Launching patch deployments and assigning monitoring policies through XML

You can modify patch deployments by editing the XML file without needing to have access rights to the console.

  1. Create an XML file with the following format:

    <?xml version="1.0" encoding="UTF-8"?>
        <!-- This section must contain the list of patch groups to assign -->
            <!-- type can be OperationalRule, Package, PatchGroup or ApplicationList -->
            <!-- the object can be referenced with its database ID with attribute "id" -->
            <!-- or through its name with attribute "name" -->
            <OBJECT type="PatchGroup" name="Microsoft Office 2007 Patches"/>
            <!-- This section contains the list of devices to which the objects are to be
                    assigned -->
            <!-- Devices can be referenced with database ID (attribute "id") -->
            <!-- or name (attribute "name") -->
            <DEVICE id="1000"/>
            <DEVICE name="Device X"/>
            <!-- This section contains the list of device groups to which the objects are to be
                    assigned -->
            <!-- Groups can be referenced with database ID (attribute "id") -->
            <!-- or name (attribute "name") -->
            <DEVICEGROUP id="1000"/> 
            <DEVICEGROUP name="My Group"/> 
            <!-- Which administrator profile will be used for the assignment -->
            <ADMINISTRATOR name="admin"/>
            <!-- When will the object assignment be sent to devices (number of hours, minutes,
                    etc and 0 for immediate) -->
            <!-- This only applies to OperationalRule, Package, PatchGroup object types -->
            <SCHEDULE hour="16" minute="0" day="9" month="10" year="2011"/>

    You can mix object types in this file, that is, you can list patch groups with packages in this file, if they are all to be assigned to the same target devices and/or groups.

    You can list device and/or device groups in this file, depending on the targets of the specified objects. If, for example, the objects are only to be assigned to device groups, the <DEVICES> section is not needed.

  2. Add the following step to a new or existing operational rule: Master Steps -> Assignment Management via XML File.
  3. In the Properties dialog enter the complete path to the storage location of the XML file as well the administrator name in the respective text boxes. This administrator is a default administrator that will only be used if no administrator is defined in the XML file.
  4. Enter the directories into which the xml files are to be copied in case of success or error.

    If an error occurred during the assignment process you can find explanations in the OperationalRules.log file.

  5. If you want the assignments directly activated, that is, to become operational right away, check the Activate Created Assignment box. If this box is left unchecked the assignments will remain paused.
  6. If the newly defined assignment is to overrule any possibly already existing assignment, that is, if the object is to be reassigned with the new information, check the Reassign if Assignment Already Exists box. If you do not check this box and such an object assignment already exists, the original assignment will still be valid.

You created an object assignment which launches a patch deployment through an XML file. If you want to change the schedule or modify the included patch groups/application policies/administrator, you can do so directly in the XML file without having to launch the console.

To unassign patch deployments

This step also allows you to unassign patch deployment assignments. To execute such an operation the same information is required as for the assignment process. The only difference is in the contents of the XML file: the opening and closing tag of the file use the expression <OBJECTUNASSIGN> instead of <OBJECTASSOCIATIONS>.


<?xml version="1.0" encoding="UTF-8"?> 
        <OBJECT type="PatchGroup" name="PG Test Rule"/> 
        <DEVICEGROUP id="1000"/> 
        <DEVICEGROUP name="My Group"/> 
Was this page helpful? Yes No Submitting... Thank you