Chatta subito con l'assistenza
Chat con il supporto

KACE Systems Management Appliance 13.2 Common Documents - Administrator Guide

About the KACE Systems Management Appliance Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Managing user notifications Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Deploying the KACE Agent to managed devices Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Registering KACE Agent with the appliance Provisioning the KACE Agent Manually deploying the KACE Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles Using Task Chains
Patching devices and maintaining security
Using the Security Dashboard About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Windows Feature Updates Managing Dell devices and updates Managing Linux package upgrades Maintaining device and appliance security Manage quarantined file attachments
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the appliance
Appendixes Glossary About us Legal notices

Managing Windows Feature Updates

Managing Windows Feature Updates

Subscribe to Windows Feature Updates
Configure Windows Feature Update schedules
View Windows Feature Update schedules
Review Windows Feature Update schedule details
View available Windows Feature Updates
View Windows Feature Update status

Windows Feature Updates are new versions of Microsoft Windows 10, released a few times every year. The appliance allows you to automate the process of installing these update, to help you improve the performance of managed Windows 10 devices and protect them from potential OS-related vulnerabilities.

Use the appliance to detect and deploy the latest Windows Feature Updates for your Windows 10 devices managed by the appliance.

* 
NOTE: This feature is only supported on Windows 10 devices with a Semi-Annual Channel subscription. It is not available for Mac, Linux, or Windows devices running a OS version other than 10.

Subscribe to Windows Feature Updates

Subscribe to Windows Feature Updates

You can subscribe to Windows Feature Updates for your managed Microsoft Windows 10 devices.

Before you subscribe to and download Windows Feature Updates, identify the operating systems installed on managed devices, and verify their update requirements. You can only download updates for your managed Windows 10 devices.

1.
Go to the Windows Feature Update Subscriptions page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Windows Feature Updates.
c.
On the Windows Feature Updates panel, click Subscriptions.
2.
Specify the Subscription settings. The operating systems and locales specified in the subscription control the patches that are downloaded.

Option

Description

Windows Feature Update Versions

Download selected Windows Feature Updates. Click the edit button to manage the list of operating systems: . Click Select Versions and select one or more update versions that you want to install on your managed Windows 10 devices,. To ignore Windows Feature Updates, select Disabled.

Selected items are displayed after you save the settings.

Locales

Download patches for the selected languages. Click the edit button to manage the list of locales: . Select All Locales to download patches regardless of the locale or select the check boxes next to one or more locales.

Selected items are displayed after you save the settings.

* 
NOTE: At least one version and one locale must be selected for a Windows Feature Update subscription.
3.
Click Save.

Selected Windows Feature Updates are downloaded automatically at the next scheduled download time.

Next, you can configure Windows Feature Update download settings. See Select patch and feature update download settings.

Configure Windows Feature Update schedules

Configure Windows Feature Update schedules

You can create and configure Windows Feature Update schedules and set a time for them to run. Windows Feature Update schedules do not interfere with Managed Installations or other distributions.

1.
Start the Windows Feature Update Schedule Detail wizard:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Windows Feature Updates.
c.
On the Windows Feature Updates panel, click Schedules.
d.
On the Windows Feature Update Schedules list page, do one of the following:
▪
To create a new Windows Feature Update schedule using the Schedule Detail wizard, click Choose Action > New (Wizard).
▪
To create a new Windows Feature Update schedule using the Schedule Detail page, click Choose Action > New (Classic).
▪
To edit an existing schedule, click the schedule name in the list, then on the Windows Feature Update Schedule Summary page that appears, click Edit.
The Schedule Detail page or wizard appears, as selected. The same options are available in each selection. You can switch between the page and wizard by clicking Classic View or Wizard View in the top-right corner, as applicable.
2.
Configure general information about the schedule:

Option

Description

Name

A name that identifies the schedule. This name appears on the Windows Feature Update Schedules list page.

Description

A brief description of the Windows Feature Update schedule.

3.
In the Choose Windows Feature Update section, configure the following options:

Option

Description

Select a build

Select a version of the Windows Feature Update that you want to detect, stage, or deploy. This section lists the updates selected in your subscription.

Select editions

Select one or more editions of the selected version. This section lists all editions for the selected version, for example, Business and Consumer editions for the different platforms (32- and 64-bit).

4.
Select one of the following actions.
These actions are identical to patch scheduling actions. See Configure patch schedules.

Action

Description

Detect

Scans for compatible Windows Feature Updates.

Detect and Stage

Scans for compatible Windows Feature Updates, and downloads the applicable files to the agent device for later deployment.

Detect, Stage and On-demand Deploy

Detects Windows Feature Updates that are installed or missing from managed devices, downloads the applicable files to the agent device, and causes the Windows system tray icon to alert the user.

•
These schedules are only available for Windows devices with agents version 11.0 or later.
•
The Agent Status Icon On Device option must be enabled in the agent communication settings. You can find these settings on the Organization Detail page, under Communication and Agent Settings (if one or more Organization components are enabled), or on the Communication Settings page (if you do not have an Organization component). For more information, see Configure Agent communication and log settings.

Detect and Deploy

Scans for compatible Windows Feature Updates, downloads the applicable files to the agent device, and deploys the update to the selected devices.

5.
Select the target devices using the following options.
These options are identical to the ones appearing in patch scheduling actions. See Configure patch schedules.

Action

Description

All Devices

To apply this schedule to all managed devices, select this options. Clear the check box to limit the patch action to specific labels or devices.

Device Labels

Restrict the action to the feature updates using the labels that you select here. This is the most commonly used option.

1.
Click Manage Associated Labels.
2.
In the Select Labels dialog box that appears, drag one or more labels (as applicable) to the Limit Run to area, then click OK.

To use this option, you must already have Smart Labels for the feature updates. See Using Smart Labels for patching.

Devices

Run patch actions on the devices that you select.

•
To search for devices, begin typing in the field.
•
To remove all specified devices and start again, click Remove All.
•
Scoped users can see only those devices that are associated with their role, when the role is assigned a label. For more information about user roles, see Add or edit User Roles.
6.
In the Schedule section, specify the applicable options for the schedule.
These options are identical to the ones appearing in patch scheduling actions. See Configure patch schedules.

Option

Description

None

Run in combination with an event rather than on a specific date or at a specific time. This option is useful if you want to patch servers manually, or perform patch actions that you do not want to run on a schedule.

Every _ hours

Run at a specified interval.

Every day/specific day at HH:MM

Run daily at a specified time, or run on a designated day of the week at a specified time.

Run on the nth of every month/specific month at HH:MM

Run on the nth day every month, (for example, the first or the second) day of every month, or a specific month, at the specified time.

Run on the nth weekday of every month/specific month at HH:MM

Run on the specific weekday of every month, or a specific month, at the specified time.

Custom

Run according to a custom schedule.

Use standard 5-field cron format (extended cron format is not supported):

* * * * *
| | | | +────────day of week (0-6)(Sun=0)
| | | +────────month (1-12)
| | +────────day of month (1-31)
| +────────hour (0-23)
+────────minute (0-59)

Use the following when specifying values:

•
Spaces ( ): Separate each field with a space.
•
Asterisks (*): Include the entire range of values in a field with an asterisk. For example, an asterisk in the hour field indicates every hour.
•
Commas (,): Separate multiple values in a field with a comma. For example, 0,6 in the day of the week field indicates Sunday and Saturday.
•
Hyphens (-): Indicate a range of values in a field with a hyphen. For example, 1-5 in the day of the week field is equivalent to 1,2,3,4,5, which indicates Monday through Friday.
•
Slashes (/): Specify the intervals at which to repeat an action with a slash. For example, */3 in the hour field is equivalent to 0,3,6,9,12,15,18,21. The asterisk (*) specifies every hour, but /3 restricts this to hours divisible by 3.

Examples:

•
15 * * * * Run 15 minutes after every hour every day
•
0 22 * * * Run at 22:00 every day
•
0 0 1 1,6 * Run at 00:00 on January 1 and June 1
•
30 8,12 * * 1-5 Run weekdays at 08:30 and 12:30
•
0 2 */2 * * Run every other day at 02:00

View Task Schedule

Click to view the task schedule. The Task Schedule dialog box displays a list of scheduled. Click a task to review the task details. For more information, see View task schedules.

Timezone

The timezone to use when scheduling the action. Select Server to use the timezone of the appliance. Select Agent to use the timezone of the managed device.

Run on next connection if offline

Run the action the next time the managed device connects to the appliance, if the device is currently offline. This option is useful for laptops and other devices that are periodically offline. If this option is not selected, and the device is offline, the action does not run again until the next scheduled time.

Delay run after reconnect

Delay the schedule by a specified amount of time. The time delay period begins when the patch action is scheduled to run.

End after

The time limit for patching actions.

For example, if you schedule patches to run at 04:00, you might want all patching actions to stop at 07:00 to prevent bandwidth issues when users start work. To do so, you could specify 180 in the minutes box.

When this time limit is reached, any patching tasks that are in progress are suspended, and their status on Security logs is Suspended.

These patching tasks do not resume on the next run and instead start from the beginning with each scheduled patching action.

7.
Click Save.
The Windows Feature Update Schedule Summary page appears, displaying the newly created or updated schedule. For more information about this page, see View Windows Feature Update status.
◦
If you added any devices that match the Smart Label criteria, they are automatically included in the update schedule.
◦
When the updates are downloaded to the agent device and are ready for deployment, the KACE Agent icon is updated in the Windows system tray and in the menu, indicating that actions are available for the agent. To install the updates, on the agent device, in the Windows system tray, click the KACE Agent, and choose Deploy staged patches. For more information about the KACE Agent icons, see Manage the KACE Agent on Windows devices using the Windows system tray.

View Windows Feature Update schedules

View Windows Feature Update schedules

You can view summary information for the Windows Feature Update schedules that exist on the appliance. If the Organization component is enabled on your appliance, you view Windows Feature Update schedules for each organization separately.

1.
Go to the Windows Feature Update Schedules page:
a.
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
b.
On the left navigation bar, click Security, then click Windows Feature Updates.
2.
On the Windows Feature Updates panel, click Schedules.
Columns available on the Windows Feature Update Schedules page are identical to the ones on the Patch Schedules page. For more information about the fields on the Patch Schedules page, see View a list of patch schedules.
3.
(Optional) To change column visibility, select Column Visibility from the Table Options drop-down list above the table on the right.
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione