460 likes | 811 Views
Windows Management Technologies. Agenda. Architecting & Deploying Windows Server Update Services WMI and WS-Management Introducing the Microsoft Management Console (MMC) 3.0 Group Policy and the GPMC Monad. Architecting and Deploying Windows Server Update Services (WSUS).
E N D
Agenda • Architecting & Deploying Windows Server Update Services • WMI and WS-Management • Introducing the Microsoft Management Console (MMC) 3.0 • Group Policy and the GPMC • Monad
Architecting and Deploying Windows Server Update Services (WSUS)
What Is Update Services? • Corporate update management offering • Gets content from Microsoft Update (MU) service • RTW component of Windows Server • Free to Windows Server (2000 and above) licensees • Requires Windows Server / Core CAL for target systems • Does not change currently available offerings • SUS 1.0 continues to get content from WU • Core component of Microsoft’s Patch and Update Management solutions and roadmap
Solution Overview Microsoft Update WSUS Server Desktop ClientsTarget Group 1 Server ClientsTarget Group 2 WSUS Administrator Administrator approves updates Administrator puts clients in different target groups Administrator subscribes to update categories Server downloads updates from Microsoft Update Clients register themselves with the server Agents install administrator approved updates
Supported Updates • Content Partners • Windows, Office, SQL, Exchange at RTM • Additional products added over time • OS platforms • Client/agent • Windows 2000 SP3 and later, Windows XP RTM and later (incl. XP embedded and XP x64) • Windows 2003 RTM (32-bit only), Windows 2003 SP1 (x64 and ia64) • Server • Windows 2000 SP4 and later • Windows 2003 RTM and later (32-bit only) • International support • Client is localized to 25 Windows client locale • Server is localized to 17 Windows Server locales • MUI support
Server Summary • Simple to use Web UI allows administration from any computer • Synchronization engine to download updates from Microsoft Update • SQL-based database holds all data other than content (software files) • Can be set up in a hierarchy to suit organizational needs • Completely built on managed code • Uses BITS to efficiently utilize the network • Secure • Scalable
Server Architecture WSUS Servers/MU Admin workstation Clients Server/Server Web service Client/Server Web service Reporting Web service Admin UI Content sync Catalog sync Server API Metadata Store MSDE/SQL File Store (NTFS)
Client Summary • Win32 Service (Agent) implements most functionality • Extensible architecture based on Update type Handlers • Handlers for MSI, update.exe, drivers etc. • Automatically self-updates to newer versions offered on the server • Automatic Updates feature controllable by policy • Secure
Client Architecture WU Serviceor WSUS IE (WU Site) Customscripts WU Client WU Client API Updatehandlers Updatemanager Automaticupdates BITS Content store Metadata Store
Deployment Options • Server deployment options • Single server • Multiple servers • Replica • Autonomous • Disconnected servers
Single Server Microsoft update WSUS server Desktop clients
Single Server Small organization or simple network • Configure single server to talk to MU • Synchronize all relevant updates (e.g. Windows XP critical and security updates) • Configure clients to point to the WSUS server • Optionally: • Create target groups for different groups of machines • Configure clients to be members of a target group • Configure auto approval rules to approve updates for install automatically
Multiple Servers Microsoft Update WSUS server WSUS server Desktop clients Desktop clients
Multiple Server ScenarioLarge organization/complex network • Configure single/multiple servers to talk to MU • Synchronize all relevant updates (e.g. All Windows XP, 2000, 2003 critical, security updates) • Create a hierarchy of servers • Independent WSUS servers in the intranet • Replica servers • Configure clients to point to respective WSUS servers • Optionally: • Create target groups for different groups of machines • Configure clients to be members of a target group
Disconnected Servers Microsoft update WSUS server WSUS server Desktop clients
Disconnected ServerDisconnected networks • Setup an external server to talk to MU • Synchronize all relevant updates (e.g. all Windows XP, 2000, 2003 critical, security updates) • Export update data and content to media • Import update data and content to WSUS server on disconnected network • Server will validate Microsoft certificates on content and data relationships integrity • Configure clients to point to respective WSUS servers
WMI and WS-Management • WMI Architecture • WS-Management Overview
WMI Overview • WMI is the WBEM/CIM Microsoft implementation • Various components of Windows are surfaced by WMI • +600 WMI classes, + 3000 properties exposed • In the box since Windows 2000 • Windows NT 4.0 = ± 15 providers • Windows 2000 = ± 29 providers • Windows 2003 = ± 80 providers • Supports various WMI Clients • Supports scripting (WSH) • Native C++ • Managed code (.NET) • Supports command line operations (WMIC) • Remoting based on DCOM
.NET Client Applications Windows Forms Web Forms C/C++ Client Scripts WMI Consumers (Management Applications) System.Management WMI Scripting API COM Inter-Op 1 3 WMI COM API COM/DCOM 2 WMI Repository WMI Core (CIM Object Manager) WMI Infrastructure COM/DCOM COM Inter-Op SNMP WMI Provider Cimv2 WMI Provider Any WMI Provider WMI Providers System.Management. Instrumentation … Managed Objects SNMP Managed entity Windows (Win32) Managed entity Any Managed entity (Native Code) .NET WMI Provider .NET Managed App/entity Native C/C++ .NET C#, VB.NET, etc WMI Architecture
WS-ManagementThe Protocol • WS-Management is a joint effort with Intel, Sun, AMD, Dell, BMC Software and WBEM Solutions to use web services protocol for interoperable management • A Web-Services based Structured Access Protocol
WS-ManagementImplementation So what is WS-Management? • A Web Service • An XML/SOAP-based Management Protocol • Is used over HTTPS • Can access most existing WMI objects • Can access WS-Management capable SPs OB • In-Band provides a richer set of capabilities than the OOB, specifically software management
WS-ManagementImplementation - Continued • Microsoft Windows Server R2 ships with the first version of WS-Management • This version supports • Access to hardware instrumentation • Firewall friendly access to Windows instrumentation • Implemented over HTTPS • A WSMAN command line tool
.NET Client Applications Windows Forms Web Forms System.Management COM Inter-Op WS-Management WMI Plug-in For WS-Mgmt C/C++ Client Scripts WMI Consumers (Management Applications) WS-Management WMI Repository WMI Core (CIM Object Manager) WMI ScriptingAPI 3 WMI Infrastructure WMI COM API COM/DCOM COM/DCOM COM Inter-Op 2 SNMP WMI Provider Cimv2 WMI Provider Any WMI Provider WMI Providers System.Management. Instrumentation … SNMP Managed entity Windows (Win32) Managed entity Any Managed entity (Native Code) Managed Objects .NET WMI Provider .NET Managed App/entity 1 Native C/C++ .NET C#, VB.NET, etc WS-Management Access-Path WS-Management Enumerate Response WS-Management Enumerate Request HTTPS (TCP/443)
“New Policy” Many End User Results Many Computer Results Active Directory Group Policy OverviewDo More with Less Effort • Group Policy enables administrators to set and maintain a desired computing state • Allows for mass-customization – scalability without sacrificing flexibility to customize • Group Policy Management Console (GPMC) for administration One Administrator Action
Policy-Based ManagementWhat can you do with Group Policy? • Centralized storage and mgmt of user data • Users have access to data and settings from any computer • Consistency of user experience across computers • Data safety and availability • Rapid PC replacement • Configuration of the Operating System: • Networking settings, control panel access, remote assistance, disk quotas, IE • Securing the Operating System • Ongoing and dynamic configuration management
GPMC Overview • Admin tool for managing Group Policy • Set of scriptable interfaces for managing GP • MMC Snap-in, built on these interfaces • Feature Summary • Reporting • Search • Resultant Set of Policy (RSoP) integration • Backup/restore • Import/export, copy/paste • Scripting of GPO operations (not settings)
Key MMC 3.0 User Benefits • More reliable • Improved detection and reporting of snap-in problems • Ability to isolate hung snap-ins from console (new snap-ins only) • Improved usability • Asynchronous UI model • Simpler customization of consoles • Discoverability of actions • Richer snap-ins • Simplified customization for increased functionality • Templatized snap-in design • Functionally rich views through Winforms
Console Authoring Users asked us to make customizing consoles simpler OLD NEW
Actions Pane Users asked us to make functionality more discoverable Sub-panes: • Provide actions for the selected tree node • Provide actions for the selected item • Provide a helpful description for the selected item
Snap-in Customization Easy development of custom MMC snap-ins with minimal coding • Simple model for developing snap-ins • Functionally rich snap-ins with minimal development effort • VB snap-in development supported “400 lines of code instead of 6,000 for MMC 1.0” “Hands down it makes the job of creating a snap-in almost trivial”
Platform Support *Available via Windows Update or Web Download
Weak Cmd shell Weak language Spotty coverage Little guidance Inconsistent GUI focus Hard to automate SDK focus Programmer abstractions Monad and MSH Command-oriented scripting Users Admins Scripters Systems integrators Provides Interactive shell Cmdlets Utilities Scripting language Monad Introduction Problem Solution
● MSI Version 3.0 • Ships With XP SP2 • Does not Support Windows 9x, ME or NT. • Improved Logging • Scripting Objects • SourceList API Enhancements • Enhanced inventory API • Command line switches • Extensive enhancements in patching • SDK Tools and Documentation Updates • MSI 3.1 is now available
On-line Resources • Windows Server Update Services Home Page • http://www.microsoft.com/windowsserversystem/updateservices/default.mspx • Introduction to WMI • http://msdn.microsoft.com/library/en-us/dnanchor/html/anch_wmi.asp • Introduction to WS-MAN • http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wsman/wsman/about_ws-management.asp • What’s New in MMC • http://msdn.microsoft.com/library/default.asp?url=/library/en-us/managedMMC/html/7d607c5f-94e9-4d4f-9e4a-cd35cdbee7eb.asp • Introduction to Group Policy • http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx • Group Policy Management Console • http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx
MMS 2005 DVD Resources • SW02: Practical Group Policy - Application and Usage (Part 1) • SW03: Practical Group Policy - Application and Usage (Part 2) • SW04: Microsoft Baseline Security Analyzer (MBSA) 2.0 • SW05: Admin scripting: Managing Windows Security with scripts • SW06: Using web services for platform hardware management • SW10: Extending Software Update Services with the Application Programming Interface • SW11: Architecting and Deploying Software Update Services • SW15: Developing custom management tools in MMC V2.1 using VB.Net • SW12: Introduction to Monad Command Line Scripting
© 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.