windows-itpro-docs/windows/deployment/deploy-windows-mdt/use-orchestrator-runbooks-with-mdt.md
DocsPreview ce500fde9b
Latest updates for issues content (#379)
* Updated deployment-vdi-windows-defender-antivirus.md

* Updated deployment-vdi-windows-defender-antivirus.md

* Updated deployment-vdi-windows-defender-antivirus.md

* updates for new vdi stuff

* Adding important note to solve #3493

* Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-dir-sync.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Typo "&lt;"→"<", "&gt;"→">"

https://docs.microsoft.com/en-us/windows/application-management/manage-windows-mixed-reality

* Issue #2297

* Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Clarification

* Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md

Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>

* update troubleshoot-np.md

* update configure-endpoints-gp.md

* Removing a part which is not supported

* Name change

* update troubleshoot-np.md

* removed on-premises added -hello

* Added link into Domain controller guide

* Line corections

* corrected formatting of xml code samples

When viewing the page in Win 10/Edge, the xml code samples stretched across the page, running into the side menu. The lack of line breaks also made it hard to read.

This update adds line breaks and syntax highlighting, replaces curly double quotes with standard double quotes, and adds a closing tag for <appv:appconnectiongroup>for each code sample

* Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Update windows/deployment/update/waas-delivery-optimization-reference.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Update windows/deployment/update/waas-delivery-optimization-reference.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* corrected formating of XML examples

The XML samples here present the same formatting problems as in about-the-connection-group-file51.md (see https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3847/)

Perhaps we should open an issue to see if we have more versions of this code sample in the docs

* corrected formatting of XML example section

In the XML example on this page, the whitespace had been stripped out, so there were no spaces between adjacent attribute values or keys.

This made it hard to read, though the original formatting allowed for a scroll bar, so the text was not running into the side of the page (compare to https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3847 and https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3850, where the uncorrected formatting forced the text to run into the side menu).

* update configure-endpoints-gp.md

* Fixed error in registry path and improved description

* Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-dir-sync.md

Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com>

* Removing extra line in 25 

Suggested by

* update windows-analytics-azure-portal.md

* re: broken links, credential-guard-considerations

Context:
* #3513, MVA is being retired and producing broken links
* #3860 Microsoft Virtual Academy video links

This page contains two links to deprecated video content on Microsoft Virtual Academy (MVA).

MVA is being retired. 

In addition, the Deep Dive course the two links point to is already retired, and no replacement course exists.

I removed the first link, as I could not find a similar video available describing which credentials are covered by credential guard.

I replaced the second link with a video containing similar material, though it is not a "deep dive".

Suggestions on handling this problem, as many pages contain similar links, would be appreciated,.

* removed link to retired video re: #3867

Context:
* #3513, MVA is being retired and producing broken links
* #3867, Microsoft Virtual Academy video links

This page contains a broken link to deprecated video content on Microsoft Virtual Academy (MVA).

MVA is being retired. 

In addition, the Deep Dive course is already retired, and no replacement course exists.

I removed the whole _See Also_ section, as I could not find a video narrowly or deeply addressing how to protect privelaged users with Credential Guard. The most likely candidate is too short and general: https://www.linkedin.com/learning/cism-cert-prep-1-information-security-governance/privileged-account-management

* addressing broken mva links, #3817

Context:
* #3513, MVA is being retired and producing broken links
* #3817, Another broken link

This page contains two links to deprecated video content on Microsoft Virtual Academy (MVA).

MVA is being retired. 

In addition, the Deep Dive course the two links point to is already retired, and no replacement course exists.

I removed the first link, as we no longer have a video with similar content for a similar audience. The most likely candidate is https://www.linkedin.com/learning/programming-foundations-web-security-2/types-of-credential-attacks, which is more general and for a less technical audience. 

I removed the second link and the _See Also_ section, as I could not find a similar video narrowly focused on which credentials are covered by Credential Guard. Most of the related material available now describes how to perform a task.

* Update deployment-vdi-windows-defender-antivirus.md

* typo fix re: #3876; DMSA -> DSMA

* Addressing dead MVA links, #3818

This page, like its fellows in the mva-links label, contains links to a retired video course on a website that is retiring soon.

The links listed by the user in issue #3818 were also on several other pages, related to Credentials Guard. 

These links were addressed in the pull requests #3875, #3872, and #3871

Credentials threat & lateral threat link: removed (see PR #3875 for reasoning) 
Virtualization link: replaced (see #3871 for reasoning)
Credentials protected link: removed (see #3872 for reasoning)

* Adding notes for known issue in script

Solves #3869

* Updated the download link admx files Windows 10

Added link for April 2018 and Oct 2018 ADMX files.

* added event logs path

Referenced : https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/event-views-exploit-guard

* Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md

Suggestions applied.

Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>

* Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md

Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>

* Update deployment-vdi-windows-defender-antivirus.md

* screenshot update

* Add files via upload

* update 4 scrrenshots

* Update deployment-vdi-windows-defender-antivirus.md

* Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>

* Re: #3909

Top link is broken, #3909 

> The link here does not work:
> Applies to: Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)

The link to the pdf describing MDATP was broken.

Thankfully, PR #2897 updated the same link in another page some time ago, so I didn't have to go hunting for an equivalent

* CI Update

* Updated as per task 3405344

* Updated author

* Update windows-analytics-azure-portal.md

* added the example query

* Updated author fields

* Update office-csp.md

* update video for testing

* update video

* Update surface-hub-site-readiness-guide.md

line 134 Fixed  video link MD formatting

* fixing video url

* updates from Albert

* Bulk replaced author to manikadhiman

* Bulk replaced ms.author to v-madhi

* Latest content is published (#371)

* Added 1903 policy DDF link and fixed a typo

* Reverted the DDF version

* Latest update (#375)

* Update deployment-vdi-windows-defender-antivirus.md

* Update deployment-vdi-windows-defender-antivirus.md
2019-06-06 15:54:17 -07:00

9.6 KiB

title, description, ms.assetid, ms.reviewer, manager, ms.author, keywords, ms.prod, ms.mktglfcycl, ms.localizationpriority, ms.sitesec, ms.pagetype, author, ms.date, ms.topic
title description ms.assetid ms.reviewer manager ms.author keywords ms.prod ms.mktglfcycl ms.localizationpriority ms.sitesec ms.pagetype author ms.date ms.topic
Use Orchestrator runbooks with MDT (Windows 10) This topic will show you how to integrate Microsoft System Center 2012 R2 Orchestrator with MDT to replace the existing web services that are used in deployment solutions. 68302780-1f6f-4a9c-9407-b14371fdce3f laurawi greglin web services, database w10 deploy medium library mdt greg-lindsay 07/27/2017 article

Use Orchestrator runbooks with MDT

This topic will show you how to integrate Microsoft System Center 2012 R2 Orchestrator with MDT to replace the existing web services that are used in deployment solutions. MDT can integrate with System Center 2012 R2 Orchestrator, which is a component that ties the Microsoft System Center products together, as well as other products from both Microsoft and third-party vendors. The difference between using Orchestrator and "normal" web services, is that with Orchestrator you have a rich drag-and-drop style interface when building the solution, and little or no coding is required.

Note   If you are licensed to use Orchestrator, we highly recommend that you start using it. To find out more about licensing options for System Center 2012 R2 and Orchestrator, visit the System Center 2012 R2 website.

Orchestrator terminology

Before diving into the core details, here is a quick course in Orchestrator terminology:

  • Orchestrator Server. This is a server that executes runbooks.
  • Runbooks. A runbook is similar to a task sequence; it is a series of instructions based on conditions. Runbooks consist of workflow activities; an activity could be Copy File, Get User from Active Directory, or even Write to Database.
  • Orchestrator Designer. This is where you build the runbooks. In brief, you do that by creating an empty runbook, dragging in the activities you need, and then connecting them in a workflow with conditions and subscriptions.
  • Subscriptions. These are variables that come from an earlier activity in the runbook. So if you first execute an activity in which you type in a computer name, you can then subscribe to that value in the next activity. All these variables are accumulated during the execution of the runbook.
  • Orchestrator Console. This is the Microsoft Silverlight-based web page you can use interactively to execute runbooks. The console listens to TCP port 81 by default.
  • Orchestrator web services. These are the web services you use in the Microsoft Deployment Toolkit to execute runbooks during deployment. The web services listen to TCP port 82 by default.
  • Integration packs. These provide additional workflow activities you can import to integrate with other products or solutions, like the rest of Active Directory, other System Center 2012 R2 products, or Microsoft Exchange Server, to name a few.

Note   To find and download additional integration packs, see Integration Packs for System Center 2012 - Orchestrator.

Create a sample runbook

This section assumes you have Orchestrator 2012 R2 installed on a server named OR01. In this section, you create a sample runbook, which is used to log some of the MDT deployment information into a text file on OR01.

  1. On OR01, using File Explorer, create the E:\Logfile folder, and grant Users modify permissions (NTFS).

  2. In the E:\Logfile folder, create the DeployLog.txt file. Note
    Make sure File Explorer is configured to show known file extensions so the file is not named DeployLog.txt.txt.

    figure 23

    Figure 23. The DeployLog.txt file.

  3. Using System Center 2012 R2 Orchestrator Runbook Designer, in the Runbooks node, create the 1.0 MDT folder.

    figure 24

    Figure 24. Folder created in the Runbooks node.

  4. In the Runbooks node, right-click the 1.0 MDT folder, and select New / Runbook.

  5. On the ribbon bar, click Check Out.

  6. Right-click the New Runbook label, select Rename, and assign the name MDT Sample.

  7. Add (using a drag-and-drop operation) the following items from the Activities list to the middle pane:

    1. Runbook Control / Initialize Data
    2. Text File Management / Append Line
  8. Connect Initialize Data to Append Line.

    figure 25

    Figure 25. Activities added and connected.

  9. Right-click the Initialize Data activity, and select Properties

  10. On the Initialize Data Properties page, click Add, change Parameter 1 to OSDComputerName, and then click Finish.

    figure 26

    Figure 26. The Initialize Data Properties window.

  11. Right-click the Append Line activity, and select Properties.

  12. On the Append Line Properties page, in the File text box, type E:\Logfile\DeployLog.txt.

  13. In the File encoding drop-down list, select ASCII.

  14. In the Append area, right-click inside the Text text box and select Expand.

    figure 27

    Figure 27. Expanding the Text area.

  15. In the blank text box, right-click and select Subscribe / Published Data.

    figure 28

    Figure 28. Subscribing to data.

  16. In the Published Data window, select the OSDComputerName item, and click OK.

  17. After the {OSDComputerName from "Initialize Data"} text, type in has been deployed at and, once again, right-click and select Subscribe / Published Data.

  18. In the Published Data window, select the Show common Published Data check box, select the Activity end time item, and click OK.

    figure 29

    Figure 29. The expanded text box after all subscriptions have been added.

  19. On the Append Line Properties page, click Finish.

    Test the demo MDT runbook

    After the runbook is created, you are ready to test it.

  20. On the ribbon bar, click Runbook Tester.

  21. Click Run, and in the Initialize Data Parameters dialog box, use the following setting and then click OK:

    • OSDComputerName: PC0010
  22. Verify that all activities are green (for additional information, see each target).

  23. Close the Runbook Tester.

  24. On the ribbon bar, click Check In.

figure 30

Figure 30. All tests completed.

Use the MDT demo runbook from MDT

  1. On MDT01, using the Deployment Workbench, in the MDT Production deployment share, select the Task Sequences node, and create a folder named Orchestrator.
  2. Right-click the Orchestrator node, and select New Task Sequence. Use the following settings for the New Task Sequence Wizard:
    1. Task sequence ID: OR001
    2. Task sequence name: Orchestrator Sample
    3. Task sequence comments: <blank>
    4. Template: Custom Task Sequence
  3. In the Orchestrator node, double-click the Orchestrator Sample task sequence, and then select the Task Sequence tab.
  4. Remove the default Application Install action.
  5. Add a Gather action and select the Gather only local data (do not process rules) option.
  6. After the Gather action, add a Set Task Sequence Variable action with the following settings:
    1. Name: Set Task Sequence Variable
    2. Task Sequence Variable: OSDComputerName
    3. Value: %hostname%
  7. After the Set Task Sequence Variable action, add a new Execute Orchestrator Runbook action with the following settings:
    1. Orchestrator Server: OR01.contoso.com
    2. Use Browse to select 1.0 MDT / MDT Sample.
  8. Click OK.

figure 31

Figure 31. The ready-made task sequence.

Run the orchestrator sample task sequence

Since this task sequence just starts a runbook, you can test this on the PC0001 client that you used for the MDT simulation environment. Note   Make sure the account you are using has permissions to run runbooks on the Orchestrator server. For more information about runbook permissions, see Runbook Permissions.

  1. On PC0001, log on as CONTOSO\MDT_BA.

  2. Using an elevated command prompt (run as Administrator), type the following command:

    cscript \\MDT01\MDTProduction$\Scripts\Litetouch.vbs
    
  3. Complete the Windows Deployment Wizard using the following information:

    1. Task Sequence: Orchestrator Sample
    2. Credentials:
      1. User Name: MDT_BA
      2. Password: P@ssw0rd
      3. Domain: CONTOSO
  4. Wait until the task sequence is completed and then verify that the DeployLog.txt file in the E:\Logfile folder on OR01 was updated.

figure 32

Figure 32. The ready-made task sequence.

Set up MDT for BitLocker

Configure MDT deployment share rules

Configure MDT for UserExit scripts

Simulate a Windows10 deployment in a test environment

Use the MDT database to stage Windows 10 deployment information

Assign applications using roles in MDT

Use web services in MDT