Datacenter Configuration Management using System Center Krishnamoorthy V

Datacenter Configuration Management using System Center Krishnamoorthy V IT Infrastructure Architect | Tata Consultancy Services Ltd Connect with life www. connectwithlife. co. in

Session Objective and Agenda Asset Intelligence Software Update Management Desired Configuration Management Software Distribution Operating System Deployment Connect with life www. connectwithlife. co. in

Asset Intelligence

Why Asset Intelligence? Extend Inventory Capabilities Identify and Categorize – Software in use Ensure business continuity Drive compliance integration Determine upgrade readiness

Benefits of Asset Intelligence Console – Dashboard Asset Intelligence reporting class settings dialog Asset Intelligence catalog updates Compatibility with virtualized applications Role-based security Software license management improvements

Asset Intelligence Reporting Hardware Reporting Identification of Computers that have changed since last Inventory Cycle USB Device Discovery Processor Age Computer Upgrade Readiness Software Reporting Software metering capabilities Recently-used executables reporting Computers where recently-used executables ran Categorization of Software License Management Reports Client Access License tracking (CALs) Per-Processor tracking

Asset Intelligence DEMO

Software Update Management

Key Improvements - SUM

SUM - Architecture

Software Update Process Software Updates are Composed of two main parts Metadata Ø Information about each software update Ø Stored in the site server database Software Update Files Ø Download and run to install the software update Three Operational Phases Synchronization Ø Software update metadata is synchronized Compliance assessment phase Ø Client computers scan and report their compliance state Deployment phase Ø Admin Selects updates for deployment Ø Policy is sent to clients Ø Update files are downloaded and installed.

Software Update Objects Update Lists Ø Contains set of software updates Ø Updates are added to an update list Deployment Templates Ø Provide Consistency Ø Drag and drop an Update List or Update Deployment Packages Ø Used to download and update the DP Ø Shared folder for the deployment package source files Update Deployments Ø Updates are delivered to client computers by creating software update deployments

SUM – End to End

Software Update Management DEMO

Desired Configuration Management

Overview of DCM will enable customers to: Define corporate configuration standards Report on configuration compliance across managed Windows systems Combine DCM compliance data with other feature areas of Configuration Manager to remediate clients Regulatory compliance reporting Define and report against tangible configuration policies for regulatory compliance Pre- and post- change verification Ensure system readiness Verify accuracy and efficacy of planned changes

DCM Terms and Concepts Configuration Item (CI) Units of configuration Ø Application CI Ø Operating System CI Ø General CI Ø Software Updates CI Configuration Baseline A complex type of CI composed of other CIs which are: Ø Required Ø Optional Ø Prohibited Can be assigned to collections for compliance monitoring

Overview – Data Flow

Compliance is evaluated on a number of different levels. The levels are Ø The compliance of a configuration item Ø The compliance of a configuration baseline rule Ø The compliance of each configuration baseline Ø The compliance of a client computer Evaluation happens in the following order Ø Applicability Ø Detection Ø Compliance of objects and settings Results Ø Not Applicable Ø Not Detected Ø Compliant or Non-Compliant Ø Failed

Desired Configuration Management DEMO

Software Distribution

Overview of S/W Distribution ü Controlled deployments v Use administrator-created collections to target systems Ø Collections based on inventory data to identify systems with similar hardware or operating system attributes Ø Use different program options to different collections Ø Provides better deployment success Ø Scheduled deployments (including assignments)

Config. Mgr S/W Distribution Identifies an SCCM package (source files and programs) Moves program source files around the enterprise Ø Ø Ø To staging locations (distribution points) To remote locations (child sites) To target computers (clients) Launches a command line program Ø Potentially providing administrative rights Reporting status of the application deployment

How the Client Handles S/W Distribution

DP and Branch DP q Distribution Points Store files Function as distribution centers Download Access point BITS-level Resume q Branch Distribution Point Efficient package distribution Assigned packages XP workstation / Vista can be a Brach DP Depends on a standard distribution point Cannot be placed on server shares

Branch DP Communications

Maintenance Window A collection-based method to enforce scheduled changes to managed systems Manages changes to systems Ø Operating System Task Sequences Ø Software Update Deployments Ø Software Distribution Advertisements Ø Safety Net Doesn’t impact activities Ø Scheduled inventory, baseline evaluation, policy polling Configuration Ø Defined per collection Ø Over-rides available Ø Best practices around management

Software Distribution DEMO

Operating System Deployment

Servers Have unique Challenges Hardware Configurations ØBios Management ØRemote Management Diagnostics ØUtilities and Drivers ØOEM utilities Advanced Network Configuration ØStatic IP Addresses ØMultiple network adapters ØNIC Load Balance, speed/duplex configuration ØClustering Complex disk configuration ØDriver Management ØMultiple physical disks ØPartition model, design ØRAID array Server Role definition post deployment ØLonghorn Server Manager ØSMO Roles ØFile and Print ØLocation specific

What’s new in Config. Mgr OSD Scenario SMS 2003 OSD FP Config. Mgr OSD Feature delivery Feature Pack Core product End-to-end deployment Yes Fully automated Yes Wipe-and-load upgrade Yes Bare metal deployment w/PXE Loose integration w/RIS Built-in integration w/WDS Side-by-side BDD scripts Yes, w/built-in SMP Fully offline deployment No Yes Integrated Vista upgrade planning No Yes Full server deployment No Yes Security Good Much stronger Flexibility/customizability Good Excellent Vista/LH compatibility Good Excellent Device driver management No Yes

Deployment Scenarios q New Machine Ø Clean install - Wipe and Load. No migration considerations q Wipe-and-load Ø Target and install OS to existing H/W. with apps q Side-by-side Ø Machine to machine, user and app data migration are possible q In-place migration Ø Scripted, targeted OS upgrade (not wipe and load), sent as software distribution package q Offline with removable media Ø Removable media (CD/DVD, USB flash drive) q PXE boot Ø WDS integration, network boot delivered q OEM Ø Partial OS Deployment, support for H/W reseller

OSD Architecture Admin creates Task Admin creates OS Sequence and advertises to collection containing client image and boot image and replicates to DP. Site Server Client sends status as Task Sequence executes MP Client retrieves Task Sequence from MP and executes it DP Client retrieves boot image and OS image referenced in Task sequence

WDS and Config. Mgr Site Server Admin advertises task sequence to collection containing new computer Site DB Config. Mgr provider in WDS looks for computer in Config. Mgr database WDS Server If computer is found, WDS proceeds. If not found, WDS tries next provider Config. Mgr MP WDS Server downloads Win. PE to new computer New computer PXE boots Config. Mgr code in Win. PE contacts MP to get task sequence that was advertised

Operating System Deployment DEMO

References System Center Product Family Homepage http: //www. microsoft. com/systemcenter System Center Configuration Manager Homepage http: //www. microsoft. com/systemcenter/configmgr/default. mspx Configuration Manager Documentation Library http: //technet. microsoft. com/en-us/library/bb 680651. aspx Learn more from Configuration Manager Webcasts https: //www. microsoft. com/events/series/technetmms. aspx? tab=webcasts &id=42364

Feedback / Qn. A Your Feedback is Important! Please take a few moments to fill out our online feedback form at: << Feedback URL – Ask your organizer for this in advance>> For detailed feedback, use the form at http: //www. connectwithlife. co. in/vtd/helpdesk. aspx Or email us at vtd@microsoft. com Use the Question Manager on Live. Meeting to ask your questions now!

© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U. S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.