Best way to configure patching of multiple groups?

Howdy,
We're looking to start using Config Manager 2012 R2 to handle patching of our servers. I'm looking for any advice or opinions as to how to set everything up to run in the best way.
We have 3 primary groups that we want to update
QA/Dev Pilot group (~20 machines)
QA/Dev All group (~100 machines including the 20 above)
Production (~90 machines)
We want to do patching on the weekend and do each group on consecutive weekends.
Pilot - 3rd saturday
QA/Dev - 4th Saturday
Prod - 1st Saturday
I'm just looking for the best way to set things up in SCCM to handle this.
We were going to have an Automatic Deployment Rule for each group and schedule them that way.
Then I saw something that said to just have 1 ADR that points to a collection that contains all those group collections and just set maintenance windows on each group collection to handle the scheduling.
I'm just trying to figure out if there's a "best" way to do this or if there are multiple ways that all lead to the same end result and it really doesn't matter which one we choose or what.
We're all still pretty new to SCCM so any advice would be much appreciated.
Thanks.

I don't like the idea of using ADRs for handling all the patching, as it gets out of your control. That being said, to achieve something like that you need to run the ADRs on the same time every month, otherwise the deployments will contain different updates.
So, you can have to play with the deadlines to get your results with the different Saturdays.
Also, to make sure patches don't get installed during the week, by accident, you can use maintenance windows. For more information see:
http://technet.microsoft.com/en-us/library/hh508762.aspx
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude
We only update the patch list the day after patch Tuesday so all the ADRs should have the same patches. But that brings up the question I asked about having multiple ADRs scheduled for consecutive Saturdays or have 1 ADR with each collection to have
a maintenance window to set the Saturday it goes. I guess having multiple ADRs that run at the same time but with different deadlines would be similar to just having 1 and using the maintenance windows. But it might be better so that if the deadline
hits but it doesn't patch for some reason a maintenance window would also keep it from going during the day...
So maybe multiple ADRs that run on the 3rd Saturday. Each one with a different deadline on a different saturday. And then each collection would also have a maintenance window in case it didn't install at the deadline for some reason?
hmm...

Similar Messages

Best way to configure search toplogoy for multiple servers farm??

Hi,
My farm environment is 2 WFE and 2 App servers. Right now i am trying to configure Search Topology. what will be the best way to configure the search topology for this farm, so that query and crawling will be working perfectly. one thing i noticed with my
previous search application Crawl DB had grown 140 GB, i dont know why it happened. please look at the following screen shot, this the current topology but i want to distribute component to different server.
Any help will be appreciated!!

The best topology depends on whether you want it to be fault tolerant or not. For a fault tolerant design with this number of servers I normally create two Index Partitions 0 and 1 with each on one of the App servers. I then create Replicas of each
partition on the front end servers. I then put the query role on both web fronts ends and the crawl role on both Ap servers. So I end up with the following:
FE1 = Index Replica 0 + Query
FE2 = Index Replica 1 + Query
Ap1 = Index 0 + Crawl
Ap2 = Index 1 + Crawl
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

What is the best way to configure storage device for rac?

Hi
On my disk array i have 7mirors and two conroler, what is the best way to configure environment?
My application is OLTP, it runs 6-20 o clocj, so i can do backup when nobady work
Database 10g r2, Windows 2003 enterpise
for examlep
First controler
disks 1-5 DATA
second cotnroler
disks 6-7 FLASH
or meyby share one disk on DATA and FLASH?
Thanks in advice

The best is you use ASM (maybe you do it already) and put one failure group on the first disk array and the second failure group on the second array. Then you can ASM let do the work.
Werner

What is the "best" way to configure iTunes on an iMac with personal user acounts so each user can access the media library but sync devices on their personal user account?

I am trying to determine the best way to set up our imac so each user account can access the same media (songs, movies etc.) through itunes and also back up and manage their personal devices under their own personal user account. There are 4 users on our iMac. Me, my wife, and our 2 children. We have built an extensive library of music/media together using the same iTunes store account. I would like to establish a seperate apple id and iTunes store account for each of us going forward but have the ability for each of us to share our purchases. What is the best way to configure our system and devices in order to allow shared access to media and at the same time allow for individual management of devices including contacts, apps, photos, etc. Please help, I would like to do this once!
Thank you in advance!

OK, seeing as no-one replied (presumably because a lot of this information is on the forums in bits elsewhere) here's how I've got on so far.
Applications - just went through them. About the only one I needed was my media server app. Just downloaded and re-installed, had a quick look back though my email to find the license key and it all went on fine. Installation never seemed quite right on my old machine so solved that problem too.
Movies - New iMovies just copied across the clips and projects into their respective folders. Seems to have worked but haven't checked it all that thoroughly. Some duplicate footage here but I can trim this out at some point when I get a chance to go through here.
Documents - Just copied these across.
Photos - used an app called iPhoto Library Manager. You can download for free but have to pay to use the part that consolidates your libraries. Possibly if I was willing to spend a bit more time I could have got away without using this but given I didn't know the state of my different libraries and just how many duplicates I had this was too much of a convenience to ignore. Also got my library into a state where I can now spend a few hours organising it a bit better with Faces / Events etc.
Not attempted Music or iPhone sync yet as been stuck trying to solve a problem with my power adapter.

Best way to import data to multiple tables in oracle d.b from sql server

HI All am newbie to Oracle,
What is the Best way to import data to multiple tables in Oracle Data base from sql server?
1)linked server?
2)ssis ?
If possible share me the query to done this task using Linked server?
Regards,
KoteRavindra.

check:
http://www.mssqltips.com/sqlservertip/2011/export-sql-server-data-to-oracle-using-ssis/
      koteravindra
Handle:      koteravindra
Status Level:      Newbie
Registered:      Jan 9, 2013
Total Posts:      4
Total Questions:      3 (3 unresolved)
why so many unresolved questions? Remember to close your threads marking them as answered.

Best way to configure a network comprising WLSE and many APs ?

Hi the Cisco NetPro community,
I would like to have a discussion with you on the best way to configure a network containing a WLSE and a large amount of Access Points.
The network I want to configure comprises some subnetnorks, each comprising about 10 access points (with some advanced settings for security). It might be a quite long and boring process to set the configuration for all those, so I am looking for the quickest and easiest solution to do so.
First of all, the configuration of IP addresses have to be done on each Access Point after unpacking it. The configuration of my network comprises 1 WDS active AP, 1 WDS backup AP and the rest of infrastructure APs, that for each developement site.
I thought about several solutions :
- 1st solution could be to apply a configuration file (i.e. load the config.txt file) to each AP manually, changing some values (IP, local radius...).
But problem is that passwords can't be changed with text editor because of the passwords written in "hash".
- 2nd solution could be to configure each AP (after IP is set) using its web interface.
No more problem for hash written passwords, but this method is quite boring when surfing on menu pages of the AP web interface...
- 3rd solution, which could appear as the best solution, is to create a template on the WLSE, and to apply it to all APs.
No more boring connection to each AP, but problem are : we need to create as many templates as APs (or change some parameters each time), and we still need to set parameters directly to APs before (SNMP, SSH, WDS configuration...), in order the WLSE to manage the APs.
So, what do you think could be the best solution in order to deploy such a network with many APs ?
How is it possible to avoid (so far as we can) the configuration of APs one by one ?
Thanks a lot in advance for your consideration and your ideas !
Alexis.

Well for one of my clients that had over 60 sites, we actually created a couple of templates. We created a basic template and a template for each site. You can have the ap's obtain the configuration from the WLSE, but you need to configure a DHCP option. My client did mac address reservations, but of course you need the mac address first. I guess you can also let the ap get an address and change it later. They tried doing different things, first let the ap obtain a default config and then pushing out the configuration for that site.
As for the hash, you can set the password in ascii... when you do a show run, then of cours it will be hash'd.
http://www.cisco.com/en/US/docs/wireless/wlse/2.12/user/guide/deploywz.html#wp1936755

Best Way to Configure Multi-boot System With GRUB/GRUB2

Hello again,
Sorry for posting so much, but I'm really enjoying Arch so far! I had been reading a lot about Cinnamon so I wanted to try it (without installing the dependencies on my Arch installation), so I decided to install Mint, that went fine, and then I was hoping to add the entry to GRUB. I couldn't figure out how to do this, so I decided to try and install GRUB2 because it can autodetect other OS'. Well it didn't work and then I found myself without a bootloader. I couldn't figure out how to reinstall grub to the MBR (I tried the solution in the wiki and a couple of other places). I decided to reinstall Mint, and now I am booting into Arch through Mint's GRUB2. Two questions:
1) How can I fix grub through Arch to have that as my bootloader again? Nothing seems to work that I've tried.
2) What is the best way to configure grub or grub2 from Arch to allow myself options to multiboot other OS's in the future? I want to learn as much about UNIX as possible so I was planning on installing some other Linux distros and some other non-Linux UNIX OS's. I know this is a really newbie question, but I'm at a loss, I thought it was easier than it turned out.
PS. I didn't really like Cinnamon that much. I've been using Xfce and Openbox since I started using Linux (about a month ago), and it just seems too complicated! I don't like how little options you are given for customization. But that's just my opinion, everyone is different, I can see how it would be an improvement over GNOME3.
Thank You!

I have Arch Linux and Debian Testing installed side by side on my laptop.
Arch uses Grub (legacy) and Debian uses Grub2. The way I have set it up is to have Arch's Grub on the MBR and then chainload Debian's Grub2 from there.
Debian's Grub2 is installed on its own partition rather than on the MBR
This is the line I use to chainload Grub2 from Grub (legacy)
# (4) Debian chainload
title Debian chainload
root (hdX,X)
chainloader +1
Additionally just for kicks, I also have an entry in Grub2 to get back to Grub.
menuentry "Arch Linux chainload" {
insmod part_msdos
insmod ext2
set root='(hd0)'
chainloader +1
boot
Note that the (hd0) above always points to the MBR.
I do not have to bother with one bootloader interfering with the other and the OS entries on each are handled separately on their own.
This setup has worked well for me for quite a while now. Before I started with Arch, I used a similar setup when I tried out various distros (Fedora,opensuse,etc.) alongside Ubuntu
Hope it helps !

What is the best way to configure password in Cisco IOS?

I am running IOS 15.2(4) on a 1921 Router
What is the best way to configure the password for the router? I have already tried once and managed to lock myself out of another switch. I would like to use the most secure method which encrypts the password.
Current Config:
username admin privilege 15 password 0 cisco123

Cisco IOS will not let me use a type 5 password. This is the error message I receive:
ERROR: The secret you entered is not a valid encrypted secret.
To enter an UNENCRYPTED secret, do not specify type 5 encryption.
When you properly enter an UNENCRYPTED secret, it will be encrypted.
I tried generating an MD5 hash and inputting that in and that did not work either. When I do not specify type 5 it will default to using an encrypted type 4 password.
Also, what is the difference between these two enable secret commands?
enable secret 5 password
username admin privilege 15 secret 5 password

Best way to configure and connect two 4500 switches

I have a core 4507r+e in our production environment. We just acquired a 4500r and I would like to use it a distribution switch. What’s the best way to configure the new 4500r switch to connect to the core 4500 switch?

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
BTW, when you link your core to your distribution, the connecting link can be L2, L3 or both.
What I wanted to bring to your attention, 4500s can often easily oversubscribe some of their ports. Much depends on the sup and line cards being used. When you want to interconnect a core and distribution, you don't want to use a port that's something like 8:1 oversubscribed. (Further, if you're doing mostly L2, and all traffic L3 has to go to the core, depending on you traffic flows, a single link might have insufficient bandwidth.)
Also from core to distribution, if possible, it's good to avoid single points of failure. So if you only have one link between them, that link's transceivers (if used), the ports connected to, the line card connected to, are all single points of failure. (Of course, with only single sups in each chassis, that too is a single point of failure. From what you've described, from a performance and redundancy standpoint, you might actually be better off using a 4510R, with your two sups [if same model] and line cards - creating a collapsed core/distribution.)

Best way to configure "announcement only" mailbox

We have a client with 2951 router with Cisco CME v8.x. They need to have their receptionist be able to call in and change the school information message from an external number. They told me that they used to be able to dial in on the main number and then push 1 to dial by extension. When they called into that extension they could push * and get into the mailbox and then access the prompt customization part of the AvT. That isn't working and doesn't really make sense to me. I have tried to dial by extension and dial the AvT extension and it says invalid number. If I make the voicemail box for the extension in question an "announcement only" they cannot push * and change the greeting. Is there a best way to configure this senario to make it easy for the receptionist to change the school information announcement from an external number? Any help would be greatly appreciated!

Its been a while I did this but if I remember correctly, need dial the pilot number to access the mailbox. So when your client dials the main number, after that dial the voicemail pilot number, then enter the user ID as mailbox of announcement only, it should then give you the options to record the greeting.
I have dismantled my lab temporarily due to some renovation otherwise I would have quickly confirmed for you from there...but do try above and let us know how you go...
-Terry

More than 16 midi tracks....best way to configure?

What's the best way to configure more than 16 midi tracks?
1) External usb midi box
2) Virtual ports
3) Apple IAC ports
4) Disconnect SUM and connect ports to channel splitters (which are then fed to the instruments)
When configuring more than 16 audio instruments, is the best way to do that to use individual midi instruments as the front end for each, setting the midi port and channel on the midi instrument?
Or...is it better to go through the channel splitters (like in #4 above)?
I've run into some kind of midi cross-talk anomaly that I can't find (still after a LONG time searching), and I can't help but think it might be in my environment setup somehow.
Anybody like a good mystery? All help appreciated!!!
Cheers,
S.

Hi,
Firstly, please get rid of the term VST. Logic only uses Audio Units, and they work a little differently "behind the scenes".
Ok. Now that you said the magic "only internal" synths phrase:
In the current Environment, I've made a separate "midi instrument" for each "audio instrument" device. I'm using the "midi instrument" to set the port and channel of each separately.
You do not need to do this. Because you are using internal synths (If you clue us in on WHICH ones....that could help too...unless that is a State Secret)
Somehow, I've managed to get the problem down to one annoying item: I have a chimes part that has some sustained notes that are being CUT OFF in mid-note. There is nothing in the Event List for that track that would explain this, so I'm guessing that the track must be receiving some midi data from someplace else.
My best guess is that you are playing back a Midi note that is, say XXX length, and the SAMPLE is only XX length. That would explain immediately why it is being "cut off".
OR...there is simply too much midi data at that point that the track....no that can't be because the music is thin there. I don't know. I just can't find it.
THAT is a delicious piece of speculation. Please inform yourself about what is really going on. Your posted question is totally misleading.
You don't need 16 tracks of Midi because ONE sound is not playing back the way you want. Your problem has NOTHING to do with the question that you put forth:
More than 16 midi tracks....best way to configure?
Where is the cut-off chime sound sample in this question??? Nowhere... and nowhere is the answer...oops...
I can't help you further, as I already spent a long time helping you set up an imaginary Midi setup that does not even exist, nor even solves your issue.
Cheers
Brought to you by the wise noeqplease, sans caffeine

Best way to configure Time Capsule with Thomson TG782T modem(Telstra)

Hi there
I am looking for the best way to configure my Time Capsule. I have an ADSL connection and use a Thomson TG782T wireless modem from Telstra as my internet connection. It is plugged into my iMac via ethernet. It also provides a wifi connection for iphones, ipads etc.
I also have a Time Capsule and am looking to use it to extend the wireless network. It doesn't seem to want to do this for me. I am guessing that the Time Capsule needs to be in bridge mode, but don't want it to create its own wireless network. Does this make sense? Any help gratefully received.
Thanks!

I also use TG782T.. although I hacked it to use on non-telstra ISP.. and so I can access voip.
But you cannot use TC to extend the wireless .. sorry that is not possible.. the Thomson is actually way behind and the only service it offers to extend is WDS and with WEP security.. so unless you plan to use G wireless and WEP .. don't even think about it.
Bridge the TC and plug it into the Thomson. Create a wireless network of identical name as the Thomson.. actually the Thomson uses a silly name.. just change it to something short and sweet.. TG782T would be excellent. You can also lock the wireless channel instead of auto and use the highest level possible security with your own password.. again not the Telstra one..
so you end up..
Now run the same settings on the TC.. go to the wireless page.. set to create a network and use same name.. same security level same password but different channel.
Your client computers will now connect to whichever device has the stronger signal.. this is called roaming network.

Best way to configure iTunes on network server for multiple macs

Hi all
Currently have a Mac Mini (late 2006 Tiger) running iTunes library on my QNAPTS239pro Network attached storage. It works great.
On Monday I am getting a new iMac and MacBook Pro (i.e. with Snow Leopard).
What is the best way for iTunes to be configured from each Mac to use the same library on the NAS?
Ideally, I want to add music from any of the macs (usually from CD not the store) and have a single library updated on the NAS. I don't want multiple sync'd copies - that's a back up night mare.
Any thought appreciated.
Kind regards
Andrew

it's a rather old article but click here for one possible setup scenario.
JGG

What is the best way to configure my iPods and user accounts?

I'm looking for a little guidance. Here is my situation:
I am running the latest version of Tiger. It is currently configured with three accounts; mine is the admin. account and each of my two children have their own accounts.
My account is the one that is used most of the time. All of our calendars in iCal are maintained here including one for each of the kids. Each of the kids has their own Contacts list in the Address Book as well. I currently have a 5G 30GB iPod Video that I sync with iTunes through this account. Shortly, I will be buying an iPod Touch. I want my 30 GB iPod to be the one that has everything on it; it will be the one we take in the car on trips for music. I want the Touch to have some, but not necessarily all, of my music and all of our calendars and contact information. I am looking to use it to replace my Palm as my PDA.
My son has a 2G Nano which currently syncs through his account.
My daughter will be getting a 3G Nano soon.
I will also be upgrading to Leopard very soon.
Ultimately, I would like each of the kids to have their own iTunes libraries for music and podcasts and to sync their iCal calendars. As I understand it, however, they cannot access their calendars from their own accounts under my current arrangement. I also understand that there are several ways to configure my Mac to work with multiple iPods.
Given all of this, what is the best thing for me to do? Should I set up all of the kids' iPods to sync through the admin. account so they can get their calendars at the same time? Or is their some way for them to have access to their calendar information from their own accounts under Tiger (or Leopard)? And as far as my two iPods (the Video and the Touch), should they sync through separate libraries, or through one using playlists. I also want to minimize duplicate data wherever possible, be it music or records in iCal and the Address Book.
Thanks in advance for any suggestions or advice!

Anyone...anyone? Bueller...Bueller?

Best way to control and run multiple (up to 20) processes independantly in LV

Hi all,
I'm trying to build an application in LV to independantly control and run multiple (up to 20) processes, ie, it should be able to start and stop any of the processes at any given time. What would the best way to code for this? Off the top of my head would be to use a unique notifier to control each of the process, but I'm thinking that the code upkeep may be a handful with this number of notifiers being defined. Are there better ways of doing this?
Appreciate any help and insight on this.Thanks a bunch in advance!
Solved!
Go to Solution.

I forgot some more important questions:
How large is your development group?
How much "discipline" do you want to program into the Process Commands framework? For instance, is it OK for any VI to command a process into a certain state, or should your program generate a broken wire or run-time error if a command is sent from a non-authorized source?
Where do your needs fall on this spectrum: simplicity that gets the job done and the product out the door and will probably not need much maintenance or upgrading, or flexible framework that will likely undergo multiple upgrades or fall into the hands of multiple developers?
a.lia-user-name-link[href="/t5/user/viewprofilepage/user-id/88938"] {color: black;} a.lia-user-name-link[href="/t5/user/viewprofilepage/user-id/88938"]:after {content: '';} .jrd-sig {height: 80px; overflow: visible;} .jrd-sig-deploy {float:left; opacity:0.2;} .jrd-sig-img {float:right; opacity:0.2;} .jrd-sig-img:hover {opacity:0.8;} .jrd-sig-deploy:hover {opacity:0.8;}

Best way to configure patching of multiple groups?

Similar Messages

Maybe you are looking for