Global Azure Bootcamp 2018 Istanbul'da Fırat Yaşar ile birlikte yaptığımız Azure System Management oturumuna ait sunumdur.

2. Mustafa Kara @mustafakara01
Son 10 Yıldır:
Konuşmacı & Yazar:
• Mshowto.org mustafakara.net.tr

3. Fırat Yaşar
Son 10 Yıldır:
Konuşmacı & Yazar:
• Mshowto.org firatyasar.com.tr

4.  New pricing model
 Q & A

5. Configuration
Update Management
Microsoft Azure

6. Deploy
Enforce
compliance
MonitorUpdate
Discover

8. Desired State Configuration (DSC)
- Proactively respond to configuration
drift by defining a baseline for your
environment
- Deliver Infrastructure as code
- Flexible Delivery
• Apply and monitor
• Apply and autocorrect
- Detailed reporting and diagnostics at a
per resource level
- Available for both Windows & Linux
Change Tracking & Inventory
- Track changes made to your system
- Valuable for root-cause analysis
- Collect & search inventory and history
- Available for both Windows & Linux
- Windows
• Software
• Services
• Files
• Registry
- Linux
• Software (Packages)
• Daemons
• Files
Key Features
 Configure any cloud or on
premise machine
 Windows & Linux
 Desired State Configuration
 Change Tracking
 Inventory
On-
Premises
Datacenter
Azure
AWS &
Service
Providers

9. View changes for:
• Software
• Files
• daemons/services
• registry values
• Azure activity log (New*)
Scenarios:
• Identify unauthorized changes
• Correlate configuration changes with
monitoring events
• Create an alert & remediate on change
• Reporting for package/software updates
• Browse historical changes for diagnosis and
forensics

12. View snapshots for:
• Software
• Files
• Daemons/services
• Registry values
Key Features:
• Spans across Windows & Linux
• Use data to create computer
groups
• Browse historical data

15. Automated configuration management from the cloud
• Manage physical hosts and VMs in any cloud or on-premises
• Windows or Linux
• Configuration setting and reporting
• Easily attach Azure VMs from portal, ARM Template, or extension
Powered by PowerShell DSC
PowerShell (PS) DSC configuration, node configuration (MOF), node, and
resource management
• Import configurations & modules (from PS Gallery or custom)
• Author
• Compile
• Distribute to nodes
• View granular and high-level configuration compliance reports
• Easy node onboarding
Deploy, enforce, and monitor configuration compliance

17. Configuration
(script)
DSC
Resources
Authoring
Azure VM Physical
server
On-prem
VM
MOF
MOF
Node
Configuration
(MOF)
Zip
Zip
Zip
Rest Endpoint
Staging
Reports

24. Patching tools Target/scope Description/OMS
Microsoft Update Clients, servers Core service for Windows updates. Update Management will leverage this. Service
itself meant for direct update, not available for Linux, no aggregated view.
WSUS Clients, servers Curate/approve and proxy patches from Windows Update.
Typical server patch install method:
• Manual
• Automation through GPO/PowerShell
SC Configuration
Manager, Intune
Clients, devices,
servers
Majority of SCCM customers are using patching features on servers.
Typical server patch install method : Manual, Automation
Missing: Linux patching
Cluster Aware Update
(CAU) and Patching
Windows 2012 and
above clusters
Ability to apply a patch on nodes of a cluster in a cluster aware way (drain, patch,
reboot, add to cluster). https://technet.microsoft.com/en-us/library/hh831694.aspx
SC VMM Hyper-V hosts Cluster aware way to keep Hypervisor patched and up to date (CAU)
Azure VM extension Linux virtual machines
in Azure
Targeted at Azure Virtual Machine customers. https://azure.microsoft.com/en-
us/blog/automate-linux-vm-os-updates-using-ospatching-extension/
Cloud Platform System:
P&U framework
CPS system Investment in a Zero-downtime Patch and Update Orchestration system for the Cloud
Platform System (multi-node)
Existing Update Management tools from Microsoft

25. Unified visibility and deploymentReliable, highly available, scalable
- Flexible scheduling options
- ConfigMgr
 Update Azure & non-Azure
 Windows & Linux
 Update Insights
 Update Deployments
Azure
Update
Management
AWS&
Service
Providers
Hyper-V
VMWare
OpenStack
On-Premises

27. Amazon Linux
• 2015.09 – 2017.09
Debian GNU/Linux
• 6 (x86/x64)
• 7 (x86/x64)
• 8 (x86/x64)
Oracle Linux
• 5 (x86/x64)
• 6 (x86/x64)
• 7 (x64)
Red Hat Ent. Linux
• 5 (x86/x64)
• 6 (x86/x64)
• 7 (x64)
SUSE Linux Enterprise Server
• 11 (x86/x64)
• 12 (x64)
Ubuntu Server
• 12.04 LTS (x86/x64)
• 14.04 LTS (x86/x64)
• 15.10 (x86/x64)
• 16.04 (x86/x64)
CentOS
• 5 (x86/x64)
• 6 (x86/x64)
• 7 (x64)
(Currently supported)
(future planned)
Legend

28. Integration

29. Azure Update Mgmt
WUA
MU/
WSUS

32. Capability Meter Free units included (per month) Price
Update Management Any node N/A Free
Configuration management Azure N/A Free
Non-Azure 5 nodes $6/node/month
Process Automation Job run time 500 minutes $0.002 / minute
pay for log data stored in the Azure Log Analytics service. pricing.