140 likes | 313 Views
Microsoft Installer Technologies. and patch management approaches. Internal Competition Breeds Variety. MSI (Microsoft Installer Service) Microsoft Update Office Update SUS (Software Update Service) SMS (System Management Server) Others (MS SQL group, MS Exchange Group,…).
E N D
Microsoft Installer Technologies and patch management approaches
Internal Competition Breeds Variety • MSI (Microsoft Installer Service) • Microsoft Update • Office Update • SUS (Software Update Service) • SMS (System Management Server) • Others (MS SQL group, MS Exchange Group,…)
Stated Goals: end of 2004? • One method for updating applications (MSI version 3.0) • One method for updating operating systems (update.exe)
Current Problems • Inconsistent UI • Inconsistent features • Inconsistent reporting results • All leading to unpatched machines
MSI Capabilities • Compatible installers can be deployed via Group Policies • Compatible installers can be created by 3rd parties • Transforms can be used to add customizations without requiring installer source code access • Applications can be made “self-healing”
MSI Capabilities continued • Users do not need to be local administrator • Introduces UI consistency into application installers • Handles removal as well as installation
MSI problems • New versions of MSI can’t be deployed using MSI • Not all MSI installers can be used with Group Policies • Microsoft HotFixes and QFEs can’t be installed with MSI • MSI can’t update core OS components
Microsoft Update Features • Web interface • Can install core operating system components
MS Update disadvantages • Mostly a pull technology • Users must be member of local administrator group • Specific to Microsoft issued code • No “role based” deployment • Subject to denial of service attacks • No “self-healing” • Can be confused about what has been installed
Office Update • Nearly the same as Microsoft Update • Simply another web site with a different group maintaining a different set of configuration files (and ActiveX controls?)
SUS • Locally maintained version of Microsoft Update • SUS only supports OS updates at this time (no MS SQL Server or Office Updates) • Can only distribute Microsoft signed binaries, no 3rd party support • SUS administrators get to decide which updates from Microsoft to deploy locally
SUS and machine roles • Like Microsoft update, SUS does not have the concept of roles • Sites desiring “role” based machine deployment need multiple SUS servers
SMS • Microsoft’s heavy weight solution • Used by Microsoft’s internal ITG for deployment and patch management • Can be used to deploy OS components, MS applications, 3rd party applications • Role based or global • Can support downlevel products • Central deployment of hotfixes
(over stated ) Conclusion • Microsoft will continue to NOT meet our needs over the next two years • Lack of support for 3rd party applications via update.exe • Lack of self-healing via update.exe • Lack of OS patching via MSI • A continuing revenue stream from SMS