The Patch Deployment tab of the Preferences window


The parameters of these tabs define the basic patch group settings and behavior, that is, the default values that are used for creating patch groups on this console.

The values entered here will be prepopulated in the respective boxes whenever a new patch group is created, either manually or via the wizard.

Preinstallation

This tab defines the behavior of the patching system before the actual patch installation on the target device. The following parameters are available for this:

Parameter

Description

Information Window

This option defines if a pop-up menu appears of the target device, informing the remote user that patches will now be installed and applied on his computer.

Message to Display

This is a free text box in which you can enter the message to be displayed on the screen of the target device. If no text is entered here a default message (The system is about to apply the security update.) will be displayed. This message is localized in all console languages. If you enter your own text here it will not be localized and will appear as entered on all operating system languages.

Allow User to Extend Countdown Timer

Check this box if the user can extend the countdown timer before the patch installation will automatically start.

Initial Countdown (sec)

This box defines in seconds the time before the information window that displays is auto-validated to allow the patch installation to proceed. To deactivate the option 0 must be set.

Timer Incrementation Value (min)

This value in minutes defines the interval by which the countdown timer is incremented each time the user decides to extend it, if he was allowed to do so by the preceding option.

Timer Maximum Extension Value (min)

This value defines the maximum interval the countdown timer can be extended. If for example the initial value is 2 minutes, the user can each time extend it by 2 minutes as well, and this value is set to 5 minutes, the user can extend the countdown once, 2 min initial 2*2 min extension makes 6 minutes which is higher than the defined 5 minutes.

Installation

The Installation tab allows you to configure the parameters for the patch installation procedure of the patch group.

Parameter

Description

Quiet Mode

This option displays if the installation of the patch group's patches is to be executed without the remote user being aware of it. Otherwise the default dialog boxes concerned with patch installation appears. By default this value is set to Yes .

Stop On Error

With this option you can define if the installation of patches is to continue even if one of the patches of the group has failed to install. By default this option is set to true , continue the installation.

Lock mouse and keyboard on client device

Defines if the mouse and keyboard on the target device are blocked during the patch installation, that is, the user logged on to the local device may not execute any other operations during the installation.

Force patch inventory scan after install

ForceScan

Locking Message

Enter into this box the message to be displayed on the screen of the target device to inform the user what is happening on his device. If no text is entered here a default message displays.

Force Installation

This option allows you to force the installation of a patch group again even if it was already installed. This can be useful, if for example a problem occurred in the network or a device crashed during the installation.

Patch Group Options

In this section you need to define the type of installation for the patch. If the patch to install is not applicable to any of the Microsoft Office products select No Specific Office Install Options from the drop-down list. Otherwise, you have the following options for Microsoft Office patches:

Office Install Options

No Specific Office Install Options

This option indicates that the patch to be installed does not concern any Microsoft Office product.

Administrative Installation

This option should be used if Microsoft Office was installed via an administrative installation. For this option to work the path to the location of the Microsoft Office DVD or share must be entered into the Path box together with a valid user name and password.

Full File Installation

This installation option is for a complete install of Microsoft Office without any DVD being required.

Mixed Installation

For the mixed installation the path to the location of the Microsoft Office DVD or share might be necessary. Enter it into the Path box together with a valid user name and password.

Path

Enter into this box the location of the Microsoft Office installation source. This can be a local path, for example, C:/patchex/MS/office/office2010 or it can be a network share, in the form of [IpAddress]\\[SHARE]\MSOFFICE2010 , for example, FD43-0-0-0-8C84-4BAD-D413-DD68.ipv6-literal.net\CDSERVER\MSOFFICE2010 . You can also enter the path in the following format: \\\[IpAddress]\\[SHARE]\MSOFFICE2010 , for example, \\192.155.1.24\CDSERVER\MSOFFICE2010 .

User

If the source location is on a device/share that requires identification you must enter here a user name with which it can be accessed. Otherwise you can leave the text box empty.

Password

If identification is required enter here the password for the specified login.

Confirm Password

Re-enter the password for confirmation.

Patch Job Options

In this section you can define additional options specific to patch jobs.

Retry Attempts

The number of installation retries before the patch is shown as failed in the Console. Updating the ConfigFiles reinitializes this parameter to 0 and the installation process starts again.

Reboot

The Reboot tab provides the parameter settings for a managed reboot of the target devices after the patch group installation. When a managed reboot is selected a pop-up menu displays on the target screen informing the user of the impending reboot and providing him with the options defined in this tab.

Parameter

Description

Reboot Type

This list box appears if a reboot is previewed after the installation of the last patch package of the patch group. Possible values are No reboot and Reboot after deployment . Be aware that if you do not reboot after installation when a reboot is expected by one of the patches installed, this patch will still be seen as missing even if you force a scan after install by the following option. If no user is logged on to the target device the reboot will be automatically launched. If there is an open session that is locked the reboot mechanism will wait until the session is unlocked before displaying the respective window and launching the reboot.

Shutdown After Reboot

Check this box, if the device is to be shut down after the required reboot after the patch installation is completed.

Display Reboot Dialog

Check this box if a pop-up window is to be displayed on the target screen informing the local user of the imminent reboot of his device.

 

Customize Reboot Message

This text box contains the title of the window which will be displayed on the screen of the remote device before the device is shut down, for example, Maintenance Shutdown .

Shutdown Initiated by User

This parameter specifies which user initiated the device reboot; for example Admin or Patch Administrator . This information is displayed in the defined reboot pop-up menu.

Enable End-User Interaction

The following boxes are only applicable for this option:

 

Allow User to Cancel Reboot

Specifies if the user can definitely cancel the reboot of the concerned device.

Reboot Directly after Disconnecting

This option defines if the user can decide to immediately reboot the device, without awaiting the end of the specified countdown.

Force reboot if Session is Locked

This option defines if the reboot is to be executed even if the session is locked. By default this option is deactivated, that is, the reboot will wait until the session becomes unlocked.

Allow User to Extend Countdown Timer

This option defines if the user can extend the time before the device is rebooted.

Initial Countdown Timer (min)

The value in this text box indicates the waiting time in minutes between the pop-up menu first displays and the actual initialization of the reboot of the device. The default value is 2 minutes.

Countdown Timer Increment (min)

This value in minutes defines the interval by which the countdown timer is incremented each time the user decides to extend it, if he was allowed to do so by the preceding option. The default increment time is 2 minutes.

Countdown Timer Maximum (min)

This value defines the maximum interval the countdown timer can be extended. If for example the initial value is 2 minutes, the user can each time extend it by 2 minutes as well, and this value is set to 5 minutes, the user can extend the countdown once, 2 min initial 2*2 min extension makes 6 minutes which is higher than the defined 5 minutes. The default value of this option is 5 minutes.

Only Reboot if Requested by Patch

This option defines if the device is always rebooted after a patch installation or only if a patch specifically requests it. By default this option is activated. If this option is deactivated a reboot occurs if at least one patch successfully installed, independently of whether it requires a reboot. If this parameter is activated a reboot occurs only if at least one patch of a patch group or a patch job installed successfully and at least one of the successfully installed patches requires a reboot. If none of them do so, the device is not rebooted. No reboot occurs in either case if all patch installations of the group or job fail.

Reboot after Logoff

This option defines that the reboot of the device is effected only once the user has logged off the device.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*