Kaseya Connect 2012 - POLICY MANAGEMENT BEST PRACTICES
•
2 likes•2,618 views
Automation is the key to a successful Kaseya implementation and in order to achieve the ultimate goal of 100% automation, it all starts with defining proper policies. This session will walk you through some of the key best practices organizations just like yours can do to ensure proper policies are configured and how to evolve your polices to include additional automation steps through this powerful module.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Kaseya Connect 2012 - POLICY MANAGEMENT BEST PRACTICES
Similar to Kaseya Connect 2012 - POLICY MANAGEMENT BEST PRACTICES (20)
More from Kaseya
More from Kaseya (20)
Recently uploaded
Recently uploaded (20)
Kaseya Connect 2012 - POLICY MANAGEMENT BEST PRACTICES
- 1. Policy Management Best Practices Solutions to Deploy and Manage via Policy Presenters: Kevin Franck, Matt Warburton
- 2. Policy Management Best Practices • Overview • Best Practices • Quick Look Forward • Question & Answer
- 4. GOAL: Continuous Automation Discovery Policy Continuous Automated Management 100% • Networks Agent • Domains • Machine Automation Deployment Views • Orgs & Groups
- 5. Leveraging Views and Groups Associate Organization: Policy: Acme Inc. #1 View: Windows Server 2008 Machine Group: Settings: Infrastructure Monitor RAM & CPU Machine: Associate Policy: IN-SRV-DB01 #2 OS: Windows Server 2008 View: SW: SQL Server SQL Server 2005 Apply Resulting Settings: Policies Settings: Monitor RAM & CPU Monitor SQL Service Monitor SQL Service
- 6. IT Systems Management Evolution Unmanaged Sneaker-Net Individually Templates Kaseya Personal Point Solutions Managed w/Deploy Pkgs Policy Computers Agents & Copy Settings Management
- 7. Solution Overview Agent Configuration Mgmt via KPM • Policy Concepts • Create/Manage Policies • Policies by Policy Object Types • Multi-Item Policy Objects • Dynamic Nature of Views • Exception Handling & One-Offs • Templates • Organizational Provisioning
- 8. Policy Concepts • Policy Folders • Policies & Views • Policy Objects • Policy Assignment • Policy Precedence • Policy Compliance/Overrides • Policy Schedules
- 9. Policy Folders Form The Basis Of Policy Precedence 1st 2nd 3rd
- 10. Policies & Policy Views Define Settings & Criteria To Which Policy Will Apply
- 11. Policy Objects Logical Groupings of Individual Managed Settings Alerts Policy Object Monitor Sets Policy Object
- 12. Policy Assignment Control Orgs/Groups/Machines To Be Managed Assigned Folders Individual Policy Assignments
- 13. Policy Precedence Define Order In Which Policies Get Processed/Applied Top Down Note: The first Policy Object Type in any Policy that is assigned, and for which the View matches, takes affect... Exception: Multiple item Policy Object Types such as Event Log Alerts, Agent Procedures and Monitor Sets)
- 14. Policy Compliance Provides Status of All Assigned Policies In Compliance Marked for Deployment No Policies Assigned Out Of Compliance
- 15. Policy Overrides Occur When Settings Managed Outside of KPM Policy Overridden NOTE: No More Processing of the Overridden Policy When In Override (In this case -> Agent Menu, Checkin, Log History Objects)
- 16. Create/Manage Policies • Manage the Rules Not the Exceptions! • Example: Basic Settings – Log History • Rule: – Workstations -> 31 Day Retention – Servers -> 93 Day Retention – Agent Menu • Rule: – Workstations -> No Exit, Set Account, or Disable RC – Servers -> No Set Account or Disable RC
- 17. Create New Policy Workstation Basic Settings Once Saved, use Save As to create new Server Log History Policy!
- 18. Create New Policy Server Basic Settings
- 19. Policies by Object Type • Granularity at the Object Type Level • Example: Working Directory – File System Folder Structure Differ by OS – Linux -> /tmp/kworking – Macintosh -> /Library/Kaseya/kworking – Windows -> c:kworking
- 20. Policies by Object Type Linux Working Dir
- 21. Policies by Object Type Macintosh Working Dir
- 22. Policies by Object Type Windows Working Dir
- 23. Monitoring Management Leveraging Multi-Item Policy Objects • Multiple Policies w these Object Types: – Monitor Sets – Agent Procedures – Event Log Alerts • Cumulative in Nature • Example: Layered Monitoring – Hardware (Dell, HP, IBM, etc...) – OS (Windows, 2003, 2008, etc...) – Roles (DC, DNS, DHCP, Exchange, SQL, etc...)
- 24. Monitoring Management Hardware, OS, and Role Based Monitoring Policies DOMCTLR Windows 2003 Domain Controller File & Print Server SQL 2005 Server DNS DHCP KSRVR Windows 2003 SQL 2008 Server IIS FTP SMTP
- 25. Monitoring Management Resulting Policies for DOMCTLR DOMCTLR Windows 2003 Domain Controller File & Print Server SQL 2005 Server DNS DHCP
- 26. Monitoring Management Resulting Policies for KSRVR KSRVR Windows 2003 SQL 2008 Server IIS FTP SMTP
- 27. Dynamic Nature of Views • Views are Dynamic Therefore.... – Policies Apply Dynamically • Very Powerful Automation – Monitoring • Dynamic Role Monitoring – Agent Procedures • Conditional Agent Procedures – Patch Management • Dynamic Patch Policy Assignments
- 28. Exception Handling & One-Offs • Avoid Overrides Whenever Possible! • Org/Group Specific Exception Policies – View Speficic to Org/Group • One Off Criteria Specific Policies – Very Narrow Criteria Views • Machine Policies/Assignments – Policies for Certain Machines using “Only show selected machine IDs” Views • Assign Exceptions Above General Policies
- 29. Other Policy Best Practices Tips & Tricks • Views Related to Policies – Naming Convention – Limit Sharing/Access Control of Views • Test Your Policies – Create Testing Views • Only show selected machine IDs
- 30. Template Considerations • Old School, but needed today for... – Any Initial Agent Settings (before KPM policies apply) • Initial Working Directory Path (if not using default) • Agent Menu (if it must be hidden or custom immediately) • Event Log Settings • Log History retention for Agent Uptime Log • Add-On Modules/Settings
- 31. Follow On...KDS Deployment • Deploy Agent via Directory Services – Agents Checkin – Perform Audits – Run Other Automation (Role detection) • Policy Management Kicks In!!!
- 32. Organizational Provisioning • Create Organization • Create and Customize Template – Focus on Initial & Non-Policy Managed Settings • Create Agent Deployment Package – New Organization based on AD Domain – Copy Settings from Template – Windows Only – Name it “New Customer - Domain”
- 33. Directory Services Agent Deployment • Deploy Agent/Probe – Manually install Agent on Domain Member/DC – Install KDS Probe
- 34. Directory Services Agent Deployment • Setup Agent Deployment Policy
- 35. Directory Services Agent Deployment • Setup Machine Policies on OUs
- 36. Quick Look Forward Next Release – More Settings • Event Log Settings • Suspend Alarms • Support for Add-on Modules – Endpoint Security, Antimalware, etc. – Global Policies • Applies to All Orgs and Groups – Usability • e.g. Reason Description for Out-of Compliance