Managing patch deployment preferences
The parameters of of the subtabs of the Patch Deployment tab define the basic patch group settings and behavior that is, the default values that are used for creating patch groups on this console. The values entered here are prepopulated in the respective boxes whenever a new patch group is created, either manually or via the wizard.
This option defines if a pop-up menu appears of the target device, informing the remote user that patches will now be installed and applied on his computer.
Message to Display
This is a free text box in which you can enter the message to be displayed on the screen of the target device. If no text is entered here a default message (The system is about to apply the security update.) will be displayed. This message is localized in all console languages. If you enter your own text here it will not be localized and will appear as entered on all operating system languages.
Allow User to Extend Countdown Timer
Check this box if the user can extend the countdown timer before the patch installation will automatically start.
Initial Countdown (sec)
This box defines in seconds the time before the information window that displays is auto-validated to allow the patch installation to proceed. To deactivate the option 0 must be set.
Timer Incrementation Value (min)
This value in minutes defines the interval by which the countdown timer is incremented each time the user decides to extend it, if he was allowed to do so by the preceding option.
Timer Maximum Extension Value (min)
This value defines the maximum interval the countdown timer can be extended. If for example the initial value is 2 minutes, the user can each time extend it by 2 minutes as well, and this value is set to 5 minutes, the user can extend the countdown once, 2 min initial 2*2 min extension makes 6 minutes which is higher than the defined 5 minutes.
This option displays if the installation of the patch group's patches is to be executed without the remote user being aware of it. Otherwise the default dialog boxes concerned with patch installation appears. By default this value is set to Yes .
Stop On Error
With this option you can define if the installation of patches is to continue even if one of the patches of the group has failed to install. By default this option is set to
Lock mouse and keyboard on client device
Defines if the mouse and keyboard on the target device are blocked during the patch installation, that is, the user logged on to the local device may not execute any other operations during the installation.
Enter into this box the message to be displayed on the screen of the target device to inform the user what is happening on his device. If no text is entered here a default message appears.
This option allows you to force the installation of a patch group again even if it was already installed. This can be useful, if for example a problem occurred in the network or a device crashed during the installation.
Patch Group Options
In this section, you need to define the type of installation for the patch. If the patch to install is not applicable to any of the Microsoft Office products, select No Specific Office Install Options from the drop-down list. Otherwise, you have the following options for Microsoft Office patches:
Enter into this box the location of the Microsoft Office installation source. This can be:
|User||If the source location is on a device/share that requires identification you must enter here a user name with which it can be accessed. Otherwise you can leave the text box empty.|
If identification is required enter here the password for the specified login.
Re-enter the password for confirmation.
Patch Job Options
In this section you can define additional options specific to patch jobs.
The number of installation retries before the patch is shown as failed in the Console. Updating the ConfigFiles reinitializes this parameter to 0 and the installation process starts again.
This list box appears if a reboot is previewed after the installation of the last patch package of the patch group. Possible values are
Shutdown After Reboot
Check this box, if the device is to be shut down after the required reboot after the patch installation is completed.
Display Reboot Dialog
Check this box if a pop-up window is to be displayed on the target screen informing the local user of the imminent reboot of his device.
Customize Reboot Message
This text box contains the title of the window which will be displayed on the screen of the remote device before the device is shut down, for example, Maintenance Shutdown .
Shutdown Initiated by User
This parameter specifies which user initiated the device reboot; for example Admin or Patch Administrator . This information is displayed in the defined reboot pop-up menu.
Enable End-User Interaction
The following boxes are only applicable for this option:
Allow User to Cancel Reboot
Specifies if the user can definitely cancel the reboot of the concerned device.
Reboot Directly after Disconnecting
This option defines if the user can decide to immediately reboot the device, without awaiting the end of the specified countdown.
Force reboot if Session is Locked
This option defines if the reboot is to be executed even if the session is locked. By default this option is deactivated, that is, the reboot will wait until the session becomes unlocked.
Allow User to Extend Countdown Timer
This option defines if the user can extend the time before the device is rebooted.
Initial Countdown Timer (min)
The value in this text box indicates the waiting time in minutes between the pop-up menu first displays and the actual initialization of the reboot of the device. The default value is 2 minutes.
Countdown Timer Increment (min)
This value in minutes defines the interval by which the countdown timer is incremented each time the user decides to extend it, if he was allowed to do so by the preceding option. The default increment time is 2 minutes.
Countdown Timer Maximum (min)
This value defines the maximum interval the countdown timer can be extended. If for example the initial value is 2 minutes, the user can each time extend it by 2 minutes as well, and this value is set to 5 minutes, the user can extend the countdown once, 2 min initial 2*2 min extension makes 6 minutes which is higher than the defined 5 minutes. The default value of this option is 5 minutes.
Only Reboot if Requested by Patch
This option defines if the device is always rebooted after a patch installation or only if a patch specifically requests it. By default this option is activated. If this option is deactivated a reboot occurs if at least one patch successfully installed, independently of whether it requires a reboot. If this parameter is activated a reboot occurs only if at least one patch of a patch group or a patch job installed successfully and at least one of the successfully installed patches requires a reboot. If none of them do so, the device is not rebooted. No reboot occurs in either case if all patch installations of the group or job fail.
Reboot after Logoff
This option defines that the reboot of the device is effected only once the user has logged off the device.
Modifying the Pop-up window logos
If thus configured, a pop-up window appears on the remote device after the patch installation has finished and before the restart is launched, providing a number of options as defined in the restart parameters. You can also modify the logos of this window to those used by your organization, or any others. To do so, proceed as follows:
- Prepare the following images, and ensure they are all there, all five of them are needed. The images must be in the .BMP format.
- TinySized.bmp - 574 x 379 pixel
- SmallSized.bmp - 574 x 455 pixel
- MediumSized.bmp - 574 x 509 pixel
- FullSized.bmp - 574 x 572 pixel
- RebootAfterLogOut.bmp - 574 x 274 pixel
- Copy these images to the following directory:
- Also, copy these images to directory
<InstallDir>/client/data/core/reson all client devices.
Once these images are saved to this location, they will be used in the safe restart pop-up windows when they are displayed on the target screens.
You have successfully modified the logos of the pop-up window that displays on the remote device after a patch installation to inform the user of the required restart.