资源描述
微软IT的补丁管理内容概要内容概要微软环境安全补丁面临的挑战Microsoft IT 为什么采用SMS？补丁处理流程补丁管理流程定义最佳经验不断演化改进的服务Microsoft IT 环境环境Microsoft IT 环境环境VPN11,000 serversMicrosoft IT 环境环境多层次 桌面机合作管理模式9种语言支持完全集中化的管理 解决方案概述解决方案概述产品和技术产品和技术Systems Management Server 2003业务挑战业务挑战多种类软件更新多种补丁部署解决方案需要提供用户良好的使用体验不同的补丁应用场景为什么为什么Microsoft IT 采用采用 SMSScalabilityFlexible targeting and configurationCompliance reportingForced installation and rebootsUser notification and remindersSource path managementUser of existing technical resources and skillsFuture enhancements补丁流程补丁流程 多选择的补丁实施手段多选择的补丁实施手段补丁部署流程补丁部署流程核心构成核心构成SMS packages include:ScanningStagingSustainerEST and others as neededPackages are set to recur every two daysNon-security updates and service packs are deployed as needed补丁部署流程补丁部署流程核心构成核心构成策略 Policies安全补丁是首要关注焦点通常不会授权通过例外申请用户可在强制日期前提前部署补丁人员安排 Staff一个项目经理三个管理员补丁部署流程补丁部署流程每月行动事项每月行动事项补丁部署流程补丁部署流程角色和义务角色和义务Critical vulnerability?补丁部署流程补丁部署流程时间安排时间安排补丁部署流程补丁部署流程维护时间窗口维护时间窗口 Maintenance WindowsThursdayFridaySaturdaySundayThursdayFridaySaturdaySundayCritical deployment(21 days)Accelerated deployment(48 hours)补丁部署流程补丁部署流程每周二的补丁动作每周二的补丁动作Scan catalogs and articles downloadedAssess updatesApply specifics for MBSA-based updatesAuthorize updatesConduct final quality control checkCopy update packages to the other hierarchiesMonitor update deploymentCoordinate with internal suppliersAnnounce results to interested parties补丁部署流程补丁部署流程测试测试Testing is appropriate for needs at MicrosoftMonitor computers as patches are releasedMonitor status messages carefully in early stagesFirst users serve as voluntary test casesApplication owners perform tests upon release of patchesA prerelease quality control check is performed on about 15,000 internal clients,plus some external labsMicrosoft IT trusts Microsoft patches补丁部署流程补丁部署流程报表生成报表生成Update reporting focuses on compliance,errors,and SMS involvementCompleteness reporting is useful Traditional software distribution reporting can verify success of scanning and installation补丁部署流程补丁部署流程报表样本报表样本补丁管理是一项服务补丁管理是一项服务概要概要了解服务的客户和合作伙伴完善服务等级协议（SLA）正规化、书面化所有流程信息集中管理设定考核指标并分析结果收集用户反馈完善应急计划尽可能实现自动化,特别是信息报告补丁管理是一项服务补丁管理是一项服务关系关系经验经验经验经验经验经验把安全视为第一优先考略因素获得决策领导支持 正确的定义服务并不断总结管理好SMS设定清晰的期望值;让业务服务器主人准确理解沟通信息对基于MBSA分析的补丁更新操作在update 命令行使用/ER 选项经验经验Keep to single restart on clientsUse change control windows efficientlyEnsure software installations restart when needed so that updates installAt very large sites,spread workload on servers over timeSubscribe to community resourcesMicrosoft IT补丁管理服务的下一步计划补丁管理服务的下一步计划Quarantine(Network Access Protection)Hot updatesin memory as soon as installedWindows Vista Restart ManagerNew clients64 bit,Windows Vista,devices,possibly other operating systemsInternet-facing update serversUser-oriented improvementsOther aspects of security总结总结补丁管理并非易事，特别在一个大型机构内部技术、过程和人员都会遇到挑战 补丁管理是一种不断进化的科学更多信息更多信息Systems Management Server Microsoft Solutions for Management Microsoft Operations Framework Microsoft community sites更多信息更多信息Additional content on Microsoft IT deployments and best practices can be found on Microsoft IT Showcase Webcasts Microsoft TechNet This document is provided for informational purposes only.MICROSOFT MAKES NO WARRANTIES,EXPRESS OR IMPLIED,IN THIS DOCUMENT.2006 Microsoft Corporation.All rights reserved.This presentation is for informational purposes only.MICROSOFT MAKES NO WARRANTIES,EXPRESS OR IMPLIED,IN THIS SUMMARY.Microsoft,Active Directory,SharePoint,Windows,Windows Server,and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.The names of actual companies and products mentioned herein may be the trademarks of their respective owners.补充信息Appendix 1ITConfigAppendix 2SMPStatusAppendix 3How SMS Patching WorksMicrosoftDownload Center
展开阅读全文