how it was a race to block applications in our network with these methods. Users could change the name of the file, or applications updates so frequently that you would constantly need to generate new hash files.

AppLocker works under the premise that it’s easier to allow the applications you want, and block the rest. If you’re running a Windows 7 machine you can see AppLocker by typing gpedit.msc into your search bar and pressing enter.

clip_image002

You can define policies based on executables, Windows installers, and scripts. Creating a new policy is simple. Right-click on any of the 3 categories and click Create New Rule.

clip_image004

You can create a policy to allow or deny an executable. You can also select which groups the rule will apply to.

clip_image006

You can choose to create a rule based on a publisher (the program needs to be signed), a program path, or a file hash (usually a good choice if the program isn’t signed).

clip_image008

For this example I chose publisher. The Rule Wizard uses the information stored application signing certificate to learn about the application. You can adjust what level of information you’ll allow for an application.

clip_image010
In the above example the policy will only allow Internet Explorer 8.0.0.0 and above to run on the computer.

You can use the same steps to create exceptions for specific applications. One of the more convenient features is the ability to automatically generate rules. If you right click on any of the 3 categories and click Automatically Generate Rules you can quickly generate a list of rules based on applications that are already install on the computer (saving you a lot of work to get going with AppLocker!).

clip_image012

In this example, we scan your applications in the Program Files directory and create rules for those programs to run. Perfect for creating a baseline set of rules for applications on a gold image or group policy quickly.

So to summarize, AppLocker allows you from a high level (Publisher) to a granular level (Version) to choose what applications you would like to allow users to run (white listing) rather than creating long lists of what applications they cannot use (black listing).


Windows 7 Release Candidate Downloads End August 20th

Just a reminder that you have until this Thursday, August 20th 2009 to download the Windows 7 Release Candidate.

After that date, you will still be able to register your product and get registration keys but, the media will no longer be available for download.

If you have not downloaded the Release Candidate, please do so here.


New Talking About Windows Videos

Meet Kevin Sullivan, He’s a Principal Program Manager here at Microsoft. Kevin shares his thoughts on Group Policy and how this innovative solution can provide flexibility, customization, and ease of adaptation for IT professionals and end users alike.

KEVIN

Also live is our “Making of Windows 7” video. Meet some of the many people who helped make Windows 7 a reality. Listen as Mark Russinovitch, Sandeep Singdal, Jon Devaan, and others share their stories about building app compat, saving IT pros time, and more

Win7

Talking About Windows.com is your chance to hear what Microsoft Engineers and IT pros like you have to say and gives you a chance to interact with them.

Hear what they have to say and get heard. Join the conversation. www.talkingaboutwindows.com


Springboard Series Virtual Roundtable Windows 7 Application Compatibility Part 2: Virtualization

Springboard Series Virtual Roundtable
Windows 7 Application Compatibility Part 2: Virtualization

Date: Thursday, September 24
Time: 9:00am Pacific Time

https://ms.istreamplanet.com/springboard 

Hear from a panel of experts how virtualization tools can help you with application compatibility concerns whether you’re migrating from Windows Vista or Windows XP. Join us to discuss how presentation virtualization, desktop virtualization and application virtualization can reduce testing times, expedite deployment and ultimately help you streamline PC management.

We’ll cover the latest desktop virtualization technologies from Microsoft, including App-V, MED-V and XP Mode for Windows 7. Plus we share tips and tricks and demonstrate free tools to analyze and fix applications while answering your questions live during the event. Join live on Thursday, September 24th, 2009, 9:00am Pacific Time. Missed Part 1? Watch the replay.

For IT Pro tips, tricks and resources for Windows 7, visit the Springboard Series.

As part of the “virtual” experience, you may submit your questions about Windows 7 Application Compatibility to the panel live during the event—or submit questions in advance to vrtable@microsoft.com.


XP Mode vs. Med-V

With the release of the XP Mode Release Candidate, there has been a lot of talk and confusion around when XP Mode is a ideal solution and when you should look at Med-V as a solution . I thought I would take a few minutes to clear up any confusion.

Well, let me start with actually talking a bit about [Windows] XP Mode. 

We introduced Windows Virtual PC in Windows 7 with new capabilities, such as support for USB (Universal Serial Bus) devices, and seamlessly integrating the Virtual PC applications into the Windows 7 desktop and making them available for the users from the start menu.  Windows XP Mode is just a preconfigured Windows XP virtual image and it is available for any user that has Windows 7 Pro [Professional] and above.  The whole Windows XP Mode is specifically designed to help small business users run Windows XP application on Windows 7 in case that the application would not run on a Windows 7 operating system. 

However, you ask why people need something beyond that, then with [Windows] XP Mode, users are required to setup their Windows XP applications themselves.  I mean each physical PC has its own virtual Windows XP environment and is controlled and managed by the end-user.  It is not designed for IT environments or centrally managed deployments.  And this is exactly where you need MED-V.  MED-V adds everything that is required to support the larger deployments of [Windows] XP Mode.  It includes the provisioning of an IT configured virtual machine, customizing the specific XP environments on the end-devices to connect to the [Microsoft] Active Directory® domain and to adjust the settings of the

Virtual PC to the specific parameters of the device.  So it adjusts them according to the network setting of the device, according to the amount of memory available, and other settings on the PC.  Finally, MED-V will also offer monitoring and troubleshooting for all those Virtual PC deployed in the environment.

So here are some breakdowns to answer common questions

What is Windows XP Mode, Windows Virtual PC and MED-V?

  • Windows Virtual PC is a type II hypervisor in Windows 7 – i.e. it enables users to run multiple instances of Windows on a single device.
  • Windows XP Mode leverages Windows Virtual PC and a preconfigured Windows XP image to create a virtual Windows XP environment
  • MED-V is the management layer for IT professionals on top of Virtual PC.
  • Windows XP Mode does not replace MED-V.

The breakdown

Windows XP Mode is specifically designed to help small businesses users to run their Windows XP applications on their Windows 7 desktop.

  • Windows XP Mode is available as part of Windows 7 Professional , Ultimate and Enterprise.
  • Windows Virtual PC will enable users to launch many older applications seamlessly in a virtual Windows XP environment from the Windows 7 start menu
  • Windows Virtual PC includes support for USB devices and is based on a new core that includes multi-threading support
  • Windows XP Mode is best experienced on new PCs from OEMs but will also be available for customers as a separate download.

Microsoft Enterprise Desktop Virtualization (MED-V) is designed for IT Professionals.

  • MED-V enables Virtual PC deployment in larger organizations
  • MED-V provides important centralized management, policy-based provisioning and virtual image delivery to reduce the cost of Virtual PC deployment.
  • MED-V is part of the Microsoft Desktop Optimization Pack (MDOP)
  • MED-V v1 builds on Microsoft Virtual PC 2007 to help enterprises with their upgrade to Windows Vista when applications are not yet compatible.
  • MED-V v2 will add support for Windows 7 and Windows Virtual PC.
  • MED-V v2 beta will be available within 90 days of Windows 7 GA.

Which customers should use Windows XP Mode?

Windows XP Mode is suitable for small and medium business users, who are able to set their XP applications themselves or with the help of an IT professional.

Each device has its own virtual Windows XP environment, that is controlled and managed by the end user.

Windows XP Mode is not designed for large, centrally managed deployments, and is not suitable for organizations that have widely deployed business applications that require Windows XP.

How does MED-V adds management to Windows Virtual PC?

To provide a managed, scalable solution for running virtual Windows XP applications, MED-V addresses many of the IT challenges around deployment and management including:

  • Deployment – deliver virtual Windows images and customize per user and device settings
    • Automate first-time virtual PC setup based on an IT customized script – including assignment of a unique computer name, joining to AD domain
      (for instance: assign the virtual PC a name that is derived from the physical device name or the username to simplify identification and management)
    • Adjust virtual PC memory allocation based on available RAM on host, so that the virtual PC does not take significant resources from the user
  • Provisioning – define which applications and websites are available to different users
    • Assign virtual PC images according to users and groups
    • Define which Windows XP applications will be available to the user through the start menu
    • Define which websites (e.g. internal sites that requires a previous version of Internet Explorer) are redirected automatically to Windows XP
  • Control – assign and expire usage permissions and Virtual PC settings
    • Control the network settings of the Virtual PC (e.g. whether it connects through NAT or DHCP, whether its DNS is synchronized with host)
    • Authenticate user before granting access to the Virtual PC
    • Set expiration date, after which the Virtual PC is not accessible to the end user
  • Maintenance and Support - update images, monitor users and remotely troubleshoot
    • Update images using TrimTransfer network image delivery – update a master Virtual PC image, and MED-V will automatically distribute and apply the changes to all endpoints
    • Centralized database aggregates events from all users, and provides troubleshooting information on malfunctioning virtual PCs
    • Administrator diagnostics mode allows faster resolution of Virtual PC issues
    • Run on multiple platforms – MED-V will work on both Windows 7 and Windows Vista, and will not require processor-based virtualization support

How do I purchase MED-V?

MED-V is licensed as part of MDOP subscription that is available for purchase for Software Assurance customers.

What are the key features of new version of Windows Virtual PC?

Easy setup of Windows XP Mode – Once both the Windows Virtual PC and the virtual Windows XP environment are installed, Windows Virtual PC provides a simple wizard to setup the Windows XP Mode with just a few clicks. 

USB Support - Users can access USB devices attached to Windows 7 directly from Windows Virtual PC.  These devices include Printers and Scanners, Flash Memory/Sticks and External Hard Disks, Digital Cameras and more.

Seamless Applications – Publish and Launch applications installed on Windows Virtual PC directly from the Windows 7 desktop, as if they were installed on the Windows 7 itself.

Folder Integration between Windows 7 and Windows Virtual PC– Access your Windows 7 Known Folders:  My documents, Pictures, Desktop, Music, Video, from inside the virtual windows environment, such as Windows XP Mode

Clipboard Sharing – Cut and paste between your Windows 7 and Windows Virtual PC.

Printer Redirection – Print directly to your attached printer from your Windows Virtual PC applications either in application mode or desktop mode.

SPECIAL THANKS TO Ran Oelgiesser and Fei Lu for their help with this post.


Windows 7 Enterprise Edition; Understanding Software Assurance/Volume Licensing

As Brandon just posted about, MSDN and TechNet Plus Subscribers can now download Windows 7.

Starting tomorrow August 7th, our Software Assurance/Volume License customers will be able to download the Windows 7 Enterprise Edition as well.

We are also planning an Enterprise Edition Evaluation version to be released in the near future. Watch for more details on that here in this blog. (Evaluation version was mentioned in Brandon’s previous post here)

To ensure there is no confusion, I wanted to take a moment to clarify a few points:

  • While you may evaluate Windows 7 Enterprise for 90 days from the Volume License Web site, in order to deploy it into production now, you need to have an active Windows Client licenses covered by Software Assurance.
  • If you don’t have Software Assurance, you should work with your local account representative or Large Account Reseller to purchase the licenses. As of September 1st you will be able to purchase product Volume License upgrades to Windows 7 Pro and be able to order the media for Windows 7 Enterprise available to Software Assurance customers.

I’d also like to answer some of the most asked questions I’ve been seeing:

What features do I not have in Windows 7 Professional that I would have in Windows 7 Enterprise?

Windows 7 Professional does not support key features like DirectAccess, BitLocker Drive Encryption, BitLocker To Go, Enterprise Search Scopes, VDI experience enhancements, BranchCache, and Multilingual User Interface Language Packs.

What is Volume Licensing?

Volume Licensing is the most affordable way to upgrade your existing PCs to Windows 7. If your PCs are not already covered by Software Assurance, you can purchase upgrade licenses through a Volume Licensing program to gain access to Windows 7 Enterprise.

Windows licenses available through Volume Licensing are upgrade-only licenses. They do not replace purchasing the initial Windows licenses for software that comes pre-installed on new PCs. Each desktop that runs the Windows 7 upgrade must first be licensed to run one of the qualifying operating systems (Windows Vista (Enterprise/Business/Ultimate) or Windows XP (Professional)—otherwise the PC will not have a valid, legal Windows license.

What is Software Assurance?

When you acquire Windows 7 Professional licenses, either through Volume Licensing upgrades or through an OEM, you can cover those licenses with Software Assurance to get rights to Windows 7 Enterprise, that offers unique benefits such as, BitLocker Drive Encryption and Multilingual User Interface Language Packs, as well as access to the Microsoft Desktop Optimization Pack. You can learn more about Software Assurance here.

What else do I get with Software Assurance?

· Microsoft Desktop Optimization Pack (MDOP) - MDOP is an add-on subscription license that provides innovative technologies to help better control the desktop PC, accelerate and simplify desktop PC deployments and management, and create a dynamic infrastructure by turning software into centrally-managed services. Learn more about MDOP here.

  • Windows Virtual Enterprise Centralized Desktop (VECD) for Software Assurance - Windows VECD is an annual device-based subscription that enables organizations to license virtual copies of Windows 7 (or prior OS versions) in a variety of user scenarios.
  • Windows Fundamentals for Legacy PCs - Available exclusively to Microsoft Software Assurance customers, this small-footprint, Windows-based operating system solution is for customers with legacy computers running early operating systems who are not in a position to purchase new hardware.
  • Virtual OS Rights - Use up to four instances of Windows in virtual OS environments for each license that has active Software Assurance coverage.
  • New Version Rights - Receive new versions of licensed software released during the term of your coverage. If you have Software Assurance coverage for your PCs when Windows 7 is released, you will automatically receive rights to use Windows 7 Enterprise on those PCs.

Customers with Software Assurance for Windows also have access to the following additional benefits:

  • TechNet benefits through Software Assurance
  • Extended Hotfix support
  • 24x7 problem resolution support
  • Enterprise Source Licensing Program
  • E-learning
  • Training vouchers

For more information on the benefits of Windows 7 Enterprise, I recommend reviewing this post from Gavriella Schuster. Also, to understand more on how to assess Windows 7 Enterprise for your organization visit the Springboard Series on TechNet here

Windows 7 Enterprise is another example of Microsoft’s commitment to delivering continual innovation to enterprises around the globe. We look forward to working with you and continuing to share more information about Windows 7 and what it has to offer our business customers.

If you have more questions you can read our Guide to Windows Volume Licensing.


App-V 4.6 Beta Released

Our friends over in the MDOP team just released the beta version of the Microsoft Application Virtualization (App-V) 4.6 today.  We know that many of you are looking at application virtualization in both the context of your existing environment and also as part of your migration planning to Windows 7. 

Besides some enhancements to the sequencer to simplify the workflow for creating virtual application the team has added the ability to sequence 64 bit applications. As 64 bit computing becomes more common place in the Enterprise this first to market feature removes another challenge in your planning and rollout strategies.

Customers who want to get familiar App-V 4.6 Beta can register and download via Microsoft Connect.  As always, we want to hear from you.  We build great products by including feedback from our customers, so go ahead, test App-V 4.6 and give us feedback via Connect.

For customers who are currently using App-V 4.5 CU1 with their 32-bit Windows 7 systems, we will release an update to the 4.5 version of the product.  App-V 4.5 SP1 will be available within 90 days of Windows 7 general availability and provide full support for running App-V 4.5 and Windows 7 (32-bit) in production.  Enjoy!

For more information head over to the MDOP team’s blog post here.