It’s ZCM month here at youLinuxGuy.com / yourZcmGuy.com …!
I got a question the other day from a customer, basically asking, “…what is the best way to deploy ZCM agent System Updates in a large, spread-out environment?”
First, an aside. I think ZCM 10 is the best version of ZENworks to date. Sure, it hit some rough spots as it was revised from the original release, but now it is a stable, flexible, scalable, and mature product.
Since the release of ZCM 10.0.0 just a couple years ago as a complete re-write of the original NetWare-based ZENworks product, I have been working regularly with the product as an on-going consultant, installer and administrator. I have worked with customers through design and deployment of the original version, through each of the subsequent updates and all the correlating changes and challenges.
Previous to ZCM10, I have years of experience with ZENworks for Desktops; having deployed (or consulted on existing deployments) all the way back to version 3. But more recently I have designed ZCM systems for a handful of customers, from small companies to two medium-sized, name-recognizable Michigan-based companies. I have also acted as a ZCM subject matter expert on behalf of other local companies.
So I’m glad to see that it has arrived to what it is today. The integration with Patch Management, the single web-based console, the scalable multi-primary and tiered satellite design, and so on. It’s almost all good. By the way, if you need help with your ZCM environment, all the way from the smallest tip to the biggest deployment plan, feel free to drop me a line! Okay, enough of the aside, on to the point…
As each patch or updates is released for ZCM, you (as an admin) are faced with the notion of pushing those updates out to the clients across your enterprise. You hope they go out smoothly, you hope they run correctly, you hope they reboot normally, and you hope they return to service. Now, do you want 100 of them doing that at once? 1,000 of them? No.
The customer that asked me the question at the top of this post had just deployed the ZCM 10sp2 update out to all his PCs, and spent the next 3 days figuring out why the deployment hadn’t “baselined”. He had not previously used “Staged” deployments for the updates, but with a little help, he will from now on.
With “Staged” deployments of updates, you can choose the Devices (or groups of Devices) to which each “Stage” will apply. This is one reason why I always set up rules for automatic containment placement *AND* group memberships for initial agent deployments, since the Device group is perfect for this type of use. You can also set the configuration so that each stage will fully complete before advancing to the next, either manually, automatically, and/or with notification (via email!).
Stages are set up by doing the following in the ZMC administration page:
- Go to Configuration -> System Updates
- Under Deployment Stages, click Action and choose Add Stage
I like to break the entire organization into a standard set of initial stages, then the later stages are dictated by the size/scope/layout of the company. For instance, here is my list of stages for a generic multi-site company:
Of course, you could argue that the “main” site should be number 3, but over time I have preferred to do the biggest site *last*. To each his/her own, I suppose.
Also, while in the “Action” item as described above, you’ll see the options for modifying the default behaviors of advancing through the stages. This is a good idea! Personally, I like to set it to manually advance. I want to be able to have things move along at the pace I dictate, even if an advancement means that a stage is sucessful. I guess I just like that level of control…
I hope that helps you….