Providing Patch Management With N-central - N-able Technologies

More documents

Recommendations

Info

N-central 7.2 Providing Patch Management With N-central Setting Enable Windows Update Power Management to Automatically Wake up the System Specify Patch Server to use (WSUS or Windows Update) Description Activates (or de-activates) the capability to "wake up" a Windows device (even if it is in hibernation mode) in order to install a critical software update. Identifies either the WSUS server or Windows Update service that will be used for deploying patches. Note: Using a Windows Update service for deploying patches will disable the patch approval features available with a WSUS server. After you have identified the server or service from which patches will be deployed, activate (or de-activate) Allow Signed Updates from an Intranet Microsoft update service location. This controls whether or not software updates will be accepted if they are signed by a certificate found in the "Trusted Publishers" certificate store of the local computer. If this setting is set to No, software updates from an intranet Microsoft update service location will only be accepted if they are signed by Microsoft. Do not display "Install Updates and Shut Down" option in Shut Down Menu Activates (or de-activates) the ability to display an "Install Updates and Shut Down" option when a Windows device is being turned off or restarted even if software updates are available. Note: If Do not display "Install Updates and Shut Down" option in Shut Down Menu is set to Yes, you must activate (or de-activate) the Do not adjust default option to "Install Updates and Shut Down" in Shut Down Menu option. One of the key settings for Patch Management profiles is the Specify Patch Server to use. This determines the location to which the Windows Update agent will connect in order to receive patch information. There are several options available including: • Windows Update (default setting) • Best Available • WSUS Servers These options provide very different results. The Windows Update option configures the Windows Update Agent to connect to the Windows Update service. This allows patch management to be performed on a device without using WSUS. The advantage to this is the universal availability of the Windows Update site. One drawback, however, is the lack of management capabilities - the administrator cannot configure which individual patches should be applied. Best Available configures the Windows Update Agent to use the best available WSUS server directing N-central to look for a customer-level WSUS server. If one is available, the device will be configured to use that server. If there is no customer-level WSUS server available, N-central will attempt to configure an SO-level server. If an SO-level server isn’t available, N-central then will attempt to use a productlevel server. Should there be no WSUS servers available, N-central will configure the WUA to use Windows Update. The advantage to this functionality is that N-central will re-evaluate the best available - 18 -
N-central 7.2 Providing Patch Management With N-central configuration whenever a new server is enabled. As a result, if a system is configured to use an SO-level server and a customer-level WSUS server is added, N-central will automatically reconfigure the devices to use the customer-level server. Selecting WSUS Servers allows you to select a specific WSUS server. Use this option if you know the specific server that you want to use. Editing Patch Profiles Any patch profile (including the default profile provided by N-central) can be modified . When a profile is modified, any changes made will be applied to all of the devices that use the profile. If you try to edit a profile that was created at a higher account level, N-central will automatically create a copy of the profile at the level that it is being edited, including the associated devices, and save it at that level. This will disconnect the association to the profile that was created at a higher account level. For example, an SO Admin attempting to edit a profile created at the system level will create a new copy of the profile within their respective service organization. To edit a profile 1. On the menu bar, click Setup > Patch Management > Profiles. The Profiles screen appears. 2. In the Name column, click the name of the profile that you would like to edit. The Edit Profiles screen appears. 3. Update the profile settings as required. For more information, refer to Patch Profile Settings on page 16. 4. Click Save. 5. When prompted, click Save to confirm the modifications. The Profiles screen appears. Viewing the Folders and Devices Associated to a Patch Profile You can view the associations a Patch Management profile has to folder templates, folders, and devices. You can view the associations a Patch Management profile has to folders. To view profile associations 1. On the menu bar, click Setup > Patch Management > Profiles. The Profiles screen appears. 2. In the Name column, click the name of the profile for which you would like to view all associations. The Edit Profiles screen appears. 3. Click the Associations tab. - 19 -
Page 1 and 2: Providing Patch Management With N-c
Page 3 and 4: N-central 7.2 Providing Patch Manag
Page 17: N-central 7.2 Providing Patch Manag

Providing Patch Management With N-central - N-able Technologies

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?