Mark Gewurz and Peter Sisk, IT Engineers at Yelp: How we used Chocolatey to remove local admin at Yelp, reducing both IT support overhead and malware incidents. Using a combination of Chocolatey Self Service and Puppet, users can install the software they need to be productive from a trusted source. Hear how Yelp found a balance between security and convenience and learn about the automation with AU and Jenkins that allows us to keep our internal software catalog up to date.

1. A sweet Conference focused on
Windows Automation (WinOps)

2. Chocolatey & Puppet at Yelp
Mark Gewurz, Client Platform Engineer
Yelp
Peter Sisk, Client Platform Engineer
Yelp

3. Chocolatey & Puppet at Yelp
Yelp
CPE Today
Our Environment
● 7000 Macs
● 350 ChromeOS devices
● 600 iOS devices
● 250 Windows devices
Core Technologies
● Puppet
● Active Directory Group Policy
● JAMF
● Airwatch
● Munki
● Chocolatey
● Splunk
The Team
● 6 Engineers across all platforms

4. Chocolatey & Puppet at Yelp
Yelp
CPE 2017
● 3 Engineers focused primarily on Mac
● ‘Good enough’ Windows management
● Windows as a ‘first-class’ managed platform
● Feature parity with Mac

5. Chocolatey & Puppet at Yelp
Technical
Challenges
● Imperfect tools
● Configuration was inconsistent
● Reporting was inadequate or unreliable
● Little or no version control or peer review

6. Chocolatey & Puppet at Yelp
Human
Challenges
● Growing Windows user base
● Windows users were local admins
● Painful, time-consuming patching and packaging
● Fire drills take their toll

7. Chocolatey & Puppet at Yelp
Wish List
Dare to dream ● Automatable
● Meaningful reporting
● User friendly
● Available everywhere
● Consistent configuration
● Reliable installs and upgrades
● Beer

8. Chocolatey & Puppet at Yelp
Solutions

9. Chocolatey & Puppet at Yelp
Chocolatey
● Manages installation, upgrades and uninstalls
● Supports MSI, EXE, etc.
● Self contained packages
● Built-in functions to support common tasks
● All the power of Powershell
● Separate sources for different categories of software
● Source control and automation
● Detailed logging

10. Chocolatey & Puppet at Yelp
Chocolatey
For Business

11. Chocolatey & Puppet at Yelp
Puppet

12. Chocolatey & Puppet at Yelp
Puppet

13. Chocolatey & Puppet at Yelp
Reporting

14. Chocolatey & Puppet at Yelp
Reporting

16. Chocolatey & Puppet at Yelp
Automation
Why automate?

17. Chocolatey & Puppet at Yelp
Continuous
Integration It's just a quick fix and nothing really changed.
No need to run it through all the tests, it won't
break anything
- Me, 2017
“

19. Chocolatey @ Yelp
AU

21. Conclusion

22. Links
https://chocolatey.org
https://puppet.com/
https://forge.puppet.com/chocolatey/chocolatey
https://github.com/majkinetor/au
https://jenkins.io/
https://github.com/test-kitchen/test-kitchen
https://www.splunk.com/
https://github.com/fluent/fluentd

23. Thank you
to our
Sponsors

24. SSID:
Park Central Meetings
Password:
chocolateyfest2018
WIFI