Microsoft Management Seminar Series

SMS 2003 Change ManagementSMS 2003 Change Management

Microsoft Management Seminar Series

Summary of Previous Sessions

Microsoft Management Seminar Series

Patch Management, change control and Desktop Deployment with SMS 2003

Session Goals

• Outline the challenges of Change Management in a typical Network Environment

• Demonstrate the use of Systems Management Server (SMS) 2003 to facilitate Change Management

• Show how SMS is leveraged for Patch Management

What is IT Change Management?

A set of procedures and tools to…

• Define the deployment of software in the IT infrastructure

• Deployment of software to mobile users • Requires policies, workflow processes, and tools

Systems Management Server (SMS) 2003

Application Application DeploymentDeployment

AssetAssetManagementManagement

SecuritySecurityPatchPatch

ManagementManagement

LeveragingLeveragingWindows Windows

Management Management ServicesServices

Support forSupport forthe Mobile the Mobile WorkforceWorkforce

Leveraging SMS 2003 for IT Change Management

• Elements of IT change management– Software Package Creation– Software package Deployment– Software Updating

• Using core SMS features in change management• Building around SMS in change management

SMS 2003 can help ……

Help me deliver Help me deliver value right awayvalue right away

Installs easily, gets results quickly Support for complex environments Multi domain support

Help me Help me decrease my decrease my

workloadworkload

Automated collection creation using dynamic queries

Software Update Services for SMS 2003 Feature Pack

Help me run Help me run operations more operations more

productively productively

Application Deployment to one or many machines Vulnerability Assessment and Patch Management Hardware and software management

Application Deployment

Admin Admin RequirementsRequirements

Automated delivery of software in a timely and inexpensive manner

Provisioning of the right services and applications to end-users

Standardized approach to software delivery processes

Comprehensive solution for application delivery Plan, test, deploy and analyze applications Reliable and easy Delivery: right place and at the right time Validation of successful deployment

Business Business DemandsDemands

Software Distribution Features

• SMS 2003 Software Distribution:

- Powerful tool to create software packages for automated deployment

- Delta replication between site servers and distribution points

- Elevated rights for Client Installation Account so you don’t have give you clients administrative privileges on their machines

- Detailed reports out of the box to ease the application deployment process

– Hardware (42), Operating System (9), Software (16), Software Distribution (20), Software Updates (13)

Security Patch Management

Tools and processes to Identify critical patches Determine vulnerable systems Deliver patches reliably and quickly Accurately report delivery status

A secure Windows environment through Collection of critical patch information Vulnerability assessment of existing environment Quick and easy deployment of patches Targeted delivery of patches Verification and reporting on patch deployment

SMS 2003 SMS 2003 DeliversDelivers

Business Business DemandsDemands

SMS Web Based Reporting

Integrated in the SMS Administrator Console– Can generate and run reports from SMS– Viewed in Internet Explorer– SMS object security provides granularity of security – 120 pre-built reports – Dashboards for viewing multiple reports on one web page

• Extensible web-based reporting tool– Based on automatically maintained, high performance

SQL Views– Reports can be customized to meet the business needs– Scheduled reports

• Exporting Reports– Can export/import report properties into other SMS environments

SMS Reporting

SMS Customized Reports

Device Management Feature Pack

• Hardware inventory • Software inventory • File collection • Software distribution • Settings management* • Password policy management* * Available only for Windows Mobile software for Pocket PCs.

The SMS 2003 Device Management Feature Pack allows SMS 2003 to manage mobile devices running Windows CE (3.0 or later) and Windows Mobile software for Pocket PCs (2002 or later).

Target Machine

SMS Advanced Client Agent Windows-Present

OS Deployment Feature Pack

MOM

HardDisk

Logs all activity

SMSServer

SMS inventory used to create a “collection” – machines are targeted for refresh

Existing Windows Client receives advertisement for OS refresh

11

22

33 SMS delivers bootable WinPE image using WIM to existing OS partition

Image is personalized and boots to full OS with SMS agent

55

66

77

Compressed WIM OS image is downloaded & installed

Auto login configures the SMS Advanced Client agent

SMS delivers role based applications and post OS config

88

Application Delivery

SMS ClientAgent Pre-OS

WinPE Image Delivery

Boot files are modified, reboots to WinPE on hard disk

44

OS Image Delivery

BootableWinPEOS

Application Deployment

8. View ApplicationDeployment Reports

1. Createpackage

2. Deploy Packageto Dist points

3. Create anddeploy Advertisement

! ! !

4. Monitor real timestatus of delivery

5. Application installson Windows XP machine

Patch Deployment

1. Patch Vulnerability Assessment 2. View Vulnerability

Reports3. View requested patchesin Software Updates folder

and machine request in Resource Explorer

4. Create Package and Patch usingSecurity Updates function

5. Allow patch to deploy

6. View updates in System Status

for both ad and package

7. View patch update on local machine

8. View Patch Reports Update

Demos

SMS 2003 Resources

SMS 2003 Product Info www.microsoft.com/smserver/techinfo/productdoc/default.asp

SMS 2003 Community www.microsoft.com/smserver/community/default.mspx

SMS Patch Management Guide www.microsoft.com/business/reducecosts/efficiency/manageability/patch.mspx

SMS 2003 Webcast Series www.microsoft.com/smserver/support/webcastseries/default.asp

Questions and Answers

Blog:

Blogs.technet.com/brucecowper