I think the new 9.3 version will help you accomplish this easier than 9.2. The Ivanti Patch for Servers 9.3 early release (Protect) was launched today after a successful beta. I'll refer to it as PWS
The basic flow of an method would be: (this would work best when not using an agent)
- Change PWS to a disconnected mode where new definitions are not automatically download. Tools > Un-check Auto-update definitions. This means, you would need to perform a Help > Refresh Files when you want to see new patches.
- Schedule a scan with auto deployment against your test machines for Monday night.
- Schedule a scan with auto deployment against your production machines for Friday night. (make sure to use the same Scan and Deployment Template used for the Monday job)
- Schedule automatic download in Tools > Options > Downloads > Scheduled automatic downloads. Set it to run Saturday or Sunday. This download new content day and make it available for the Monday scan and deployment against your test machines.
The basic flow of a Patch Group method would be: (This CAN work with an agent)
- Create a Patch Group that contains the patches you OK to deploy.
- You would use 2 Agent policies, one for Monday and one for Friday. The tasks would use the same Scan Template with Patch Group selected as the baseline. This way it doesn't matter when the content updates since the scan and deployment would be based on the Patch Group you create and updated.
- You would need to update the Patch Group with newer patches when you are ready to include them. You would also need to make sure the agents gets the updates before the Monday jobs run.
There could be more options with the new API commandlets in 9.3, but that would require scripting on your side. ☺
Let me know if you have any questions.
Ivanti Patch for Servers 9.3 early release can be download from here: http://content.ivanti.com/products/Protect/v9/93/4379/IvantiPatchForServers_9.3.4397.exe
We consider this a full release, just not communicated yet. This will happen some time this week.
It can be installed or the top of 9.1 and 9.2.
Thank you for the Reply. We are using Protect, but only for Workstations. This sounds like it should be pretty much the same process though? I assume the applications (Protect, and Patch for Servers) are pretty much the same?
Ivanti Patch for Servers is the latest version of Protect. Don't let the 'for Servers' scare you, we fully support Servers and Workstations.
Same look and feel, new features too.