enterprise desktop software management services ... · enterprise desktop software management...

Enterprise Desktop Software Management Services

Replacement for Novell ZENworks

Recommendation for Enterprise Desktop Software Management Services

Request for Proposal #15-09-4558

Device Imaging and Integration (DII)Posted by Larry Barrios, DII Manager January 19, 2016


BACKGROUND

The purpose of recommendation for Enterprise Desktop Software Management ServicesRequest for Proposal #15-09-4558 is to find a desktop management system to replace NovellZenWorks. A primary initiative for the Device Imaging and Integration team (DII) over the past12 months has been to research available products and test those products in the district’senterprise network environment, with the ability to centralize the management of networkedsoftware for desktop and printer systems across all district sites.

With the mixed desktop environment

at CFISD, there is a requirement for

a management system that can

effectively manage all devices,

including PCs, Macs, tablets, and

others when new technology is

released. The key elements of this

system include:

• Inventory Management,

• Software distribution and version

management,

• Patch management,

• Remote control,

• Scalability,

• Reporting and Logging.

Currently, CFISD is using Novell ZENWorks 11.3 as the desktop management system.

CFISD is currently a Microsoft Domain Network comprised of desktops currently running

Windows XP, Windows 7-10; iPads; and Android OS on multiple types of hardware.

The large scope and the multiple environments has made patch and security management,

remote control and software distribution difficult to manage and track across the enterprise.



CURRENT ENVIRONMENT

The Device Imaging and Integration (DII) team currently supports 1247

software titles.

On 205 different

device images, and

Manually assigned

and distributed to

computers

individually or by lab.



CURRENT ENVIRONMENT

Device Imaging and Integration (DII) team

manages 2912 network printers from 13

manufacturers and 135 models



PROJECT SCOPE

his project will cover all devices in the district, and will result in the selection

of a product with the following functions:

• Provide a universal image for software provisioning across the enterprise.

• Provide a specific image if needed to certain devices across the enterprise.

• Provide the capability to manage, deploy, and report on software patches for devices across

the district’s enterprise network.

• Provide software to specific devices across the enterprise.

• Provide the capability to collect software and hardware inventory on devices from a

centralized location for management and reporting.

• Provide remote control to devices across the enterprise.

• Provide the ability to fine tune settings in the software, i.e., registry or within software.



PROJECT GOALS

roject Goals: This project’s near term goals will be to replace ZENWorks with another system

that meets the needs of the district. Also, implement control mechanisms to provide a secure

device imaging and integration infrastructure operating environment, and specifically, rectify four

primary concerns:

1. Software Packaging and Deployment

The DII team is in need of a software solution that will automate the process of software

assignment and installation.

EXAMPLECurrent Issue:

Project sheets, which are groups of software packages (titles)

by curriculum or administrative configuration, are manually

assigned and distributed to computers individually or by

classroom lab. Once assigned, the user must select the

software to be installed from the Zen Window. This makes

delivering software to devices a manual process and difficult

to manage. Project 302 (see table on the right) is an example

of one software image, showing the numbers of software

titles associated with one image, and there are over 200

images that DII manages.



PROJECT GOALS

2. Security Patch Deployment, Reporting, and Communication

The DII team needs a formalized process to ensure mandatory security patches are successfully

deployed across the district’s campuses and device install base. The district is at risk because wehave limited capabilities to deploy patches to all potentially affected devices. As a result, these devices

may become infected, disrupting availability of services, and potentially impacting district-wide

operations.

EXAMPLE

Current Issue:

The district needs to upgrade all devices using

Internet Explorer 8, 9, and 10 to Internet

Explorer 11 however the district does not havean automated way to do this. This means that

80% of district devices using Internet Explorer

need to be manually upgraded.



PROJECT GOALS

3. Device Identification

The DII team needs the ability to identify hardware devices in an automated, timely manner, including

details such as device type, operating system release level, device location, software licensing,

software inventory, and owner. In addition, the District does not have a comprehensive hardware

system to enable the ability to identify devices. There is a need to verify compatibility and assess

vulnerability of all devices across the district, and provide remote control support from a centralized

system.


The DII team needs the ability identify all devices

running a specific software license and version to

determine budget needs and an upgrade strategy.

Once identified, there is a need to remotely upgrade

the software if needed. There is a current need to

upgrade Adobe software to the latest version.Currently it is a manual process to figure out which

devices need to be upgraded, then once identified it

is a manual process to upgrade the devices.



PROJECT GOALS

4. Printer Management

The DII team and the Network Management Operations (NMO) team needs the ability to assign

printers to devices that are used by multiple students and staff. The district does not have a automated

solution to distribute printer assignments making it difficult to remotely manage the district’s printer

fleet. The team desires to move away from printer servers and use a managed software system to

configure and deploy print services. The teams need the ability to distribute the printer administrationand monitoring of printers at the campus level. Also, the teams need the ability monitor the printer

usage across the district to assure toner cartridge and usage is managed, including Bring Your OwnTechnology (BYOT) and mobile printing.


The DII team needs an automated process to manageprint-related Wide Area Network (WAN) network traffic to

eliminate congestion on the network or a single point of

failure that could interrupt printing if a print server goes

down. The district currently uses eight print servers. With

PrinterLogic, the print server will be reduced to one.



Initiates Proof Of Concept (POC)

The Device Imaging and Integration (DII) team

asked vendors to participate in a

Proof of Concept (POC) at

Anthony MS and Bang Elementary

• January 2015 - The DII team conducted a

LANDesk Proof of Concept (POC) at

Anthony middle school and ran the POC

through May 2015. It was 100% successful.

• September 2015 - The DII team conducted a

Microsoft System Center Configuration

Manager (SCCM) POC at Bang elementary

school, and is currently in use. Though

successful it was more difficult to manage

and more expensive.



Evaluation Team

The Device Imaging and Integration (DII) Team

Proof of Concept (POC) Evaluators

Austen Chang, Larry Barrios, Josh Zhang,

Michelle Campos, and Lillie Swearingen


LANDesk Proof Of Concept (POC)

At Anthony Middle School

Lillie Swearingen, Beau Weills,

Don Landers and Geoffrey Brown Lillie Swearingen, Geoffrey Brown and Josh Zhang

Monday February 23rd, 2015, DII team (Larry Barrios, Josh Zhang and Lillie Swearingen) met with Sherma

Duck (principal from Anthony Middle School) and Geoffrey Brown, Anthony MS Service Technician and

discussed moving the LANDesk Proof of Concept to Anthony Middle School. Sherma agreed to allow her

campus to be converted from ZENWorks to LANDesk. Josh and Lillie, along with LANDesk engineer Beau

Wells, worked with Geoffrey Brown to convert General User Carts to LANDesk. Lillie, Josh and Geoffrey

converted 5 carts for a total of 307 laptops imaged using the new LANDesk system (LDMS).


Microsoft SCCM Proof Of Concept (POC)

At Bang Elementary School

DII team members Larry Barrios, Josh Zhang and LillieSwearingen meet with Bang Principal Erwann Wilson

and Behavior Interventionist/Computer Liaison Rodney

Garcia. They met to discuss rolling out Microsoft

System Center (Desktop Management System) at Bang

Elementary. DII wanted to test the features of

Microsoft’s System Center so they could compareprogram features against other desktop management

systems.

DII is in the process of testing desktop management

systems to complete an RFP (Request For Proposal).

The system they choose will replace the current Novell

ZENWorks system.

aging and Integration ( DII) TeamJanuary 19, 2016Posted by: Larry Barrios, Device Imaging and Integration Manager


Evaluation Results

Comparison Between Proof of Concept (POC) Systems:

LANDesk and Microsoft System Center Confirmation Manager (SCCM)

Device Imaging and Integration (DII)Posted by Lillie Swearingen, DII Technical Analyst January 19, 2016


LANDesk Product Research

LANDesk K-12 Customer Base

Adams 12 Five Star Schools

Albuquerque Public Schools

Jordan School District

Granite School District

Harlandale Independent School District

Broken Arrow Public Schools

Grapevine-Colleyville Ind. School District

Broward County Public SchoolsPalm Beach County Schools Technical Operations




LANDesk Industry-Wide Customer Base




Gartner Group

Product Analysis in

June 2015


LANDesk Software Distribution Architecture

LANDESK Software Distribution

Create software

packages

Manage software

groups for specificcurriculum areas

Create rules for

automatic software

installation

LANDESK

Workspace

Software Catalog Users can browse

through the LANDESK

Workspace anddownload and install

software

LANDESK

SoftwareDatabase

Software will be

automatically installed

on computers based

off pre-set rules

LANDESK

Management

System

Leadership and VisionPosted by Frankie Jackson, Chief Technology Officer December 18, 2015

LANDesk Software Distribution Architecture

LANDESK Software Distribution

Microsoft Office 2013

LANDESKMicrosoft Silverlight Workspace

Software CatalogKaspersky Antivirus

Adobe CC Suite

Adobe Flash

Google Chrome LANDESKSoftware

Google Earth Database

Audacity

ExamView Player

TI SmartView

LANDESKJCreator Pro Management

SystemMicroType

Certiport

Users can browsethrough the LANDESK

Workspace and

download and install

software

Software will be

automatically installed

on computers basedoff pre-set rules


LANDesk Software Update Architecture

LANDESK Software Updates

Approve updates and

patches from majorvendors such as Microsoft,

Adobe, Java, Apple

LANDESK

Patch

Manager

Create softwaremaintenance windows to

prevent disruption of

work

LANDESK

ManagementSystem

Push critical patches andupdates outside of

maintenance windows

Computers will

automatically

download updates inthe background and

install during

maintenance window

Computers will check

for updates and reportupdating errors


LANDesk Software Imaging Architecture

LANDESK Imaging

Build base OS

images: Windows 7,

8.1, 10

Computers can beimaged remotely on

LANDESKcommand or based off

Imaging Suite schedule

Manage driver

packages to support

multiple hardware

platforms

LANDESK Newly purchasedSoftware computers cam beDatabase imaged and deployed

Create software in large groups

payloads for various

curriculum areas



RECOMMENDATION

Recommendation for Enterprise Desktop Software Management Services

Request for Proposal #15-09-4558 and Approved at the January 2016 Board Meeting

Funding Source: M & O Funds, Technology Bond Funds

• This recommendation is made to purchase a software product that will allow the district to managedesktops, mobile devices, and printers. The District is currently using ZENWorks which is a legacy

Novell product purchased in 2000.

• The district has migrated from a Novell network environment to a Microsoft network environment andneeded a product that would work in the new environment and manage the district’s growing number

of devices and different types of devices. Additionally, the district was looking for a product that would

help manage the district’s network printer fleet. LANDesk’s Printer Logic software eliminates print

servers.

• Support staff would no longer have to deal with print-related Wide Area Network (WAN) trafficcausing congestion on the network or the single point of failure that could interrupt printing if a print

server goes down. Additionally, the product allows for Bring Your Own Technology (BYOT) and

mobile printing.

• By migrating to LANDesk to manage the computer fleet, the District would save $109,900 annually

beginning in year two on recurring software maintenance costs. After testing and reviewingproposals, the committee felt that the LANDesk products performed better and offered the best valueand solution to the District.



LANDesk Training and Implementation

The DII team will be on a short implementation timeline, in order to make the transition from Novel ZENWorks by

July 1, 2016. Training and implementation includes formal classes, as well as onsite support from LANDesk

technical representatives to ensure 100% success.

OverviewIntro to LANDESK

Management Suite

Core ServerRequirementsConfigurationCertificatesActivation

ConsolesRequirements

Installation

Layout - GroupsLayout - Custom Columns

Layout - Fast Find

Web Console Navigation

Role Based Administration

AgentsConfiguration

Deployment

InventoryInventory Scanning Architecture

Software DiscoveryCustom Data

Queries

Real-time Inventory

Software License

MonitoringDiscovering Software in the

Environment

Monitoring SoftwareWorking with Software Licenses

ReportingReporting Console

Different Report Types

Remote ControlConfiguration

Legacy

HTML 5

Software DistributionArchitectureDistribution Package

Delivery

Targeted MulticastScheduled TasksScheduling

Preferred Servers

ProvisioningArchitecture

TemplateToolbar

Deployment

Scheduling

Patch and CompliancePatch and Compliance

Architecture

Patch and Compliance Download

Content Types

Security ScanScan and Repair Settings

Patch Deployment

Scheduling

Endpoint SecurityAntivirusApplication Control

LDMS Firewall

Windows Firewall

Device Management

Supplemental E-Learning

VideosCloud Services Appliance(formerly Management GatewayAppliance)



LANDesk Statement of Work for CyFair ISD

DII also asked for an implementation schedule from LANDesk. Because every implementation is

different, LANDesk provided a sample SOW (Statement Of Work) which would be customized forCyFair Independent School District. The implementation would be a thirty day rollout but the end

result would be that the product would be installed and running in the district. Click here for the

draft of SOW.


enterprise desktop software management services ... · enterprise desktop software management...

Documents