Managing patch deployment preferences

The parameters of of the subtabs of the Patch Deployment tab define the basic patch group settings and behavior that is, the default values that are used for creating patch groups on this console. The values entered here are prepopulated in the respective boxes whenever a new patch group is created, either manually or via the wizard.

Parameter

Description

Preinstallation

Information Window

This option defines if a pop-up menu appears of the target device, informing the remote user that patches will now be installed and applied on his computer.

Message to Display

This is a free text box in which you can enter the message to be displayed on the screen of the target device. If no text is entered here a default message (The system is about to apply the security update.) will be displayed. This message is localized in all console languages. If you enter your own text here it will not be localized and will appear as entered on all operating system languages.

Allow User to Extend Countdown Timer

Check this box if the user can extend the countdown timer before the patch installation will automatically start.

Initial Countdown (sec)

This box defines in seconds the time before the information window that displays is auto-validated to allow the patch installation to proceed. To deactivate the option 0 must be set.

Timer Incrementation Value (min)

This value in minutes defines the interval by which the countdown timer is incremented each time the user decides to extend it, if he was allowed to do so by the preceding option.

Timer Maximum Extension Value (min)

This value defines the maximum interval the countdown timer can be extended. If for example the initial value is 2 minutes, the user can each time extend it by 2 minutes as well, and this value is set to 5 minutes, the user can extend the countdown once, 2 min initial 2*2 min extension makes 6 minutes which is higher than the defined 5 minutes.

Installation

Quiet Mode

This option displays if the installation of the patch group's patches is to be executed without the remote user being aware of it. Otherwise the default dialog boxes concerned with patch installation appears. By default this value is set to Yes .

Stop On Error

With this option you can define if the installation of patches is to continue even if one of the patches of the group has failed to install. By default this option is set to true , continue the installation.

Lock mouse and keyboard on client device

Defines if the mouse and keyboard on the target device are blocked during the patch installation, that is, the user logged on to the local device may not execute any other operations during the installation.

Locking Message

Enter into this box the message to be displayed on the screen of the target device to inform the user what is happening on his device. If no text is entered here a default message appears.

Force Installation

This option allows you to force the installation of a patch group again even if it was already installed. This can be useful, if for example a problem occurred in the network or a device crashed during the installation.

Patch Group Options

In this section, you need to define the type of installation for the patch. If the patch to install is not applicable to any of the Microsoft Office products, select No Specific Office Install Options from the drop-down list. Otherwise, you have the following options for Microsoft Office patches:

  • No Specific Office Install Options: This option indicates that the patch to be installed does not concern any Microsoft Office product.
  • Administrative Installation: This option should be used if Microsoft Office was installed via an administrative installation. For this option to work, the path to the location of the Microsoft Office DVD or share must be entered into the Path box together with a valid user name and password.
  • Full File Installation: This installation option is for a complete install of Microsoft Office without any DVD being required.
  • Mixed Installation: For the mixed installation, the path to the location of the Microsoft Office DVD or share might be necessary. Enter it into the Path box together with a valid user name and password.
Path

Enter into this box the location of the Microsoft Office installation source. This can be:

  • a local path. For example, C:/patchex/MS/office/office2010
  • a network share in either of the following formats:
    • [IpAddress]\\[SHARE]\MSOFFICE2010. For example, FD43-0-0-0-8C84-4BAD-D413-DD68.ipv6-literal.net\CDSERVER\MSOFFICE2010
    • \\\[IpAddress]\\[SHARE]\MSOFFICE2010. For example, \\192.155.1.24\CDSERVER\MSOFFICE2010
UserIf the source location is on a device/share that requires identification you must enter here a user name with which it can be accessed. Otherwise you can leave the text box empty.

Password

If identification is required enter here the password for the specified login.

Confirm Password

Re-enter the password for confirmation.

Patch Job Options

In this section you can define additional options specific to patch jobs.

Retry Attempts

The number of installation retries before the patch is shown as failed in the Console. Updating the ConfigFiles reinitializes this parameter to 0 and the installation process starts again.

Reboot

Reboot Type

This list box appears if a reboot is previewed after the installation of the last patch package of the patch group. Possible values are No reboot and Reboot after deployment . Be aware that if you do not reboot after installation when a reboot is expected by one of the patches installed, this patch will still be seen as missing even if you force a scan after install by the following option. If no user is logged on to the target device the reboot will be automatically launched. If there is an open session that is locked the reboot mechanism will wait until the session is unlocked before displaying the respective window and launching the reboot.

Shutdown After Reboot

Check this box, if the device is to be shut down after the required reboot after the patch installation is completed.

Display Reboot Dialog

Check this box if a pop-up window is to be displayed on the target screen informing the local user of the imminent reboot of his device.

Customize Reboot Message

This text box contains the title of the window which will be displayed on the screen of the remote device before the device is shut down, for example, Maintenance Shutdown .

Shutdown Initiated by User

This parameter specifies which user initiated the device reboot; for example Admin or Patch Administrator . This information is displayed in the defined reboot pop-up menu.

Enable End-User Interaction

The following boxes are only applicable for this option:

Allow User to Cancel Reboot

Specifies if the user can definitely cancel the reboot of the concerned device.

Reboot Directly after Disconnecting

This option defines if the user can decide to immediately reboot the device, without awaiting the end of the specified countdown.

Force reboot if Session is Locked

This option defines if the reboot is to be executed even if the session is locked. By default this option is deactivated, that is, the reboot will wait until the session becomes unlocked.

Allow User to Extend Countdown Timer

This option defines if the user can extend the time before the device is rebooted.

Initial Countdown Timer (min)

The value in this text box indicates the waiting time in minutes between the pop-up menu first displays and the actual initialization of the reboot of the device. The default value is 2 minutes.

Countdown Timer Increment (min)

This value in minutes defines the interval by which the countdown timer is incremented each time the user decides to extend it, if he was allowed to do so by the preceding option. The default increment time is 2 minutes.

Countdown Timer Maximum (min)

This value defines the maximum interval the countdown timer can be extended. If for example the initial value is 2 minutes, the user can each time extend it by 2 minutes as well, and this value is set to 5 minutes, the user can extend the countdown once, 2 min initial 2*2 min extension makes 6 minutes which is higher than the defined 5 minutes. The default value of this option is 5 minutes.

Only Reboot if Requested by Patch

This option defines if the device is always rebooted after a patch installation or only if a patch specifically requests it. By default this option is activated. If this option is deactivated a reboot occurs if at least one patch successfully installed, independently of whether it requires a reboot. If this parameter is activated a reboot occurs only if at least one patch of a patch group or a patch job installed successfully and at least one of the successfully installed patches requires a reboot. If none of them do so, the device is not rebooted. No reboot occurs in either case if all patch installations of the group or job fail.

Reboot after Logoff

This option defines that the reboot of the device is effected only once the user has logged off the device.

Modifying the Pop-up window logos

If thus configured, a pop-up window appears on the remote device after the patch installation has finished and before the restart is launched, providing a number of options as defined in the restart parameters. You can also modify the logos of this window to those used by your organization, or any others. To do so, proceed as follows:

  1. Prepare the following images, and ensure they are all there, all five of them are needed. The images must be in the .BMP format.
    • TinySized.bmp - 574 x 379 pixel
    • SmallSized.bmp - 574 x 455 pixel
    • MediumSized.bmp - 574 x 509 pixel
    • FullSized.bmp - 574 x 572 pixel
    • RebootAfterLogOut.bmp - 574 x 274 pixel
  2. Copy these images to the following directory: <InstallDir>/master/data/core/res.
  3. Also, copy these images to directory <InstallDir>/client/data/core/res on all client devices.
    Once these images are saved to this location, they will be used in the safe restart pop-up windows when they are displayed on the target screens.

You have successfully modified the logos of the pop-up window that displays on the remote device after a patch installation to inform the user of the required restart.

Was this page helpful? Yes No Submitting... Thank you

Comments