wmug presents
DESCRIPTION
WMUG Presents. System Center 2012 Configuration Manager Software Updates Management Presented by Robert Marshall MVP ConfigMgr. www.wmug.co.uk. What is Software Updates Management?. Deploy Microsoft and non-Microsoft Patches to your client estate. Reduce your Security exposure. - PowerPoint PPT PresentationTRANSCRIPT
![Page 1: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/1.jpg)
WMUG Presents
System Center 2012 Configuration Manager
Software Updates Management
Presented by Robert Marshall MVP ConfigMgr
www.wmug.co.uk
![Page 2: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/2.jpg)
What is Software Updates Management?
www.wmug.co.uk
• Deploy Microsoft and non-Microsoft Patches to your client estate
• Reduce your Security exposure
![Page 3: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/3.jpg)
Infrastructure requirements for Software Updates Management
www.wmug.co.uk
• ConfigMgr Software Updates Role
• Access to the Internet for Microsoft Updates
• Windows Update Agent
• WSUS
![Page 4: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/4.jpg)
Defining a Patching regime for your organisation
www.wmug.co.uk
• When to sync with Microsoft Updates?
• Define when you will patch
• Define what you will patch
• Patching out-of-cycle
![Page 5: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/5.jpg)
Software Updates
Patch classifications and severity
www.wmug.co.uk
• Critical Updates, Definition Updates, Security Updates, Updates, Update Rollups, Feature Packs and Tools
![Page 6: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/6.jpg)
Using the Search facilities in the ConfigMgr Console to refine your selections
www.wmug.co.uk
• Create your own searches and save them for re-use
![Page 7: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/7.jpg)
Software Update Groups
www.wmug.co.uk
• Contains a list of Software Updates• Is essentially an authorization list
• Used to measure Compliance
• Used to build a Deployment Package
![Page 8: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/8.jpg)
Deployment Packages
www.wmug.co.uk
• Contain the Software updates patch files for Clients to reference
• Sent to Distribution Points
![Page 9: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/9.jpg)
Automatic Deployment Rules
www.wmug.co.uk
• Mostly used for EndPoint Protection Definition file deployment to Clients
• Useful for automating the monthly patch cycle to Test machines
• Be aware of the consequences of deploying patches directly to Production Clients
![Page 10: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/10.jpg)
Software Updates Management Reporting
www.wmug.co.uk
• SQL Server Reporting Services
• Multiple categories of Report
![Page 11: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/11.jpg)
Deploying Software Updates
www.wmug.co.uk
• Requires a Software Update Group, a Deployment Package, Collections and Clients
![Page 12: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/12.jpg)
Understanding Supercedence and Expired Software Updates
www.wmug.co.uk
![Page 13: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/13.jpg)
Controlling Software Updates installation behaviour
www.wmug.co.uk
• Maintenance Windows
• Scheduling
![Page 14: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/14.jpg)
Software Updates Deployment Monitoring
www.wmug.co.uk
• In-console monitoring
• Reporting Services
• Deployment Monitoring Tool
![Page 15: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/15.jpg)
Software Updates logging
www.wmug.co.uk
• Server-side logs
http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SUPLog
• Client-side logs (Client Operations section)
http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_ClientOpLogs
• Technical Reference for Log Files in ConfigMgr - http://technet.microsoft.com/en-us/library/hh427342.aspx
![Page 16: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/16.jpg)
Basic troubleshooting steps for Software Updates
www.wmug.co.uk
• Device Targeted?
• Functional Client?
• Maintenance Window blocking deployment?
• Scan engine failure … broken WUA?
![Page 17: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/17.jpg)
Extending Patch Management to handle non-Microsoft patches
System Center Updates Publisher 2011 Guides
Kent Agerlund MVP – Coretech - http://bit.ly/l4JRZZ
Justin Chalfant – Patch My PC - http://bit.ly/YDV0y7
MMS 2013 – Managing Third Party Updates with ConfigMgr – Kent Agerlund and Lawrence Garvin
http://bit.ly/14BgVxU
www.wmug.co.uk
![Page 18: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/18.jpg)
A tour of the Software Updates Windows Management Instrumentation namespace on the client
www.wmug.co.uk
• Tool of choice - WBEMTEST
• Namespace - ROOT\CCM\SOFTWAREUPDATES\UPDATESSTORE
• Query the CCM_UPDATESTATUS instances
![Page 19: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/19.jpg)
Microsoft Forefront Endpoint Protection 2010 and Software Updates
EndPoint Protection Guides
• http://bit.ly/PWNyJ8
From Niall Brady at Windows-Noobs
http://www.windows-noob.com
www.wmug.co.uk
![Page 20: WMUG Presents](https://reader036.vdocument.in/reader036/viewer/2022081514/56816923550346895de05a3f/html5/thumbnails/20.jpg)
Thanks for watching
Slide deck is available for this session on the WMUG website in the Events section
www.wmug.co.uk
Register at WMUG.CO.UK and automatically receive Event announcements