1. Managing Microsoft ® Systems Management Server 2003 Day 2 USCENTAF NOSC

2. Module 6: Querying and Reporting Data

5. What Is a Query? WMI SMS Administrator Console Database Query A query is a specific set of criteria that you use to extract information from the SMS site database

6. What Is an SMS Object Type? An SMS object type is a resource class containing a set of attributes that represent SMS database objects Attribute Class Object Type Attribute SCSIBus System Resource CurrentClockSpeed Manufacturer Partitions Processor Disk

7. SMS Object Types Available for Building Queries Object Types Advertisement System Resource Program Software Metering Rule User Group Resource Site User Resource Package Software Product Compliance

9. The Role of the System Class in Identifying Inventory Data Query ResourceID Property SMS_R_System Class SMS_G_System Class

11. How to Create and Run a Data Query Site Database Query To run a data query: Navigate to Q u e r i e s Right-click the query that you want to run, and then click Run Query 1 2 To create a data query: Navigate to Q u e r i e s Right-click Queries, point to New, and then click Query Complete the settings in the Query Properties dialog box, and then click Edit Query Statement Complete the settings on the General, Criteria, and Joins tabs 1 3 2 4

12. Demonstration: How to Use a Data Query Your instructor will demonstrate how to use a data query

13. How to Create and Run a Status Message Query Site Database Query To run a status message query: Navigate to Status Message Q u e r i e s Right-click the status message query you want to run, and then click Show Messages 1 2 To create a status message query: Navigate to Status Message Q u e r i e s Right-click Status Message Queries, point to New, and then click Status Message Query Type a name for the new query Click Edit Query Statement Complete the settings as needed 1 3 2 4 5

14. Demonstration: How to View a Status Message Query Your instructor will demonstrate how to view a status message query

15. How to Export and Import Queries To export queries: Navigate to Q u e r i e s Right-click a specific query that you want to export, point to All Tasks, and then click Export Objects Complete the Export Object Wizard, and then click Finish 1 3 2 To import queries: Navigate to Q u e r i e s Right-click Queries, point to All Tasks, and then click Import Objects Complete the Import Object Wizard, and then click Finish 1 3 2

17. How to Configure Class and Instance Security on Queries Navigate to Security Rights Right-click a security right, and then click Properties Modify the permissions 1 3 2 To modify a security right : Navigate to Security Rights Right-click Security Rights, click New, and then click either Class Security Right or Instance Security Right Select the user to which you want to grant permissions Select the permissions you want the security right to have 1 3 2 To create a security right: 4

18. Demonstration: How to Configure Class and Instance Security on Queries Your instructor will demonstrate how to configure class and instance security on queries

20. What Is a Reporting Point? Reporting Point Reporting Point Central Site Secondary Site Primary Site

22. What Is Report Viewer?

24. What Is an SMS Report? An SMS report is an SMS object that consists of a set of properties that describe the report, such as the report’s name

26. How to Filter the List of Reports To filter the list of reports: Navigate to Reports Right-click Reports, point to All Tasks, and then click Filter Reports Select one or more categories to display or hide Click OK to confirm your selections 1 4 3 2

27. How to Use the Report Viewer to Run a Predefined Report To use the Report Viewer to run a predefined report: Navigate to Reports Right-click Reports, point to All Tasks and Run, and then click the name of the reporting point that you want to use On the Report Viewer main page, perform the appropriate procedure 1 3 2

28. Demonstration: How to View and Filter Predefined Reports Your instructor will demonstrate how to view and filter predefined reports

29. Practice: Configuring and Running Reports Run a predefined SMS report Answer the reflection question 1 2

31. What Is a Dashboard? A dashboard is a group of reports that you can display on a single Report Viewer page to make viewing and comparing the results easier

33. How to Create and Use Dashboards To run a dashboard by using the SMS Administrator console: Navigate to Dashboards Right-click Dashboards, point to All Tasks, point to Run, and then click the name of the reporting point that you want to use Select a dashboard, and then click Display 1 3 2 To clone a dashboard: Navigate to Dashboards Right-click the dashboard that you want to clone, point to All Tasks, and then click Clone Type a name for the new dashboard, and then click OK Open the dashboard and then modify the properties as needed Click OK to confirm your selections 1 3 2 4 5 To modify a dashboard: Navigate to Dashboards Right-click the dashboard that you want to modify, and then click Properties On the General tab, modify the settings as needed On the Reports tab, modify the settings as needed Click OK to confirm your selections 1 3 2 4 5 To create a dashboard: Navigate to Dashboards Right-click D a s h b o a r d s , point to New, and then click D a s h b o a r d On the General tab, enter a dashboard name, a comment, and the cell height On the Reports tab, set the number of rows and columns, specify reports for the cells, and adjust the order of the reports Click OK to confirm your selections 1 3 2 4 5

34. Demonstration: How to Create and Use a Dashboard Your instructor will demonstrate how to create and use a dashboard

35. Module 7: Preparing an SMS Site for Software Distribution

39. How the Client Handles Software Distribution The client: Checks for new applications to run Advanced Client Legacy Client Distribution Point 1 Primary Site CAP Runs the application according to how it is configured at the site Sends its status back to the site 3 2 Management Point

40. Administrative Tasks Involved in the Software Distribution Process Distribution Point Management Point Prepare the site Content covered in Module 7, Lesson 2 and 3 1 Create software distribution objects Module 8, Lessons 1-4 2 SMS client runs software distribution Module 8, Lesson 5 3 Advanced Client Monitor software distribution Module 8, Lesson 6 4

41. The Process of Configuring Site Settings in Software Distribution SMS client runs software distribution Module 8, Lesson 5 3 Advanced Client Prepare the site Content covered in Module 7, Lesson 2 and 3 Distribution Point Management Point 1 Configuring the site settings includes four steps : Designate one or more servers as distribution points Configure the software distribution component Configure the Advertised Programs Client Agent Define the roaming boundaries, if applicable 1 4 3 2

43. The Monitoring Phase of Software Distribution Create software distribution objects Module 8, Lessons 1-4 SMS client runs software distribution Module 8, Lesson 5 3 2 Advanced Client Monitor software distribution Module 8, Lesson 6 4 A best practice is to monitor the software distribution once the process has begun Distribution Point Management Point

48. Demonstration: How to Configure the Advertised Programs Client Agent Your instructor will demonstrate how to configure the Advertised Programs Client Agent

49. Demonstration: How to Verify the Download of Agent Policy on the Advanced Client Your instructor will demonstrate how to force policy retrieval and verify the download of agent policy on the Advanced Client

50. Practice: Configuring Software Distribution and the Advertised Programs Client Agent Configure the Advertised Programs Client Agent Verify the download of agent policy on the Advanced Client Answer the reflection question 1 2 3

51. Module 8: Managing Software Distribution

54. How Software Distribution Objects Are Created Collections Packages Programs Advertisements 1 3 2 The software distribution object creation process: 4 All Users 1 4 Office 2003 2 3 Setup.exe

55. What Is a Collection? Computers running Windows XP Computers with Office 2003 Installed Microsoft ® Office XP

56. What Do Packages and Programs Do? A program allows a package to run on the client Office 2003 Setup Office 2003 Office 2003 A program allows a package to run on the client Office 2003 Setup Office 2003

57. What Are Advertisements? Advertised programs are found in Control Panel: Add or Remove Programs Run Advertised Programs An advertisement is an object configured by the site administrator on an SMS site, which in turn becomes a notification or a policy for the client

58. How the Configuration of Software Distribution Objects Is Verified Look for them in SMS Administrator Console 1 Verification of programs and advertisements Setup.exe Look in C:MSPKGC$ 1 Use Report Viewer to see the All Collections report 2 Verification of packages Office 2003 Manually update collections 1 View the resources in the collection 2 Verification of collections Review the migration log for errors 2 3

59. How the Distribution of Files on the Distribution Point Is Verified Software Distribution Points SMS Site Server Package did not arrive Office 2003 Office 2003 Office 2003 Office 2003 Office 2003

61. How Collections Are Used in the Software Distribution Process XP Windows XP Collection Advertised Programs Advertised Programs Advertised Programs Advertised Programs

62. How to Create and Configure Collections To create and configure collections: Navigate to Collections in the SMS Administrator console Right-click Collections, click New, and then click Collection In the Collection Properties dialog box, use the tabs to complete property settings 1 3 2

63. How to Verify the Updating of Collections with the SMS Administrator Console and Server Log Files Click Start Click My Computer Double-click Local Disk (C:) Double-click the SMS folder Double-click the Logs folder 5 1 3 2 4 Verifying collections with server log files Click Start Point to All Programs, and then click SMS 2003 Tool Kit 1. Click SMS Trace. The SMS Trace window will appear. Click File, and then click Open. All the log files will appear in the details pane of the SMS Trace window. Click the colleval.log file, and then click Open. 5 1 3 2 4 Verifying collections with the SMS Trace Tool In the SMS Administrator console, navigate to Collections In the list of collections, right-click the collection you want to update Click All Tasks, and then click Update Collection Membership 1 3 2 To verify collections with the SMS Administrator console:

64. Demonstration: How to Create a Collection with a Direct Membership Rule Your instructor will demonstrate how to use the SMS Administrator console to create a collection with a direct membership rule

67. How to Create a Subcollection To create a subcollection: In the SMS Administrator console, click Collections Right-click the collection for which you want to create a subcollection, point to New, and then click Collection In the Collection Properties dialog box, use the tabs to complete the property settings for your new collection 1 3 2

69. How Collections Are Propagated Down an SMS Hierarchy Primary Child Secondary Child Primary site only receives definition of collection Secondary site only receives list of resources Parent Site Primary site has definition and list of resources

70. Practice: Creating a Collection with a Direct Membership Rule Create a collection with a direct membership rule for specific computer running Windows XP Verify that the collection was created by updating and refreshing with the SMS Administrator console 1 2

71. Practice: Creating a Collection with a Rule Based on a Query Configure a collection containing a static rule for a workstation and a static rule for a <your site name> Verify that the collection was created by updating and refreshing with the SMS Administrator console How do rules affect the query? 1 2 3

73. The Relationship Between Packages and Programs Office 2003 Setup Packages must be created first Once package is created, then you create a program A program allows an application in a package to be installed Office 2003

74. How to Create a Package and Configure Its Properties To create a package and configure its properties: Navigate to Packages on the SMS Administrator console Right-click the Packages folder, point to New, and then click either Package or Package From Definition Specify the properties of the package on the various package properties tabs 1 3 2

76. How to Create a Program To create a program: Navigate to the Package that you want to create a program for in the SMS Administrator console and then click Programs Right-click Programs, Point to New, and then click Program Complete the Program Properties 1 3 2

77. How to Distribute Packages to Distribution Points SMS Site Server Office 2003 package to be distributed from distribution points A and B Distribution Point A Distribution Point B

79. How to Verify That a Package Has Reached the Distribution Point To verify that a package has reached the distribution point: Navigate to Reporting in the SMS Administrator console Click Reports to list all reports in the detail pane Right-click the All distribution points report, point to All Tasks, point to Run, and then click the reporting point you want to run the report from Click the arrow icon next to the DP in Report Viewer to view all packages on the distribution point 1 3 2 4

80. Practice: Creating a Package Create a package Select a distribution point Specify a program for the package 1 2 3

81. Practice: Configuring Packages Read the questions Determine possible answers Discuss your answers with the class 1 2 3

83. How to Create an Advertisement To create an advertisement: Navigate to Advertisements in the SMS Administrator console Right-click Advertisements, point to New, and then click Advertisement Complete the advertisement properties 1 3 2

84. What Are the Advertisement Configuration Options? Advertisement Scheduling Options Mandatory: Program is run after an event (for example, on logon or logoff or at a specific date and time) Optional: Allows users to run the advertised program when they want to Additional Advertisement Properties Run the advertised program from a DP or download the package and run it locally Using remote DPs when the client is considered to be remotely roaming

85. Options for Managing Remote Downloads for a Package Client A roams to a secondary site Distribution point outside SMS Primary Site boundary Client A runs advertised program from remote DP because either the option to run program from a remote distribution point or option to download from a remote DP was allowed 1 3 2 SMS Primary Site Boundary Local Distribution Point SMS Server Remote Roaming Boundary Remote DP Client A Client A SMS Primary Site Boundary Local Distribution Point SMS Server

86. How to Retrieve a User or Machine Policy To retrieve a user or machine policy: Click Start, and then click Control Panel In Control Panel, double-click Systems Management In the Systems Management Properties dialog box, click the Actions tab In the details pane, click either Machine Policy Retrieval & Evaluation Cycle or User Policy Retrieval & Evaluation Cycle, depending on what policies you want to retrieve 1 3 2 4

89. Demonstration: How to Create and Configure an Advertisement Your instructor will demonstrate how to create and configure an advertisement, how to retrieve a machine policy, and how to run and advertise program on the client

90. Practice: Creating an Advertisement to run a script Complete the procedure to practice creating an advertisement 1

93. How to Use the Standard Reports for Software Distribution To view a distribution status report: In the SMS Administrator console, expand Site Database, expand Reporting, and then click Reports To run a report, right-click Distribution status of a specific package in the details pane Point to Distribution status of a specific package, point to All Tasks, point to Run, and then click the desired reporting point 1 2 3

95. How to Check Status Information for Advertisements and Packages In the SMS Administrator console, click Site Database, click System Status, and then click Package Status Right-click the desired package Select Show Messages To view all status messages, click All To view selected messages, click Errors, Warnings, or Info To view status information for a specific site, select the desired package from the console tree To check a package status: 1 4 2 3 5 6 In the SMS Administrator console, expand Site Database, expand System Status, expand Advertisement Status, and then click the desired advertisement Right-click the desired site Select Show Messages To view all status messages, click All To view selected messages, click Received, Failures, Program Started, Program Errors, or Program Success 1 4 2 3 5 To check an advertisement status:

96. Locations of Software Distribution Log Files Log files on the SMS server are found in: %Windir%ystem32CMogs C:MSogs Advanced Client Log files are found in: Legacy Client Log files are found in: %Windir%SMSogs

98. Practice: Running Standard Reports on Software Distribution Use reports and status information Run a status query View key log files View log file on the site server to show that the package was distributed View client log file to verify that the program was executed Disable the advertisement Answer the reflection question 1 2 3 4 5 6 7

100. Module 9: Implementing SMS Software Update Tools and Managing Update Deployment

103. How SMS Is Used to Manage Software Updates Synchronization Scan and Inventory Authorization and Distribution Preparation Software Scan Tools Installation 3 4 5 1 2

104. Differences in Software Update Management for Windows Update Services and SMS 2003 Basic software distribution feature can be used None Updates for non- Microsoft products Ongoing process None Deployment Rich reporting feature Reporting from each computer Reporting None End user Windows OS + components Windows 2000 and later Windows Update Services SMS 2003 with Software Update Management Feature Software/hardware inventory Software distribution Scheduling and targeting Enterprise features Windows NT 4.0 SP6a and later Platforms supported Administrator Installation control Windows OS + components Microsoft Exchange Server Microsoft SQL Server Microsoft Office Updates for Microsoft products

105. How SMS Determines What Software Updates Are Needed The synchronization host downloads the latest security catalog The scan component audits client computers for updates and compares existing status with the latest updates Information about updates is propagated back to the site 1 2 3 SMS Site Server Scan Tools Distribution Point Target Client Computers 1 2 3 Synchronization Host Internet Management Point or CAP

106. How SMS Distributes Software Updates The administrator runs the Distribute Software Updates Wizard The administrator selects software updates for distribution and specifies command-line arguments for each update The software update package is created and prepared for distribution The Software Update Installation Agent installs the software updates 1 2 3 Target Computers 4 Software Updates Selected Software Update Package 2 3 Software Updates Installed 4 Distribute Software Updates Wizard 1

107. SMS Objects Created by the Software Update Scanning Tools Software Update Scanning Tools Packages ScanWrapper.exe Programs Advertisements Collections Package Files Distribution instructions

108. Demonstration: How to View SMS Objects Created by the Software Update Scanning Tools Your instructor will demonstrate how to review properties for components created by the Security Update Inventory Tool installation

110. How to Use the Software Update Scanning Tools to Perform Software Update Inventory To use the scan tools: Perform an expedited scan Verify software update inventory status Use a reference computer for expedited approval processing 1 2 3

112. Demonstration: How to Deploy the Software Update Scanning Tools Your instructor will demonstrate how to run scanning tools on a client from a distribution point to perform software update inventory

114. Demonstration: How to Verify Software Update Inventory Results Your instructor will demonstrate how to verify the results of the security update scan that was shown in the previous demonstration

115. Practice: Deploying and Verifying the Software Update Scanning Tools Complete the procedures to practice deploying and verifying the software update inventory tools Answer the reflection question 1 2

118. How to Distribute Software Updates To distribute software updates: Evaluate and prioritize the software updates Plan the software update package Run the Distribute Software Updates Wizard Test the software update Configure locale settings Verify the package and advertisement settings 1 2 3 4 5 6

121. How to Perform More Complex Software Update Tasks To configure unattended software update installation: Run the Distribute Software Updates Wizard On the third Configure installation agents page, clear the Use notification balloons of dialogs check box On the second page, ensure that Perform unattended installation of software updates is selected On the Configure Agent Settings page, specify how long the agent should wait for user response 1 3 2 4 To configure scheduled software update installations: Run the Distribute Software Updates Wizard On the second Configure Installation Agent Settings page, select Enforce start time and maximum installation time In Maximum installation time, type the number of minutes allowed for installation after the advertisement begins to run Step through the rest of the wizard Create an advertisement for the package you just created or modified and specify the installation start time 1 3 2 4 5 To enable dynamic configuration by creating a new program object: Run the Distribute Software Updates Wizard On the Identify the SMS package page, click Advanced Click New to create a new program object for the package In the Program name box, type a name for the new program Attach a new software update authorization list to the new program or merge the contents of an existing list 1 3 2 4 5 To specify a new update authorization list: Generate the software update authorization list to be attached If necessary, copy the file created in step 1 to the folder containing the software updates package Run the Distribute Software Updates Wizard On the Identify the SMS package page, click Advanced In the Authorization list box, type the name of the file you want to attach, merge, or create 1 3 2 4 5

122. Demonstration: How to Distribute Software Updates Your instructor will demonstrate how to use the Distribute Software Updates Wizard to perform the most complex software update distribution tasks

125. Module 10: Working with USCENTAF SMS Hierarchies

132. How Data Flows in a Site Hierarchy Management and configuration data flow down the hierarchy Resource and client data flow up the hierarchy Hub Site Parent Site Central Site Hub Site Parent Site

133. How Data Flows in a Site Hierarchy Hub Site Parent Site Central Site Hub Site Parent Site Distribution Point

135. Discussion: CENTAF SMS Site Organization What are the benefits of current organization? 1

138. Types of Senders and the Connectivity They Support Standard Sender Courier Sender RAS Sender Types of senders: RAS Server Site Server Site Server RAS Server Site Server IP Router IP Router Site Server

141. How to Attach a Child Primary Site to a Parent Primary Site To attach a child primary site to a parent primary site: Navigate to the site Right-click the Site Code , and then click Properties Click the General tab, and then click Set Parent Site Ensure that Report to parent site is selected, and then specify a parent site 1 3 2 4

143. What Is a Protected Distribution Point? A protected distribution point is a distribution point that excludes Advanced Clients that are outside of its specially configured boundaries from downloading or running advertised packages from it Protected Distribution Point Distribution Point Distribution Point

144. Questions?