最新微软it的补丁ppt课件.ppt

《最新微软it的补丁ppt课件.ppt》由会员分享，可在线阅读，更多相关《最新微软it的补丁ppt课件.ppt（36页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、微软微软ITIT的补丁管理的补丁管理内容概要内容概要微软环境安全补丁面临的挑战Microsoft IT 为什么采用SMS？补丁处理流程补丁管理流程定义最佳经验不断演化改进的服务为什么为什么Microsoft IT 采用采用 SMSScalabilityFlexible targeting and configurationCompliance reportingForced installation and rebootsUser notification and remindersSource path managementUser of existing technical resourc

2、es and skillsFuture enhancements补丁流程补丁流程 多选择的补丁实施手段多选择的补丁实施手段较高较高较高较高客户端影响客户端影响客户端影响客户端影响较低较低较低较低客户端影响客户端影响客户端影响客户端影响E-mail and intranet Web site notificationE-mail and intranet Web site notification;u;users can use Microsoft Update or similar(all optional)sers can use Microsoft Update or similar(al

3、l optional)SMS patch management(voluntary to start,and then forced)SMS patch management(voluntary to start,and then forced)Custom scanning(forced)Custom scanning(forced)RemediationRemediation补丁部署流程补丁部署流程核心构成核心构成SMS packages include:ScanningStagingSustainerEST and others as neededPackages are set to

4、recur every two daysNon-security updates and service packs are deployed as needed补丁部署流程补丁部署流程核心构成核心构成策略 Policies安全补丁是首要关注焦点通常不会授权通过例外申请用户可在强制日期前提前部署补丁人员安排 Staff一个项目经理三个管理员补丁部署流程补丁部署流程每月行动事项每月行动事项补丁部署流程补丁部署流程角色和义务角色和义务Corporate Security Corporate Security monitors vulnerability monitors vulnerability

5、 informationinformationCorporate SecurityCorporate Securityfinds and analyzes finds and analyzes vulnerabilityvulnerabilityCritical vulnerability?Corporate SecurityCorporate Securitydetermines enforcement determines enforcement schedule schedule Patch Mgmt Patch Mgmt Service Service analyzes updatea

6、nalyzes updatesix hourssix hoursTwo weeks later normally,24 Two weeks later normally,24 hours if accelerated,hours if accelerated,or immediate if emergencyor immediate if emergencyPatch Mgmt Patch Mgmt ServiceServiceprepares updateprepares updatePatch Mgmt Patch Mgmt ServiceServicedistributes update

7、distributes updatePatch Mgmt Patch Mgmt ServiceServiceenforces updateenforces updateyesyesWait for service packWait for service packnono补丁部署流程补丁部署流程时间安排时间安排补丁部署流程补丁部署流程维护时间窗口维护时间窗口 Maintenance WindowsThursday12A-12A-2A2A4A-4A-6A6A8A-8A-10A10A12P-12P-2P2P4P-4P-6P6P8P-8P-10A10AFriday12A-12A-2A2A4A-4A-

8、6A6A8A-8A-10A10A12P-12P-2P2P4P-4P-6P6P8P-8P-10A10ASaturday12A-12A-2A2A4A-4A-6A6A8A-8A-10A10A12P-12P-2P2P4P-4P-6P6P8P-8P-10A10ASunday12A-12A-2A2A4A-4A-6A6A8A-8A-10A10A12P-12P-2P2P4P-4P-6P6P8P-8P-10A10AHour 1Hour 1Patch Tuesday 8 P.M.Patch Tuesday 8 P.M.Pacific Time(UTC-8)Pacific Time(UTC-8)ThursdayHo

9、ur 2Hour 2FridayHour 3Hour 3SaturdayHour 4Hour 4SundayCritical deployment(21 days)Accelerated deployment(48 hours)补丁部署流程补丁部署流程每周二的补丁动作每周二的补丁动作Scan catalogs and articles downloadedAssess updatesApply specifics for MBSA-based updatesAuthorize updatesConduct final quality control checkCopy update packa

10、ges to the other hierarchiesMonitor update deploymentCoordinate with internal suppliersAnnounce results to interested parties补丁部署流程补丁部署流程测试测试Testing is appropriate for needs at MicrosoftMonitor computers as patches are releasedMonitor status messages carefully in early stagesFirst users serve as vol

11、untary test casesApplication owners perform tests upon release of patchesA prerelease quality control check is performed on about 15,000 internal clients,plus some external labsMicrosoft IT trusts Microsoft patches补丁部署流程补丁部署流程报表生成报表生成Update reporting focuses on compliance,errors,and SMS involvementC

12、ompleteness reporting is useful Traditional software distribution reporting can verify success of scanning and installation补丁部署流程补丁部署流程报表样本报表样本补丁管理是一项服务补丁管理是一项服务概要概要了解服务的客户和合作伙伴完善服务等级协议（SLA）正规化、书面化所有流程信息集中管理设定考核指标并分析结果收集用户反馈完善应急计划尽可能实现自动化,特别是信息报告补丁管理是一项服务补丁管理是一项服务关系关系经验经验利用产品和工具实现自动化利用产品和工具实现自动化利用产品

13、和工具实现自动化利用产品和工具实现自动化一致的、可重复的一致的、可重复的一致的、可重复的一致的、可重复的清晰定义的角色和职责，清晰定义的角色和职责，清晰定义的角色和职责，清晰定义的角色和职责，具备合适的技能具备合适的技能具备合适的技能具备合适的技能过程过程过程过程人员人员人员人员技术技术技术技术经验经验评估补丁实施的环境评估补丁实施的环境评估补丁实施的环境评估补丁实施的环境1.1.AssessAssess2.Identify2.Identify4.Deploy4.Deploy3.Evaluate 3.Evaluate and Planand Plan确定新的软件确定新的软件确定新的软件确定新的

14、软件更新更新更新更新部署软件更部署软件更部署软件更部署软件更新新新新评价和计划软件更新评价和计划软件更新评价和计划软件更新评价和计划软件更新部署部署部署部署Microsoft Operations FrameworkMicrosoft Operations Framework经验经验把安全视为第一优先考略因素获得决策领导支持 正确的定义服务并不断总结管理好SMS设定清晰的期望值;让业务服务器主人准确理解沟通信息对基于MBSA分析的补丁更新操作在update 命令行使用/ER 选项经验经验Keep to single restart on clientsUse change control wi

15、ndows efficientlyEnsure software installations restart when needed so that updates installAt very large sites,spread workload on servers over timeSubscribe to community resourcesMicrosoft IT补丁管理服务的下一步计划补丁管理服务的下一步计划Quarantine(Network Access Protection)Hot updatesin memory as soon as installedWindows

16、Vista Restart ManagerNew clients64 bit,Windows Vista,devices,possibly other operating systemsInternet-facing update serversUser-oriented improvementsOther aspects of security总结总结补丁管理并非易事，特别在一个大型机构内部技术、过程和人员都会遇到挑战 补丁管理是一种不断进化的科学更多信息更多信息Systems Management Server http:/ Solutions for Management http:/

17、Operations Framework http:/ community siteshttp:/ content on Microsoft IT deployments and best practices can be found on http:/Microsoft IT Showcase Webcasts http:/ TechNet http:/ document is provided for informational purposes only.MICROSOFT MAKES NO WARRANTIES,EXPRESS OR IMPLIED,IN THIS DOCUMENT.2

18、006 Microsoft Corporation.All rights reserved.This presentation is for informational purposes only.MICROSOFT MAKES NO WARRANTIES,EXPRESS OR IMPLIED,IN THIS SUMMARY.Microsoft,Active Directory,SharePoint,Windows,Windows Server,and Windows Vista are either registered trademarks or trademarks of Microso

19、ft Corporation in the United States and/or other countries.The names of actual companies and products mentioned herein may be the trademarks of their respective owners.补充信息Appendix 1ITConfigAppendix 2SMPStatusAppendix 3How SMS Patching WorksFirewallFirewallSMS SMS Site Server and Site Server and Management PointManagement PointSMS DistributionSMS DistributionPointPointSMS ClientsSMS ClientsSMS ClientsSMS ClientsMicrosoftDownload CenterSMS DistributionSMS DistributionPointPointSMS ClientsSMS Clients