Endpoint Protection

 View Only

Upgrading SEP Clients using SEPM (part 2) 

Sep 10, 2009 12:04 PM

Section 5: Deploying your install package.
 
This is where the rubber meets the road with client updates (not definition updates). If you do NOT use SMS, Altris, or other client management software to deploy your updates, using SEPM is fairly robust (at least enough for me). 
 
You can follow either of these two methods to actually deploy the client updates. You should read the Administration Guide (Chapter 5) for more information on updating clients.
 
Since we are at this point our SEPM servers already contain our client packages ready for deployment. Now how do we tell our clients to get their upgrades?
 
One of the easiest methods is to remain on the Admin/Install Packages window. There is a task for “Upgrade Groups with Package” (shown below) that will assign selected (or all) groups the package you just created. This is the best method to upgrade multiple groups at once.
 
Install_1.JPG
 
This will kick the Upgrade Groups Wizard. Click next on the first screen that appears. The next window will allow you to select the install package you want to deploy. You will want to select the latest version and click next.
 
Install_3.JPG
 
Next we specify the groups that the package will apply to. Remember to test the install on a pilot group before full deployment. The image below shows the group selection window. Click next after selecting your groups.
 
Install_4.JPG
 
The next step is to select the package upgrade location (management server or other server) and your upgrade settings. Click the Upgrade settings button.
 
Install_5.JPG
 
Under the Client Features you can either select to “Maintain existing client features when updating”, or select the features your organization requires. You may have updated this information in the first part of this article. (LINK) You can also schedule the upgrade time and provide notification (or not) to users of the upgrade happening.
 
Install_6.JPG   Install_7.JPG
 
Once you click next you are done. Your package has now been assigned to the respective groups and as they check into the SEPM they will begin to upgrade the client software. 
 
Install_8.JPG
 
 
We should have started by assigning the package to a specific group (please remember to pilot test upgrades) and let them run for a couple of days. I am going to assume you’re familiar with the windows at this point (many of them are repeats from previous windows).
 
Start this process by assigning the upgrade package to a test group. Open SEPM to the Client View. Under the “View Clients” select your pilot group for testing. Now click on the “Install Packages” tab in the main window. Once you get to this point look under tasks and you will see “Add Client Install Package” (shown below).
 
SingleInstall.JPG
 
This will open the Add Client Install Package. Select the package you want this group to upgrade to, the features for this group, source, schedule and any notification options. Once you’ve set your options click Ok. When clients begin heart-beating into the SEPM they will begin to download their updates (as long as they fall within the scheduled time).
 
Now you might be asking… Jeff, in the first part of this article there was an option to change our client install settings. We never covered how clients use those new settings. Well, I’m glad you asked. I have only been able to use those setting when I export the installation package for deployment via SMS, Altris, GPO, or other deployment manner. If you go back to the Admin – Install Packages section you will find (under tasks) the “Export Client Install Package” option (shown below).
 
Export_Package1.JPG
 
After clicking the Export Client Install Package, the “Export Package…” will open. As shown in the below image, you will need to provide the following items:
 
  • Export folder:
  • Create a single .exe package
  • Choose your custom installation settings
  • Choose your feature set
  • Which policy/package you want to export (careful this will create an export for each checked item… it can add up quickly and will increase your time exporting installs)
  • Do you want the install to add the clients to the selected group?
  • Preferred Policy Mode
 
Export_Package2.JPG


 
Provide that/those files to your desktop engineering team and they can deploy the upgrade to your workstations using whatever tool they desire.

I hope this helps someone/anyone.  As always if you have questions, comments, feedback on this article (or anything SEP/SEPM) send me a private message or post a reply.  I always try to respond in a timely manner.

Statistics
0 Favorited
3 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Oct 20, 2014 01:35 PM

So, "Distributing upgrades over 1 day" doesn’t distribute it, it just keeps it in that window. Got it. Thanks!

Oct 20, 2014 01:25 PM

Setting to 0 days is immediately.

You should've even been prompted

'If you distribute upgrade immediately (o days), you might overload the network.

Do you wish to continue?"

Oct 20, 2014 01:21 PM

I’ve been installing the 12.1.5 agent in a very controlled environment. I’ve been setting the “Upgrade Schedule” window and reducing the “distribute upgrades over: X days” to “0” I was expecting the agent would wait until the window, and only that days window, to perform the download but it appears to do it immediately.

Jan 21, 2010 09:39 AM

no, gups do not help or bridge for this process. they only server AV definitions.

Jan 12, 2010 06:25 AM

I would like to know if local GUPs are involved to upgrade client process? Because i can't allow downloading new version of client directly from management server. Thanks for response.

Oct 07, 2009 02:59 AM

Good Info.... thanks...  

Oct 01, 2009 01:14 PM

thanks for the efforts jeff !

Related Entries and Links

No Related Resource entered.