Paul Butterworth Management Technology Architect 4/24/2017 8:41 AM ADM308 Patch Management – Targeting Virtual Server, Unmanaged Systems, and Microsoft Office Components Paul Butterworth Management Technology Architect © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Agenda Solution Accelerator Overview 4/24/2017 8:41 AM Agenda Solution Accelerator Overview Assessing Microsoft® Virtual Server installations and scanning the unmanaged space Using Microsoft Systems Management Server (SMS) 2003 for gathering Microsoft Office component details © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

What’s a Solution Accelerator? 4/24/2017 8:41 AM What’s a Solution Accelerator? Integrated people, process, and technology Industry, partner, customer, and Microsoft best practices Includes project and operational guidance—based on Microsoft Solutions Framework (MSF) and Microsoft Operations Framework (MOF) Microsoft training and services Microsoft and partner products/technologies Targeted at defined customer scenarios Also known as pain points Covers the entire life cycle Evaluating, planning, building, deploying, and operating Built with customers, partners, and Microsoft Engineered, tested, and validated Supported © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Components of the Patch Management Solution Accelerator Using SMS 2003 4/24/2017 8:41 AM Components of the Patch Management Solution Accelerator Using SMS 2003 1. Assess 2. Identify 4. Deploy 3. Evaluate & Plan Patch Management Process based on industry best practices (MOF/ITIL) Microsoft Systems Management Server 2003 Microsoft Baseline Security Analyzer (MBSA) Microsoft WMI Custom Scripting Solutions Microsoft technology for assessing and deploying patches + Microsoft SQL Server™ 2000 Microsoft Virtual Server / Microsoft Virtual PC Microsoft Office 2000 /Office XP / Office 2003 Best-practice technical guidance for patching specific Microsoft technologies Released Oct. 27, 2004 © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Patch Management Process 4/24/2017 8:41 AM Patch Management Process Inventory/Discover Existing Assets Assess Security Threats/Vulnerabilities Determine the Best Source of Information Assess Software Distribution Infrastructure Assess Operational Effectiveness Discover a New Software Update Determine Relevance Obtain and Verify Source Files Submit request for change (RFC) 1. Assess 2. Identify 4. Deploy 3. Evaluate & Plan Prepare for Deployment Deploy to Targeted Computers Conduct Post-Implementation Review Determine Appropriate Response Plan the Release Build the Release Perform Acceptance Testing © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Solution Accelerator Scenarios and Highlights 4/24/2017 8:41 AM Automation scripts to assist with ASSESS and DEPLOY Assess managed and unmanaged installations Virtual Server, Virtual PC, SQL Server 2000 Assess Office installations Extending SMS HINV to capture additional information about Office installations Deploy to Office installations Provide increased targeting for Office applications Provide custom Office collections and reports for Office 2000, Office XP, and Office 2003 Detailed guidance for patching specific Microsoft technologies: Office 2000, Office XP, and Office 2003 SQL Server 2000 Virtual Server and Virtual PC © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Do you want to see how this solution can help your company? 4/24/2017 8:41 AM Do you want to see how this solution can help your company? © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4/24/2017 8:41 AM Solution Example: Assessing Virtual Server and Virtual PC Installations Problem: Assessing and enumerating Virtual Server and Virtual PC guest installations on managed and unmanaged systems Solution Deliverables: Sample scripts to identify managed and unmanaged hosts Sample Windows® Management Instrumentation (WMI) scripts to assess Virtual Server/Virtual PC guest installations Sample XML-based report to expand data captured via SMS 2003 SP1 © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Assessing Virtual Server Host and Guest Installations How It Works 4/24/2017 8:41 AM Assessing Virtual Server Host and Guest Installations How It Works 1. Script (WMI) queries Microsoft Active Directory, reads a user-defined subnet file or a user-defined IP file to determine what to scan SMS-Managed Subnets Inventoried via SMS Software Inventory 2. Script does subnet scan to ID hosts that are accessible 3. Script queries Virtual Server host using VirtualServer.Application API to identify virtual hosts and guests and their current state 4. Virtual Server/Virtual PC Assessment report (XML-based report) identifies managed, unmanaged, unreachable, and no-administrator-access installations 5. MBSA scan is run and a report is generated for all unmanaged machines Subnet excluded from SMS, or a test lab or subnet inaccessible by SMS © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4/24/2017 8:41 AM Script Options © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Editing the Input File … 4/24/2017 8:41 AM Editing the Input File … © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Script in Progress ... 4/24/2017 8:41 AM © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Sample Virtual Server ASSESS Report © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Sample Virtual Server MBSA Report © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Applying the Data Gathered… 4/24/2017 8:41 AM Applying the Data Gathered… © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Solution Example: Extending SMS HINV to capture details about Microsoft Office components Problem: Customers require more granular detail about the components of each Microsoft Office suite. Solution Deliverables: Update SMS HINV to provide component-level details. Collect information from the client to include language version, application and suite version, and native installation path. Provide 48 custom .mof files for creating custom collections to improve targeting. Provide 48 custom .mof files for custom reporting. © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4/24/2017 8:41 AM Extending SMS 2003 SP1 Inventory to Capture Details about Office Installations How It Works 1. Administrator updates SMS_Def.Mof on site servers to enable capture of Office component levels in the SMS database. SMS Site Server 5. Administrator uses sample queries to create query-based collections, and reports and deploys to these target collections using SMS. SMS Clients 3. Client runs HINV at scheduled interval. 2. Administrator distributes a package to extend CIMv2 on clients via Client.Mof – this enables client to report additional info on Office via HINV. 4. Clients report additional Office component-level information via HINV, including installation source location. © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Importing a Custom .mof File 4/24/2017 8:41 AM Importing a Custom .mof File © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Sample Office Consolidation Report © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4/24/2017 8:41 AM Solution Recap Provides automation to assist with the ASSESS phase of patch management Targets risk reduction by preventing an attack because “I didn’t know we had that installed on our network” Provides a mechanism for IT administrators, management, and security to build plans for getting all machines “managed” Provides best-practice guidance for patch management using SMS 2003 Provides in-depth details for patching specific Microsoft technologies © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Community Resources Community Resources 4/24/2017 8:41 AM Community Resources Community Resources http://www.microsoft.com/communities/default.mspx Most Valuable Professional (MVP) http://www.microsoft.com/communities/mvp Newsgroups Converse online with Microsoft Newsgroups, including Worldwide http://communities2.microsoft.com/communities /newsgroups/en-us/default.aspx User Groups - Meet and learn with your peers http://www.microsoft.com/communities/usergroups default.mspx © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Knowledge Needed. Knowledge Applied. 4/24/2017 8:41 AM Knowledge Needed. Knowledge Applied. Microsoft Products and Services for Lifelong Learning Assess your skills Take an eLearning course Subscribe to Microsoft TechNet Get the latest information on IT Pro and Developer Books to purchase online or at your local bookstore Find the course right for you and a Microsoft Certified Partner for Learning Solutions in your area Learn about the Microsoft certifications that can enable and advance your career www.microsoft.com/learning - Learn more. Go Further © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4/24/2017 8:41 AM © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4/24/2017 8:41 AM © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.