IT Expert Voice

Windows 7 has many good features, but for some reason its management tools haven’t gotten the attention they deserve. That’s a shame, because Windows 7 offers a superior collection of built-in administration tools.

Many of Windows 7’s new management tools are bundled together in the Windows Management Framework. The Framework is made up of three components: Windows Remote Management 2.0 (WinRM); Windows PowerShell 2.0; and Background Intelligent Transfer Service 4.0 (BITS).

WinRM is Microsoft’s implementation of WS-Management Protocol, based on Simple Object Access Protocol (SOAP). Essentially, WinRM enables you to run PowerShell shells, scripts, and commands on remote Windows 7 PCs.

PowerShell, the Windows equivalent to the Unix/Linux shell, has always been handy for administrators who like using scripts for fine-tuned control of their client systems. The new version of PowerShell includes several features which expands on this functionality.

For my money, there are three important changes. PowerShell 2.0 now lets you run commands on one or more remote computers from a single PC. Another real win is the PowerShell Integrated Scripting Environment (ISE), a graphical development and debugging environment for PowerShell scripts. Last, but not least, PowerShell now has several new debugging features, making it much easier to develop scripts.

BITS remains a strong file-transfer utility. It uses HTTP or HTTPS for transfers and works well for pushing automatic updates out to clients, as long as you have the right WinRM and PowerShell scripts.

One BITS feature which deserves mention is Deployment Image Servicing and Management (DISM). This is a command-line tool that you can use to set up Windows images before deploying them.

So, for example, if you want to set up say up several dozen remote Windows 7 PCs with Spanish as their default language, the appropriate drivers for that branch’s printers, and their own wacky network settings, you can do that. Indeed, you can use DISM to install, uninstall, configure, and update almost all of Windows’ features, packages, drivers, and international settings.

Another nice thing about all the above is that while DISM comes standard in Windows 7 and Windows Server 2008 R2, you can add it to other Microsoft OSs, including Windows XP, Windows Vista, and Windows Server 2003 and Server 2008. Once in place, you can then use the updated Windows Management Framework across all these operating systems.

You might have noticed that while the components of the Windows Management Framework are brand-new, they have a “retro” look. At heart, they’re all built around the idea of scripting rather than using pretty, but not as powerful, graphical interfaces. (Some of us are still happiest at a command line.) If the idea of writing complex scripts, even with PowerShell ISE’s help, gives you the shivers, you’ll be glad to know that you can find lots of help for setting up management scripts at Microsoft’s excellent Script Center. This site is a must for any serious Windows administrator.

Beyond Windows Management Framework

In addition to the Windows Management Framework, Windows 7 also includes other improved management tools.

The first of these, the Windows Troubleshooting Platform (WTP) is a Windows Management Framework spin-off. With WTP, you can write your own automated troubleshooting routines.

For more on Windows 7 troubleshooting, see Rescue Windows 7 in Five Minutes or Less and Troubleshooting the Blue Screen of Death.

When your users run into a common problem, instead of calling up a tech support person, they can be walked-through a troubleshooting routine. You can set up troubleshooting packs to start automatically if an external problem pops up. Say, for instance, an application fails to save a file to a server. Rather than leave the users wondering what’s wrong, a WTP pack can check to see if the PC is still connected to the network and whether the server is still available. If that doesn’t resolve the situation, then it can recommend the Help Desk call.

You can also use WTP to check a sick system against a known working Windows configuration for that PC. Armed with the differences between the working and current bad configuration, a WTP program can be set to restore the system to a good configuration.

Don’t get the idea that this is just another “revert to the last known working configuration” tool. While you can use it that way, WTP can also be used to only fix changes which may have led to the current problem. For instance, if Windows 7’s Aero graphics are off, a troubleshooting pack can check and repair first Aero’s, and, if need be, the graphics sub-system.

Deployed correctly, WTP should make ordinary, day-in, day-out, PC troubleshooting much easier. This, in turn, will let both workers and IT technicians spend their time on more productive endeavors.

Besides WTP, Group Policy settings has also been improved. With the new Group Policy settings you can now more easily manage data protection and auditing. For example, with AppLocker and Group Policies, administrators can limit which applications users can run. Using Group Policy Preferences, you can also extend the range of what Group Policy can manage and how Group Policy applies settings to specific users or machines. All-in-all, these changes takes the already strong Group Policy management tools and make them more powerful and flexible than ever.

If all this strikes you as a bit too much to handle, you might consider buying Microsoft Desktop Optimization Pack (MDOP) 2009 R2 for Windows 7. This Software Assurance package offers six components. These include tools which can help with deploying virtual applications, remote desktops; using Windows 7 with BranchCache and AppLocker and integrating Windows 7 with third-party LDAP directory services. One advantage of MDOP is that it can help you get a handle on managing Windows 7 in a hurry, without the learning curve required by Windows Management Framework.

Whether you dream of PowerShell scripts or your IT staff needs all the hand-holding it can get, Windows 7 has the tools you need to make desktop management much easier.

Want more like this? Sign up for the weekly IT Expert Voice newsletter so you don’t miss a thing!