Orchestrating Software Updates and Applications Deployment

This scenario continues the idea of the automatically generated virtual machine, adding automatic patching and basic application deployment. All the pieces will fit together in the next post.

With this example I want to point out that you don’t necessarily have to do everything in Orchestrator. Since it relies a lot on SCCM, there is a lot of flexibility in this runbook, it’s up to you how much do you automate in Orchestrator and what it remains to be done in SCCM.

20131110 - 0 0 Small Picture

This is what I have configured in SCCM (but can be automated if wanted in Orchestraor)

  • I created an empty collection named “SMEvent”
  • I created a software update group that was deployed to the “SMEvent” collection
  • I deployed the 7Zip application to the “SMEvent” collection.

It’s not my intention to dive into SCCM right now, but just in case bellow are my settings for the Software Updates and for the Application Deployment. Long story short, since this is a brand new VM, and not yet in use I used the “As soon as possible  + “Required” + “Allow restart outside business hours” combo.

SCCM – Software Update Deployment

SCCM – Application Deployment

Initializa Data

I started the runbook with an Initialize Data activity, where I defined the ComputerName parameter.

20131110 -  0 Initilize Data

Add collection Rule

Next using the “Add Collection Rule” activity, we will add to the “SMEvent” collection, the computer received as a parameter .

20131110 - 1 Add Collection Rule

Update Collection Membership

Now let’s update our collection, using the “Update Collection Membership” activity

20131110 - 2 Update Collection

Perform Client Action

We are going to use the “Perform Client Action” activity three times. First, for our newly added computer we will force the process by updating the “Machine Policy Retrieval & Evaluation Cycle”. I also modified the link to wait 5 minutes before continuing, just to be safe that the Machine Policy is executed successfully.

20131110 - 3 Refresh Machine Policy

Next, we perform the “Software Update Scans and Deployment”

20131110 - 4 Software Update

and finally the “Application Deployment Evaluation Cycle”, in my runbook named as “App Deployment”

20131110 - 5 App Deployment

If you were to go with the full Orchestrator automation you could just create the collection with Orchestrator, add the computer to it, deploy the updates and the applications, wait for the restart and delete the collection. As I said, it’s up to you how much automation you really need in this scenario.

Now we are getting closer to the final part:

20133110-8 Invoke Runbook - schema

> V.


2 thoughts on “Orchestrating Software Updates and Applications Deployment

  1. Pingback: Child runbooks in Orchestrator | System Center Automation Blog

  2. Hello,
    You have some runbook for you start the installation in the exact momento? Doesn’t wait for the SCCM delay? And how you get the status (sucess/failed) from SCCM?


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s