More Related Content
10215 A 09
- 1. Module 9Maintaining Software Updates Using the Offline Virtual Machine Servicing Tool
- 2. Module Overview Overviewof the Offline Virtual Machine Servicing Tool Configuring WSUS and the Offline Virtual Machine Servicing Tool
- 3. Lesson 1: Overview of the Offline Virtual Machine Servicing Tool Methods for Maintaining Software Updates What I s the Offline Virtual Machine Servicing Tool ? How Does the Offline Virtual Machine Servicing Tool Work? Infrastructure Requirements for the Offline Virtual Machine Servicing Tool Preparing the Virtual Machines
- 4. Methods for MaintainingSoftware Updates Windows Server Update Services (WSUS) Available to all sizes of organizations free of charge Centrally manages updates for operating systems and applications Synchronizes with Microsoft Update Microsoft System Center Configuration Manager 2007 Can be used in large and complex environments Manages deployment of operating systems, applications , and updates Performs inventory
- 5. What Is the Offline Virtual Machine Servicing Tool? Cannot be used on physical hosts Works with VMM, WSUS , and System Center Configuration Manager 2007 WSUS or System Center Configuration Manager 2007 Offline Virtual Machine Servicing Tool Offline virtual machine The Offline Virtual Machine Servicing Tool is used to update virtual machines that are left offline for extended periods of time
- 6. How Does theOffline Virtual Machine Servicing Tool Work? How the Offline Virtual Machine Servicing Tool works: Turns on the virtual machine Triggers the appropriate software update cycle Shuts down the updated virtual machine and returns it to the library Servicing job defines parameters for offline virtual machine update Offline Virtual Machine Servicing Tool Servicing job Windows Scheduler Trigger the servicing job to start Identify and retrieve appropriate updates Store virtual machines Software Update Management system Work with virtual machines and maintenance hosts Deploy virtual machines Maintenance host Start the update cycle Virtual machine VMM Library System Center Virtual Machine Manager
- 7. Infrastructure Requirements forthe Offline Virtual Machine Servicing Tool WSUS or System Center Configuration Manager 2007 VMM 2008 or VMM 2008 R2 Active Directory infrastructure Offline Virtual Machine Servicing Tool installed on the same server as the VMM Admin Console Windows PowerShell execution policy set to remotesigned PSExec Tools Maintenance hosts
- 8. Preparing the VirtualMachines When preparing offline virtual machines for updating ensure that: The DHCP client service is enabled The VMM Virtual Guest Services are installed Windows Firewall exceptions are configured as: File and Printer Sharing Windows Management Instrumentation (WMI) Remote Administration Incoming Echo Request for ICMP v4/v6 WSUS or System Center Configuration Manager 2007 are installed on the virtual machines The Offline virtual machine is stored in the VMM library Additional requirements for hot-spare virtual machines
- 9. Lesson 2: Configuring WSUS and the Offline Virtual Machine Servicing Tool The Process for Configuring WSUS to Support Virtual Machine Servicing Demonstration: How to Configure WSUS to Support Virtual Machine Servicing Installing and Configuring the Offline Virtual Machine Servicing Tool Creating, Running, and Monitoring Servicing Jobs Demonstration: Installing and Configuring the Offline Virtual Machine Servicing Tool
- 10. The Process forConfiguring WSUS to Support Virtual Machine Servicing WSUS Computer groups should be created Updates should be approved WSUS Group Policy should be configured Deployment deadline should be set WSUS server should synchronize updates from Microsoft Update
- 11. Demonstration: How toConfigure WSUS to Support Virtual Machine Servicing In this demonstration, you will see how to configure the WSUS infrastructure to support the Offline Virtual Machine Servicing Tool
- 12. Notes Page Over-flowSlide. Do Not Print Slide. See Notes pane.
- 13. Installing and Configuring the Offline Virtual Machine Servicing Tool Installation: U se Administrative credentials Need PSExec tools Configuration wizard: P rovide the name of the VMM server and the WSUS server S pecify the maintenance host group S pecify the timeout limits Creat e virtual machine groups in the Offline Virtual Machine Servicing Tool
- 14. Creating, Running, andMonitoring Servicing Jobs Creating a Servicing job Create new servicing job from scratch Create a copy of an existing servicing job that is not running Configuring and running a servicing job Provide credentials, host , and network settings Choose virtual machines Run a servicing job after creation Schedule servicing job Monitoring the status of servicing jobs View the status of current servicing jobs
- 15. Demonstration: Installing and Configuring the Offline Virtual Machine Servicing Tool In this demonstration, you will see how to install and configure the Offline Virtual Machine Servicing Tool
- 16. Notes Page Over-flowSlide. Do Not Print Slide. See Notes pane.
- 17. La b :Maintaining Software Updates by Using the Offline Virtual Machine Servicing Tool Exercise 1 : Configuring Infrastructure Prerequisites to Support the Offline Virtual Machine Servicing Tool Exercise 2 : Installing , Configuring, and U sing the Offline Virtual Machine Servicing Tool Logon information Estimated time: 60 minutes NYC-Host1, NYC-Host2 Host machines Virtual machines NYC-DC1, NYC-SVR6 User name Administrator Password Pa$$w0rd
- 18. Lab Scenario Contoso,Ltd., has several virtual machines that it is storing in the VMM library, and they are using them as hot spares for production machines. The development team periodically uses some of these machines for testing. Keeping computers up to date with the latest updates and patches it critical, so they company wants to implement a solution that will keep offline virtual machines updated. They are using WSUS as the update management solution for their online computers. You are the virtual administrator, and you want to implement the Offline Virtual Machine Servicing Tool to address these requirements.
- 19. Lab Review Isit possible to use multiple WSUS servers to achieve updates for offline virtual machines? Can you update offline machine s that are not domain members? Why or why not?
- 20. Module Review andTakeaways Review Questions Common Issues Troubleshooting Tips Real-world Issues and Scenarios Best Practices Tools
- 21. Notes Page Over-flowSlide. Do Not Print Slide. See Notes pane.
Editor's Notes
- #2 Presentation: 45 minutes Lab: 60 minutes After completing this module, students will be able to: Describe the Offline Virtual Machine Servicing Tool. Configure Windows Server Update Services (WSUS) and the Offline Virtual Machine Servicing Tool. Required materials To teach this module, you need the Microsoft® Office PowerPoint® file 10215A_09.ppt. Important: It is recommended that you use PowerPoint 2002 or a later version to display the slides for this course. If you use PowerPoint Viewer or an earlier version of PowerPoint, all the features of the slides might not be displayed correctly. Preparation tasks To prepare for this module: Read all of the materials for this module. Practice performing the demonstrations and the lab exercises. Detailed steps for the demonstrations are provided in the course companion CD. Work through the Module Review and Takeaways section, and determine how you will use this section to reinforce student learning and promote knowledge transfer to on-the-job performance. Make sure that students are aware that there are additional information and resources for the module on the Course Companion CD.
- #3 Present the module content. The key message of this module is to explain the Offline Virtual Machine Servicing Tool, in which scenarios you can use it, and how you can use it with an existing update management infrastructure. Also, be sure to emphasize the importance of updating offline virtual machines when teaching this module.
- #4 Briefly describe lesson content. Tell students that they will learn what the Offline Virtual Machine Servicing Tool is during this lesson, and that you will discuss the requirements for using the Offline Virtual Machine Servicing Tool in an existing network infrastructure.
- #5 The key message of this topic is to present update management solutions that can be used with the Offline Virtual Machine Servicing Tool . Because students are probably already familiar with WSUS , some of them might not be aware of Microsoft System Center Configuration Manager 2007 as an update management solution. Explain the difference between WSUS and Configuration Manager 2007, as well as scenarios of usage for both products. Also, emphasize that both tools can work with Offline Virtual Machine Servicing Tool , but that you do not need to use both of them at the same time. Question: When should you choose Configuration Manager 2007 instead of WSUS for updating your environment’s computers? Answer: If you have a large infrastructure, you should use Configuration Manager 2007 if you need to perform automatic deployments of operating systems and applications, and perform system inventory besides just updating computers. Also, Configuration Manager 2007 is the right choice if you need to deploy updates for non-Microsoft software, such as third-party or in-house applications to your computers.
- #6 Define the Offline Virtual Machine Servicing Tool. Explain some usage scenarios for the Offline Virtual Machine Servicing Tool. Do not spend much time explain ing exactly how this tool works because the next topic explains this process . Note that the current version of the Offline Virtual Machine Servicing Tool is 2.1. Version 2.1 of the Offline Virtual Machine Servicing Tool keeps the features of version 2 and adds support for Windows ® 7, Windows Server ® 2008 R2, Hyper-V ™ R2 and VMM 2008 R2. Version 2.1 also adds support for WSUS 3.0 SP2 and Configuration Manager 2007 SP2.
- #7 The k ey message of this topic is to explain how the Offline Virtual Machine Servicing Tool works. Be sure to explain each step noted on schema. Before starting to explain the process, define servicing job. Explain that the tool works with Task Scheduler to determine when to run the servicing job. For each virtual machine: The servicing job instructs the Virtual Machine Manager (VMM) to move virtual machines to maintenance hosts and start them. The servicing job triggers the appropriate software update cycle in Configuration Manager or WSUS. When the virtual machine has no more pending updates, the servicing job instructs VMM to shut down the updated virtual machine and return it to the library. Question: What must you deploy with the Offline Virtual Machine Servicing Tool in order to update offline virtual machines? Answer : You need to deploy VMM and the software update management system, which can be either WSUS or System Center Configuration Manager 2007.
- #8 Explain the key requirements for deployment and how to use the Offline Virtual Machine Servicing Tool . While the first four key points on slide might be easy to understand, spend more time to explain why you must set an execution policy in Windows PowerShell™, why you need PSExec Tools, and what a maintenance host is. If students are not aware of what PSExec tools is, tell them that it is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without manually installing the client software. PsExec's most powerful uses include launching interactive command prompts on remote systems and remotely enabling tools like IpConfig that otherwise do not have the ability to show information about remote systems. Regarding set-execution policy requirement, tell students that execution policy is part of the Windows PowerShell security strategy. It determines whether you can load configuration files (including your Windows PowerShell profile) and run scripts. It also determines which scripts, if any, must be digitally signed before they will run. Explain that a maintenance host is a virtual machine host that you can dedicate for updating stored resources. This designation is for reference only. However, by designating and using a dedicated host to perform maintenance tasks, you can avoid affecting the performance and the host rating of a production host while performing such tasks. For easier administration and for convenience when adding servicing jobs, consider grouping the maintenance hosts. If time permits, also discuss some recommendations for storage area networks (SANs) and network infrastructure. Question: What is the benefit of using Maintenance host groups? Answer: By using Maintenance host groups, you can group hosts that you use for offline virtual machine updating. The Offline Virtual Machine Servicing Tool will use these groups to deploy virtual machines from the library, and update them. Using dedicated hosts for this purpose can decrease the load on your production servers.
- #9 Before starting to use the Offline Virtual Machine Servicing Tool, you must prepare the virtual machines. This topic discusses the requirements that you must fulfill on virtual machines so that you can use the Offline Virtual Machine Servicing Tool. Discuss each requirement, and then explain what hot spare virtual machines are, and which additional requirements must be fulfilled.
- #10 Present the content of the lesson. Explain that this lesson will show how to use the Offline Virtual Machine Servicing Tool with WSUS.
- #11 This topic discuss es the steps that you must perform to configure WSUS to work with the Offline Virtual Machine Servicing Tool. If time permits, and if students are familiar with Configuration Manager 2007 , you also can discuss general steps about configuring Configuration Manager to work with the Offline Virtual Machine Servicing Tool . Use the following information as guidelines . If you use Configuration Manager to manage updates: Ensure that the software update point has downloaded the updates. Ensure that the updates have been packaged for deployment. Create deployments for the updates that include the deployment deadline. To specify that the updates should be installed as soon as possible, which is the next time that the virtual machines contact the Configuration Manager database, then set the deadline to the shortest possible interval, so that the deadline has passed by the time the servicing jobs begin to run. The Configuration Manager deployment also must identify the virtual machine collections to which the updates apply. Question: Why should you use WSUS computer groups? Answer: Computer groups in WSUS allow you to phase installation process of updates by pushing them only to computers in specific computer group. Be aware that these groups are not connected with groups in Active Directory® Domain Services (AD DS).
- #12 In this demonstration, you should students how to prepare and configure the WSUS infrastructure to support the usage of the Offline Virtual Machine S ervicing T ool. Demonstration steps Configure Group Policy settings 1.On LON-DC1 , click Start , click Administrative Tools , and then click Group Policy Management . 2.Expand Forest: Contoso.com , expand Domains , expand Contoso . com , and then click Group Policy Objects . 3.In a right pane, right-click Default Domain Policy , and then click Edit . 4.In Group Policy Management Editor , expand Computer Configuration , expand Policies , expand Administrative Templates , expand Windows Components , and then click on Windows Update , which is the last item in the list. 5.In the right pane, double-click Configure Automatic Updates . 6.Click Enabled . In the Configure automatic updating box, click 4 – Auto download and schedule the install , and then click OK . 7.In the right pane, double-click the Specify intranet Microsoft update service location option . 8.Click Enabled . In the Options box, type HTTP://nyc-svr1 in both fields, and then click OK . 9.Under Computer Configuration , under Policies , expand Windows Settings , expand Security Settings , expand Windows Firewall with Advanced Security , and then expand Windows Firewall with Advanced Security –LDAP . 10.Right-click Inbound Rules , and then click New Rule . 11.On the Rule Type page, click Predefined , click File and Printer Sharing , click Next twice, and then click Finish . 12.Right-click Inbound Rules , and then click New Rule . 13.On the Rule Type page, click Predefined , click Windows Management Instrumentation (WMI) , click Next twice, and then click Finish . 14.Right-click Inbound Rules , and then click New Rule . 15.On the Rule Type page, click Predefined , click Remote Administration , click Next twice, and then click Finish . 16.Close Group Policy Management Editor , and then close the Group Policy Management console.
- #13 Create a computer group in WSUS 1.On NYC-SVR1 click Start , click Administrative Tools , and then click Windows Server Update Services . 2.In the Update Services console, expand Computers , and then click All Computers . 3.Right-click All Computers , and then click Add Computer Group . 4.In the Add Computer Group dialog box, type ContosoGroup . 5.Click Add . 6.In the WSUS Administration Console , expand All Computers . 7.Click Unassigned Computers . 8.In the Status drop-down list box, click Any , and then click Refresh . 9.Click any available virtual machine. 10.Right-click the virtual machine, and then click Change Membership . 11.In the Set Computer Group Membership dialog box, select the ContosoGroup check box. 12.Click OK . Approve updates KB978251 and KB975467 in the WSUS console 1.On the WSUS console tree, expand Updates , and then click All Updates . 2.In the Status drop-down list box, click Any , and then click Refresh . 3.In the details pane, while pressing the CTRL key, select updates KB972270 and KB978251 , and then right-click and select Approve . The Approved Updates dialog box appears. 4.In the Approved Updates dialog box, click the icon next to ContosoGroup , and then click Approved for Install . 5.Click OK . 6.Click Close . 7.Close Update Services console.
- #14 Explain the processes for installing and configuring the Offline Virtual Machine Servicing Tool. Provide an explanation of the key installation and configuration steps.
- #15 Explain the process and options for creating a new servicing job. Explain what kind of information you can provide when configuring a servicing job, and explain scheduling options. At the end, discuss how you can monitor the servicing jobs status. Question: Why you should use isolated VLAN when updating a hot spare virtual machine Answer: You must use isolated VLAN to avoid running a hot spare virtual machine at the same time as the machine that it should replace, as they might have same identity.
- #16 In this demonstration, you should show how to install and configure the Offline Virtual Machine Servicing Tool. You will install the tool, configure general options , and then create a servicing job. You will not run the servicing job , but tell students that they will run a servicing job in a lab. Demonstration steps Set the execution policy in Windows Power Shell 1.On NYC-HOST1 , click Start , click All Programs , click Microsoft System Center , click Virtual Machine Manager 2008 R2 , and right-click Windows PowerShell – Virtual Machine Manager . Select Run as administrator from the drop-down list menu. 2.In Windows PowerShell command prompt window, type: set-executionpolicy remotesigned , and then press Enter . Type y , and then press Enter . 3.Close Windows PowerShell window. Install the Offline Virtual Machine Servicing Tool 1.On NYC-HOST1 , browse to e:\\Program Files\\Microsoft Learning\\10215\\Labfiles\\OVMST , and then double-click the OfflineVMServicing_x64.msi file. 2On the Welcome screen, click Next to continue the installation. 3.On the End User License Agreement screen, click I accept the terms in the License Agreement , and then click Next . 4.On the Features to Install screen, click Next . 5.On the next screen, click Install to install the Offline Virtual Machine Servicing Tool. 6.On the final screen, click Finish to complete the installation. 7.In the e:\\Program Files\\Microsoft Learning\\10215\\Labfiles\\PsTools folder, select all files, and then click Ctrl+S . 8. Browse to c:\\Program Files\\Microsoft Offline Virtual Machine Servicing Tool\\bin , and then paste the files. 9.Close Windows Explorer. .
- #17 Configure the Offline Virtual Machine Servicing Tool settings and options 1.Click Start , click All Programs , open the Microsoft Offline Virtual Machine Servicing Tool folder, and then click Microsoft Offline Virtual Machine Servicing Tool to run the tool. 2.After Offline Virtual Machine Servicing Tool opens, click Configure Tool in the Actions pane. 3.On Configure Servers page, enter NYC-HOST1 in VMM server field, and enter NYC-SVR1 in WSUS server field. Leave the Configuration Manager primary site server field blank, and then click Next . 4.On Configure Maintenance Hosts page, choose ContosoGroup in the Maintenance host group drop-down list box. 5.In Available hosts section, select NYC-HOST1 , and then click the right arrow ( >). Click Next . 6.On Configure Global Settings page, type the value 5 in both timeout fields, and then click Finish . Create a servicing job 1.Click the Servicing Jobs tab. 2.In the Actions pane, under Servicing Jobs , click New Servicing Job . 3.On Configure Job Type page, type OfflineVMUpdate in Servicing job name field, click WSUS in Software update management system box, and then click Next . 4.On Select Virtual Machines page, click Select virtual machines from a VMM Library . 5.In Available offline virtual machines box, select an available virtual machine, and then click the right arrow. 6.Click Next . 7.On the Select a Network page, click Use the configured virtual machine network , and then click Next . 8.On Select Maintenance Hosts , click NYC-HOST1 in Available maintenance hosts box, and click the right arrow ( >), and then click Next . 9.On Configure Account Information , enter Contoso in the Domain field, Administrator in the User name field, and Pa$$w0rd in the Password field, and then click Next . 10.On the Schedule the Servicing Job page click Schedule the servicing job , and select today’s day and a time five minutes forward from the current time. 11.Click Cancel , and then click Yes , as you will perform updates during the lab.
- #18 In this lab, students will prepare the infrastructure for using the Offline Virtual Machine Servicing Tool, and they will install, configure , and use the Offline Virtual Machine Servicing Tool. Exercise 1 In this exercise, students will configure the infrastructure prerequisites to support the Offline Virtual Machine Servicing Tool. Exercise 2 In this exercise, students will install, configure , and use the Offline Virtual Machine S ervicing T ool. Before students begin the lab, read the scenario associated with each exercise to the class. This will reinforce the broad issue that the students are troubleshooting, and will help to facilitate the lab discussion at the end of the module. Remind the students to complete the discussion questions after the last lab exercise. Note: The lab exercise answer keys are provided on the Course Companion CD. To access the answer key, click the link located at the bottom of the relevant lab exercise page.
- #20 Use the questions on the slide to guide the debriefing after students complete the lab exercises. Question : Is it possible to use multiple WSUS servers to achieve updates for offline virtual machines? Answer : Yes, but you must you separate the Offline Virtual Machine Servicing Tool to configure the various WSUS servers . Question : Can you update offline machine s that are not domain members? Why or why not? Answer : No, domain membership is required.
- #21 Review Questions 1.Why is it important to keep virtual machines from the VMM library up to date? Answer : Virtual machines that are stored in VMM library cannot be updated by using regular update management systems such as WSUS, because they are turned off. Since these machines often are used as hot spares for existing machines, and can be deployed into production, it is crucial to have them updated just like other computers. 2.List some differences between WSUS and SCCM. Answer : WSUS is only an update management solution. On the other hand, SCCM is a solution that besides being an update management system, allows you to deploy operating systems and applications in your environment, as well as perform hardware and software inventories. Which Windows component do you use to run servicing jobs? Answer: You use Windows Task Scheduler for this purpose. Real-World Issues and Scenarios Question : Northwind Traders is using System Center Virtual Machine Manager 2008 R2 to manage their virtual environment, and System Center Configuration Manager 2007 as its update management and deployment solution. Since they store several virtual machines in the VMM library, and use them as hot spares for production machines, they want to use Offline Virtual Machine Servicing Tool to keep these machines up to date. They do not want to implement WSUS, but want to use the Offline Virtual Machine Servicing Tool with System Center Configuration Manager. What steps they should perform to configure the Offline Virtual Machine Servicing Tool? Answer : First, they should install the Offline Virtual Machine Servicing Tool on the same machine where the VMM Administrator Console is installed, and then set the execution policy parameter to remotesigned . After that they should run the Offline Virtual Machine Servicing Tool, and then start the Configuration Wizard, and specify System Center Configuration Manager 2007 as the update management solution. On the System Center Configuration Manager, they should perform following steps: Ensure that the software update point has downloaded the updates. Ensure that the updates have been packaged for deployment. Create deployments for the updates that include the deployment deadline. To specify that the updates should be installed as soon as possible, which is the next time the virtual machines contact the Configuration Manager 2007 database, set the deadline to the shortest possible interval so that the deadline has passed by the time that the servicing jobs begin to run. The Configuration Manager 2007 deployment also must identify the virtual machine collections to which the updates apply. At the end, they should create servicing jobs, and optionally virtual machine groups, inside the Offline Virtual Machine Servicing Tool.
- #22 THE RED text below looks like a repeat of what’s on the previous page, and then the blue stuff looks like what’s missing from the previous page?! Real-World Issues and Scenarios Northwind Traders is using System Center Virtual Machine Manager 2008 R2 to manage virtual environment, and System Center Configuration Manager 2007 as update management and deployment solution. Since they store several virtual machines in VMM library, and use them as hot spares for production machines they want to use Offline Virtual Machine Servicing Tool to keep these machines up-to-date. They do not want to implement WSUS, but to use Offline Virtual Machine Servicing Tool with System Center Configuration Manager. What steps they should perform to configure Offline Virtual Machine Servicing Tool? Answer: First, they should install Offline Virtual Machine Servicing Tool on same machine where VMM Admin Console is installed, and set execution policy parameter to remotesigned . After that they should run Offline Virtual Machine Servicing Tool and start Configuration wizard and specify System Center Configuration Manager as update management solution. On the System Center Configuration Manager they should perform following steps: BULLET? Ensure that the software update point has downloaded the updates. BULLET? Ensure that the updates have been packaged for deployment. BULLET? Create deployments for the updates that include the deployment deadline. To specify that the updates should be installed as soon as possible, which would be the next time that the virtual machines contact the Configuration Manager database, then set the deadline to the shortest possible interval so that the deadline has passed by the time the servicing jobs begin to run. The Configuration Manager deployment also must identify the virtual machine collections to which the updates apply. At the end, INSERT students should DELETE they should create servicing jobs and optionally virtual machine groups inside Offline Virtual Machine Servicing Tool.