Tuesday, January 2, 2007

Microsoft Client Protection

I have to install and implement Microsoft Client Protection, otherwise known as Forefront.

In terms of the server, there are 4 roles that the server can have. The management role in which the user can view the state of the whole managed network and investigate the status if the clients, collection role, wherein the server simply takes in all the data from all the machines and keeps it in a database, reporting role, where the server is used to report on the data collected by the collection role of the server, and finally the distribution role, where the server sends out updates for malware definitions to all the clients using Windows Server Update Services (WSUS).

That last role scares me. We don't have WSUS running here at the moment... but it will be!

WSUS still isn't working.

The Public Beta expires on June 30, 2007.

Microsoft's Systems Management Server

I need to learn this dangerous and silly program for work. So I will keep a log of what I learn here.

Overview
This software was designed so that it could be massively scaled, meaning many sub-networks over a very large geographic region (possibly the entire planet or even orbitting computers, logical adjacency is more important than physical adjacency here).

But our system is small compared to what I need to know about this program, so I'm going to focus on Security Team topics such as deploying patches.

Vocabulary
I need to keep track of all the various terms introduced in this software.

site - this is the logical network of computers that the paricular setup of SMS manages

collections - a group of computers that are grouped by some common attribute (such as 'Room 37 computers', 'tablets', 'computers with bagel crumbs in the keyboard')

package - a combination of software and rules for installation of the software. A package is something like OneNote and the set of rules that installs OneNote to particular machines. To install a patch or a software suite to a machine or many machines you have to make a package of the software first.

advertisement - information and notification to a collection of machines to run and install a package or set of packages. In order to deploy a package you must advertise the package to a collection of computers.