Best technical document about patch management

HI,
Every month Microsoft patches are deployed to about 5000+ desktops with Windows 7 32 Bit Enterprise Edition. There is only 90% desktops are getting the patches are installed.
Please let me know how do i troubleshoot remaining 10% desktops which are failing?
What are the best method to analyze the logs and bring the desktops to complaint.
Regards,
Boopathi S

Dear all,
thanks for the reply. We will get the below state messages once patch is deployed. Have any one worked on this to bring the workstations to patch complaint. or Do we have any other method to follow the solve the issues.
downloaded update
downloading update
enforcement state unknown
failed to download update
waiting for another installation to complete
Regards,
Boopathi S

Similar Messages

Document about Cash management

Hi
Please share to me some document about Cash, Treasury, Budget.
I had some document. But I see it's not full. Many transaction isn't posted.
Thanks & Reguards
Ngocpt

hi
See the below links may be useful to u
Cash Mangement
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/TRCM/TRCM.pdf
Treasury
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCBMTWFMTR/BCBMTWFMTR.pdf
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/MYSAP/SR_TR.pdf
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/CAARCTR/CAARCTR.pdf
nagesh

Indication of documents about Inventory management in BW

H
I've got this excellent document "How to handle inventory management scenarios in BW". Very clear, easy to understand.
I'd like to go into more details about 2LIS_03_BX (initialization of the current stock), compression of requests and marker update.
Does anyone have indication of other documents that deal with these subjects?
Thanks in advance
César Menezes

Hi Cesar:
Please refer to the documentation below:
"10 important points to consider while working with inventory management", blog by Ranjit Rout.
/people/ranjit.rout/blog/2009/06/14/10-important-points-to-consider-while-working-with-inventory-management
"Non-cumulatives / Stock Handling"
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/93ed1695-0501-0010-b7a9-d4cc4ef26d31?quicklink=index&overridelayout=true
"BI Inventory Management- Data Loading", paper by Gaurav Kanungo.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/906b837a-0d54-2c10-08b8-bde70337547e?quicklink=index&overridelayout=true
"Inventory Management (0IC_C03) Part - 1", paper by Surendra Kumar Reddy Koduru.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60101663-3cb7-2c10-3687-8d1e0ef51b0d?quicklink=index&overridelayout=true
"Inventory Management (0IC_C03) Part - 2", paper by Surendra Kumar Reddy Koduru.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0783925-f4be-2c10-9c89-ffa108f72547?quicklink=index&overridelayout=true
"Inventory Management (0IC_C03) Part - 3", paper by Surendra Kumar Reddy Koduru.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e00860a4-350f-2d10-29a0-fc09681a8bae?quicklink=index&overridelayout=true
"Inventory Management in SAP BW", article by Harishraju Govindaraju.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/9054ac59-aac4-2d10-3d9b-df98c52b4f31?quicklink=index&overridelayout=true
"Loading to the Inventory Cube 0IC_C03", blog by Akshay Chonkar.
/people/akshay.chonkar2/blog/2010/05/19/loading-to-the-inventory-cube-0icc03
"Insights into Cube compression", blog by Arun Varadarajan.
/people/arun.varadarajan/blog/2008/08/19/insights-into-cube-compression
SAP Note 643687 - "Compressing non-cumulative InfoCubes"
SAP Note 745788 - "Non-cumulative mgmnt in BW: Verifying and correcting data"
SAP Note 1548125 - "Interesting facts about Inventory Cubes"
Regards,
Francisco Milán.
Edited by: Francisco Milan on May 7, 2011 12:08 PM

Technical document about scanner scanplus 1802

Hi everyone, I'm currently working in project which contacts with the scanner scanplus 1802. We are supposed to do the following things:
Read data from the scanner.
Because the user doesn't often look at the screen. Therefore, if the data is invalid, we not only show a warning message but also send signal back to the scanner (to block the scanner or to force it to make a series of beep for example, this helps the user reallize there are somethings wrong and then, look at the screen to see the matter).
So does anyone have any technical documentation, code, sample, resource about this issue. If so, I would be very grateful if you can share things with me.
Thanks for any help, any response or any care about my problem.
Regards.

Hi everyone, I'm currently working in project which
contacts with the scanner scanplus 1802. We are
supposed to do the following things:
Read data from the scanner.In that case, you might wanna try JTwain.
JTwain supports all kinds of digital cameras and scanners.
You can use Java to access, contorl digital cameras and scanners, and of course,
to acquire images with flexible settings.
The developers' guide is available @ http://asprise.com/product/jtwain/devGuide.php
Here is the sample code:
try {
   // the SourceManager manages and controls all the data(image) sources, eg. scanners, digital cameras,
   Source source = SourceManager.instance().getDefaultSource();
   source.open();
   // Enables or disables the UI
   source.setUIEnabled(false);
   Image image = source.acuqireImage();
   ... // Uses image here ...
   // Saves the image into a file
   source.saveLastAcquiredImageIntoFile("test.jpg");
}catch(Exception e) {
   e.printStackTrace();
}finally{
   SourceManager.closeSourceManager();
}Good luck!

What is the best approach for patch management

Hi,
I'm new about patch management. I would like to ask you how manage patch on few Solaris 10 servers using command line.
I would like to know:
1. Using only command line how to download latest patches
2. There are some dependencies how to check this and install only those patches which meets dependecy requirements?
3. Is there possiblity to atomate this?
4. Is it possible to have one patch server and others servers will download and install this patches?
5. What if some patches are not installed?
6. How to find out which patches are necessary and which patches don't have to be installed? Or maybe or patches to be installed?
7. Could you please describe your approach for managing patches? Or maybe you can recommend some books/web page/articles that can help me to understand patch management.
Thanks in advance,
Daniel

smpatch is the command line tool to manage solaris patching. first you need to register yours system - this can be done using sconadm, detailed here:
http://sunsolve.sun.com/search/document.do?assetkey=1-9-82688-1
smpatch analyze will list all required patches and resolve dependencies. smpatch download will download all the required patches, and smpatch update will apply them. You can set up a Local Patch Server to download patches, then your clients will download the patches they require from it. This is detailed in chapter 6 of the update connection admin guide

Handling units management SAP Best Practices Document Links

Hi Friends
I would like know more about handling units management .
Could you please send me SAP Best Practices Document handling units management Links .
Thanks in Advance.
Thanks
SR

Might be useful:
[Click here|help.sap.com/bp_bblibrary/500/documentation/U43_BB_ConfigGuide_EN_IN.doc|weblink]
Thanks and Regards,
Naveen Dasari.

Technical documents on T.M & Benefits

Can any one provide Technical Document on Time Management and Benefits?

Hi Juan,
Take a look here, these documents should be helpful. In particular take a look at the Landscape Guide
SAP Identity Management 7.2 Documentation
Regards,
Matt

What is Sun's answer about PCA patch manager free tool ?

Hi all,
this post aims on echoing customers'feedback.
from customers'experience it seems that smpatch from patch manager tool is suffering of a lack of reliability.
One of them moved to a new freeware called PCA-Patch Check Advanced
http://www.par.univie.ac.at/solaris/pca/
From PCA Web Site we can read:
Sun has offered various tools in the past to analyze Sun/Solaris systems for patches which are installed or missing, e.g. PatchDiag, PatchCheck, PatchPro, smpatch (see the Sun Patch Portal for details). Some of them are not actively maintained, some are huge and opaque, some don't run on older Solaris releases or stripped-down machines. None of them really made me happy. Based on PatchCheck source I implemented PCA, which gets rid of the disadvantages of Sun's own tools.
I would like to know what is Sun's position and could it be possible to integrate such a tool ?
Thanks.
Malek.

- Sun is always interested in customer feedback, and is interested in
the concerns expressed here.I'd also very muck like Sun to be interested in fixing the customers problems, which has not been done in my cases. No solution or explanation has been given to my many cases opened on smpatch, and this, even though in some cases, patches were made (months later): I was never told about them. Which makes me wonder about the point of having paid support contracts in the first place.
But since UM was developed by interns, it's no wonder there's trouble maintaining it (how do I know? I've been an intern doing Java development, and I made the exact same beginner's mistakes, not knowing to handle exceptions, leaving debug output on stdout, being unable to make proper localisation).
It's obviously not the work of experienced Java programmers. Hard to trust it...
- We do understand that opaque is bad, but one of Sun's goals is to
provide complex analysis beyond matching patches with installed
packages. This analysis and its support processes will necessarily
be somewhat opaque.What analysis are you talking about? smpatch is not even able to tell me that security fixes are available for NSS, which has been part of Solaris for years. PCA does.
And what about Studio? Why can't smpatch tell me there are patches for that, too? And why aren't free patches, that are neither recommended nor security (such as the man patches) shown by smpatch when running without a contract?
- We are interested in the concerns surrounding stripped-dow
systems, and are considering a "light" version of our tools that would
support minimal systems. However at this time there are no plans to
release a light version.And what about systems without a network?
And what about not forcing me to read and agreeing to a, abusive license agreement, which can't even be printed, nor shown full screen (5 lines at a time!)?
And, please, can you explain me why I should agree to respect Reuters so-called intellectual property? What does it have to do to with keeping my systems up to date reliably and easily? Is it a competition between Sun and Microsoft to put the most ludicrous licenses on line?
Anyway, I'm sure Solaris 11 will introduce some new bloated offspring of the PatchProManagerUpdateConnection family, so I'm not holding my breath. Rather than repeat this experience again and again, I'll stick with PCA.
Laurent

Best Practice Document to Configure Quality Management Analytics

Hi Experts,
Can any one help in finding out the best practices document for installing BI content for Quality Management.
Regards,
Santhosh

Hi Reddy,
Thanx for the link but I have a requirement to install the BI content for Quality management to present it to the client. So I need to install as a whole not for a particular requirement.
I want to know do I need to install all the datasources like masterdata and Transactional which are available in RSA5.
Regards,
Santhosh.

RD Session Host lock down best practice document

Hello,
I am currently working on deploying an RDS Farm. My farm has several RD Session host servers. Today I learned that you can do some bad things to the RD Session hosts, if a user presses
CTRL + Alt + End when having a open session. I locked all of this down using different GPOs which include disabled access task manager, cmd, locking the server, reboot and shutdown etc.
However, this being sad how would I know what else to lock down since I am new to this topic. I tried to find some Microsoft document about best practices what should be locked down but I wasn’t
successful and unfortunately a search in the forum did not bring up anything else.
With all the different features and option Windows Server 2008 R2 has I do not even know where to start.
Can some please point me into the right direction.
Thank you
Marcus

Hi,
The RD Session host lock down best practices of each business is different, every enterprise admin can only to find the most suitable for their own solutions based on their IT infrastructure.
I collected some resource info for you.
Remote Desktop Services: Frequently Asked Questions
http://www.microsoft.com/windowsserver2008/en/us/rds-faq.aspx
Best Practices Analyzer for Remote Desktop Services
http://technet.microsoft.com/en-us/library/dd391873(WS.10).aspx
Remote Desktop Session Host Capacity Planning for 2008 R2
http://www.microsoft.com/downloads/details.aspx?FamilyID=CA837962-4128-4680-B1C0-AD0985939063&displaylang=en
RDS Hardware Sizing and Capacity Planning Guidance.
http://blogs.technet.com/iftekhar/archive/2010/02/10/rds-hardware-sizing-and-capacity-planning-guidance.aspx
Technical Overview of Windows Server® 2008 R2 Remote Desktop Services
http://download.microsoft.com/download/5/B/D/5BD5C253-4259-428B-A3E4-1F9C3D803074/TDM%20RDS%20Whitepaper_RC.docx
Remote Desktop Load Simulation Tools
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c3f5f040-ab7b-4ec6-9ed3-1698105510ad
Hope this helps.
Technology changes life……

IPS Tech Tips: IPS Best Practices with Cisco Remote Management Services

Hi Folks -
Another IPS Tech Tip coming up and this time we will be hearing from some past and current Cisco Remote Services members on their best practice suggestions. As always these are about 30 minutes of content and then Q&A - a low cost high reward event.
Hope to see you there.
-Robert
Cisco invites you to attend a 30-45 minute Web seminar on IPS Best   Practices delivered via WebEx. This event requires registration.
Topic: Cisco IPS Tech Tips - IPS Best Practices with Cisco Remote Management   Services
Host: Robert Albach
Date and Time:
Wednesday, October 10, 2012 10:00 am, Central Daylight Time (Chicago,   GMT-05:00)
To register for the online event
1. Go to https://cisco.webex.com/ciscosales/onstage/g.php?d=203590900&t=a&EA=ralbach%40cisco.com&ET=28f4bc362d7a05aac60acf105143e2bb&ETR=fdb3148ab8c8762602ea8ded5f2e6300&RT=MiM3&p
2. Click "Register".
3. On the registration form, enter your information and then click   "Submit".
Once the host approves your registration, you will receive a confirmation   email message with instructions on how to join the event.
For assistance
http://www.webex.com
IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and   any documents and other materials exchanged or viewed during the session to   be recorded. By joining this session, you automatically consent to such   recordings. If you do not consent to the recording, discuss your concerns   with the meeting host prior to the start of the recording or do not join the   session. Please note that any such recordings may be subject to discovery in   the event of litigation. If you wish to be excluded from these invitations   then please let me know!

Hi Marvin, thanks for the quick reply.
It appears that we don't have Anyconnect Essentials.
Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 100            perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 250            perpetual
Total VPN Peers                   : 250            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
This platform has an ASA 5510 Security Plus license.
So then what does this mean for us VPN-wise? Is there any way we can set up multiple VPNs with this license?

Technical Document (Exact Procedures) To Migrate Forms/Reports 9i to 10g

Hi;
Where can i find the Technical Document (Exact Procedures) To Migrate Forms/Reports 9i to 10g?

This seems to be a common point of confusion. The "FMw Upgrade Assistant" is a utility which helps you to upgrade the entire Application Server installation to a newer version (e.g. 11.1.x). This has nothing to do with your Forms (fmb, mmb, pll, etc) or Reports (rep, rdf, etc) applications. Generally speaking, I would say that using the UA is not necessary and likely should not be used in most cases. Cases where it should be used might include a situation where your previous version has been significantly customized and you don't know how or don't want to make the same customization in the new environment manually. Whether you are talking about a new product (Oracle or not) or even a new OS, generally your best bet is to start with a clean, new installation. Attempting to upgrade an existing version always comes with problems. Just one man's opinion ;-)
As for your Forms application(s), there is a Forms Migration Assistant (FMA), explained in the Forms Upgrade Guide:
http://docs.oracle.com/cd/E24269_01/doc.11120/e24478/toc.htm
That said, just like using UA, it is always better to take the extra time and not rely on such tools if they can be avoided. In most cases, the FMA will not be needed. This is especially true if your application is coming from version 10. For older versions, using FMA might be beneficial.
So, to the point, in order to move a Forms application (fmb, mmb, pll) from version 10 to 11 is as simply as recompiling your modules using the v11 compiler. That's it ;-)

Customizing Document of Record Management System

Dear Experts,
I have implemented Document Management System for my client. In my new project client is asking for the implemention of Record Managemnt System. I am new to this module. Can anyone help me in getting standard customizing document of Record Management System.
I cheked the basic info about the same in SAP help,but that does not give customization steps.
Thanks for your inputs
Regards
Damodar Pai

Hi,
Please check SAP Netweaver Folder Management (ex-Records Management) [original link is broken] for documents on RM. Please check http://wiki.sdn.sap.com/wiki/display/ESpackages/RecordsandDocument+Management for info on repositioning of RM.
Best Regards,
Pragya

Guidelines on Change documents and Status Management

Hi Friends,
    I am not sure whether this is the right question or not but I am in desprate need of it.
    The thing I find my self no where sometimes when I think of working on Chagne documents and Status management. I have been into WF for about 2 years. but never got a BEST chance to work on complicate workflows.
     <b>Can anyone give me some ways or links where I can find clear difference between change docs and status mngt and how to work on those ?</b>
    I did search in blogs but didnt find much. so posting a new thread. sorry for the inconvenience.
Thanks
Reddy

Hi Reddy ,
Go through these links.
the Tcode for Change document is swec,
http://help.sap.com/saphelp_47x200/helpdata/en/c5/e4aee2453d11d189430000e829fbbd/frameset.htm
http://help.sap.com/saphelp_47x200/helpdata/en/8c/1923d1932b11d2a5ea0060087a79ea/frameset.htm
http://help.sap.com/saphelp_erp2004/helpdata/en/db/7a2a40ce93185de10000000a1550b0/content.htm
Thanks & Regards
Hari Sankar M

Vulnerability/security patch management

I'm looking for the best way to manage SAP security patches and vulnerabilities. We have to do a monthly assessment of the newly released vulnerabilities from SAP and determine if they relate to our systems. I'm having a hard time finding a good place to get a list of recently released notes.
I found https://websmp210.sap-ag.de/security - click on Security Notes, but the list doesn't appear to list everything, and doesn't show what is new or updated from month to month. This creates a lot of manual work looking at each note every month.
Does anyone know of any tools that can help with this. I'm looking for something like what Microsoft does with it's monthly security updates, and ideally a tool like WSUS that can analyze the systems to determine if they require the patch or not.

Hello Jeff,
Very good question! I have very often thought about this, and how I would like to have the information communicated to me without it being communicated to anyone else...
Specifically regarding the security notes page, I have observed that the notes are added to the list at the top. However, the release date of the note, an update to the version of the note, nor a related note does not bump it to the top again nor influence the specific order.
Certainly, the notes which are listed there are important ones (as indicated by Keerti)... or the principle is... some components are worth keeping an eye on, particularly if you use them or they are new.
Alone the fact that they are published for all OSS users and additionally on that (security) page, should be reason enough to think seriously about implementing it or considering it in your own developments... If you look at some of them, you might also see they are corrections which enable security controls, so regarding your patch management I can also recommend that you differentiate between your "program error patching cycle", and your "correction and activation instruction cycle". Of course, some notes are not intrusive on customers who do not require the correction or are oblivious to it.... so you can patch until the cows come home... it will not help you until you activate the new security feature or change your technique... User types are an example of this.
In some special cases, you need to have found the problem, before you are able to activate a solution for it. Sometimes you have to use the potentially problematic feature (setting up customizing or settings for it, and assigning authorizations to use it...) at which point the system will point things out to you. In other cases, the system will hassle you to change it for many reasons, not only the security reason.
It makes sense to restrict authorizations and settings to only that which you use. That helps a lot. See various threads here on transaction SU24 for some examples from the authorizations aspect of security.
Another tricky aspect is, once someone has a patch installed in their system or a security researcher has found a bug... should they make statements about it in the internet (followed by Smiley's :-)...? Often, a 90 day grace-period for admins is observed.
If you stick around here at SDN and read some of the posts here carefully, then you can also learn a lot in a relatively short space of time, on an ongoing sort of distributed space of time....
Reading the security wiki's and guides are also very helpfull of course.
Risk rating can also be tricky. You might find that if your security analysts are all security or authorization admins, then they might prefer to go for program corrections rather than role changes... or concept changes... Management might even resist changes, for fear of them, their costs, etc.
Regarding analyzing your systems, you might want to consider a "Security Optimization Service" session. You can also download this and maintain your own additional checks. That requires a small additional effort and cost. You can find more information on it by searching "OSS" and service.sap.com/security. In a 1 day or more detailed session if you want, you can cover many risks with a relatively low effort.
I have participated in two of these (we requested them) and it was helpfull. I also provided some feedback to SAP suggesting checks and some risks. My take on it is: If we contribute to improving standard solutions (and reporting bugs), then we all benefit from it "for free" in the standard products.
Last but not least, there is monitoring. You can learn a lot from the various monitoring possibilities (check your legal requirements for security there as well).
Some thoughts from me for your interesting question,
Julius

Best technical document about patch management

Similar Messages

Maybe you are looking for