Customized deployment 

 

Customized deployment of third-party patches

When it comes to cyberattacks, no single deployment policy will ever suit the needs of two different organizations.The trick is finding the right cybersecurity solution for your business—one that offers custom policies to keep your endpoints secure.

With features like Customized Deployment, you can tailor the deployment process to your business' specific needs using Deployment Templates or create custom pre/post scripts. For instance, you can configure the deployment of third-party patches before deploying them. Some of the Deployment Templates available under Customized Deployment include:

  1. Skipping the deployment process if the application is running.

  2. Providing an option to uninstall older patches.

  3. Restricting applications from having a start menu icon.

  4. Restricting application from having a taskbar icon.

  5. Restricting applications from having a desktop shortcut.

These options facilitate the deployment of third-party patches in Microsoft System Center Configuration Manager (SCCM) and help with adhering to your organization's policies.

Figure 1:Templates for Customized Deployment.

But the good things about Customized Deployment doesn't end there. You can also execute your own pre/post deployment scripts to personalize your deployment template. This will provide complete control over the third-party patch deployment in Microsoft SCCM

Figure 2:Custom pre/post scripts

With Customized Deployment,you can:

  • Execute custom pre/post deployment scripts
  • Avoid interfering with users during patch deployment.
  • Adhere to company policies while patching endpoints.
  • Save your disk space by uninstalling old updates.
  • Get rid of unnecessary application icons.

Scenario 1

I don't want patch management to disrupt users while they're working. What can I do?

Solution: You can choose to skip the deployment process for particular business-critical applications if they're currently in use. Just select the Skip the deployment process if the application is running template.

Scenario 2

I feel like the Deployment Templates doesn't list the action I want to perform before the deployment. What can I do?

Solution: You can create a custom script and upload it in the Customized Deployment tab to execute it before or after the deployment using pre/post scripts respectively.

Scenario 3

When I update applications like Java and Skype,earlier versions are left behind, consuming a lot of my disk space. What can I do?

Solution: You can uninstall the older patches by selecting Uninstall recent old updates before deploying the new ones in the Customized Deployment window before deployment.