KASEYA CERTIFIED ADMINISTRATOR (KCA)

Transcription

1 The IT Management Clud Cmpany TM KASEYA CERTIFIED ADMINISTRATOR (KCA) Managed Service Prvider Lab Guide The Kaseya Certified Administratr Lab Guide prvides hands-n exercises and a structured apprach t building and administering autmatin and integrated systems management using the Kaseya Virtual Systems Administratr Develped By

2 1 Table f Cntents Lab Guide Overview...6 The Scenari and vlab...6 Instructins fr Use...8 Hands-On Exercises...9 O1 and O2: Orientatin...9 Exercise A1: Agent Package Build Exercise A2: Agent: Manual Deply Exercise A3: Agent Aut Discvery/Remte Deply Exercise A5: Agent Endpint (t Endpint) Exercise A6: Agent: Endpint (t VSA) Exercise Exercise A7: Agent: Agent Inf Exercise BONUS ACTIVITY T2: Tasks: Schedule and Execute AI1: Audit: Infrmatin Review Exercise AI2: Audit: Custm Fields Exercise AI3: Audit: Manage Credentials Exercise Exercise Cpyright f Kaseya

3 RC1: Remte Access: Thery & Architecture Exercise Exercise Exercise T3: Task Views Exercise T4: Tasks: LAN Cache Exercise Exercise Exercise P1: Patch: Create/Assign Plicies Exercise Exercise P5: Patch: Scan and Status Exercise BONUS ACTIVITY P2: Patch: Patch Apprval Exercise Exercise Exercise Exercise Exercise BONUS ACTIVITY Exercise P3: Patch: Cnfiguratin - File Surce and Rebt Actin Exercise BONUS ACTIVITY Exercise P4: Patch: Pre/Pst Prcedures Exercise AP1: Agent Prcedures: Build and Refine Exercise Cpyright f Kaseya

4 Exercise Exercise Exercise Exercise BONUS ACTIVITY Exercise BONUS ACTIVITY M1: Mnitr: ATSE M2: Mnitr: Mnitr Sets Exercise Exercise Exercise Exercise Exercise Exercise M3: Mnitr: Mnitr Fixed Alerts Exercise Exercise Exercise M4: Mnitr: Mnitr Event Lgs Exercise Exercise M5: Mnitr: Alarms BONUS ACTIVITY Exercise M6: Mnitr: Netwrk Mnitr Exercise Exercise PM1: Plicy Management: Plicy Build Exercise T5: Tasks: Imprt/Exprt Exercise Cpyright f Kaseya

5 Exercise BONUS ACTIVITY PM2: Plicy Management: Plicy Assign Exercise Exercise HINT: Use Plicy > Machines t determine whether plicies are re-rdered fr individual machines. Optinally verify settings in the mdules. If settings have nt taken effect, wait a few minutes and re - check r reprcess the plicies nw Exercise Exercise SM1: Standard Slutins Package (IT Services Delivery Kit) Exercise Exercise Exercise Exercise IC1: Inf Center Build Exercise Exercise Exercise Exercise BONUS ACTIVITY Exercise Exercise Exercise B1: Branding: Agent Icn Exercise Exercise BONUS ACTIVITY Exercise Exercise Exercise C1: Custmizatin: KLC Cpyright f Kaseya

6 Exercise Exercise C2: Custmizatin: Prtal Access Exercise BONUS ACTIVITY Exercise BONUS ACTIVITY Exercise Exercise BONUS ACTIVITY Cpyright f Kaseya

7 Lab Guide Overview Welcme t the Kaseya Certified Administratr (KCA) Lab Guide. The hands-n exercises presented in this guide align directly with the curses presented in the VSA Administratr learning path and will help prepare students fr the certificate exam. This lab guide uses a Managed Service Prvider-based scenari. The exercises mirrr thse included in the Enterprise scenari, but the stry has been custmized t mimic an -based Kaseya deplyment. 6 The Scenari and vlab The exercises in this lab guide are scenari-based and tell the stry f Alex, an Administratr fr IT Tech Crp. IT Tech Crp is a fictitius mid-sized Managed Service Prvider which has recently purchased the Kaseya VSA t help them cmmand centrally, manage remtely, and autmate everything related t their wn IT needs, as well t help enable them t prvide services fr their custmers. IT Tech Crp is a dmain-based envirnment with a dmain cntrller and several wrkstatins. The vlab has tw sample wrkstatins and ne Dmain Cntrller representing the rest f the envirnment at ITTC. The client, FrKidz is a lcal small nn-prfit rganizatin with a small number f cmputers. Their wrkgrup-based cmputers are all cnnected t each ther via LAN and have access t the internet. They are nt using a dmain r any sphisticated netwrk infrastructure. The vlab has tw sample wrkstatins representing this envirnment. (Netwrk Diagram belw) Cpyright f Kaseya

8 Amng ther respnsibilities, Alex was the primary admin fr Active Directry at IT Tech Crp. Alex was creating GPO and VB scripts, tracking the cmputers in his netwrk, and building the tls that ther technicians use. 7 The Kaseya VSA server cnfiguratin prject has been given t Alex. Alex wants t cnvert his current daily tasks t Kaseya and minimize the amunt f individual develpment he has t d n a regular basis. His primary gal is t autmate as many f his rutine tasks as pssible. Alex is respnsible fr: getting Kaseya setup s ther technicians can use the prduct adding new users, rles, scpes t define hw ther VSA Users will access the system creating the basic layut t make the Kaseya tl useful fr the VSA users Alex is ging t: install agents s he can remtely manage machines discver devices s he can install agents and remtely manage thse devices schedule tasks t autmate prcesses cnfigure settings thrughut the VSA t cntrl hw the agents behave and what inf is visible, reprtable, etc. set up a file share (LAN Cache) s machines can get files frm the netwrk t minimize internet traffic cnfigure the envirnment s technicians can patch Micrsft updates BUT prevent any updates frm installing that might be prblematic r need additinal testing prir t release keep machines updated/healthy but accmmdate end user needs t limit interruptin frce cmpliance (Plicy) and make changes n a scheduled basis (Agent Prcedures) autmatically assign settings, scripts, mnitring and ther regular functins t existing machines and any new machines that are intrduced int the envirnment. prvide custmers with regular reprts n the status f devices, wrk accmplished, managed devices, etc. make the UI lk and feel like IT Tech Crp Cpyright f Kaseya

9 Instructins fr Use The exercises in this lab guide are designed t cmplement the curse curriculum presented in the KCA learning path. Kaseya University recmmends that yu utilize this guide real -time as yu wrk thrugh the curses. 8 In rder t ptimize learning, in the Learning Center g t the Kaseya Certified Administratr (KCA) Learning Path, and launch and cmplete a curse. Befre mving n t the next curse in sequence, pen this lab guide and apply that learning using the hands-n exercises assciated with specifically with the cmpleted curse befre mving n t the next. The exercises are intended t be cmpleted IN-SEQUENCE. There is n enfrcement mechanism and s the vlab des permit yu t skip arund. Hwever, sme f the exercises in this guide assume that prir cnfiguratins have been cmpleted. Finally, Kaseya University wants yu t be able t d mre than click thrugh step-by-step instructins, but rather actually understand what yu are ding! Thus, the exercises in this guide are written in an pen-ended fashin. Shuld yu get stuck and need help, there is an Answer Key available in the curse listings, after the self-paced lessns. There is ften mre than ne way t cmplete the exercise. The answer key utilizes the best practice r ptimal apprach. Cpyright f Kaseya

10 Yu are encuraged t d as much as yu are able t withut having t cnsult the key! 9 Hands-On Exercises O1 and O2: Orientatin Alex wuld like t have all machines and user recrds belnging t IT Tech Crp gruped tgether and have separate grupings fr each client. Create an rganizatin structure fr IT Tech Crp and ne client, FrKidz. Each rganizatin needs a machine grup fr the endpints and each needs an "nbarding" grup fr new machines. The machine grups will mirrr the physical lcatins. IT Tech Crp has machines spread in three physical lcatins: a data center and n tw separate flrs f an ffice building. FrKidz machines are lcated within the same physical HQ ffice. A user rle, Technician, and scpe are in need f creatin and assignment fr the VSA User, Jse Pearlman (jpearlman). Jse will nly be able t access the FrKidz rganizatin access Audit and Patching cnfiguratin fr the FrKidz rganizatin. Ntice abut Name Clashing: Sme cnfiguratins n a Clud VSA server must be unique acrss the entire shared server. Where this is a requirement, we ask that yu include yur username as part f the cnfiguratin. When yu see -<USERNAME> indicated in the lab guide, enter yur VSA lgin name in pl ace f the <USERNAME>. Fr example, if yur VSA lgin is awest and yu are requested t create a VSA user named jse-<username>, yu wuld create the user jse-awest. Exercise 1 Change myorg name and ID t ITTC-<USERNAME> Create Machine Grups: "DataCenter", "FirstFlr", "SecndFlr", "nbarding" Create Departments: Accunting, IT, HR Create Staff recrd: Jse Pearlman in the IT department Exercise 2 Create rg name and ID: FrKidz-<USERNAME> Create Machine Grups: "hq", "nbarding" Create Departments: MainOffice, FamilyServices, YuthOutreach Create Staff recrd: Samantha Jacksn in the MainOffice department Exercise 3 Create User Rle: Technician with access t Audit and Patch functins Create Scpe: FrKidz. Limit the scpe t machines in the FrKidz rganizatin Create VSA User: Create a lgin accunt fr Jse Pearlman as jpearlman-<username> and assign t the Technician rle and FrKidz scpe Cpyright f Kaseya

11 A1: Agent Package Build In rder t bring the machines under management, agents need t be installed. T get started, Alex must build an installer package. 10 Create ne agent installer package. The package will be used fr bth IT Tech Crp and fr FrKidz. The package will default all the agents t the nbarding machine grup, add the /t switch t the package, and d nt bind the administratr credentials t the package. Exercise 4 The package shuld have the fllwing cnfiguratin: Use the Cmputer name and assciate with the ittc.nbarding machine grup D nt cpy any settings In additin t the default switches, add a Title f IT Tech Crp t the dialg bx f the installer D nt bind credentials Add a package name and descriptin and set this package as the default Cpyright f Kaseya

12 A2: Agent: Manual Deply While autmatin is the ultimate gal, Alex is required t first manually deply at least ne agent int each netwrk envirnment. 11 Install ne agent int the IT Tech Crp netwrk and a separate agent in the FrKidz netwrk. Autmated discvery can be used t lcate additinal machines nce the ne machine in each netwrk has an agent. Since these vlab machines will be accessed remtely, and cnfigure the registry t ensure the agent icn prperly reflects a lgged n user. Hint: The path t the registry key is: 32 bit: HKeyLcalMachine\Sftware\Micrsft\Windws\CurrentVersin\Run 64 bit: HKeyLcalMachine\Sftware\Ww6432Nde\Micrsft\Windws\CurrentVersin\Run Exercise 5 Lg int DC Dwnlad and execute the agent install package Add -remte t registry key Verify checkin shwing lgged in user Exercise 6 Lg int Receptin Dwnlad and execute the agent install package Add -remte t registry key Verify checkin shwing lgged in user Cpyright f Kaseya

13 A3: Agent Aut Discvery/Remte Deply Nw that there is an agent in each envirnment, Alex can use Discvery t lcate ther cmputers in each envirnment and autmatically install the agent sftware t all ther cmputers fund within each netwrk. 12 Use the ptin that caters BEST fr each rganizatin. (I.E. if Active Directry is predminantly used, use Discvery > Dmains, if there is n Active Directry envirnment, use Discvery > Netwrks). Cnfigure the Naming Plicy f the FrKidz envirnment t frce endpints in the FrKidz rganizatin t jin its apprpriate machine gruping based n the Default Gateway and IP Address range. Hint: Use the System > Preferences ptin t wrap the machine grup name. Exercise 7 Create Netwrk using LAN Watch t scan the FrKidz netwrk and execute the scan. LAN Watch shuld be cnfigured t discver devices and install the default agent package. Exercise 8 Cnfigure Naming Plicy t autmatically mve all FrKidz devices int the apprpriate machine grups. Exercise 9 Cnfigure Dmain Watch t discver devices and users in the ittc.cm dmain. Dmain watch shuld autmatically install the default agent package n discvered ma chines. Execute the scan. Cpyright f Kaseya

14 A5: Agent Endpint (t Endpint) With all endpints discvered and agents installed, Alex wuld like t custmize sme f the basic settings n the agents. 13 Change the Wrking Directry t C:\ITTC and cnfigure the Agent Menu t hide the Exit and Disable Remte Cntrl ptins. Mdify the Credentials used n the agent t <USERNAME> <PASSWORD> fr the IT Tech Crp agents nly (use yur wn lab username and passwrd fr this exercise). Exercise 10 Cnfigure the Wrking Directry t c:\ittc fr all machines Exercise 11 Cnfigure the Agent Menu t hide Exit and Disable Remte Cntrl n all machines Exercise 12 Cnfigure the Set Credential t <USERNAME>/<PASSWORD> n the IT Tech Crp machines nly Cpyright f Kaseya

15 A6: Agent: Endpint (t VSA) Alex recgnizes that the DC is nt in the crrect machine grup. He wuld like t mve the agent t the Data Center machine grup. He als wants t ensure he's retaining lg infrmatin fr all machines fr an apprpriate perid f time. 14 Exercise 13 Use the Agent > Change Grup functin t mve the DC t the apprpriate machine grup Exercise 14 Cnfigure the Lg Histry retentin perid t retain all agent lgs fr 20 Cpyright f Kaseya

16 A7: Agent: Agent Inf Alex knws that a user is lgged int sme f the endpints, but isn't sure wh. He als wants t make sure he and his technicians are aware f which machines are in which time zne. ITTC is lcated in Miami, Flrida but their client, FrKidz, is lcated in Seattle, Washingtn. The CEO f FrKidz, Sam Jacksn, requires technicians ntify her by phne prir t establishing a remte cnnectin t her cmputer. Alex wants t make this infrmatin readily available t all technicians. Knwing the time zne f the endpints will ensure technicians a re cnscius f cntacting end users during apprpriate business hurs. 15 Exercise 15 Add the Current User and Time Zne clumns t the Agent Status BONUS ACTIVITY 1 Lcate the Current User using Quick View Exercise 16 Add the Cntact fr laptp-ce Name: Samantha Jacksn sjacksn@frkidz.rg Phne: Default Language: English Exercise 17 Add an Admin nte t laptp-ce: All techs must get verbal apprval frm Sam befre any Remte Cnnectin t this cmputer. Call nly between 9am and 5pm in the user's lcal time zne. Exercise 18 Add a badge t laptp-ce: Phne Icn Cpyright f Kaseya

17 T2: Tasks: Schedule and Execute Alex knws he will be scheduling several functins thrughut his wrk in the VSA, but he's nt familiar with the scheduler utility and the variances that exist fr sme mdules. He needs t understand the varius ptins available and hw he can best schedule tasks in ways that are healthiest fr the KServer and netwrk envirnments. 16 NO HANDS-ON LABS (scheduling will be explred in future labs) Cpyright f Kaseya

18 AI1: Audit: Infrmatin Review With Agents installed nw installed, Alex wuld like t review sme f the sftware and hardware infrmatin n the individual wrkstatins. 17 Schedule all audits t run nw. Find Disk Shares fr DC and nte the infrmatin shwn. Find slitaire.exe (Slitaire) n endpints using the filter grid. Navigate between bth server and wrkstatin machines and nte the differences. Create Custm Clumn Set that will utilize the data f Current User, Time Zne, Cntact Name, Cntact , IP Address, Cnnectin Gateway, and Used Space. Exercise 19 Execute a Baseline, System, and Latest Audit t run immediately Exercise 20 Lcate the disk shares cnfigured n the Dmain Cntrller (HINT: Use Machine Summary) Explre available tabs Exercise 21 Using Machine Summary and grid filters in the Audit mdule, find which endpints have Slitaire installed (HINT: The Slitaire executable file is sl itaire.exe) Exercise 22 Create Custm Clumn Set which includes: Current User Time Zne Cntact Name Cntact IP Address Cnnectin Gateway Used Space Review the data returned fr the machines using the newly created Clumn Set Cpyright f Kaseya

19 AI2: Audit: Custm Fields Audit cntains a lt f data, but there is sme infrmatin that Alex needs t track n a per-machine basis which des nt currently exist. Create and ppulate an Audit Custm Field t track a "WarrantyExpiratin" Custm Field n DC. Finally, edit the Custm Field t ppulate date ne year frm 'tday'. 18 Exercise 23 Create "WarrantyExpiratin" Custm Field n DC Edit Machine Data t ppulate date ne year frm 'tday' Exercise 24 Cpy custm field t all machines using the Bulk Edit functin Ppulate the field with a date tw years frm tday Select machines individually and explre assigned date fr each. Cpyright f Kaseya

20 AI3: Audit: Manage Credentials 19 IT Tech Crp uses a similar credential fr all f their crprate and client machines. Hwever, the credential is a lcal administratr accunt fr thse clients in a wrkgrup-based envirnment and is a Dmain Admin accunt fr crprate cmputers and thse clients n a dmain. Alex wuld like t recrd the apprpriate credentials fr each machine based n the rganizatin and he wuld like that accunt cnfigured as the Set Credential autmatically. Exercise 25 Using Audit > Manage Credentials, create a new credential fr IT Tech Crp Define the credential ittcadmin with the passwrd $uper$ecret Cnfigure the credential t be the Agent Credential Optinal: Add a descriptive nte Exercise 26 Using Audit > Manage Credentials, create a new credential fr FrKidz Define the credential ittcadmin with the passwrd $uper$ecret Cnfigure the credential t be the Agent Credential Optinal: Add a descriptive nte Cpyright f Kaseya

21 RC1: Remte Access: Thery & Architecture Technicians at IT Tech Crp smetimes need t remte t wrkstatins t assist end users. Peridically cnnecting t servers may als be required. Alex needs t ensure that any cnnectins t crprate r client machines adhere t the business requirements and cntractual agreements fr the respective machines. 20 Exercise 27 Cnfigure User Rle Plicy fr the System rle with the fllwing settings: Require admin nte Exercise 28 If user is lgged in, display alert (use the default alert r ptinally custmize) Cnfigure User Rle Plicy fr the Technician rle If the user is lgged in, ask permissin (use the default r ptinally custmize) Require admin nte Exercise 29 Cnfigure Machine Rle Plicy fr laptp-ce If user is lgged in, require permissin Require admin nte Optinally enable recrding Cpyright f Kaseya

22 T3: Task Views Alex regularly needs t lcate machines that have similar cnfiguratins r meet specific criteria. He wants t be able t find specific machines and then cnfigure settings r assign tasks t all machines that meet the defined criteria. The creatin f Views will help Alex t easily filter t specific agents. 21 Use a Machine Grup Filter t filter t all machines in FrKidz. Once filtered t FrKidz, further filter t nly machines cntaining "laptp" in the name. Create a view t filter t All Wrkstatin OSs, a view fr All Server OSs, and finally a view t filter t machines with the Slitaire applicatin (sl.exe) installed. Exercise 30 Use Machine Filter tlbar t filter t all machines in FrKidz Once filtered t FrKidz, further filter t nly machines cntaining "laptp" in the name Reset the filter t display all machines Exercise 31 Create a View t filter t All Wrkstatin-type Operating Systems Create a View t filter t All Server-type Operating Systems Create a View t filter t machines with the Slitaire applicatin (slitaire.exe) installed Explre each f the Views created Exercise 32 Create an Advanced View t shw all machines in PST time zne (HINT: Use time zne ffset in hurs t create this filter) BONUS ACTIVITY 2 Edit the Slitaire View t filter t specific versin f the app (HINT: Check Audit t verify the versin currently installed n at least ne machine) Cpyright f Kaseya

23 T4: Tasks: LAN Cache Existing cnfiguratins have saved Alex a lt f time and simplified management f his envirnment. He wuld like t create a file share n each netwrk s he can instruct varius tasks t get files frm the lcal file share rather than each endpint individually dwnlading the data frm the internet. Alex knws hw t create shared flders but wuld like an easier way t accmplish this. He wul d like t use the LAN Cache functin t create the Share and then assign the apprpriate LAN Cache t each managed machine. 22 Create LAN Cache n WS1 with the name f ITTC-LC. The lcal flder will be named ITTC-LC n the C: drive. Next, create a LAN Cache n the Receptin machine with the Name f 4Kidz-LC. The lcal flder will be named 4Kidz-LC n the C: drive. Finally, assign the LAN Cache t the apprpriate rganizatinal endpints. Exercise 33 Create LAN Cache n WS1 using the fllwing cnfiguratin: LAN Cache Name: ITTC-LC Lcal Flder: ITTC-LC Use the Cmputer Name (nt IP Address) fr name reslutin The LAN Cache shuld be created n Drive: C:\ Exercise 34 Create LAN Cache n Receptin using the fllwing cnfiguratin LAN Cache Name: 4kidz-LC Lcal Flder: 4Kidz-LC Use the Cmputer Name (nt IP Address) fr name reslutin The LAN Cache shuld be created n Drive: C:\ Exercise 35 Assign the apprpriate LAN Cache t each endpint Assign the ITTC-LC LAN Cache t all ITTC wrkstati ns and servers Optinally use filters t lcate the apprpriate machines Assign the 4Kidz-LC LAN Cache t all machines in the FrKidz rganizatin Optinally use filters t lcate the apprpriate machines Cpyright f Kaseya

24 P1: Patch: Create/Assign Plicies 23 In rder fr Alex and his team t define which Micrsft Update patches will be applied t endpints, he needs t create and assign Patch Plicies. There are sme patches that shuld be blcked fr all machines acrss the bard. Create a "Base" plicy fr all wrkstatins and servers, and name them Base Wrkstatins and Base Servers respectively. Alex als wants servers t have Service Packs tested befre they are deplyed. Create a patch plicy that blcks all service packs but allws all ther patch types thrugh. Finally, the FrKidz client is using a web-based applicatin that must run n IE8. These machines cannt have Internet Explrer updated beynd what they are currently running. Alex must blck all IE updates frm all FrKidz machines but be sure t allw all ther "base" patches thrugh, and will need a patch plicy t specifically accmplish this. Exercise 36 Create fur patch plicies: Base Wrkstatin Base Server N Internet Explrer N Service Packs Exercise 37 Assign the patch plicies t the apprpriate machines: DC: Base Servers, N Service Packs WS1: Base Wrkstatins WS2: Base Wrkstatin Laptp-ce: Base Wrkstatin, N Internet Explrer, N Service Packs Receptin: Base Wrkstatin, N Internet Explrer Cpyright f Kaseya

25 P5: Patch: Scan and Status 24 Bth the IT Tech Crp and FrKidz machines need t have Micrsft patches installed n them. In rder t determine which patches are available t the machines, Alex needs t execute a patch scan. Run a patch scan. Als schedule the patch scan t run autmatically every Wednesday, during business hurs, s any patches released by Micrsft that are applicable t the endpints can be discvered. Exercise 38 Schedule a patch scan n all machines with the fllwing cnfiguratin: Every Wednesdays During business hurs fr the respective lcatin Run an immediate patch scan n all machines BONUS ACTIVITY 3 Review Patch Status t identify the installed and missing patches Cpyright f Kaseya

26 P2: Patch: Patch Apprval Nw that the cntainers fr patch plicies have been created, Alex wants t define which patches are actually allwed and which shuld be blcked. He wants Kaseya t autmatically allw thse patches he feels are safe, blck thse which need t be prevented frm instal latin, and recgnizes that smetimes he needs t handle sme patches n a case-by-case basis. Alex will set the Default Apprval Status t Apprved fr sme types f patches, Denied fr thse he wants t blck acrss the bard, and will mark sme as Pendi ng Apprval. Thse in Pending he will need t prcess thrugh each mnth r s t apprve the individual patches that shuld be allwed and deny thse individual patches that shuld be blcked. 25 Fr the Base Server patch plicy, autmatically allw all security update classificatins; blck Feature Packs, Tls, & Updates, and set Pending Apprval fr Critical, Update Rllup, and Service Packs. Verify all Prducts have a default apprval status f Apprved. Fr the Base Wrkstatins patch plicy, autmatically allw all security updates, service packs, critical; blck Feature Pack, Tls; and set Pending Apprval fr Update, Update Rllup. Verify all Prducts have a default apprval status f Apprved. Fr the N Service Packs patch plicy, autmatically allw classificatins except Service Packs and blck Service Packs. Exercise 39 Set Default Apprval Status n Base Server Apprve: All security update classificatins Manually apprve all existing Security Update patches Deny: Feature Packs, Tls, Updates Manually Deny all existing Feature Packs, Tls, Updates Pending Apprval: Critical, Update Rllup, Service Packs Randmly apprve sme patches in these grups, deny thers Verify all Prducts have a default apprval status f Apprved Check Patch > Patch Status; nte the number f apprved/denied patches n DC Exercise 40 Set Default Apprval Status n Base Wrkstatin Apprve: All security updates, service packs, critical Manually apprve all existing patches in these classificatins Deny: Feature Pack, Tls Manually deny all existing patches in these classificatins Pending Apprval: Update, Update Rllup Randmly apprve sme patches in these grups, deny thers Verify all Prducts have default apprval status f Apprved Check Patch > Patch Status; nte the number f apprved/denied patches n WS Cpyright f Kaseya

27 Exercise 41 Set Default Apprval Status n N Service Packs Apprve: All classificatins except Service Packs Deny: Service Packs Verify all Prducts are apprved Manually deny all existing service packs, apprve all thers Check Patch > Patch Status; nte the number f apprved/denied patches n machines 26 Exercise 42 Set Default Apprval Status n N Internet Explrer Apprve all Classificatins Set all Operating System-type Prducts t pending Select all patches frm Pending clumn Set filter: title = *explrer* Deny all IE (thse that match filter) Clear filter Set remaining patches t apprved Check Patch > Patch Status; nte the number f a pprved/denied patches n machines Exercise 43 Check Patch > Patch Status; nte the number f apprved/denied patches n machines Click Mixed link t shw per-plicy status Apprve (r deny) ne single "flavr" f a patch where multiple versins f the patch exist in the VSA Click Apprved link t shw per-plicy status Check Patch > Patch Status; nte the apprved/denied number changed BONUS ACTIVITY 4 Using Apprval by Plicy, find the patch apprved/denied in the previus exercise. Nte that the status might nt match default apprval status. Exercise 44 Using Apprval by Patch, identify a patch with multiple versins f same KB number Using KB Override, deny the patch fund in previus step Using Apprval by Patch, see all versins f this patch are denied Cpyright f Kaseya

28 P3: Patch: Cnfiguratin - File Surce and Rebt Actin Alex's technician, Jse, is ready t start deplying patches t the FrKidz cmputers. Befre Jse starts the installs, Alex wuld like t make sure that the patches are nt being dwnladed frm the internet multiple times as FrKidz has limited bandwidth. Instead f each machine getting patches directly frm Micrsft, Alex wuld like a single LAN server t be used t retrieve the patches frm Micrsft. That LAN server will then distribute the patches t the individual machines. This shuld prevent multiple dwnlads f the same file frm the internet t the FrKidz netwrk. He wuld like t d the same fr ITTC, even thugh they have mre bandwidth. In additin, he wuld like t cntrl hw the machines rebt after the patch installs execute. 27 Exercise 45 Cnfigure the File Surce fr all machines t use LAN Cache. Fr the machines in the FrKidz rganizatin, enable the ptin t fail ver t the internet if the LAN Cache is nt available BONUS ACTIVITY 5 Set ITTC machines t use a manually-created LAN Share Create share \\dc\patches at c:\patches Assign this UNC path and flder as the file surce fr ITTC machines Ntice the ntificatin regarding audit disk shares Audit > Run Audit > Run Latest Audit nw Once Audit cmpletes, verify the File Surce ntificatin is remved Exercise 46 Cnfigure the Rebt Actin fr all machines Set ITTC wrkstatins t warn the user a rebt will ccur in 10 minutes Set DC t rebt during the regularly schedul ed maintenance windw (Saturdays at 2am) Set FrKidz machines t ask the user if a rebt is OK but t rebt in 30 minutes if n respnse Cpyright f Kaseya

29 P4: Patch: Pre/Pst Prcedures Jse the Technician has run patch cycles n several f the cmputers. Alex and his team are receiving alerts frm Mnitr when the machines rebt as part f patching. Since these rebts are expected, Alex des nt want his team t have t address these alerts during a patch cycle. Instead, he wuld like t prevent the alerts frm firing. He has als nticed that the DC behaves ddly after the rebt and wuld like t make sure the shutdwn prcess cmplies with recmmended prcedures. T d s, he wuld like t stp the NTDS service n the DC befre the rebt and start the NTDS service right after the rebt cmpletes. Alex will need t assign pre- and pst-prcedures t the machines t accmmdate these requests. 28 Exercise 47 Assign a Pre-Aut Update prcedure t all FrKidz wrkstatins (Suspend Alarms) Assign a Pst-Aut Update prcedure t all FrKidz wrkstatins (Unsuspend Alarms) Nte: If yu have nt yet cmpleted the hands-n labs fr Agent Prcedures and/r Imprt/Exprt, use an alternate sample prcedure r return t this lab at a later time. Exercise 48 Assign a pre-rebt prcedure t DC t stp the NTDS service Assign a pst-rebt prcedure t DC t start the NTDS service Nte: If yu have nt yet cmpleted the hands-n labs fr Agent Prcedures and/r Imprt/Exprt, use an alternate sample prcedure r return t this lab at a later time. Cpyright f Kaseya

30 AP1: Agent Prcedures: Build and Refine 29 Currently, Alex must cmplete a number f tasks manually. He has sftware that needs installatin, which requires sending Jse n-site. He wants t make sure the remte tag is added t the registry and desn't want t have t remte t each cmputer t cmplete this. He wants t have the result f a net share cmmand ppulated int the Agent Prcedure lgs, and he wants t be able t create a lcal user n a machine, but be able t prvide the username and passwrd at the time the prcedure is scheduled t run n the machine. An cnfirmatin that the accunt was created wuld be nice, as well. Exercise 49 Prcedure Name: Add remte t Registry add -remte t the registry value related t kausrtsk.exe. Use cnditinal getos t use the apprpriate registry value, depending n whether the machine is 32- r 64 bit. Write "-REMOTE ADDED" t Agent Prcedure lg. Exercise 50 Prcedure Name: Install 7zip Install 7zip using the geturl and installmsi steps. Search the web fr the free 7zip installer. Exercise 51 Create a public Managed Variable fr a file share using the fllwing cnfiguratin: Variable Name:"FileShare" ITTC variable value: \\dc\share FrKidz variable value: \\receptin\share Exercise 52 Prcedure Name: Install Ntepad++ Create prcedure t install Ntepad++ frm internet using the geturl step. The prcedure shuld dwnlad file t the apprpriate managed variable, cpy the file t the target machine, and silently install executable. Search the web fr the free Ntepad++ installer. HINT: The switch t silently install Ntepad++ is /S Exercise 53 Prcedure Name: Available Netwrk Shares Create a prcedure t gather the results f the cmmand shell cmmand net shares t glbal variable; write results t Agent Prcedure lg. BONUS ACTIVITY 6 Edit the Ntepad++ and 7zip prcedures t create an install lg. Create a prcedure t execute 7zip and ntepad++ installs in a single prcedure withut recreating the previus prcedures. HINT: Use the executeprcedure step Parse lg installer lg results fr "success" Ppulate a custm field with "installed" r "nt installed" fr each sftware type Cpyright f Kaseya

31 Exercise 54 Prcedure Name: Create Lcal Admin Create a prcedure t create a lcal user n managed machines. At the time the prcedure is scheduled, the administratr shuld be prmpted fr the username and passwrd t create, as well as the address t which the cnfirmatin shuld be sent. These respnses t these questins shuld be used t create the accunt. In the cnfirmatin , include the username and passwrd used t create the accunt, as well as the machine n which the accunt was created. 30 BONUS ACTIVITY 7 Execute yur prcedures n managed machines Cpyright f Kaseya

32 M1: Mnitr: ATSE NO HANDS-ON LABS 31 M2: Mnitr: Mnitr Sets Nte: Many f the Mnitr-related labs will instruct yu t use an address as part f the alert ntificatins. Fr the purpses f these labs, please use yur business address with.fake at the end. This will prevent s frm cntinually flding an inbx. Fr example, if Alex s address is alex@ittc.cm, he wuld use the address alex@ittc.cm.fake. Alex must cnfigure mnitring f managed endpints within the Kaseya VSA fr bth Internal ITTC machines and the FrKidz cmputers. He wuld like t avid the need t cnnect t the endpints in rder t check the status f services, prcesses, and free space n endpints. He has decided that he will deply mnitr sets fr bth Wrkstatins and Servers within these envirnments. On Wrkstatins, he must cnfigure a mnitr set t mnitr available disk space (<10% free), the Windws Firewall service, and the SNMP prcess. On Servers, he must cnfigure a mnitr set t mnitr disk space (<20% free), the windws event lg service, and the SNMP prcess. Exercise 55 Run Update List By Scan n DC and WS2 Exercise 56 Create Server Mnitr Set Cunter Threshlds Object: Lgical Disk Cunter: % Free Space Instance: C: Cllectin Threshld: The % Free Space data must be cllected fr Servers when mre than 10% f the ttal disk space has been us ed. (When there is 90% free space available start cllecting data) Alarm Threshld: An Alarm must trigger when the alarm threshld reaches belw 10% free space n the ttal drive f the machine. (Alarm when there is less than 10% free space available n the machine.) Services Check Cnfigure a Service Check fr the Windws Firewall Service, which will try n attempts Prcess Status with a 0 minute restart interval. The re-arm fr this service check must be six hurs. Create a Prcess Status check t alarm when the snmp.exe prcess is dwn, the re-arm perid must be specified t create additinal alarms every 1 hurs. Cpyright f Kaseya

33 Exercise 57 Create Wrkstatin Mnitr Set Cunter Threshlds: Object: Lgical Disk Cunter: % Free Space Instance: C: Cllectin Threshld: The % Free Space data must be cllected fr Servers when mre than 20% f disk space has been used. (When there is 80% free space available start cllecting data) Alarm Threshld: An Alarm must trigger when the alarm threshld reaches belw 20% free space n the machine. (Alarm when there is less than 20% free space available n the machine.) Services Check Cnfigure a Service Check fr the Event Lg Service, which will try three restart attempts with a 2 minute restart interval. The re-arm fr this service check must be six hurs. Prcess Status Create a Prcess Status check t alarm when the snmp.exe prcess is dwn, the re-arm perid must be specified t create additinal alarms every 6 hurs. 32 Exercise 58 Assign the Server Mnitr Set t DC Exercise 59 Assign the Wrkstatin Mnitr Set t all wrkstatins Exercise 60 Lab 6: Individualize the Mnitr Set assigned t the laptp-ce machine. Change a setting such as the defined threshld fr a cunter r the number f restart attempts fr a service. Cmmit the change and verify the mnitr set appears as individualized fr the machine. Cpyright f Kaseya

34 M3: Mnitr: Mnitr Fixed Alerts Nte: Many f the Mnitr-related labs will instruct yu t use an address as part f the alert ntificatins. Fr the purpses f these labs, please use yur business address with.fake at the end. This will prevent s frm cntinually flding an inbx. Fr example, if Alex s address is alex@ittc.cm, he wuld use the address alex@ittc.cm.fake. 33 Alex needs t track sme basic changes n all f his managed machines s he can be ntified when cnfiguratins change, when agents fail t check in fr extended perids f time, and whenever new agents are installed. He needs t make sure the ruter at FrKidz is active, but he des nt have direct access t manage that netwrk resurce. He'll use Ping Check t ensure the IP address stays available and ntify if it des nt. Exercise 61 Cnfigure an Agent Offline alert Servers: Alert when ffline fr 1 minute with a 1 day re-arm perid Wrkstatins: Alert when ffline fr 30 days with a 7-day re-arm perid Set all alerts t create an alarm and a ticket and send an Exercise 62 Cnfigure an alert t ntify when an applicatin is installed r remved n any machine. Set the alert t create an alarm and a ticket and send an . Exercise 63 Cnfigure an alert t ntify when a New Agent is installed in the FrKidz rganizatin. Cnfigure the alert t create a ticket. Exercise 64 Create a System Alert t run a Ping Check n the ruter at FrKidz site Use a name f yur chsing Only alarm when service des nt respnd fr 1 day Ignre additinal alarms fr 1 day Ping Cnfigure the alert t create an alarm and a ticket and send an Cpyright f Kaseya

35 M4: Mnitr: Mnitr Event Lgs Nte: Many f the Mnitr-related labs will instruct yu t use an address as part f the alert ntificatins. Fr the purpses f these labs, please use yur business address with.fake at the end. This will prevent s frm cntinually flding an inbx. Fr example, if Alex s address is alex@ittc.cm, he wuld use the address alex@ittc.cm.fake. 34 Alex has been tasked t track any errr that is generated n endpints. He des nt want t scan thrugh the lgs f each machine manually t find these errrs. In rder t accurately and efficiently identify these errrs, he will need t create an Event Lg Alert t generate alarms when the errrs ccur. He will als need t cnfigure a specific Event Lg Alert t identify a Kaseya related errr. Exercise 65 Create Custm Event Lg Alert Set with the fllwing criteria t detect this event: Service Filter: *Kaseya* Categries: All Event ID: 55 Exercise 66 Descriptin filter:*kaseya Learning Errr* Assign Custm Event Alert Set t all machines with the fllwing cnfiguratin Enable 'Errr' Lg Event Lg Level Event Lg Type: Applicatin Lg Alert when the event ccurs nce Ignre additinal alarms fr 10 days Actins: Create an alarm, Create a ticket, Send an Cpyright f Kaseya

36 M5: Mnitr: Alarms Nte: Many f the Mnitr-related labs will instruct yu t use an address as part f the alert ntificatins. Fr the purpses f these labs, please use yur business address with.fake at the end. This will prevent s frm cntinually flding an inbx. Fr example, if Alex s add ress is alex@ittc.cm, he wuld use the address alex@ittc.cm.fake. 35 Alex has cnfigured and applied mnitr sets t perfrm critical server and wrkstatin checks. He nw needs t review the alarms created based n these checks. He will als require temprary suspensin f these checks t eliminate false psitives during upgrades and maintenance perids. BONUS ACTIVITY 8 Use the Alarm filter t view nly sme f the Alarms. If yu d nt have any alarms generated in yur lab envirnment, try this task later (after alarms have had an pprtunity t generate) r explre the Alarm filter in yur prductin envirnment. Exercise 67 Suspend Alarms n all machines in the FrKidz rganizatin every weekend (HINT: Yu can either create tw separate alarms recurring nce every seven days t capture bth Saturday and Sunday, r create a single recurring alarm lasting 2 full days.) Exercise 68 Suspend Alarms n DC fr 30 minutes due t emergency maintenance. Rebt DC and verify n alarms were generated during this perid. Cpyright f Kaseya

37 M6: Mnitr: Netwrk Mnitr Ntes: 36 Netwrk Mnitr labs are prvided fr yur expsure. Yu will nt be able t use yur Kaseya University VSA accunt t perfrm these tasks, but yu are welcme t explre these exercises and practice them in an envirnment f yur chsing. Many f the Mnitr-related labs will instruct yu t use an address as part f the alert ntificatins. Fr the purpses f these labs, please use yur business address with.fake at the end. This will prevent s frm cntinually flding an inbx. Fr example, if Alex s address is alex@ittc.cm, he wuld use the address alex@ittc.cm.fake. Alex has been wrking with Jse, wh is ff-site at the FrKidz satellite ffice. Jse has infrmed Alex that the FrKidz wuld like all f the gateway system mnitred fr uptime. Alex must cnfigure several mnitrs n devices in all netwrks t cmplete the mnitring setup within Kaseya. This includes CPU, Uptime, and Perfrmance Mnitring. NOTE: Yu must have cmpleted a netwrk discvery in the Discvery mdule t cmplete these labs Exercise 69 Cnfigure Mnitr fr nn-managed assets Install a gateway n DC (ITTC Netwrk Nde) and Receptin (FrKidz Netwrk Nde) Setup Credentials at the ITTC Netwrk Nde level using yur Windws dmain credentials and setup credentials fr the FrKidz Netwrk using nn-dmain credentials. On DC (r Gateway Machine), uncheck the 'Use WMI' ptin. Add the CPU Utilizatin mni tr t the DC machine Add the SNMP mnitr fr the OID System Uptime t all gateways Verify and test that mnitrs are assigned t apprpriate machines Exercise 70 Cnfigure an t ntify yu any time any mnitr triggers n any machine within the KNM Parent Level Grup BONUS ACTIVITY 9 Cnfigure a List Reset and Create a Ticket any time any mnitr within the ITTC Grup triggers. Exercise 71 Schedule Device Maintenance fr DC t prevent actins frm triggering during maintenance perids. Cnfigure the schedule fr 30 minutes each Saturday beginning at 10pm Exercise 72 Create a User Ntificatin Schedule which: Cpyright f Kaseya

38 Ntifies yu Mnday-Friday 8am-5pm Ntifies Jse Mnday-Friday 5pm-8am 37 Cpyright f Kaseya

39 PM1: Plicy Management: Plicy Build Alex has been using Kaseya fr a while, and everything is wrking pretty well. Hwever, he wuld like t minimize the amunt f manual wrk he has t d when new machines are added t an envirnment. FrKidz is getting ready t replace all f their cmputers and ITTC is grwing an internal department. There will be a lt f wrk fr Alex if he has t manually cnfigure the agent settings n each f the new machines. He wuld like t create sme Plicies and let Plicy Management handle the assignment f agent settings and cnfiguratins. Later, Alex will assciate these plicies with varius machine grups and machines, but first, he needs t build them. 38 Exercise 73 Cnfigure the Deplyment Interval t 5 minutes Cnfigure Cmpliance Check t run daily between 6pm and 6am Exercise 74 Create a flder called Base Agent Settings Create new plicy: Base Wrkstatin Assign the View All Wrkstatins Enable Plicy Objects: Credential (use managed credential), lg retentin (15 days), agent fixed alerts (agent ffline fr 30 days, applicatin remved/installed, remte cntrl disabled), patch plicies (Base Wrkstatin), Patch Scan (weekly n Wednesdays), Aut Update (Weekly n Thursdays) Save the plicy and Apply the plicy nw Create new plicy called Base Server Assign the View: All Servers Enable Plicy Objects: Credential (use managed credential), lg retentin (45 days), agent fixed alerts (agent ffline fr 1 minute, remte cntrl disabled, drive space <10%), patch plicies (Base Server) Save and Apply the plicy. Allw the scheduler t apply the settings. Cpyright f Kaseya

40 T5: Tasks: Imprt/Exprt Alex fund sme useful plicies and views n He's dwnladed the.xml file, but he wuld like t imprt these t his server s he can use them in his wn envirnment. 39 Exercise 75 Dwnlad Learning Cntent Pack frm CntentPack.zip Imprt the cntent pack using the Imprt Center Verify cntents were imprted (review list f views, agent prcedures, mnitr sets, plicies, etc.) Exercise 76 Visit Find any prcure in the cmmunity and imprt t yur lab VSA using the Imprt Center Verify prcedure imprted BONUS ACTIVITY 10 Exprt a prcedure frm lab server and imprt t preview r prductin server Cpyright f Kaseya

41 PM2: Plicy Management: Plicy Assign Nw that Alex has built and imprted several plicies, he is ready t assign the plicies t machines. This will allw Kaseya t be respnsible fr assigning the apprpriate agent settings based n the agent's membership in a view, rganizatin, machine grup, etc. The DC has been behaving ddly and Alex wuld like t capture the lgs fr a lnger perid f time. The issue is spradic. He wuld like the DC t remain "in cmpliance" but wuld like t have the lgs retained fr 90 days. A plicy assigned directly t the DC shuld accmplish this exceptin. 40 Exercise 77 Assign Base Wrkstatin, Base Server plicies at Glbal level Assign the imprted Lgs and Wrking Directry Plicy, inside the Kaseya University\ITTC flder, t the ITTC rganizatin Assign imprted flder ITTC Flr1 Custm t ittc.firstflr Machine Grup level Assign imprted flder ITTC Flr2 Custm t ittc.secndflr Machine Grup level Exercise 78 Rerder plicies within the ITTC rganizatin-level flder; check settings n machines Rerder plicies within the ITTC grup-level flders; check settings n machines HINT: Use Plicy > Machines t determine whether plicies are re-rdered fr individual machines. Optinally verify settings in the mdules. If settings have nt taken effect, wait a few minutes and recheck r reprcess the plicies nw. Exercise 79 Using the Agent mdule, set All Lg Settings t 90 days fr DC t create an verride Check the plicy cmpliance status fr DC (DC shuld be flagged as Manual Override; if it is nt, wait a few minutes and refresh the page r reprcess plicies and refresh the page) Use the Cmpliance Status icn t view the verride Clear Override and Reprcess Plicies Nte the DC is back in cmpliance (reprcess plicies and/r refresh the page, if necessary) Exercise 80 Assign the Lg Histry 90 Days frm the imprted cntent t the DC Using the Agent mdule, check lg retentin settings n DC Cpyright f Kaseya

42 SM1: Standard Slutins Package (IT Services Delivery Kit) Alex has a pretty gd thing ging. He's managed t get the ITTC rganizatin and the FrKidz client cnfigured and the machines are being well managed. He's heard that a new client will be jining the ITTC family sn, a nd ITTC has a very limited time t get the machines under basic management. Alex has recently learned abut the Standard Slutin Cntent Pack and wuld like t test the use f this standard set f recmmended cnfiguratin slutins n the ITTC rganizati n befre deplying t the new client. 41 Exercise 81 Cnfigure the System Management utility fr the ITTC rganizatin Enable all ptins in the wizard, including severity-level s Verify the dwnlad cmpletes, which may take several minutes, in Inf Center > Inbx Exercise 82 Verify cntents f pack are available Agent Prcedures > Create/Schedule > System cabinet Mnitr > Mnitr Sets > System cabinet Views Plicy Management > Plicies > System cabinet Patch > Patch Plicy > Create Exercise 83 Verify assignment f plicies Plicy Management > Orgs/Machine Grups Verify plicies have been assigned t ITTC Explre plicy matrix, plicy status icn pp-up Verify settings change n individual machines Exercise 84 Cpy at least ne f the Cre plicies t Private cabinet Edit at least ne f the cpied plicies Assign the custmized plicy t at least ne machine and ensure this plicy has sufficient precedence t apply the custmized settings Cpyright f Kaseya

43 IC1: Inf Center Build Alex's manager has asked fr sme reprts n the cnfiguratin f machines. ITTC will need t prvide clients with these reprts. Alex will need t custmize the data included in the reprts s Jse can run the reprts n a regular basis. 42 Exercise 85 Build Reprt Parts Build a Table reprt part t display the Agent Name and WarrantyExpiratin (custm field) Select the Audit > Machine Summary reprt part type and create a new Table Define a Title and Descriptin: Warranty Expiratin by Agent Name Clumns: Machine Id, CustmField00* Nte: Custm fields in reprt parts will nt display the actual custm field name. Select the Custm Field If yu have defined multiple custm fields, yu will need t determine which cntains the required data. If yu are unsure f which Custm Field is crrect, create a table reprt part with all custm fields t identify the data cntained in each Custm Field. Order By: Custm Field (select the apprpriate custm field) ascending D nt use filters Submit and preview the reprt part Build a Table reprt part t display all machines where the registry has been updated t add the remte tag Select the Lgs > Agent Prcedure Lgs reprt part type and create a new Table Define a Title and Descriptin: Registry Key Remte Status Clumns: Machine Id, Agent Prcedure Name, Prcedure Step Descriptin, Lg Time Add remte t Registry Order by Lg Time descending Advanced Filter by Prcedure Step Descriptin equal t REMOTE ADDED Submit and preview the reprt Build a Pie Chart reprt part t display the number f machines running each perating system Select the Audit > Machine Summary reprt part type and create a new Pie Chart Define a Title and Descriptin: Cunt f Machines by Operating System Frmat: Select yur preferred ptins Data Prperties: Categry: Operating System Value: Machine ID; Alias: # f each OS; Aggregate: Cunt D nt use filters Submit and preview the reprt part Build a Bar Chart reprt part t display the tp three machines missing with the least free space n C:\ Select the Audit > Disk Vlumes reprt part and create a new Bar Chart Define a Title and Descriptin: Tp Three Machines with Least Free Space n C:\ Frmat: Select yur preferred ptins Data Prperties Categry: Machine id Cpyright f Kaseya