Weekly Tasks Check Policy Compliance:

Transcription

1 Regular Maintenance Tasks These tasks shuld be perfrmed n a regular basis t ensure that all autmatin and maintenance is functining prperly. The New Custmer r Site sectin will remind yu f the tasks that are critical t define t ensure that the autmatin is wrking as designed. Mst tasks take just a few minutes but g a lng way in simplifying peratins. Weekly Tasks Check Plicy Cmpliance: Navigate t Plicy Management Assignment Machines Lk fr agents that have verrides (range) r nn-cmpliant settings (red) use the clumn filter t simplify the search. Select the agents with Overrides, then click Clear Overrides Select agents that are nn-cmpliant, then click Reprcess Plicies If the same agents repeatedly reprt nn-cmpliance, investigate which settings are in cnflict and adjust the plicies r plicy applicatin. Request supprt assistance if necessary. Check the Patch Scan schedule: Spt check a grup f machines r a cuple f rganizatins. Verify that each agent has a scan schedule applied these times may be different if yu custmized the patching mdule. Wrkstatins Every Mnday between 10 AM and 4 PM

2 Servers Every Mnday between 12:30 AM and 4:30 AM Systems withut scheduled scans verify the reasn unmanaged r special grup, PATCH setting in the Plicy Cntrl field? Review/Adjust netwrk mnitrs (if used): Navigate t Netwrk Mnitr Mnitring View Check grups with RED status Drill dwn and select the agent with Alarm status Nte the state f the mnitrs prefixed with _Mnitr: if all f these mnitrs are red, it usually indicates a lcal security issue. Run the WIN-Verify WMI fr KNM Mnitring (MV) prcedure n the affected machine. If the affected machine is the KNM Gateway (listed as Hstname n the verview display), make sure that WMI is Disabled (Select the agent, click Edit, select the Advanced tab, un-check Use WMI.) Archive the prcessed tickets. It is imprtant t keep the ticket cunt belw 200 yu may need t d this mre than nce a week if yu have a high ticket vlume. Navigate t Ticketing Manage Tickets Delete/Archive In the Hide Tickets ptin, set the time t midnight and click Set Click Select All, then click Archive

3 Mnthly Tasks Review and Apprve Patches by Plicy Navigate t Patch Management Patch Plicy Apprval by Plicy Select each Plicy frm the drp-dwn list Select any classificatin frm the Pending Apprval clumn, select all patches frm the apprval windw, and either apprve r deny as per the Default Apprval Status clumn. These are patches that have been discvered n agents after the aut-apprval perid and require manual apprval r denial. Select the classificatins where the default status is Pending Apprval Review the updates, lking fr any that shuld be denied. Select these and click Deny. Select All remaining updates and click Apprve Repeat fr each plicy in the drp-dwn list that has pending apprvals. Use the filter t fcus n what yu need t select. Set the Published field t smething like < " " t exclude updates frm the current mnth (set t the end f the prir mnth) giving yu time t listen fr prblematic updates befre yu apprve them. The Security Bulletin field can als be filtered t lk fr things like.net r IE depending n the plicy yu are validating. Search fr.net in the Blck DtNET plicy and deny all updates fund, then yu can safely clear the filter and apprve all remaining updates fr that plicy. Spt Checks Review the steps fr new custmer r site and insure that all settings are defined prperly, particularly fr Managed Variables and Mnitr New Agent Check-In as these are particularly imprtant t autmatin. These are easy t spt and will indicate which custmers r grups might nt have been fully cnfigured when created and need further validatin. Cnfirm mnitring via spt-checks Navigate t Mnitr Agent Mnitring Assign Mnitring Select an All Servers Windws view Verify that apprpriate mnitrs are applied several mnitrs will usually be present n servers, as shwn here. Service mnitrs are ptinal n wrkstatins and may r may nt be present. This is MSP-specific and shuld be nted as part f yur specific checks. Navigate t Mnitr Agent Mnitring Event Lg Alerts Verify that all agents have apprpriate mnitrs applied. Nte that agents in a special, audit, r unm grup will nt have mnitrs applied. Mnitrs can als be suppressed via Plicy Cntrl settings. Verify that systems withut mnitrs have these cntrls in place r determine why mnitrs are nt applying as expected. Request supprt if needed t ensure that effective mnitring is being perfrmed.

4 Creating a New Custmer r Custmer Site These steps are needed t ensure that all autmatin functins after adding a new custmer r a new lcatin (site) t an existing custmer. New Custmer Use the Offline Management tl t autmatically create the custmer rganizatin and site grup(s) this will autmate the first 4 steps belw. Create the rt grup m fr managed r unm fr unmanaged r break/fix. Create the servers, wkstns, and special machine grups belw the custmer rt. Use the LOCODE.XLSX spreadsheet t determine the Site ID, create the Site ID grup(s) under wkstns and, if necessary, servers. Use the ptinal ffline tls fr autmated management. Assign the prper Set-up Type t define the cverage hurs fr mnitring/alerting. Optinal define the MSP Identity in the Org Custm Fields / MSP field t use custm ITP prcessing and ntificatin via Tenancy. If this is dne, the alerts will be sent t an alternate PSA as defined by ITP. Add the rganizatin t the Persnal scpe; ptinally create a Custmer-name scpe t restrict custmer access t this specific rganizatin. Optinal If the custmer wants t be ntified f pririty events, create a Staff Member fr that custmer; define the Functin field as PriNtify, and (due t a VSA bug), enter the ntificatin address int the Address, Phne Number, and Text fields. Cmplete the New Site(s) tasks belw when creating a new rg. New Site(s) Define the New Agent Installed actin as Create Alarm Navigate t Mnitr Agent Mnitring Alerts Select New Agent Installed Select Create Alarm Select Replace list Chse Select All Click Apply

5 Define the Managed Variables fr the new custmer and site grup(s). Other variables may be required by the client fr lcal custmer credentials and varius applicatin licensing used by installatin prcedures. Navigate t Agent Prcedures Manage Prcedures Schedule/Create Click the Manage Variables menu Define the fllwing required variables: KaseyaVsaId cpy the existing value this is the same fr all clients RAUserID The lcal admin user ID used by the MSP RAPasswrd The lcal admin accunt passwrd used by the MSP Define the CA user ID and Passwrd if required by custmer request Frce Machine ID t Fllw HstName (recmmended) Navigate t System System Preferences Naming Plicy Select the machine grup Check Frce machine ID t always be cmputer name Click Update Repeat fr each machine grup Verify that the agent init prcess has run Navigate t Agent Prcedures Manage Prcedures Schedule/Create Expand the _MSP Builder/Cre Autmatin/Agent Init flder Check the Last Exec Time fr ALL-Agent Onbarding - 1 Init If the prcedure has nt run, invke it manually. The prcedure may nt run autmatically if the agent previusly checked int the system