Patch Management Integration with Service Manager & ConfigMgr

Back in November I presented a session on automation at MMS 2015 with Natascia Heil. The session was “Real world Automation with Service Manager and Azure Automation”.

As a part of this session Natascia Heil demo’d how to patch servers in SCCM via Service Manager! Essentially she was able to create a change request in Service Manager pulling in a software update and device collection into the change request and then Orchestrator talked to SCCM to apply the patch to the server.

This is awesome because it brings ITIL into the patching process and gives you a way to document applied patches and who applied the patch.

As a follow up to our session she has published a step by step post on the solution from the demo, the files used in the demo, and a complete video demoing the solution. This is another example of great community involvement in the System Center space as well as the kind of content you will see at MMS. Thanks Natascia for sharing this with the community.

Watch the video here:

Visit her blog post here:
https://systemcentertipps.wordpress.com/2015/12/18/orchestrator-2012-start-server-patching-from-service-manager/

Download the solution files here:
https://gallery.technet.microsoft.com/Patch-servers-with-SCSM-20ff1c66?tduid=%281b41a0287eb092bdef4fbcdd40d042b0%29%28256380%29%282459594%29%28TnL5HPStwNw-P.Z5y4TYC73yMs5ovpkyAA%29%28%29

Read more

Community tools: Manage SCSM DW Jobs & SCORCH Reporting

One of the many great things about System Center is the rich eco-system within the community. Many System Center guru’s contribute their time to making tools that improve or fill gaps within System Center and they release these to the community for FREE. Two new community tools have recently been released one for Service Manager and one for Orchestrator. I wanted to post about them today and give them some shine.

SCSM DW Jobs Management Tool

The first tool is from Sam Erskine. We have seen a lot of great stuff from Sam lately such as System Center books, speaking at conferences and now another Service Manager tool. This tool gives you a GUI to execute all the Server Manager Data Warehouse actions.

ViewJobs-executed

As of right now you cannot do this directly in the Service Manager console. You can only do this via PowerShell. This tool gives you a centralized and organized way to handle the DW jobs. This is especially helpful when upgrading Service Manager or applying update rollups.

Sam has posted a blog about the tool with more information. You can find it here:

http://itprocessed.com/2014/11/838/

You can download this tool here:

https://gallery.technet.microsoft.com/SCSM-DW-Jobs-Management-f69fb703

Orchestrator SSRS Reports

This one is from Steve Jesok. He is the man when it comes to automation. Steve has taken the time to share some very useful Orchestrator reports with the community.

summary

Orchestrator does not come with any reporting out of the box. For insight into your Orchestrator environment you have to create your own reports. Here is a blurb from the description of the reports:

This collection of reports was put together to help me spot check the health of my servers and identify usage and failure patterns easier.  The reports are based on a number of common Orchestrator SQL queries you find used to gather different bits of information, this is simply an attempt to put more of those bits in one place.

You can download the reports here:
https://gallery.technet.microsoft.com/Orchestrator-SSRS-Reports-ac304a7d

Thanks Sam and Steve!

Read more

SCORCH Web Console Error Executing the current operation

When I tried to access my Orchestrator 2012 R2 web console @ https://localhost:82 I was receiving the following error: Error Executing the current operation [HttpWebRequest_WebExeption_RemoteServer] Arguments: NotFound Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. My Orchestrator web service (http://localhost:81/Orchestrator2012/Orchestrator.svc) still worked just fine. I did … Read more

Online Orchestrator Clinic

The Windows Management User Group (WMUG.co.uk) – @WMUG presents the August 2014 Clinic in which System Center Orchestrator will be discussed with Sam Erskine (@samerskine) and a team of Orchestrator Guru’s. The team includes: Steve Beaumont (MVP) – @StevybSC Dieter Gasser – @DiGaBlog Steve Buchanan (MVP) – @Buchatech Andreas Baumgarten (MVP) – @ABaumgarten Sam Erskine … Read more

Launch a Runbook from a Service Manager Console Task

I recently ran across the question of “How Can I Launch a Runbook from a Console Task?” in this forum thread:

http://social.technet.microsoft.com/Forums/systemcenter/en-US/5cd957fa-5114-41fe-a727-3294df74a7b0/how-can-i-launch-a-runbook-from-a-console-task?forum=customization .

I started thinking about how this could be useful in certain scenarios and how this would work. I decided to figure this out and blog about it so here it is. First you will need a tool that can connect to Orchestrators web service and start runbooks. There is such a tool called Orchestrator Remote Tools 2.51.

With this tool you also have the ability to discover information about runbooks on an Orchestrator server, pass parameters to the tool and see the status on if the runbook started successfully or failed. This tool has a GUI and command line interface.

This tool only discovers runbooks that have an “Initialize Data” activity. This tool launches runbooks looking to a generated .XML template with information about the runbook or it can launch runbooks directly without the XML template file (CLI mode only). for The tool consists of three components:

  1. UI Generator (ORTUIGenerator.exe): This is what discovers all your runbooks and allows you to browse them. You also use this component to generate the XML template files.
  2. Remote Runbook Launcher (ORTRunbookLauncher.exe): Is the graphical way to launch runbooks.
  3. Remote Runbook Launcher CLI (ORTRunbookLauncherCLI.exe): Is the command line way to launch runbooks.

You can learn more about the tool here:

http://blogs.technet.com/b/yasc/archive/2011/11/17/orchestrator-remote-tools-2-0-fka-the-opalis-ui-generator.aspx

It can be downloaded here:

http://orchestrator.codeplex.com/releases/view/76983

Let’s work with the tool to prepare for using it with Service Manager. Create a share on your Service Manager management server. This can be something like \\SMSERVER\ORT\.

Copy the Orchestrator Remote Tools into it. You should have the following:

clip_image001[4]

Now click on ORTUIGenerator.exe . You will see this popup message:

clip_image002[4]

Click OK. This is telling you it is the first time you have run the tool and you need to put in your Orchestrator settings.

You will see the following window and will need to complete all the fields.

NOTE: Once you put in the data base server it will automatically pull in the Orchestrator database. If your SCORCH DB is not named Orchestrator you will be able to click the drop down and select it.

Click Save when you are done. Clicking Save will create a Config.xml file in your ORT directory.

clip_image003[4]

Now the UI Generator window will pop up. This is the window you use to generate the .XML template file.

On the left hand side you are able to browse through the discovered runbooks. Keep in mind it only finds runbooks that have an “Initialize Data” activity. To configure the template for a runbook browse to it on the right hand side, select it and click the “Get details for the selected runbook” button. It will then expose the settings of the “Initialize Data” activity for the runbook on the right hand side. Here is where you can configure values for the parameters and give the runbook a description for those that will be running it. Note you are not required to configure values for the parameters. When you are ready to generate the .XML template click on the “Create Runbook Launcher configuration file” button.

clip_image004[4]

You should now have a policy_template.xml in your ORT directory. By default when you run ORTRunbookLauncher.exe or ORTRunbookLauncherCLI.exe the policy_template.xml will be used allowing you to only have settings for one runbook at a time. You can elect to use another file by using the /ORTXML switch. What this does is allows you to store multiple XML templates in the same directory by different names and launch the specific one you want.

The /ORTXML switch only works using ORTRunbookLauncherCLI.exe as it is passed as a parameter. Another way around this if you are stuck on using the GUI component is to create multiple folders and put the exe’s, config file in each folder as it will have its own policy_template.xml file. That however could become a nightmare to manage and requires more space. I recommend using the /ORTXML switch.

Let’s look at the GUI component. In the ORT folder launch ORTRunbookLauncher.exe. The Runbook Launcher window will pop up. It should look similar to the following screenshot.

Input the parameters and click “Start Runbook” button.

clip_image005[4]

It is that easy to remotely launch a runbook using this tool. Using the ORTRunbookLauncherCLI.exe is basically doing the same thing except it is running from a command line allowing you to pass in the values for the parameters right in the command. The syntax for starting a runbook using the ORTRunbookLauncherCLI.exe would look like this:

ORTRunbookLauncherCLI.exe /LastName=Sinatra /Location=”Building 45″ /Department=Sales /Title=”VP of Sales” /FirstName=Frank /SamAccount=Franks /”Reporting To”=”John Adams”

 

NOTE: If the parameters’ names or values have spaces, you need to enclose them using double quotes.

clip_image006[4]

Ok, so now let’s combine the tool with Service Manager and its CMDB. Think about all the possibilities. There are a lot of useful scenarios in which these two could be utilized. A couple of possibilities I can think of off the top of my head are: Pass a user from Service Managers CMDB to this tool as a parameter and have a runbook disable a user in AD, pick up a computer from the CMDB pass it as a parameter to a runbook and move the computer from one OU to another in AD.

I don’t see this tool as a replacement for using Runbooks with Service Requests in Service Manager. I see this as more of a way to give the administrative team a quick and easy way to launch runbooks without ever leaving the Service Manager console.

Let’s look at how we can bring the Orchestrator Remote Tools and Service Manager together, create a console task and accomplish a task.

For this blog post we are going to use a very simple disable user runbook. To do this we need to create a console task using the ORT tool. Use the following steps to do this:

Read more

Orchestrator Runbook Examples

Are you learning System Center Orchestrator 2012? If yes, you can download some example runbooks to help you practice on Orchestrator. These can be downloaded from codeplex here: http://orchestrator.codeplex.com/releases/view/86195 There are 43 total runbooks most are for each of the products in the System Center 2012 stack but there are a few for general administrative … Read more