Your SlideShare is downloading. ×
armor.doc.doc
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×
Saving this for later? Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime – even offline.
Text the download link to your phone
Standard text messaging rates apply

armor.doc.doc

352
views

Published on


0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
352
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
0
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. Systems Management Server 2.0 and Windows NT Server Integration Full Armor Zero Administration White Paper Abstract Full Armor provides a valuable enhancement to Microsoft® Systems Management Server and the Microsoft Windows NT® Server operating system by reducing the cost of change and configuration management for Windows–based desktop systems while significantly leveraging the investment and capabilities of the Windows® operating system. This paper describes how the Full Armor software works with Systems Management Server and Windows NT Server to keep desktop applications highly available, maintain and enforce software desktop applications and configurations, and ensure Year 2000 application compliance.
  • 2. © 1999 Full Armor Corporation 2
  • 3. CONTENTS FULL ARMOR INTRODUCTION Systems Management Server 2.0 and Windows NT Server Integration 1 FULL ARMOR ZERO ADMINISTRATION.....................................1 WHITE PAPER............................................................................1 INTRODUCTION.........................................................................1 FULL ARMOR.............................................................................1 FULL ARMOR AND SYSTEMS MANAGEMENT SERVER INTEGRATION ...................................................................................................2 Controlling security settings through Systems Management Server 3 Automating Full Armor installation 3 FULL ARMOR AND WINDOWS NT INTEGRATION......................3 MORE INFORMATION................................................................3 As more organizations become global in scope, deployment and management of IT- related issues is a mission-critical function in the process of planning and assessing new and existing IT requirements. In 1998, a Gartner Group analysis of IT personnel, hardware, and software costs associated with the development of a procurement and roll-out plan, brings the annual total cost of ownership (TCO) cost per PC user in a typical Microsoft® Windows® 95 operating system–based desktop enterprise environment to just under $9,500. Mobile computer costs can be 56% higher than corporate desktops costs. Studies also show that as much as 80% of TCO is directly related to the cost of labor to deploy, manage and support the environment. As such, it is clear that organizations interested in lowering TCO must find ways of reducing labor resources related to the management of the IT system. Full Armor has developed an enterprise policy management software solution that enables a lower TCO by significantly reducing help desk and PC maintenance costs. Full Armor extends the Microsoft Systems Management Server and Windows NT® Server change and configuration management features by creating a standardized policy management environment. The powerful combination of Full Armor, Microsoft Systems Management Server, and Windows NT Server provide IT administrators the opportunity to reduce TCO by enabling technical support staff to focus on critical technical issues, rather than time-consuming ones like software deployment, configuration and change management, and unauthorized software installation by end-users. The result is a calculable, or quantifiable, reduction in cost and time in management and support of enterprise systems. Full Armor is a Windows 95 and Windows 98, Windows NT, and Windows 2000 software program that provides IT administrators the ability to manage and control desktop and application configurations. Full Armor does this by embracing and Full Armor and Systems Management Server White Paper 1
  • 4. FULL ARMOR AND extending Windows System Policies for Windows 9x, Windows NT clients, and SYSTEMS MANAGEMENT Group Policy for Windows 2000 clients. SERVER INTEGRATION Full Armor is integrated with Systems Management Server to provide an enterprise with the ability to maintain the applications that were deployed using Systems Management Server. A large percentage of desktop total cost of ownership (TCO) is the result of end-users installing unwanted and untested software that “step on” and write over critical files and application configuration settings. When deploying software updates, patches, and upgrades, it is critical that the original application is on the hard drive in the directory in which it was deployed. Significant resource cycles are consumed by administrators when software deployments fail because users have moved, uninstalled, or upgraded the application themselves. Full Armor, integrated with Systems Management Server and Windows NT, provides the means for IT administrators to deploy and maintain applications on the desktop. Specifically, Full Armor allows IT administrators to: • Maintain and Enforce Application Standards. After an application is deployed to the desktop with Systems Management Server, Full Armor locks down the application so that it cannot be deleted, moved, or upgraded without approval from the Systems Management Server administrator, ensuring data integrity. • Deliver Applications that are Highly Available. Applications are the very reason why the PC is being used. As such, it is critical that the standard applications selected by the IT department are needed for the user to perform his/her job function, and are highly available. Full Armor also ensures that those applications will always run properly. This type of control significantly reduces help desk calls and desktop visits. • Prevent Year 2000 Application Regression. A major problem with applications at the desktop is post–Year 2000 testing regressing. Full Armor’s lockdown prevents this Year 2000 regression by preventing the application files from being overwritten or changed. • Prepare for Windows 2000. Full Armor with Systems Management Server makes the Windows 2000 roll-out easier and smoother because IT departments know what applications are on the hard drive and where they are located. Some of the greatest deployment failures are a result of users adding or changing the standard applications. • Prevent Unwanted Application Installs. Full Armor can prevent any application installation other than when Systems Management Server deploys the application. This process forces centralized administration of all software installs. Full Armor is integrated with Systems Management Server to appropriately manage Full Armor’s protection during software deployment. Full Armor also includes a Systems Management Server Package Definition Format (PDF) file for automating the Full Armor software deployment to the client PC. Full Armor and Systems Management Server White Paper 2
  • 5. MORE INFORMATION FULL ARMOR AND Controlling security settings through Systems Management WINDOWS NT Server INTEGRATION Full Armor provides extension script files to be included in the Systems Management Server installation scripts for applications. This allows a Systems Management Server installation package to automatically disable the security before a Systems Management Server installation and restore the security once the installation has finished. In addition, Full Armor’s security can be manually disabled using the ArmUtils.exe utility. This utility is a Win32 executable that can be called from within a login script or run directly from the command-line to temporarily disable the security or re- enable the security of Full Armor. For more information, see the Full Armor User Guide. Automating Full Armor installation Using the Systems Management Server program definition format file (setup.pdf) provided by Full Armor Corp., the Full Armor client software can be automatically installed using the default “Automated Setup” command lines. Full Armor client software’s automatic installation features can be accessed through the Full Armor setup utility’s command line. The parameters include the capability to do silent, non-prompting installations as well as suppressing the reboot. Full Armor is integrated with Windows NT Server to extend Windows System Policies and Windows 2000 Group Policy features and functionality. This allows IT administrators to provide centralized and granular desktop and mobile PC control. The System Policies created with Windows NT System Policy Editor are interchangeable with Full Armor. Full Armor extends these policies to provide greater control and application lockdown. Specific additional policies provided by Full Armor include: • Lockdown specific Control Panel applets • Disable floppy drive access • Lock/control access to CD-ROM • Specify which programs users can launch • Selectively prevent installation of software • Audit logging of restricted attempts • Customized messages for restricted operations For pricing and packaging and other information, please contact Full Armor Corporation at 1-800-653-1783 or e-mail to info@fullarmor.com or visit http://www.fullarmor.com. Full Armor and Systems Management Server White Paper 3