SUS Feature Pack for SMS Michel Jouvin LAL / IN2P3

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 SMS (very) briefly… Inventory of resources in a central (SQL) database –Resource analysis can be done even if resource offline –HW and SW ressources of managed computers Ressource history available –Everything present in db can be queried (SQL) Software deployment based on resource selection in the database –« Push » model : complementary to ActiveDirectory –Unattended or with user interaction –Based on the concept of package assigned to selected computers Package : set of « sources » and/or « programs » (ex : installer) –No privileged requiered to install software (dedicated account) –Can be used for sytem patches or upgrades

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 … SMS (very) briefly Management through a MMC –SMS Administrator Console –Privileges delegation Detailed and central logging on any action –Summary available –Selection by log severity, machine… Generation of reports on resources configuration –Access to reports through a Web front end –Lots of predefined reports, ability to define new ones

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 SMS Administrator Console

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Why SUS Feature Pack ? Use SMS as a replacement for SUS server –Automatic download of patches –Patches validation before deployment –Quick patches deployment / reboot enforcement if needed Use a WindowsUpdate like application on the client –Close look and feel –Multiple patches installation with only one reboot –Patches applicability / dependency / replacement Leverage on SMS inventory and reporting capabilities –Identify quicly machines with/without a given patch installed –List patch installed on a given machine, deployment rate of a patch…

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 SUS Feature Pack… Free add-in for SMS 2.0 (integrated into SMS 2003) Not restricted security fixes –Office, SQL, Exchange fixes… –Supports NT4 3 stages process (3 SMS packages) per update category –Fixes catalog update (downloaded from Microsoft) –Required fixes inventory on each client Entered in the SMS database as part of the client hardware inventory Validation of patches to deploy (with automatic download if needed) –Fixes deployment : one package for all the fixes of all platforms Client (package program) is doing the selection at run time

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 … SUS Feature Pack 1 wizzard to select/validate patches –Patches proposed only if applicable to one client –Handles download of selected patches –Allow to define installation options for each patch 1 client WindowsUpdate like –Ability to postpone patch installation or reboot if authorized Ability to define a date where the patches are mandatory –Install only applicable / not yet installed patches –One reboot for all patches –Progress bar

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Wizzard : Patch Selection

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Wizzard : Patch Parameters

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Wizzard : Patch Manual Download

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patch Deployment Logging

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patch Deployment Logging

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patch Deployment Logging

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patches Related Reports

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patches Related Reports

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patches Related Reports

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patches Related Reports

26/5/2004 SUS Feature Pack for SMS - HEPix - Edinburgh 2004 Patches Related Reports