supporting and maintaining desktop applications lesson 13

Supporting and Supporting and Maintaining Desktop Maintaining Desktop

ApplicationsApplicationsLesson 13

Skills MatrixSkills Matrix

Technology Skill Objective Domain Skill Domain #Software Deployment Overview

Support deployed applications

5.1

SMS Advanced Client Support deployed applications

5.1

Using Group Policy to Deploy Software


5.1

Creating a Network Share for Distributing Software via Group Policy


5.1


Technology Skill Objective Domain Skill Domain #Using Group Policy to Assign and Publish Packages


5.1

Deploying Software By Using Systems Management Server 2003


5.1

Installing Systems Management Server 2003


5.1

Assigning the SMS Client to Windows Vista by Using Group Policy


5.1


Technology Skill Objective Domain Skill Domain #Using Group Policy to Upgrade or Replace an Existing Application

Maintain desktop applications

5.3

Upgrading Applications Maintain desktop applications

5.3

Troubleshooting Group Policy Software Deployment

Maintain desktop applications

5.3

Microsoft offers two technologies for the purposes of installing and maintaining software on a Windows-based network.

Group Policy

Systems Management Server 2003 (SMS 2003)

Software Deployment Overview

Software Deployment OverviewSoftware Deployment Overview

Group Policy – Freely available as part of Windows Server 2003 when Microsoft Active Directory directory service is installed. Group Policy offers simple software deployment features and management using Windows Installer technology.

Group Policy lacks the sophisticated deployment, reporting, and scheduling features offered by Systems Management Server 2003 (SMS 2003).

Software Deployment Overview (cont.)


Group Policy supports the following features:

Software distribution using Microsoft Installer

Distribution of legacy applications using zap files

Removal of managed software

Customization of MSI-based application packages using transform files



Group Policy supports the following features (cont.):

Upgrading of managed applications

Ability to assign or publish applications to specific users or computers



You should consider using SMS Server under the following circumstances:

Software distribution needs to be managed for a large network with many physically dispersed sites.

Software deployments/upgrades need to be scheduled.



You should consider using SMS Server under the following circumstances (cont.):

Reporting and inventory capabilities are required.

Packages are frequently deployed, removed, or upgraded.



SMS Advanced Client 2.5 – Supports all operating systems from Windows 2000 to Windows Vista. Advanced Client has a number of benefits over IntelliMirror and Group Policy, especially in the area of supporting remote users on slow network links.

SMS Advanced Client


The SMS Advanced Client makes use of the BITS (Background Intelligent Transfer Service). The rate at which software is transferred from a DP (Distribution Point) to a client is adjusted according to the available bandwidth. BITS also makes it possible to restart an interrupted software download from the point at which it stopped.

Background Intelligent Transfer Service (BITS)


Microsoft Installer – Proprietary Microsoft system for installing applications on Windows operating systems. The file extension for Windows Installer packages is .msi.

Microsoft Installer

Using Group Policy to Deploy Software Using Group Policy to Deploy Software

IntelliMirror – Group of technologies that allows users’ data and programs to follow them around a network

IntelliMirror


Scope of Management – Refers to the Active Directory objects to which a Group Policy Object applies

Scope of Management (SOM)


Distributed File System (DFS) – Provides replication of files across multiple servers and the ability to route users transparently to the nearest available replicated copy of a given file

Distributed File System (DFS)


To use Group Policy to deploy software, create an NTFS or DFS network share for use as a software distribution point.

• Add Microsoft Installer packages to the share.

• Create an Organizational Unit (OU; optional).

Creating a Share for Distributing Software via Group Policy


• Create a new Group Policy object and link it to an Organizational Unit.

• Configure a new Software Installation in the Group Policy Object (GPO).

• Test the configuration.

Creating a Share for Distributing Software via Group Policy (cont.)


Log on to a file server in the contoso.com domain as an administrator.

• Create a folder named Software in a suitable location on a file server that’s a member of your Active Directory domain.

• Right-click the new folder, and then select Properties.

• Select the Security tab, and then click Add.

Creating a Folder for Distributing Software via Group Policy


• Key authenticated users in the Enter object names to select list box, and then click Check Names.

• Click OK to close the Select Users, Computers, or Groups dialog box.

• Make sure that Authenticated Users is highlighted on the Security tab and that the following permissions are selected: Read & Execute, List Folder Contents, and Read.

Creating a Folder for Distributing Software via Group Policy (cont.)


Log on to a file server in the contoso.com domain as an administrator.

• From the Start Menu, select Administrative Tools and then Distributed File System.

• Right-click Distributed File System in the Distributed File System console, and then select New Root.

• Click Next.

Creating a DFS Root


Ensure that Domain Root is selected before clicking Next.

• Select your domain to host the new root (in this case, contoso.com), and then click Next.

• Next to the Server name text box, click Browse to locate the server to host the new DFS root.

• Select the server in the Search results list box, and then click OK.

Creating a DFS Root (cont.)


• The server you selected should appear in the Server name text box. Click Next.

• In the Root name text box, give the new DFS root a name. You need to key only software. The full path for the new DFS root, which is \\contoso.com\software, appears in the Preview of UNC path to the root preview box.

• Click Next.



• Click Browse to browse for the folder called Software that you created in the previous procedure.

• Highlight the folder name, and then click OK.

• In the Root Share page, the folder name you selected should appear in the Folder to share text box.

• Click Next.



• Click Next. The Completing the New Root Wizard page appears.

• Review the settings, and then click Finish.

• Test the new DFS root by opening Windows Explorer, keying the path of the DFS root into the Address Box, and then clicking Enter. You should see the shared folder appear under Folders on the left side of the window.





Configured DFS root \\contoso.com\software in the DFS console

User Assignments – Software packages that are assigned to users via Group Policy and are advertised to a user via the Start menu when a user logs on to a computer

Computer Assignments – Windows Vista installs any packages assigned to computers the next time the user reboots the machine.

Using Group Policy to Assign and Publish Packages


Packages Published to Users – Appears only in the Add/Remove Programs control panel and not in the Start menu

Using Group Policy to Assign and Publish Packages (cont.)


Using Group Policy to Assign and Publish Packages (cont.)


Published (Users Only)

Assigned (User Accounts)

Assigned (Computer Accounts)

Where can the user find the application?

Add/Remove Programs Control Panel

Start menu Start menu

When or where is the application installed?

Add/Remove Programs Control Panel

At logon At reboot

How is the application installed?

Full installation As needed Full installation

Log on to your Windows Vista machine with your standard user account.

• Click Start.

• In the Start Search text box, key mmc, and then press Enter. A User Account Control dialog box appears.

• Provide administrator credentials, and then click OK. An MMC console appears.

Creating a New Group Policy Object


Click File, and then click Add/Remove Snap-in.

In the Available snap-ins list box, select Group Policy Management, and then click Add.

• Click OK to close the Add or Remove Snap-ins dialog box.

• In the console tree, expand Group Policy Management > Forest: contoso.com > Domains > contoso.com.

Creating a New Group Policy Object (cont.)


• Right-click Group Policy Objects, and then select New.

• Key SharedView in the Name text box, and then click OK.





SharedView GPO listed in the details pane

• To save the console you just created, click File and then click Save.

• Under the Save in column, click Desktop.

• In the File name text box, key GPMC SharedView.

• Click Save. The icon for this console now appears on the desktop.



Creating Software Categories


Software Categories allow users to locate programs easily in the Add/Remove Programs control panel.

Log on to your Windows Vista machine with your standard user account.

• Double-click the GPMC SharedView icon on the desktop.

• Provide administrator credentials, and then click OK.

Publishing Application Packages to Users via Group Policy


In the details pane under Group Policy Objects in contoso.com, right-click SharedView, and then select Edit.

• Expand User Configuration > Software Settings.

• Right-click Software installation, and then select New > Package.

Publishing Application Packages to Users via Group Policy (cont.)


• When selecting the MSI package to publish, it’s important to use the DFS share that we created earlier. In the File name box, key \\contoso.com\software, and then click Open.

• Select SharedView folder, and then click Open.

• Select SharedView MSI package, and then click Open.



• Verify that Published is selected as the default, and then click OK.

• Let’s assign this published application to a software category. Make sure that Software installation is highlighted under User Configuration, and right-click the Microsoft SharedView package in the details pane.



• Select Properties. The Microsoft SharedView (Beta) Properties dialog box appears.

• Select the Categories tab.

In the Available categories list box, select Collaboration, and then click Select. Collaboration now appears under the Selected categories list box.



• Click OK.

• Close Group Policy Object Editor.

• Link the new GPO to the Managed Users OU by right-clicking the Managed Users OU in the console tree and then selecting Link an Existing GPO.



• In the Group Policy objects list box, select SharedView, and then click OK. For the sake of simplicity, we’ll leave the security filtering set to Authenticated Users.

• Expand the Managed Users OU, and then select the SharedView GPO.





Links and security filtering for the SharedView GPO in the details pane

Log on to Windows Vista with a user account that is located in the Managed Users OU.

• From the Start menu, click Control Panel.

• Click Programs.

• Under Get Programs, select Install a program from the network.

• You should see Microsoft SharedView listed. Highlight the application, and then click Install.

Testing a Published Application


Log on to a Windows 2003 server in the contoso.com domain as an administrator.

• From the Start menu, open Administrative Tools > Active Directory Users and Computers.

• Under contoso.com, right-click Users, and then select New > Group.

• In the Group Name text box, key Accounts Application, and then click OK.

Creating an Active Directory Security Group


• Expand Users in the console tree, right-click Accounts Application, and then click Properties.

• Click the Members tab, and then click Add.

• Click Object Types. The Object Types dialog box appears.

• Select the Computers check box, and then click OK.

Creating an Active Directory Security Group (cont.)


• In the Select Users, Contacts, or Computers dialog box, key the name of your computer account, and then click Check Names.

• Verify that the computer name is underlined, and then click OK.

• Click OK to close the Accounts Application Properties dialog box.

Creating an Active Directory Security Group (cont.)


Filtering a Group Policy Object by Security Group


Security Filtering for a Group Policy Object

Group Policy can upgrade a previously assigned or published application in two ways.

The existing application can be uninstalled and replaced with the upgrade package.

The upgrade package can be installed without removing the previously deployed version of the application.

Using Group Policy to Upgrade or Replace an Existing Application


Upgrading an Application


Group Policy already understands that this new package will upgrade an existing package configured in this policy.

Log on to a Windows Server 2003 machine in the contoso.com domain as an administrator.

• Open Group Policy Object Editor.

• Expand Computer Configuration > Software Settings or User Configuration > Software Settings.

Redeploying an Application


• Click Software installation.

• Right-click the installation package in the details pane, and then select All tasks > Redeploy application.

Redeploying an Application (cont.)


Identifying Packages by Product Code


Microsoft Installer Packages can be identified by their Global Unique Identifier (GUID).

Before running RSoP, let’s “create” a problem for a Windows Vista workstation. Log on to a file server in the contoso.com domain as an administrator.

• Use Windows Explorer to browse to the folder called Software that you created earlier in this lesson.

Removing Authenticated Users from an ACL


• Right-click the Software folder, and then select Properties.

• Select the Security tab, and then click Authenticated Users in the Group or user names list box.

• Click Remove, and then click OK.

Removing Authenticated Users from an ACL (cont.)


Running RSoP Against a Windows Vista Workstation


RSoP component status

Systems Management Server 2003 offers more flexible and comprehensive deployment and management options for larger organizations.

Deploying Software Using Systems Management Server 2003

Deploying Software by Using Systems Deploying Software by Using Systems Management Server 2003Management Server 2003

Management Point (MP) – Advanced Clients communicate with Systems Management Server Management Points to retrieve Advanced Client Policy and check for advertisements

Distribution Point (DP) – A Systems Management Server where software packages are stored for SMS Clients to download

Deploying Software Using Systems Management Server 2003 (cont.)


Systems Management Server 2003 should be installed on a member server in the contoso.com domain.

Systems Management Server 2003 requires SQL Server 2000/2005 to be installed on either the same or preferably a different member server.

Installing Systems Management Server 2003


Installing Systems Management Server 2003 (cont.)


Install an SMS primary site.



SMS Site Information



SQL Server Information for the SMS Site Database



SMS Administrator Consoles

Upgrading Systems Management Server 2003 to SP3


Asset Intelligence Installation options

Upgrading Systems Management Server 2003 to SP3 (cont.)


SMS 2003 Deployment Readiness Wizard

Upgrading Systems Management Server 2003 to SP3 (cont.)


Do not accept unsigned data

Configuring the SMS Client


You must configure the Advanced Client to communicate with a specified SMS Site.

Log on to SMS with Domain Administrator credentials, and open the SMS Administrator console.

• Expand Site Database > Site Hierarchy > Site Settings, and then click Discovery Methods.

• In the details pane, right-click Active Directory System Discovery, and then select Properties.

Populating the SMS Server Database with Client Information


• Select the Enable Active Directory System Discovery option.

• Click Add on the right side of Active Directory Containers, and then select Local Domain or Forest for Location.

• Select Recursive for Search options to ensure that objects in child containers are also discovered.

Populating the SMS Server Database with Client Information


• Click OK.

• Select a container or domain/forest, and then click OK.

• Click the Polling Schedule tab.

• Click Schedule under the Recurrence pattern section, and then change the polling interval to every five minutes.

Populating the SMS Server Database with Client Information (cont.)


• Click OK.

• Select the Run discovery as soon as possible check box, and then click OK.

Populating the SMS Server Database with Client Information (cont.)


Log on to SMS with Domain Administrator credentials.

• Open the SMS Administrator console, and then expand your site.

• Right-click Packages, and then select New > Package From Definition.

Creating an SMS Package


• Browse for the Microsoft SharedView MSI package, click it, and then click Next.

• On the Source Files screen, select This package does not contain any files, and then click Next.

• Click Finish.

Creating an SMS Package (cont.)



• In the SMS Administrator console, expand Packages > Microsoft Corporation Microsoft SharedView.

• Right-click Distribution Points, click New, and then click Distribution Points.

Assigning a Package to an SMS Distribution Point


• Click Next on the Welcome page.

• Click Next on the Copy package page.

• Select all of the DPs (Distribution Points) where you want the package to be made available.

• Click Finish to close the wizard.

Assigning a Package to an SMS Distribution Point (cont.)



• Right-click the collection to which you want to advertise a package in the SMS Administrator console, and select All Tasks > Distribute Software.

• On the Welcome page, click Next.

Advertising a Package to a Collection


• Select the Select an existing package option, and then highlight the required package under the Packages list box.

• Click Next.

• Select the install method. In this case, let’s choose to install the package on every system in the collection without user interaction.

Advertising a Package to a Collection (cont.)


• Highlight Per-system unattended, and then click Next.

• Modify the Advertisement name and comment if required, and click Next.

• Choose whether to advertise the package to just this collection or to sub-collections as well, and click Next.



• On the Advertisement Schedule page, set the time from which the package will be advertised and whether the advertisement should expire, and then click Next.

• Let’s choose to assign the package because it’s mandatory for our organization. Select Yes. Assign the program.



• Set a date and time, and then click Next.

• Review the details, and then click Finish.

• Expand System Status > Package Status, and you’ll see the SharedView package listed.



Reports in SMS Server 2003


Report in Systems Management Server 2003

SummarySummary

You learned how to create new assigned and published packages using Group Policy.

You learned how to create packages and advertisements by using Systems Management Server.

You learned how to deploy and configure the SMS Advanced Client.

You Learned

SummarySummary

You learned how to run reports by using Systems Management Server.

You learned how to upgrade packages by using Group Policy.

You learned how to remove and redeploy packages by using Group Policy.

You learned that legacy applications can be deployed by Group Policy using zap files.

You Learned (cont.)

SummarySummary

You learned how to identify MSI packages by product code.

You learned how to assign packages to Distribution Points in Systems Management Server.

You learned how to use software categories in Group Policy.

You Learned (cont.)

supporting and maintaining desktop applications lesson 13

Documents

software deploymentsupgrades

sophisticated deployment

software distribution

sms server

windows server

sms client

following features

windowsbased network