Embed Size (px)
Citation preview
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
SMS (very) briefly…• Inventory of resources in a central (SQL) database
– Resource analysis can be done even if resource offline– HW and SW ressources of managed computers
• Ressource history available
– Everything present in db can be queried (SQL)
• Software deployment based on resource selection in the database– « Push » model : complementary to ActiveDirectory– Unattended or with user interaction– Based on the concept of package assigned to selected computers
• Package : set of « sources » and/or « programs » (ex : installer)
– No privileged requiered to install software (dedicated account)– Can be used for sytem patches or upgrades
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
… SMS (very) briefly
• Management through a MMC– SMS Administrator Console
– Privileges delegation
• Detailed and central logging on any action– Summary available
– Selection by log severity, machine…
• Generation of reports on resources configuration– Access to reports through a Web front end
– Lots of predefined reports, ability to define new ones
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
SMS Administrator Console
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Why SUS Feature Pack ?
• Use SMS as a replacement for SUS server– Automatic download of patches– Patches validation before deployment– Quick patches deployment / reboot enforcement if needed
• Use a WindowsUpdate like application on the client– Close look and feel– Multiple patches installation with only one reboot– Patches applicability / dependency / replacement
• Leverage on SMS inventory and reporting capabilities– Identify quicly machines with/without a given patch installed– List patch installed on a given machine, deployment rate of a patch…
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
SUS Feature Pack…
• Free add-in for SMS 2.0 (integrated into SMS 2003)
• Not restricted security fixes– Office, SQL, Exchange fixes…
– Supports NT4
• 3 stages process (3 SMS packages) per update category– Fixes catalog update (downloaded from Microsoft)
– Required fixes inventory on each client• Entered in the SMS database as part of the client hardware inventory
• Validation of patches to deploy (with automatic download if needed)
– Fixes deployment : one package for all the fixes of all platforms• Client (package program) is doing the selection at run time
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
… SUS Feature Pack
• 1 wizzard to select/validate patches– Patches proposed only if applicable to one client
– Handles download of selected patches
– Allow to define installation options for each patch
• 1 client WindowsUpdate like– Ability to postpone patch installation or reboot if authorized
• Ability to define a date where the patches are mandatory
– Install only applicable / not yet installed patches
– One reboot for all patches
– Progress bar
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Wizzard : Patch Selection
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Wizzard : Patch Parameters
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Wizzard : Patch Manual Download
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patch Deployment Logging
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patch Deployment Logging
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patch Deployment Logging
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patches Related Reports
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patches Related Reports
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patches Related Reports
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patches Related Reports
26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004
Patches Related Reports
