How to centrally deploy systems on a PC?

V

Vigilo Confido2018-10-11 10:53:01

System administration

Vigilo Confido, 2018-10-11 10:53:01

Cheerful day!
The network has a farm with virtual machines, including one that plays the role of various services for the local office network, and a goal in the form of 20 absolutely identical laptops on Windows 10, which must somehow be centrally kept up to date. But a certain horror is caused by the idea that when you have to update something, you will have to redeploy the procedure for deploying the image on each in manual mode (albeit from a network samba ball, which is supported by the server). How to achieve the same result without hemorrhoids? There is a lack of someone's experience and a story about how this should be done in reality.
Laptops are used for session work with cloud CRM and at the moment they are deployed from the same Windows image with a connected network ball, a set of necessary software (browser with the necessary tabs, office software, additional software). The image was pre-configured on the reference machine, after which it was copied to the machines from tib with minimal edits: changing the name of the PC on the network, activating Reboot Restore RX to resist the crooked hands of the worker (restoring the basic state after reboot).

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

D

Dmitry Shitskov, 2018-10-11
@Vigilo

I think a solution such as Clonezilla Server Edition
will suit you. This method will allow you to upload the updated image within the local network.
This article describes the experience of creating backups https://habr.com/post/128558/
However, it is not difficult to adapt the server configuration for deploying backups.
If you do not want to re-upload images every time, then you can use any orchestration system that is compatible with Windows (for example, Ansible) and reconfigure and update the software with scripts and installation packages.

S

Sergey, 2018-10-11
@feanor7

It depends on what you want to update, if systems, then why not WSUS&? Whether you have not mentioned there is a domain. When entering AD, it was enough for you to launch msi into the installation, and so on. Policies providing bookmarks, etc...