Microsoft Management Seminar Series SMS 2003 Change Management

Microsoft Management Seminar Series Summary of Previous Sessions

Microsoft Management Seminar Series Patch Management, change control and Desktop Deployment with SMS 2003

Session Goals Outline the challenges of Change Management in a typical Network Environment Demonstrate the use of Systems Management Server (SMS) 2003 to facilitate Change Management Show how SMS is leveraged for Patch Management

What is IT Change Management? A set of procedures and tools to… Define the deployment of software in the IT infrastructure Deployment of software to mobile users Requires policies, workflow processes, and tools

Systems Management Server (SMS) 2003 Application Deployment Asset Management Security Patch Management Leveraging Windows Management Services Support for the Mobile Workforce

Leveraging SMS 2003 for IT Change Management Elements of IT change management –Software Package Creation –Software package Deployment –Software Updating Using core SMS features in change management Building around SMS in change management

SMS 2003 can help …… Help me deliver value right away  Installs easily, gets results quickly  Support for complex environments  Multi domain support Help me decrease my workload  Automated collection creation using dynamic queries  Software Update Services for SMS 2003 Feature Pack Help me run operations more productively  Application Deployment to one or many machines  Vulnerability Assessment and Patch Management  Hardware and software management

Application Deployment Admin Requirements  Automated delivery of software in a timely and inexpensive manner  Provisioning of the right services and applications to end-users  Standardized approach to software delivery processes  Comprehensive solution for application delivery  Plan, test, deploy and analyze applications  Reliable and easy  Delivery: right place and at the right time  Validation of successful deployment Business Demands

Software Distribution Features SMS 2003 Software Distribution: - Powerful tool to create software packages for automated deployment - Delta replication between site servers and distribution points -Elevated rights for Client Installation Account so you don’t have give you clients administrative privileges on their machines -Detailed reports out of the box to ease the application deployment process –Hardware (42), Operating System (9), Software (16), Software Distribution (20), Software Updates (13)

Security Patch Management  Tools and processes to  Identify critical patches  Determine vulnerable systems  Deliver patches reliably and quickly  Accurately report delivery status  A secure Windows environment through  Collection of critical patch information  Vulnerability assessment of existing environment  Quick and easy deployment of patches  Targeted delivery of patches  Verification and reporting on patch deployment SMS 2003 Delivers Business Demands

SMS Web Based Reporting  Integrated in the SMS Administrator Console –Can generate and run reports from SMS –Viewed in Internet Explorer –SMS object security provides granularity of security –120 pre-built reports –Dashboards for viewing multiple reports on one web page Extensible web-based reporting tool –Based on automatically maintained, high performance SQL Views –Reports can be customized to meet the business needs –Scheduled reports Exporting Reports –Can export/import report properties into other SMS environments

SMS Reporting

SMS Customized Reports

Device Management Feature Pack Hardware inventory Software inventory File collection Software distribution Settings management* Password policy management* * Available only for Windows Mobile software for Pocket PCs. The SMS 2003 Device Management Feature Pack allows SMS 2003 to manage mobile devices running Windows CE (3.0 or later) and Windows Mobile software for Pocket PCs (2002 or later).

Target Machine  SMS Advanced Client Agent Windows-Present OS Deployment Feature Pack MOM Hard Disk Logs all activity SMS Server SMS inventory used to create a “collection” – machines are targeted for refresh Existing Windows Client receives advertisement for OS refresh SMS delivers bootable WinPE image using WIM to existing OS partition Image is personalized and boots to full OS with SMS agent Compressed WIM OS image is downloaded & installed Auto login configures the SMS Advanced Client agent SMS delivers role based applications and post OS config 8 8 Application Delivery SMS Client Agent Pre-OS WinPE Image Delivery Boot files are modified, reboots to WinPE on hard disk 4 4 OS Image Delivery Bootable WinPE OS

Application Deployment 8. View Application Deployment Reports 1.Create package 2. Deploy Package to Dist points 3. Create and deploy Advertisement ! ! ! 4. Monitor real time status of delivery 5. Application installs on Windows XP machine

Patch Deployment 1. Patch Vulnerability Assessment 2. View Vulnerability Reports 3. View requested patches in Software Updates folder and machine request in Resource Explorer 4. Create Package and Patch using Security Updates function 5. Allow patch to deploy 6. View updates in System Status for both ad and package 7. View patch update on local machine 8. View Patch Reports Update

Demos

SMS 2003 Resources  SMS 2003 Product Info   SMS 2003 Community   SMS Patch Management Guide   SMS 2003 Webcast Series 

Questions and Answers  Blog: Blogs.technet.com/brucecowper