Master Class: Software Update Management with ConfigMgr Nash Pherson, Microsoft MVP Sr. Systems Consultant, Now Steve Jesok, MNSCUG Board Sr. Systems Analyst,

SESSION TITLE Welcome! #ITDevConnections

SESSION TITLE Getting To Know You We can take this wherever it needs to go. Industries/Verticals Size Geography Organizational Development Level #ITDevConnections

SESSION TITLE Agenda Setting Breaks Lunch Snacks / Beverages Restrooms #ITDevConnections

SESSION TITLE Expectations Nash & Steve: Excited and High Energy Demo / Tool Heavy Flexible Agenda Follow Up Blog Post You: Ask Questions, Share Call BS Remind us when its time to eat/break Mock us on

SESSION TITLE Agenda Setting Agenda Setting / Why / Strategy Level Setting - ConfigMgr Nomenclature Deep Dive Policy / Process The First WSUS Sync / Ongoing Syncs Rebuilding or Recovering from an Outage Windows 10 Servicing / Feature Updates / Quality Updates Windows 7 Servicing Office Servicing Patching Future Machines with OSD Third Party Updates WSUS Instance Health Windows Update Client Health ConfigMgr Client Health Maintaining ConfigMgr Infrastructure Software Update Troubleshooting Live Session Demos, demos, and “DO IT LIVE!” #ITDevConnections

SESSION TITLE Why? Operational Security Compliance What does it mean when your vendor highly recommends you do something? #ITDevConnections

SESSION TITLE Strategy End Result: All the things get All the patches In reasonable timeframe What does it take to get there? – People – Process – Technology #ITDevConnections

SESSION TITLE Strategy DO: Default is all devices get all the updates within 30 days Grand exceptions, but narrowly – only where needed, tracked visibly Updates are tested in valid ways before broad deployment DO NOT: Add any unnecessary complexity Let one person's problem hold the rest of the org hostage #ITDevConnections

SESSION TITLE #ITDevConnections

SESSION TITLE #ITDevConnections

SESSION TITLE Deployments Walk through the Create Deployment Wizard (Demo) Watch What Happens Live (Demo) #ITDevConnections

SESSION TITLE Understanding Client Policy Minimum 24 hours (Silly GUI) Group Policy Wins #ITDevConnections

SESSION TITLE Using Maintenance Windows Strategies (Datacenter vs. Desktop) Finding Them (Demo) Deployments That Ignore Them (Demo) #ITDevConnections

SESSION TITLE Using Server Groups Cluster Patching? Nope Servers? Nope Ordered Patching with Scripts? Yep Server Groups (Demo) us/sccm/sum/deploy-use/service-a-server-group us/sccm/sum/deploy-use/service-a-server-group #ITDevConnections

SESSION TITLE Process and Policy The organization must agree to a policy which sets the What / How / Why (and hopefully Where / When) Policy (Example) Process (Example) Measuring Success – “Surface the Data” Strategy #ITDevConnections

SESSION TITLE Piloting Testing <> “Did It Burst Into Flames” Production Pilot – Test the things you care about – Owner (Example Communications) – Public Tracking (Example SP List) #ITDevConnections

SESSION TITLE Patching Servers Windows is Windows is Windows… Deployments are special, collections are special, the rest is not. #ITDevConnections

SESSION TITLE Enabling Control How can we let other business areas control Software Updates, while centrally controlling Software Update Groups? – Let’s talk this one out. #ITDevConnections

SESSION TITLE How do we make the case What if they patch with WSUS? (Demo: Busting the Neighbors) #ITDevConnections

SESSION TITLE Measuring Success And failure… Surfacing the Data: No Perfect Solution – Console – Reporting – Dashboards – PowerBI #ITDevConnections

SESSION TITLE The First WSUS Sync Use your ConfigMgr SQL Instance, never Windows Internal Database – Yes, your CM license means you can use SQL Server standard – Yes, you can put the WSUS DB there (and MBAM, and AppCompat) #ITDevConnections

SESSION TITLE The First WSUS Sync Configuring the WSUS IIS Instance Configuring the Product/Classifications the first time #ITDevConnections

SESSION TITLE The First WSUS Sync Getting the Second Sync… and a nap Using AI to pick Products (Demo) Common products people forget #ITDevConnections

SESSION TITLE On Going WSUS Syncs WSUS Server Cleanup Wizard Script to remove expired for SUGs Script to expire Itanium, etc Script to you what synced Script to you on 2 nd sync failure #ITDevConnections

SESSION TITLE Recovering from an Outage Off for 25 hours? Built a new one? Know the House of Cards Managing IIS Limits (Demo) If we haven’t complained enough about WSUS, be sure to make it clear how crumby it is here… #ITDevConnections

SESSION TITLE Windows Update Client Introduce Troubleshooting… We’ll spend lots of time on this later too! Updating It (Demo Packages) Fixing It (Demo Script) #ITDevConnections

SESSION TITLE ConfigMgr Client Health AD LastLogonTimestamp vs. Last Activity Active but no recent Scans Active but no recent ____________ CM Client Upgrades Prevent problems: – Windows Management Framework (demo) – Convenience Update for Windows 7 Replaces EHR… We’ll come back to this #ITDevConnections

SESSION TITLE Understanding Windows 10 Servicing Quality Updates Feature Updates (Upgrades) Branches Deployment Rings #ITDevConnections

SESSION TITLE Understanding Windows 10 Servicing Microsoft Recommendations #ITDevConnections

SESSION TITLE Understanding the New Windows 7 Servicing Model And surviving it. Convenience Update Deployment The Big New Normal on-windows-7-and-windows-8-1-servicing-changes/ on-windows-7-and-windows-8-1-servicing-changes/ #ITDevConnections

SESSION TITLE New Office Servicing Model? Here is what is coming. #ITDevConnections

SESSION TITLE Office 365 Updates with CM When not allowing it to go automatically… if you have to. #ITDevConnections

SESSION TITLE Managing Content How Big Are These Updates Anyways? Express Updates (Now, Tomorrow) BranchCache with pre-cache (Demo) Alternative Content Providers WUfB+Delivery Optimization… with ConfigMgr Strategy #ITDevConnections

SESSION TITLE Boundary Groups vNext Boundary Groups change drastically in the near future. What does this look like for Multiple Software Update Points? #ITDevConnections

SESSION TITLE Patching Future Machines with OSD Win 7 – Update the Update Client Offline Servicing stuff into Win 7 Not Offline Servicing stuff into Win 10 #ITDevConnections

SESSION TITLE Third Party Updates System Center Updates Publisher – “Say mean things” – Handling the DB – Using the Free catalogs – Paid Catalogs Deploying Setting and Certificate (Demo) #ITDevConnections

SESSION TITLE Third Party Updates Demo with Secunia Demo with Third Party Updates working during OSD #ITDevConnections

SESSION TITLE Automating the Windows Update Agent Powershell for: – Windows Update Agent – ConfigMgr SUM Client Actions #ITDevConnections

SESSION TITLE Maintaining ConfigMgr Infrastructure "If you wanna go fast with Windows, You gotta go fast with ConfigMgr“ Application Database Operating System #ITDevConnections

SESSION TITLE Maintaining ConfigMgr Infrastructure The Application: ConfigMgr Current Branch Servicing Upgrades (Major and Minor) The WSUS Instance #ITDevConnections

SESSION TITLE Maintaining ConfigMgr Infrastructure The Database: Microsoft Updates – CM/WSUS, Manual… MU but not WU SQL Cumulative Updates – Manual SQL Service Packs – CM/WSUS, Manual, MU Database Upgrades – CE level #ITDevConnections

SESSION TITLE Maintaining ConfigMgr Infrastructure The Operating System Primary Site Server Secondary Site Servers Everything Else #ITDevConnections

SESSION TITLE Software Update Troubleshooting Basic Walk Through of Central Data Basic Walk Through of Logs #ITDevConnections

SESSION TITLE Software Update Troubleshooting DO IT LIVE! Volunteers? #ITDevConnections

SESSION TITLE Agenda Check-In Agenda Setting / Why / Strategy Level Setting - ConfigMgr Nomenclature Deep Dive Policy / Process The First WSUS Sync / Ongoing Syncs Rebuilding or Recovering from an Outage Windows 10 Servicing / Feature Updates / Quality Updates Windows 7 Servicing Office Servicing Patching Future Machines with OSD Third Party Updates WSUS Instance Health Windows Update Client Health ConfigMgr Client Health Maintaining ConfigMgr Infrastructure Software Update Troubleshooting Live Session Demos, demos, and “DO IT LIVE!” #ITDevConnections

Rate This Session Now! Rate with Mobile App: Select the session from the Agenda or Speakers menus Select the Actions tab Click Rate Session Rate with Website: Register at Go to Select this session from the list and rate it Tell Us What You Thought of This Session Be Entered to WIN Prizes! #ITDevConnections Nash Steve

TOPIC DIVIDER