1. Master Class: Software Update Management with ConfigMgr Nash Pherson, Microsoft MVP Sr. Systems Consultant, Now Micro @KidMystic nashp@nowmicro.com Steve Jesok, MNSCUG Board Sr. Systems Analyst, Ameriprise @SteveJesok steve@mnscug.org

2. SESSION TITLE Welcome! #ITDevConnections

3. SESSION TITLE Getting To Know You We can take this wherever it needs to go. Industries/Verticals Size Geography Organizational Development Level #ITDevConnections

4. SESSION TITLE Agenda Setting Breaks Lunch Snacks / Beverages Restrooms #ITDevConnections

5. SESSION TITLE Expectations Nash & Steve: Excited and High Energy Demo / Tool Heavy Flexible Agenda Follow Up Blog Post You: Ask Questions, Share Call BS Remind us when its time to eat/break Mock us on Twitter #ITDevConnections @KidMystic @SteveJesok

6. SESSION TITLE Agenda Setting Agenda Setting / Why / Strategy Level Setting - ConfigMgr Nomenclature Deep Dive Policy / Process The First WSUS Sync / Ongoing Syncs Rebuilding or Recovering from an Outage Windows 10 Servicing / Feature Updates / Quality Updates Windows 7 Servicing Office Servicing Patching Future Machines with OSD Third Party Updates WSUS Instance Health Windows Update Client Health ConfigMgr Client Health Maintaining ConfigMgr Infrastructure Software Update Troubleshooting Live Session Demos, demos, and “DO IT LIVE!” #ITDevConnections

7. SESSION TITLE Why? Operational Security Compliance What does it mean when your vendor highly recommends you do something? #ITDevConnections

8. SESSION TITLE Strategy End Result: All the things get All the patches In reasonable timeframe What does it take to get there? – People – Process – Technology #ITDevConnections

9. SESSION TITLE Strategy DO: Default is all devices get all the updates within 30 days Grand exceptions, but narrowly – only where needed, tracked visibly Updates are tested in valid ways before broad deployment DO NOT: Add any unnecessary complexity Let one person's problem hold the rest of the org hostage #ITDevConnections

10. SESSION TITLE #ITDevConnections

11. SESSION TITLE #ITDevConnections

12. SESSION TITLE Deployments Walk through the Create Deployment Wizard (Demo) Watch What Happens Live (Demo) #ITDevConnections

13. SESSION TITLE Understanding Client Policy Minimum 24 hours (Silly GUI) Group Policy Wins #ITDevConnections

14. SESSION TITLE Using Maintenance Windows Strategies (Datacenter vs. Desktop) Finding Them (Demo) Deployments That Ignore Them (Demo) #ITDevConnections

15. SESSION TITLE Using Server Groups Cluster Patching? Nope Servers? Nope Ordered Patching with Scripts? Yep Server Groups (Demo) https://docs.microsoft.com/en- us/sccm/sum/deploy-use/service-a-server-group https://docs.microsoft.com/en- us/sccm/sum/deploy-use/service-a-server-group #ITDevConnections

16. SESSION TITLE Process and Policy The organization must agree to a policy which sets the What / How / Why (and hopefully Where / When) Policy (Example) Process (Example) Measuring Success – “Surface the Data” Strategy #ITDevConnections

17. SESSION TITLE Piloting Testing <> “Did It Burst Into Flames” Production Pilot – Test the things you care about – Owner (Example Communications) – Public Tracking (Example SP List) #ITDevConnections

18. SESSION TITLE Patching Servers Windows is Windows is Windows… Deployments are special, collections are special, the rest is not. #ITDevConnections

19. SESSION TITLE Enabling Control How can we let other business areas control Software Updates, while centrally controlling Software Update Groups? – Let’s talk this one out. #ITDevConnections

20. SESSION TITLE How do we make the case What if they patch with WSUS? (Demo: Busting the Neighbors) #ITDevConnections

21. SESSION TITLE Measuring Success And failure… Surfacing the Data: No Perfect Solution – Console – Reporting – Dashboards – PowerBI #ITDevConnections

22. SESSION TITLE The First WSUS Sync Use your ConfigMgr SQL Instance, never Windows Internal Database – Yes, your CM license means you can use SQL Server standard – Yes, you can put the WSUS DB there (and MBAM, and AppCompat) #ITDevConnections

23. SESSION TITLE The First WSUS Sync Configuring the WSUS IIS Instance Configuring the Product/Classifications the first time #ITDevConnections

24. SESSION TITLE The First WSUS Sync Getting the Second Sync… and a nap Using AI to pick Products (Demo) Common products people forget #ITDevConnections

25. SESSION TITLE On Going WSUS Syncs WSUS Server Cleanup Wizard Script to remove expired for SUGs Script to expire Itanium, etc Script to email you what synced Script to email you on 2 nd sync failure #ITDevConnections

26. SESSION TITLE Recovering from an Outage Off for 25 hours? Built a new one? Know the House of Cards Managing IIS Limits (Demo) If we haven’t complained enough about WSUS, be sure to make it clear how crumby it is here… #ITDevConnections

27. SESSION TITLE Windows Update Client Introduce Troubleshooting… We’ll spend lots of time on this later too! Updating It (Demo Packages) Fixing It (Demo Script) #ITDevConnections

28. SESSION TITLE ConfigMgr Client Health AD LastLogonTimestamp vs. Last Activity Active but no recent Scans Active but no recent ____________ CM Client Upgrades Prevent problems: – Windows Management Framework (demo) – Convenience Update for Windows 7 Replaces EHR… We’ll come back to this #ITDevConnections

29. SESSION TITLE Understanding Windows 10 Servicing Quality Updates Feature Updates (Upgrades) Branches Deployment Rings #ITDevConnections

30. SESSION TITLE Understanding Windows 10 Servicing Microsoft Recommendations #ITDevConnections

31. SESSION TITLE Understanding the New Windows 7 Servicing Model And surviving it. Convenience Update Deployment The Big New Normal https://blogs.technet.microsoft.com/windowsitpro/2016/10/07/more- on-windows-7-and-windows-8-1-servicing-changes/ https://blogs.technet.microsoft.com/windowsitpro/2016/10/07/more- on-windows-7-and-windows-8-1-servicing-changes/ #ITDevConnections

32. SESSION TITLE New Office Servicing Model? Here is what is coming. #ITDevConnections

33. SESSION TITLE Office 365 Updates with CM When not allowing it to go automatically… if you have to. #ITDevConnections

34. SESSION TITLE Managing Content How Big Are These Updates Anyways? Express Updates (Now, Tomorrow) BranchCache with pre-cache (Demo) Alternative Content Providers WUfB+Delivery Optimization… with ConfigMgr Strategy #ITDevConnections

35. SESSION TITLE Boundary Groups vNext Boundary Groups change drastically in the near future. What does this look like for Multiple Software Update Points? #ITDevConnections

36. SESSION TITLE Patching Future Machines with OSD Win 7 – Update the Update Client Offline Servicing stuff into Win 7 Not Offline Servicing stuff into Win 10 #ITDevConnections

37. SESSION TITLE Third Party Updates System Center Updates Publisher – “Say mean things” – Handling the DB – Using the Free catalogs – Paid Catalogs Deploying Setting and Certificate (Demo) #ITDevConnections

38. SESSION TITLE Third Party Updates Demo with Secunia Demo with Third Party Updates working during OSD #ITDevConnections

39. SESSION TITLE Automating the Windows Update Agent Powershell for: – Windows Update Agent – ConfigMgr SUM Client Actions #ITDevConnections

40. SESSION TITLE Maintaining ConfigMgr Infrastructure "If you wanna go fast with Windows, You gotta go fast with ConfigMgr“ Application Database Operating System #ITDevConnections

41. SESSION TITLE Maintaining ConfigMgr Infrastructure The Application: ConfigMgr Current Branch Servicing Upgrades (Major and Minor) The WSUS Instance #ITDevConnections

42. SESSION TITLE Maintaining ConfigMgr Infrastructure The Database: Microsoft Updates – CM/WSUS, Manual… MU but not WU SQL Cumulative Updates – Manual SQL Service Packs – CM/WSUS, Manual, MU Database Upgrades – CE level #ITDevConnections

43. SESSION TITLE Maintaining ConfigMgr Infrastructure The Operating System Primary Site Server Secondary Site Servers Everything Else #ITDevConnections

44. SESSION TITLE Software Update Troubleshooting Basic Walk Through of Central Data Basic Walk Through of Logs #ITDevConnections

45. SESSION TITLE Software Update Troubleshooting DO IT LIVE! Volunteers? #ITDevConnections

46. SESSION TITLE Agenda Check-In Agenda Setting / Why / Strategy Level Setting - ConfigMgr Nomenclature Deep Dive Policy / Process The First WSUS Sync / Ongoing Syncs Rebuilding or Recovering from an Outage Windows 10 Servicing / Feature Updates / Quality Updates Windows 7 Servicing Office Servicing Patching Future Machines with OSD Third Party Updates WSUS Instance Health Windows Update Client Health ConfigMgr Client Health Maintaining ConfigMgr Infrastructure Software Update Troubleshooting Live Session Demos, demos, and “DO IT LIVE!” #ITDevConnections

47. Rate This Session Now! Rate with Mobile App: Select the session from the Agenda or Speakers menus Select the Actions tab Click Rate Session Rate with Website: Register at www.devconnections.com/logintoratesession Go to www.devconnections.com/ratesession Select this session from the list and rate it Tell Us What You Thought of This Session Be Entered to WIN Prizes! #ITDevConnections Nash Pherson @KidMystic nashp@nowmicro.com Steve Jesok @SteveJesok steve@mnscug.org

48. TOPIC DIVIDER