SUS Feature Pack for SMS

SUS Feature Pack for SMS Michel Jouvin LAL / IN2P3 jouvin@lal.in2p3.fr

SMS (very) briefly… • Inventory of resources in a central (SQL) database • Resource analysis can be done even if resource offline • HW and SW ressources of managed computers • Ressource history available • Everything present in db can be queried (SQL) • Software deployment based on resource selection in the database • « Push » model : complementary to ActiveDirectory • Unattended or with user interaction • Based on the concept of package assigned to selected computers • Package : set of « sources » and/or « programs » (ex : installer) • No privileged requiered to install software (dedicated account) • Can be used for sytem patches or upgrades SUS Feature Pack for SMS - HEPix - Edinburgh 2004

… SMS (very) briefly • Management through a MMC • SMS Administrator Console • Privileges delegation • Detailed and central logging on any action • Summary available • Selection by log severity, machine… • Generation of reports on resources configuration • Access to reports through a Web front end • Lots of predefined reports, ability to define new ones SUS Feature Pack for SMS - HEPix - Edinburgh 2004

SMS Administrator Console SUS Feature Pack for SMS - HEPix - Edinburgh 2004

Why SUS Feature Pack ? • Use SMS as a replacement for SUS server • Automatic download of patches • Patches validation before deployment • Quick patches deployment / reboot enforcement if needed • Use a WindowsUpdate like application on the client • Close look and feel • Multiple patches installation with only one reboot • Patches applicability / dependency / replacement • Leverage on SMS inventory and reporting capabilities • Identify quicly machines with/without a given patch installed • List patch installed on a given machine, deployment rate of a patch… SUS Feature Pack for SMS - HEPix - Edinburgh 2004

SUS Feature Pack… • Free add-in for SMS 2.0 (integrated into SMS 2003) • Not restricted security fixes • Office, SQL, Exchange fixes… • Supports NT4 • 3 stages process (3 SMS packages) per update category • Fixes catalog update (downloaded from Microsoft) • Required fixes inventory on each client • Entered in the SMS database as part of the client hardware inventory • Validation of patches to deploy (with automatic download if needed) • Fixes deployment : one package for all the fixes of all platforms • Client (package program) is doing the selection at run time SUS Feature Pack for SMS - HEPix - Edinburgh 2004

… SUS Feature Pack • 1 wizzard to select/validate patches • Patches proposed only if applicable to one client • Handles download of selected patches • Allow to define installation options for each patch • 1 client WindowsUpdate like • Ability to postpone patch installation or reboot if authorized • Ability to define a date where the patches are mandatory • Install only applicable / not yet installed patches • One reboot for all patches • Progress bar SUS Feature Pack for SMS - HEPix - Edinburgh 2004

Wizzard : Patch Selection SUS Feature Pack for SMS - HEPix - Edinburgh 2004

Wizzard : Patch Parameters SUS Feature Pack for SMS - HEPix - Edinburgh 2004

Wizzard : Patch Manual Download SUS Feature Pack for SMS - HEPix - Edinburgh 2004

Patch Deployment Logging SUS Feature Pack for SMS - HEPix - Edinburgh 2004

Patches Related Reports SUS Feature Pack for SMS - HEPix - Edinburgh 2004

SUS Feature Pack for SMS