I will start by saying that I know nothing about LANDesk and am asking for help and direction regarding capabilities from this community of experts - I sincerely hope one or more of you will be willing to assist!
I am Project Admin for and organization which is doing an installation of new encryption and virus protection software (SEE/SEP) to a very large number of devices. I have posed this question to a number of IT people within our end of the project but can't seem to get a satisfactory answer:
1. Push of the software itself does not seem to create challenges however SEE software requires a reboot and a lengthy time to do the full disk encryption required by the organization.
2. Disk encryption is happening in the background while the user is going about their duties however test pushes indicate significant slowdown of processes which will impact the performance of both the device and the user.
3. The organization is 24/7 (so no after hours solutions) and medical related so many devices are mission critical and performance slowdowns/interruptions could potentially be the cause of dire consequences to patient care - ie. Dialysis, OR devices, ICU etc. All of these devices have been excluded from the software push until we can formulate a plan to have the software safely installed without impacting the patient care.
4. It is not possible to predict when a machine will be idle long enough for the encryption process to be completed and for the device performance to return to normal.
5. Sheer numbers of devices do not allow for manual installation of the software.
Is it possible to push software in a manner similar to what I see when I receive Windows updates?
- Have a popup appear on the device asking the user to reboot the computer for the purposes of the software installation and inform them of the approximate time involved for the encryption process so that they know in advance when the device will return to normal performance parameters.
- Not allow the device to be utilized until the encryption process is completed.
- Let the user and LANDesk know when the encryption process is completed.
If we could do something like this then we could target maybe 10 out of 100 devices at a time within that department, give the users and IT managers a heads up as to specifically which machines will receive the push for that particular iteration so that they can plan to exclude these devices from being used that shift.
I know this organization has highly capable individuals within the LANDesk department however, as with most large bureaucracies the only way I will be able to put forth a possible solution to this huge challenge is to have some solid information/suggestions/procedures to present to the powers that be.
My own personal experience with DB design tells me that there should be a scripting procedure that will achieve what we want to do but I would like to be able to communicate the required steps in a manner and terminology the LANDesk gang will be able to immediately formulate a plan in their minds.
Many, many thanks in advance for your advice, direction and suggestions!