EM L23 - Implementing Client and Server Management with Site Services Hands-On Lab Description If you are new to the Symantec Management Technologies or are just looking to reinforce your existing knowledge this lab is a great place to start. This lab provides a hands on look at some of the best practices and methodologies for implementing Site Servers and to provide the most efficient and functional mechanisms for managing them. This lab assumes a prerequisite knowledge of the Symantec Management Platform and Server Management Suite 7.1 At the end of this lab, you should be able to Perform a prerequisite check for candidate Site Servers Prepare a Site Server candidate for implementation Assign a Site Server to a Notification Server Implement Task, Package and Deployment Services Notes A brief presentation will introduce this lab session and discuss key concepts. The lab will be directed and provide you with step-by-step walkthroughs of key features. Feel free to follow the lab using the instructions on the following pages. You can optionally perform this lab at your own pace. Be sure to ask your instructor any questions you may have. Thank you for coming to our lab session.
Exercise 1 Site Server Prerequisites In order to successfully place Site Servers in our environment we need to ensure that prerequisites are met. The lab VM named Monitor meets all of the standard hardware and software requirements and is pre loaded with the Symantec Management Agent. One of the first steps in that process is ensuring that the host server has IIS installed properly for package distribution and other functions before assigning it as a Site Server. Package Server is fully compatible with IIS 6, which is the version that is installed on earlier operating systems such as Windows 2000, 2003, or XP. However, Package Server is not fully compatible with IIS 7, which is the version that comes with newer operating systems such as Windows 2008 and Windows 7. In order to be fully functional on these machines, Package Server requires some extra settings to be enabled inside the Web Server role. Installation and Configuration of.net 3.5 on the Host Server 1. Switch to the Monitor virtual machine 2. Start Server Manager by clicking Start Menu -> All Programs -> Administrative Tools -> Server Manager. - The Server Manager window opens. 3. On the Server Manager page, in the left pane click Features. 4. On the Features page, click Add Features. 1. In the Select Features dialog box, check the.net Framework 3.5 checkbox. A window appears with additional information. 2. Press the Add Required Role Services button 5. Click Next 6. Click Next 7. The Select Server Roles window will appear: a. Under Web Server (Installed) Role, select the box Common HTTP Features b. Under Application Development, Select the box for ASP.NET A window appears with additional information. c. Press the Add Required Role Services button d. Under Application Development, Select the box for ASP e. Under Application Development, Select the box for CGI f. Select the Health and Diagnostics box g. Under Security, Select the box for Windows Authentication h. Under Management Tools, Select the box for IIS Management Console i. Under Management Tools, Select the box for IIS 6.0 Management Compatibility with all sub-categories selected. 8. Click Next to continue. 9. Click Install - After clicking Install, the install progress dialog opens. 10. Click Close to complete the install 11. Close the Server Manager application 2 of 10
12. Open up the Internet Information Services (IIS) Manager under Start > Administrative Tools. a. Open the branch for the MONITOR and select the Application Pools Icon. b. Double Click the DefaultAppPool in the window to the right. c. Change the Managed Pipeline mode to Classic in the drop down box d. Press OK to save changes e. Close the Internet Information Services (IIS) Manager f. On the system tray click Start > Run g. Type iisreset h. Click OK 13. Once it is installed and IIS is reset, you can now perform a quick check to verify that IIS 7.0 is installed. i. Start Internet Explorer web browser and enter the address http://localhost. j. You should see the default IIS "Welcome" page. k. Exit Internet Explorer Pre-Exercise Steps: ** IMPORTANT ** The following steps are to be completed before proceeding to Exercise 2. They are not a standard process in real-world cases, only for this Lab to succeed. We need to delete the record for MONITOR in the Notification Server so it can recognize that IIS has been installed on the Site Server target machine. 1. Switch to the NS71 virtual machine 2. On the NS71 virtual machine open the Symantec Management Platform console by clicking 3. On the navigation bar choose Manage > Computers 4. On the Left Pane under Saved Searches, select Installed Agent 5. Locate the MONITOR computer in the Installed Agent Results listing 6. Right click on MONITOR and select Delete 7. Click OK to confirm the deletion 8. Switch to the MONITOR Virtual Machine. 9. From the system tray, right click on the Symantec Management Agent and select Symantec Management Agent Settings. 10. From the Symantec Management Agent window, press the Update & Send buttons 11. Wait 10 Seconds and Press them again. (There should be an entry under Computer ID: If it is blank, wait 10 seconds and press the Update and Send buttons again.) 12. Close the Symantec Management Agent window. 3 of 10
Exercise 2 Creating a Site Server Now that the prerequisites of IIS,.NET 3.5 and the Symantec Management Agent are met we can now create a Site Server that reports to our Notification Server. You can create the site servers that you require by selecting the computers that you want to use and specifying the site services that you want to install on each. You can modify existing site servers by adding or removing site services. Notification Server deploys the appropriate installation packages to the selected computers, and removes any that are no longer required. The changes are made when the Symantec Management Agents on the target computers make their next configuration request, so it may not happen immediately. Creating a New Site 1. Switch to the NS71 virtual machine 2. On the NS71 virtual machine open the Symantec Management Platform console by clicking 3. On the navigation bar choose Settings > Notification Server > Site Server Settings 4. From the left pane, select New > Site 5. From the New Site window, in the Name field, enter Headquarters 6. Click the Assign Existing Subnet Icon (Blue + Symbol) 7. From the Select Subnets window, select 192.168.128.0/24 entry 8. Press the > button to move the filter to the Selected Items list 9. Press OK 10. Press OK at the bottom of the New Site window (You may have to scroll down) Creating a New Site Server 1. On the NS71 virtual machine open the Symantec Management Platform console by clicking 2. On the navigation bar choose Settings > Notification Server > Site Server Settings 3. From the left pane, select New > Site Server 4. From the Select Computers window, select the MONITOR computer 5. Press the > button to move the filter to the Selected Items list 6. Click OK 7. From the Add/Remove Services window, mark Package Service 8. Click Next 9. From the Add/Remove Services confirmation window, Press OK 10. On the console, in the left pane, expand and select Site Management > Site Servers > MONITOR 11. From the right pane, notice the status for Package Service is yellow, indicating that the Package Service has not been installed on MONITOR. 4 of 10
Installation of the Package Services Before an assigned computer can complete the installation, a resource membership update is needed to update the filters associated with the Package Service Install Policy. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 1. On the NS71 virtual machine open the Symantec Management Platform console by clicking 2. On the navigation bar choose Settings > Notification Server > Resource Membership Update 3. From the Complete Update Schedule Bar, press the Run button. Give it at least 20 seconds to complete. (Look at the status bar at the bottom of Internet explorer) The Page should refresh when completed and indicate a Complete Update Schedule has Completed. Message at the top left of the page. To initiate the installation process on the Host Server, we will have to manually request the new policy by updating the configuration then monitoring the installation of the Package Service. 4. Switch to the MONITOR VM. 5. From the MONTIOR VM s system tray, right click on the Symantec Management Agent and select Symantec Management Agent Settings. 6. From the Symantec Management Agent window, press the Update button on the right NOTE: The Symantec Management Agent window will close as the package service is installed. 7. When the Symantec Management Agent icon appears in the system tray, double click on it. 8. From the Symantec Management Agent window, notice a new tab called Package Server 9. From the Symantec Management Agent window s top menu, click the Settings Icon 10. Look in the Agents/Plug-ins list and notice that the Package Server entry appears 11. Click the Send button. 12. Click the Update button. 13. Close the Symantec Management Agent windows A resource membership update is needed to update the Notification Server of the fact that MONITOR is now a site server and is ready to receive packages. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 14. Switch to the NS71 VM 15. On the NS71 virtual machine open the Symantec Management Platform console by clicking 16. On the navigation bar choose Settings > Notification Server > Resource Membership Update 17. From the Complete Update Schedule Bar, press the Run button. Give it at least 20 seconds to complete. 5 of 10
The Notification Server is now ready to distribute packages to the Site Server once the Site Server updates its configuration. We can initiate this process by manually updating the Site Server: 18. Switch to the MONITOR VM. 19. From the MONTIOR VM s system tray, double click on the Symantec Management Agent 20. From the Symantec Management Agent window s top menu, click the Settings Icon 21. From the Symantec Management Agent (Settings) window, press the Update button on the right. 22. Close all of the Symantec Management Agent windows. 23. Immediately Double click on the Symantec Management Agent in the system tray 24. On the Symantec Management Agent window, press the Package Server tab 25. Scroll through the package listing and observe the downloads. This may take several minutes. NOTE: If the information in the Package Server tab does not update, close the agent window and re-open it by double clicking on the Symantec Management Agent icon. 26. The Package Server Tab should eventually settle at: Available Packages: 92 Downloading/Pending Packages: 0 Retrying Packages: 0 Invalid Packages: 8 27. Once the activity stops, click Resend Package Status 28. Close all of the Symantec Management Agent windows. NOTE: The eight (8) Invalid packages are simply a result of the Deployment Solution 7.1 packages not meeting the prerequisites for proper package distribution. DS 7.1 requires that the Task Services and Deployment Solution Site Components loaded for proper operation. We will resolve these items in the following sections. 6 of 10
Installation of the Task Services The Notification Server should have received the updated status of the packages and is now ready to allow us to install the Task Service on the Site Server. 1. On the NS71 virtual machine open the Symantec Management Platform console by clicking 2. On the navigation bar choose Settings > Notification Server > Site Server Settings 3. On the console, in the left pane, expand and select Site Management > Site Servers > MONITOR 4. From the right pane, notice the status is yellow and it is indicating the package server is ready but with 8 invalid packages. 5. Within this window, select the Install/Remove Services link 6. From the Add/Remove Services window, select Task Service. 7. Click Next 8. Click OK Before the Site Server can complete the Task Services installation, a resource membership update is needed to update the filters associated with the Task Service Install Policy. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 9. On the NS71 virtual machine open the Symantec Management Platform console by clicking 10. On the navigation bar choose Settings > Notification Server > Resource Membership Update 11. From the Complete Update Schedule Bar, press the Run button. The Notification Server is now ready to install the Task Service to the Site Server once the Site Server updates its configuration. We can initiate this process by manually updating the Site Server: 12. From the MONTIOR VM s system tray, double click on the Symantec Management Agent 13. From the Symantec Management Agent window s top menu, click the Settings Icon 14. From the Symantec Management Agent (Settings) window, press the Update button on the right. 15. Close the Symantec Management Agent (Settings) window. 16. On the Symantec Management Agent window, press the Software Delivery tab 17. From the right pane, notice the Task Service Install (x64) entry. When it is completely installed, it will display a status of Disabled. This may take up to 5 minutes. NOTE: If you get a pop-up from Interactive Services simply click Ask Me Later 7 of 10
18. From the Symantec Management Agent window s top menu, click the Settings Icon 19. From the Symantec Management Agent (Settings) window, press the Update and Send buttons on the right. 20. Close all of the Symantec Management Agent windows. Before the Notification Server can update the success of the Task Services installation, a resource membership update is needed. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 21. On the NS71 virtual machine open the Symantec Management Platform console by clicking 22. On the navigation bar choose Settings > Notification Server > Resource Membership Update 23. From the Complete Update Schedule Bar, press the Run button. To verify that the Task Services have been installed on the Site Server you may check the Symantec Management Console under site management: 24. On the navigation bar choose Settings > Notification Server > Site Server Settings 25. On the console, in the left pane, expand and select Site Management > Site Servers > MONITOR 26. From the right pane, notice the status indicating that the Task Service bar is now green and ready to service Tasks on the Site Server. Installation of the Deployment Site Services To ensure that the Site Server can support Deployment Solution 7.1, we must install the DS 7.1 Site Components on this Site Server. Once installed the 8 Invalid packages should become ready for distribution and all distribution functions will be assured. 1. On the NS71 virtual machine open the Symantec Management Platform console by clicking 2. On the navigation bar choose Actions > Agents/Plug-ins > Roll Out Agents/Plug-ins 3. On the console, in the left pane, expand and select Deployment and Migration > Windows (x64) 4. Right Click on the Deployment Site Server Components (x64) - Install policy, and choose Enable Before the Notification Server can install the DS 7.1 Site Components on the Site Server a resource membership update is needed. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 5. On the NS71 virtual machine open the Symantec Management Platform console by clicking 6. On the navigation bar choose Settings > Notification Server > Resource Membership Update 7. From the Complete Update Schedule Bar, press the Run button 8 of 10
The Notification Server is now ready to install the Task Service to the Site Server once the Site Server updates its configuration. We can initiate this process by manually updating the Site Server: 8. From the MONTIOR VM s system tray, double click on the Symantec Management Agent 9. From the Symantec Management Agent window s top menu, click the Settings Icon 10. From the Symantec Management Agent (Settings) window, press the Update button on the right. 11. Close the Symantec Management Agent (Settings) window. 12. On the Symantec Management Agent window, press the Software Delivery tab 13. From the right pane, notice the Deployment Site Server Components (x64) entry. When it is completely installed, it will display a status of Disabled. This may take up to 5 minutes. NOTE: If you get a pop-up from Interactive Services simply click Ask Me Later 14. From the Symantec Management Agent window s top menu, click the Settings Icon 15. From the Symantec Management Agent (Settings) window, press the Update and Send buttons on the right. 16. Close all of the Symantec Management Agent windows. Now that the Deployment Site Server Components are on the Site Server, a resource membership update is needed. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 17. On the NS71 virtual machine open the Symantec Management Platform console by clicking 18. On the navigation bar choose Settings > Notification Server > Resource Membership Update 19. From the Complete Update Schedule Bar, press the Run button To allow the Site Server to know that there are DS 7.1 Packages available to download we must update the Site Server s policies to start the process: 20. From the MONTIOR VM s system tray, double click on the Symantec Management Agent 21. From the Symantec Management Agent window s top menu, click the Settings Icon 22. From the Symantec Management Agent (Settings) window, press the Update and Send button on the right. 23. Close the Symantec Management Agent (Settings) window. 9 of 10
24. On the Symantec Management Agent window, press the Package Delivery tab 25. You should notice the previously invalid packages downloading in the list. This should take about 4 minutes. 26. Once the packages have downloaded and there are zero (0) invalid packages, press the Resend Package Status button. 27. From the Symantec Management Agent window s top menu, click the Settings Icon 28. From the Symantec Management Agent (Settings) window, press the Update and Send buttons on the right. 29. Close all of the Symantec Management Agent windows. In order for the Site Server to be ready to support Deployment Solution 7.1 distribution functions, a resource membership update is needed. This is done automatically on a schedule, but is performed manually in this lab to immediately start the process. 30. On the NS71 virtual machine open the Symantec Management Platform console by clicking 31. On the navigation bar choose Settings > Notification Server > Resource Membership Update 32. From the Complete Update Schedule Bar, press the Run button To verify that the Deployment Solution 7.1 packages have been received on the Site Server you may check the Symantec Management Console under site management: 33. On the navigation bar choose Settings > Notification Server > Site Server Settings 34. On the console, in the left pane, expand and select Site Management > Site Servers > MONITOR 35. From the right pane, notice the status indicating that the Package Service bar is now green and ready to service Tasks on the Site Server. 10 of 10