1 / 20

WMUG Presents

WMUG Presents. System Center 2012 Configuration Manager Software Updates Management Presented by Robert Marshall MVP ConfigMgr. www.wmug.co.uk. What is Software Updates Management?. Deploy Microsoft and non-Microsoft Patches to your client estate. Reduce your Security exposure.

jacqui
Download Presentation

WMUG Presents

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. WMUG Presents System Center 2012 Configuration Manager Software Updates Management Presented by Robert Marshall MVP ConfigMgr www.wmug.co.uk

  2. What is Software Updates Management? • Deploy Microsoft and non-Microsoft Patches to your client estate • Reduce your Security exposure www.wmug.co.uk

  3. Infrastructure requirements for Software Updates Management • WSUS • ConfigMgr Software Updates Role • Access to the Internet for Microsoft Updates • Windows Update Agent www.wmug.co.uk

  4. Defining a Patching regime for your organisation • Define when you will patch • Define what you will patch • When to sync with Microsoft Updates? • Patching out-of-cycle www.wmug.co.uk

  5. Software Updates • Patch classifications and severity • Critical Updates, Definition Updates, Security Updates, Updates, Update Rollups, Feature Packs and Tools www.wmug.co.uk

  6. Using the Search facilities in the ConfigMgr Console to refine your selections • Create your own searches and save them for re-use www.wmug.co.uk

  7. Software Update Groups • Contains a list of Software Updates • Is essentially an authorization list • Used to build a Deployment Package • Used to measure Compliance www.wmug.co.uk

  8. Deployment Packages • Contain the Software updates patch files for Clients to reference • Sent to Distribution Points www.wmug.co.uk

  9. Automatic Deployment Rules • Mostly used for EndPoint Protection Definition file deployment to Clients • Useful for automating the monthly patch cycle to Test machines • Be aware of the consequences of deploying patches directly to Production Clients www.wmug.co.uk

  10. Software Updates Management Reporting • SQL Server Reporting Services • Multiple categories of Report www.wmug.co.uk

  11. Deploying Software Updates • Requires a Software Update Group, a Deployment Package, Collections and Clients www.wmug.co.uk

  12. Understanding Supercedence and Expired Software Updates www.wmug.co.uk

  13. Controlling Software Updates installation behaviour • Scheduling • Maintenance Windows www.wmug.co.uk

  14. Software Updates Deployment Monitoring • In-console monitoring • Reporting Services • Deployment Monitoring Tool www.wmug.co.uk

  15. Software Updates logging • Server-side logs • http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SUPLog • Client-side logs (Client Operations section) • http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_ClientOpLogs • Technical Reference for Log Files in ConfigMgr - http://technet.microsoft.com/en-us/library/hh427342.aspx www.wmug.co.uk

  16. Basic troubleshooting steps for Software Updates • Device Targeted? • Functional Client? • Maintenance Window blocking deployment? • Scan engine failure … broken WUA? www.wmug.co.uk

  17. Extending Patch Management to handle non-Microsoft patches • System Center Updates Publisher 2011 Guides • Kent AgerlundMVP – Coretech - http://bit.ly/l4JRZZ • Justin Chalfant – Patch My PC - http://bit.ly/YDV0y7 • MMS 2013 – Managing Third Party • Updates with ConfigMgr – Kent Agerlund and Lawrence Garvin • http://bit.ly/14BgVxU www.wmug.co.uk

  18. A tour of the Software Updates Windows Management Instrumentation namespace on the client • Tool of choice - WBEMTEST • Namespace - ROOT\CCM\SOFTWAREUPDATES\UPDATESSTORE • Query the CCM_UPDATESTATUS instances www.wmug.co.uk

  19. Microsoft Forefront Endpoint Protection 2010 and Software Updates • EndPoint Protection Guides • http://bit.ly/PWNyJ8 • From Niall Brady at Windows-Noobs • http://www.windows-noob.com www.wmug.co.uk

  20. Thanks for watching Slide deck is available for this session on the WMUG website in the Events section Register at WMUG.CO.UK and automatically receive Event announcements www.wmug.co.uk

More Related