{"id":10599,"date":"2010-05-17T20:10:09","date_gmt":"2010-05-17T20:10:09","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=10599"},"modified":"2010-05-17T20:10:09","modified_gmt":"2010-05-17T20:10:09","slug":"microsoft-ireland-best-of-mms2010","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=10599","title":{"rendered":"Microsoft Ireland – Best of #MMS2010"},"content":{"rendered":"
<\/blockquote>\n

I arrived in about an hour late for this event because I had to present at a cloud computing breakfast event in the city.  Writing until midnight, doing work until 1am and getting up at 05:30 has left me a bit numb so my notes today could be a mess.<\/p>\n

The ash cloud has caused last minute havoc with the speakers but the MS Ireland guys have done a good job adjusting to it.<\/p>\n

System Center v.Next<\/u><\/strong><\/p>\n

I arrived in time for Jeff Wettlaufer\u2019s session.<\/p>\n

The VMM v.Next console is open with an overview of a \u201cdatacenter", giving a glimpse of what is going on.  We see the library and shares which is much better laid out.  It includes Server App-V packages, templates, virtual hard disks, MSDeploy packages (IIS applications), SQL DAC packages, PowerShell, ISO and answer files.<\/p>\n

VMM v.Next<\/u><\/strong><\/p>\n

The VMM model is shown next.  We can create a template for a service.  This includes virtual templates for virtual machines: database, application, web, etc.  The web VM is shown.  We can see the MS deploy package from the library is contained within the template for this VM.  The web tier in the model can be scaled out automatically using a control for the model.  The initial instance count, maximum and minimum instance counts can be set.  The binding to network cards can be sent too.<\/p>\n

An instance of this model is deployed: lots of VM\u2019s are included in the model.  One deployment = lots of new VM\u2019s.  We now see the software update mechanism.  The compliant and non compliant running VHD\u2019s are identified.  Normally we\u2019d do maintenance windows, patching and reboots.  With this approach we can remediate the running VM\u2019s VHD\u2019s.  Because there are virtualised services, they can be migrated onto up-to-date VHD\u2019s and the old VHD\u2019s are remediated. The service stays running and there are no reboots or maintenance windows.<\/p>\n

This makes private cloud computing even better.  We already can have very high uptimes with current technology.  The only blips are usually in upgrades.  This eliminates that.  The model approach also optimises the <\/p>\n

Operations Manager 2007 R2 Azure Management Pack<\/u><\/strong><\/p>\n

You can use an onsite installation of OpsMgr to manage Azure hosted applications.  This is apparently out at the end of 2010.  We get a demo starting with a model, including web\/database services, synthetic transactions and the Azure management pack containing Azure objects (a web front end that fronts the on-premises databases).  We see the usual alert and troubleshooting stuff from OpsMgr.  Now we see that tasks for Azure are integrated.  This includes the addition of a new web role instance on Azure.  In theory this could be automated as a response to underperforming services (use synthetic transactions) but it would need to be tested and monitored to avoid crazy responses that would cost a fortune.<\/p>\n

Almost everything in the System Center world has a new release or refresh in 2011.  It will be a BIG year.  I suspect MMS 2011 will be nuts.<\/p>\n

It looks like I missed 4 of the demos :-(  That\u2019s work for ya!<\/p>\n

Configuration Manager v.Next\u2013 Jeff Wettlaufer<\/u><\/strong><\/p>\n

Woohoo!  I didn\u2019t miss it.<\/p>\n

The focus on this release is user centric client management.  The typical user profile has changed.  Kids are entering the workplace who are IT savvy.  The current generation knows what they want (a lot of the time).  MS wants to empower them.  Users should self-provision, connect from anywhere, access devices and services from anywhere.  <\/p>\n

There should be a unified systems management solution.  Do you want point solutions for software, auditing, patching, anti-malware, etc.<\/p>\n

Control is always important.  Whether it is compliance for licensing, auditing, policy enforcement, etc.  Business assets must be available, reliable and secure.  Automation must be employed and expanded upon to remove the human element \u2013 more efficient, allow better use of time to focus on projects, less mistake prone.<\/p>\n

ConfigMgr 2007 does a lot of this.  However, it didn\u2019t do the last step: remediating non-compliance with policy (software, security, etc).<\/p>\n

Notes: 75% of American and 80% of Japanese workers will be mobile in 2011.  The IT Pro needs to change: be more generalized and have a variety of skills capable of changing quickly.  IT in the business has \u201ccomsumerized\u201d: they are dictating what they want or need rather than IT doing that.  I think many admins in small\/medium organizations or those dealing with executives will say that there has always been some aspect to that.  The new profile of user will cause this to grow.<\/p>\n

System Center ConfigMgr is moving towards answering these questions.  The end user will be empowered to be able to self-provision.  Right now, the 2007 release translates a user to a device, and s\/w distribution is a glorified script.  It is also very fire and forget, e.g. an uninstalled application won\u2019t be automatically reinstalled so there isn\u2019t a policy approach.<\/p>\n

The v.Next method changes this.  It will understand the difference between different types of device the user may have.  It is more flexible.  It is a policy management solution, e.g. an uninstalled application will be automatically reinstalled because it is policy defined\/remediated.<\/p>\n

Software distribution in v.Next: relationships will be maintained between the user and devices.  User assigned software will be installed only if the user is the primary user of the device \u2013 save on licensing and bandwidth.  S\/W can be pre-deployed to the primary devices via WOL, off-peak hours, etc.<\/p>\n

Application management is changing too.  Administrators will manage applications, not scripts.  The deployments are state based, i.e. ConfigMgr knows if the application is present or not and can re-install it.  Requirements for an application can be assessed at installation time to see if the application should even be installed at all.  Dependencies with other applications can be assessed automatically too.  All of this will simplify the application management process (collections) and troubleshooting of failed installations.<\/p>\n

For the end user, there is a web based application catalog.  A user can easily find and install application.  A workflow for installation\/license approval can back this up.  S\/W will install immediately after selection\/approval \u2013 this uses Silverlight to trigger the agent.  A user can define what their business hours are in the client to control installations or pre-deployments.  They can also manage things like automated reboots \u2013 no one likes a mandated reboot (after 5 minutes) while doing something important, e.g. a live meeting, demo, presentation, etc.  This is coming in beta2: there will be a pre-flight check feature where you can see what will happen with an application if you were to target it at a collection.  You then can do some pre-emptive work to avoid any failures.  I LIKE that!<\/p>\n

We now see a demo of a software package\/deployment.  An installer package for Adobe Reader is imported.  This isn\u2019t alien from what we know now.  There is a tagging mechanisms for searches.  We can define the intent: install for user or install for system.  You can add deployment types for an existing application.  We see how an App-V manifest is added to the existing application which was previously contained _just_ an MSI package.  Now you can do an install or an App-V deployment (stream and\/or complete deployment) with the one application in ConfigMgr.  So we now have 2 deployment types (packages) in a single application.  This makes management much easier.  <\/p>\n

We see that the deployment of the application can be assigned to a user and will only be installed to their primary device.  System requirements for the application can be included in the package.<\/p>\n

A deployment (used to be called an advertisement) is started and targeted at a collection.  The distribution points are selected.  Now you can specify an intent, e.g. make the application available to the user or push it.  The usual stuff like scheduling, OpsMgr integration are all present.<\/p>\n

SQL is being leveraged more and more.  A lot of the file system and copy operations are going away and being replaces with SQL object replication.  It also sounds like the ConfigMgr server components might<\/em> be 64-bit only.<\/p>\n

The MMC GUI is being dropped.  The new UI is more intuitive, better laid out and faster.  It will filter content based on role\/permissions  in ConfigMgr.  This will make usage of the console easier.  Wunderbars finally make an appearance in ConfigMgr to allow different views to be presented: Administration, Software Library, Assets and Compliance, and Monitoring.<\/p>\n

Role Based Administration: The MMC did cause havoc with this.  A security role can be configured.  This moves in the same direction as VMM and OpsMgr.  13 roles are built into the beta1 build.  You can bound the rights and access in ConfigMgr, e.g. application administrator, asset analyst, mobile device analyst, read only roles, etc.  We are warned that this might change before RTM.  Custom roles can be created.  When a role logs into the console they will see only what is relevant (permitted).  Current ConfigMgr sites did this by tweaking files on site servers which is totally not supported and caused lots of PSS tickets.<\/p>\n

Primary sites are needed only for scale out.  The current architecture can be very complex in a large network.  Content distribution can be done with secondary sites, DP\u2019s (throttling\/scheduling), BranchCache and Branch Distribution Points.  Client agents settings are configurable in a collection rather than in a primary site.<\/p>\n

Note: we see zero hands go up when we are asked if anyone is using BranchCache.  That\u2019s not surprising because of the licensing requirements, the limit of not having upload efficiencies (compared to network appliance solutions) and limited number of supported solutions.<\/p>\n

Jeff says that client traffic to cross-wan ConfigMgr servers dropped by 92% when BranchCache was employed \u2013 the distribution point can be BITS (HTTPS) enabled.<\/p>\n

Distribution point management has been simplified with groups.  Content can be added based on group membershpip.  Content can be staged to DP\u2019s, as well as scheduled and throttled.<\/p>\n

SQL investments mean that the inbox is gone in v.Next.  Support issue #1 was the inbox.  There are SQL methods for inter-site communications.  SQL Reporting Services is going to be used.  SQL skills will be required.  MS needs to invest in training people on this.<\/p>\n

ConfigMgr client health features have been expanded.  There is configurable monitoring\/remediation for client prerequisites, client reinstallation, windows services dependencies, WMI, etc.  There are in-console alerts when certain numbers of unhealthy clients are detected \u2013 configurable threshold.<\/p>\n

There is a common administration experience for mobile device management \u2013 CAB files can be added to ConfigMgr applications (not just App-V and MSI\/installer).  Cross-platform device support (Nokia Symbian) is being added.  User centric application and configuration management will be in it.  You can monitor and remediate out of date devices.<\/p>\n

Software Updates introduces a group which contains collections.  You can target updates to a group.  This in turn targets the contained collections.  Auto-deployment rules are being introduced.  Some want to do patch tuesday updates automatically.  You DEFINITELY need to auto-approve anti-virus\/malware updates (Microsoft Forefront updates flow through Windows Updates).  Auto-approved updates will automatically flow out to managed clients.  This has a new interface but it\u2019s a similar idea to what you get with WSUS.  <\/p>\n

Operating System Deployment is a BIG feature for MS in this product.  We now get offline servicing of images.  It supports component based servicing and uses the approved updates.  This means that newly deployed PC\u2019s will be up to date when it comes to updates.  There is now a hierarchy-wide boot media (we don\u2019t need one per site and saving time to create and manage it).  Unattended boot media mode with not need to press <Next>.  We can use PXE hooks to automatically select a task sequence so we don\u2019t need to select one from a list.  USMT 4.0 will have UI integration and support hard-link, offline and shadow copy features.  In 2007 SP2, these features are supported but hidden behind the GUI.<\/p>\n

Remote Control is back.  Someone wants it.  I don\u2019t see why \u2013 the feature is built into Windows and can be controlled by GPO.<\/p>\n

Settings Management (aka Desired Configuration Management) is where you can define a policy for settings and identify non-compliance.  V.Next introduces automated remediation of this via the GUI.  This is an option so it is not required: monitor versus enforce.  Audit tracking (who changed what) is added.<\/p>\n

Readiness Tips: Get to 64-bit OS\u2019s ASAP.  Start using BranchCache.  Plan on flattening the hierarchy.  Use W2008 64-bit or later.  Start learning SQL replication.  Use AD sites for site boundaries and UNC paths for content.<\/p>\n

A VHD with a 500 day time bombed VHD will be made available by MS in a few weeks.  Some hand-on labs will be made available soon after in TechNet Online.  <\/p>\n

Can you see why I reckon ConfigMgr is the biggest and most complex of the MS products?<\/p>\n

Operations Manager<\/u><\/strong><\/p>\n

Irish OpsMgr MVP Paul Keely did this session.  I missed the first half hour because I was talking to Jeff Wettlaufer and Ryan O\u2019Hara from Redmond.  When I came back I saw that Paul was talking about the updates that have been made available for OpsMgr 2007 R2.  The demo being shown was the SLA Dashboard for OpsMgr.<\/p>\n

Management pack authoring: \u201cyou need to have a PhD to author a management pack\u201d.  This is still so true.<\/p>\n

Using a Viso\/OpsMgr connector you can load a distributed application into Visio.  You can then export this into SharePoint where the DA can be viewed on a site.<\/p>\n

KB979490 Cumulative Update 2 includes support for SLES 11 32-bit and 64-bit and zones for all versions of Solaris.<\/p>\n

V.Next: MS have licensed \u201cEMC Smarts\u201d for network monitoring.  An agent can figure out what switch it is on and then figure out the network. This means OpsMgr can figure out the entire network infrastructure and detect when a component fails.  <\/p>\n

Management packs are changing.  A new delay and correlation process will alert you about the root cause of an issue rather than alert you about every component that has failed because of the root cause.  This makes for a better informed and clearer issue notification.<\/p>\n

Opalis<\/u><\/strong><\/p>\n

This is a recent System Center acquisition for automated work flows.  The speaker was to fly in this morning but the ash cloud caused airports to close.  MS Ireland have attempted to set up a Live Meeting where the speaker can present to us from the UK.<\/p>\n

The speaker is Greg Charman and is present in a tiny window in the top left of the projector screen.<\/p>\n

We have a number of IT silos: SQL, virtualisation, servers, etc.  Applications or processes tend to cross those silos, e.g. SQL is used by System Center.  Server management relies on virtualization.  Server management and virtualization both use System Center.<\/p>\n

Opalis provides automation, orchestration and integration between System Center.  Currently (because it was recently acquired) it also plugs into 3rd party products. Maybe it will and maybe it won\u2019t continue to support 3rd party products in future releases.<\/p>\n

Opalis provides runbook\/process automation.  You remove human action from the process to improve the speed and reliability.  It also allows processes to cross the IT silos.<\/p>\n

In the architecture, there is an Integrated Data Bus.  Anything that can connect to this can interact with other services (in theory).  Lots of things are shown: Microsoft, BMC, HP, CA, IBM, EMC, and Custom Applications.  <\/p>\n

A typical process today: OpsMgr raises an alert.  Manually investigate if it is valid.  Update a service desk ticket.  Figure out what broke and test solutions.  Maybe include a 3rd party service provider.  All of these tasks take time and the issue goes on and on.<\/p>\n

Opalis: sees the alert and verifies the fault.  It updates the issue.  It does some diagnostics.  It passes the results back to the service desk.  It might fix the problem and close the ticket.  At the least it could provide lots of information for a manual remediation.<\/p>\n

Opalis is used for:<\/p>\n