微软IT的补丁管理.pptVIP

经验 评估补丁实施的环境 1. Assess 2. Identify 4. Deploy 3. Evaluate and Plan 确定新的软件更新 部署软件更新 评价和计划软件更新部署 Microsoft Operations Framework 经验 把安全视为第一优先考略因素 获得决策领导支持 正确的定义服务并不断总结 管理好SMS 设定清晰的期望值; 让业务服务器主人准确理解沟通信息 对基于MBSA分析的补丁更新操作在update 命令行使用 /ER 选项 经验 Keep to single restart on clients Use change control windows efficiently Ensure software installations restart when needed so that updates install At very large sites, spread workload on servers over time Subscribe to community resources Microsoft IT补丁管理服务的下一步计划 Quarantine (Network Access Protection) Hot updates—in memory as soon as installed Windows Vista Restart Manager New clients 64 bit, Windows Vista, devices, possibly other operating systems Internet-facing update servers User-oriented improvements Other aspects of security 总结 补丁管理并非易事，特别在一个大型机构内部 技术、过程和人员都会遇到挑战 补丁管理是一种不断进化的科学 更多信息 Systems Management Server /sms Microsoft Solutions for Management /msm Microsoft Operations Framework /technet/itsolutions/cits/mo/mof/default.mspx Microsoft community sites/technet/community 更多信息 Additional content on Microsoft IT deployments and best practices can be found on Microsoft IT Showcase Webcasts /howmicrosoftdoesitwebcasts Microsoft TechNet /technet/itshowcase 微软IT的补丁管理 内容概要 微软环境 安全补丁面临的挑战 Microsoft IT 为什么采用SMS？ 补丁处理流程 补丁管理流程定义 最佳经验 不断演化改进的服务 Microsoft IT 环境 Dublin Singapore Redmond 3,000,000+ internal e-mail messages per day 99.99% availability 106,000 end users 98 countries/regions 441 buildings 300,000+ PCs and devices 1.9-terabyte database single instance SAP 42,000,000+ remote connections/month 116,000+ e-mail server accounts Microsoft IT 环境 All computers 300,000 VPN Domain SecureNet joined clients 230,000 Managed through SMS 220,000 11,000 servers Remote access clients/dial-up Labs Workgroups Internet Protocol security boundary Microsoft IT 环境 多层次 桌面机合作管理模式 9种语言支持 完全集中化的管理 Need to determine and maintain a known level of software updates