1. Paul Butterworth Management Technology Architect
4/24/2017 8:41 AM
ADM308
Patch Management – Targeting Virtual Server, Unmanaged Systems, and Microsoft Office Components
Paul Butterworth
Management Technology Architect
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

2. Agenda Solution Accelerator Overview
4/24/2017 8:41 AM
Agenda
Solution Accelerator Overview
Assessing Microsoft® Virtual Server installations and scanning the unmanaged space
Using Microsoft Systems Management Server (SMS) 2003 for gathering Microsoft Office component details
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

3. What’s a Solution Accelerator?
4/24/2017 8:41 AM
What’s a Solution Accelerator?
Integrated people, process, and technology
Industry, partner, customer, and Microsoft best practices
Includes project and operational guidance—based on Microsoft Solutions Framework (MSF) and Microsoft Operations Framework (MOF)
Microsoft training and services
Microsoft and partner products/technologies
Targeted at defined customer scenarios
Also known as pain points
Covers the entire life cycle
Evaluating, planning, building, deploying, and operating
Built with customers, partners, and Microsoft
Engineered, tested, and validated
Supported
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4. Components of the Patch Management Solution Accelerator Using SMS 2003
4/24/2017 8:41 AM
Components of the Patch Management Solution Accelerator Using SMS 2003
1. Assess
2. Identify
4. Deploy
3. Evaluate & Plan
Patch Management Process based on industry best practices (MOF/ITIL)
Microsoft Systems Management Server 2003
Microsoft Baseline Security Analyzer (MBSA)
Microsoft WMI Custom Scripting Solutions
Microsoft technology for assessing and deploying patches +
Microsoft SQL Server™ 2000
Microsoft Virtual Server / Microsoft Virtual PC
Microsoft Office 2000 /Office XP / Office 2003
Best-practice technical guidance for patching specific Microsoft technologies
Released Oct. 27, 2004
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

5. Patch Management Process
4/24/2017 8:41 AM
Patch Management Process
Inventory/Discover Existing Assets
Assess Security Threats/Vulnerabilities
Determine the Best Source of Information
Assess Software Distribution Infrastructure
Assess Operational Effectiveness
Discover a New Software Update
Determine Relevance
Obtain and Verify Source Files
Submit request for change (RFC)
1. Assess
2. Identify
4. Deploy
3. Evaluate & Plan
Prepare for Deployment
Deploy to Targeted Computers
Conduct Post-Implementation Review
Determine Appropriate Response
Plan the Release
Build the Release
Perform Acceptance Testing
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

6. Solution Accelerator Scenarios and Highlights
4/24/2017 8:41 AM
Automation scripts to assist with ASSESS and DEPLOY
Assess managed and unmanaged installations
Virtual Server, Virtual PC, SQL Server 2000
Assess Office installations
Extending SMS HINV to capture additional information about Office installations
Deploy to Office installations
Provide increased targeting for Office applications
Provide custom Office collections and reports for Office 2000, Office XP, and Office 2003
Detailed guidance for patching specific Microsoft technologies:
Office 2000, Office XP, and Office 2003
SQL Server 2000
Virtual Server and Virtual PC
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

7. Do you want to see how this solution can help your company?
4/24/2017 8:41 AM
Do you want to see how this solution can help your company?
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

8. 4/24/2017 8:41 AM
Solution Example: Assessing Virtual Server and Virtual PC Installations
Problem:
Assessing and enumerating Virtual Server and Virtual PC guest installations on managed and unmanaged systems
Solution Deliverables:
Sample scripts to identify managed and unmanaged hosts
Sample Windows® Management Instrumentation (WMI) scripts to assess Virtual Server/Virtual PC guest installations
Sample XML-based report to expand data captured via SMS 2003 SP1
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

9. Assessing Virtual Server Host and Guest Installations How It Works
4/24/2017 8:41 AM
Assessing Virtual Server Host and Guest Installations How It Works
1. Script (WMI) queries Microsoft Active Directory, reads a user-defined subnet file or a user-defined IP file to determine what to scan
SMS-Managed Subnets
Inventoried via SMS Software Inventory
2. Script does subnet scan to ID hosts that are accessible
3. Script queries Virtual Server host using VirtualServer.Application API to identify virtual hosts and guests and their current state
4. Virtual Server/Virtual PC Assessment report (XML-based report) identifies managed, unmanaged, unreachable, and no-administrator-access installations
5. MBSA scan is run and a report is generated for all unmanaged machines
Subnet excluded from SMS, or a test lab or subnet inaccessible by SMS
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

10. 4/24/2017 8:41 AM
Script Options
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

11. Editing the Input File …
4/24/2017 8:41 AM
Editing the Input File …
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

12. Script in Progress ... 4/24/2017 8:41 AM
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

13. Sample Virtual Server ASSESS Report
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

14. Sample Virtual Server MBSA Report
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

15. Applying the Data Gathered…
4/24/2017 8:41 AM
Applying the Data Gathered…
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

16. Solution Example: Extending SMS HINV to capture details about Microsoft Office components
Problem:
Customers require more granular detail about the components of each Microsoft Office suite.
Solution Deliverables:
Update SMS HINV to provide component-level details.
Collect information from the client to include language version, application and suite version, and native installation path.
Provide 48 custom .mof files for creating custom collections to improve targeting.
Provide 48 custom .mof files for custom reporting.
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

17. 4/24/2017 8:41 AM
Extending SMS 2003 SP1 Inventory to Capture Details about Office Installations How It Works
1. Administrator updates SMS_Def.Mof on site servers to enable capture of Office component levels in the SMS database.
SMS Site Server
5. Administrator uses sample queries to create query-based collections, and reports and deploys to these target collections using SMS.
SMS Clients
3. Client runs HINV at scheduled interval.
2. Administrator distributes a package to extend CIMv2 on clients via Client.Mof – this enables client to report additional info on Office via HINV.
4. Clients report additional Office component-level information via HINV, including installation source location.
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

18. Importing a Custom .mof File
4/24/2017 8:41 AM
Importing a Custom .mof File
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

19. Sample Office Consolidation Report
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

20. 4/24/2017 8:41 AM
Solution Recap
Provides automation to assist with the ASSESS phase of patch management
Targets risk reduction by preventing an attack because “I didn’t know we had that installed on our network”
Provides a mechanism for IT administrators, management, and security to build plans for getting all machines “managed”
Provides best-practice guidance for patch management using SMS 2003
Provides in-depth details for patching specific Microsoft technologies
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

21. Community Resources Community Resources
4/24/2017 8:41 AM
Community Resources
Community Resources
Most Valuable Professional (MVP)
Newsgroups
Converse online with Microsoft Newsgroups, including Worldwide
/newsgroups/en-us/default.aspx
User Groups - Meet and learn with your peers
default.mspx
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

22. Knowledge Needed. Knowledge Applied.
4/24/2017 8:41 AM
Knowledge Needed. Knowledge Applied.
Microsoft Products and Services for Lifelong Learning
Assess your skills
Take an eLearning course
Subscribe to Microsoft TechNet
Get the latest information on IT Pro and Developer Books to purchase online or at your local bookstore
Find the course right for you and a Microsoft Certified Partner for Learning Solutions in your area
Learn about the Microsoft certifications that can enable and advance your career - Learn more. Go Further
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

23. 4/24/2017 8:41 AM
© 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

24. 4/24/2017 8:41 AM © 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.