• Description
• Configuring the Patch Download Location
• Creating the UNC Share
• How to properly set up a web and UNC share for the new patch location in Server 2008/2012
  • Creating the Web Share
• How to properly set up a web and UNC share for the new patch location in Server 2003
  • Creating the UNC Share
  • Creating the Web Share

Description

By default, patches are downloaded and stored in the core servers LDLogon\Patch directory. It is often desirable to store the patches on a separate server, such as a Preferred Package Server.

Configuring the Patch Download Location

1. Open the Ivanti EPM Console and go to Tools | Security | Patch and Compliance and click on the first iconto open the Download Updates window.
   
2. Click the Patch Location tab.
   
3. Enter a UNC path where the patches are to be stored.
   Note: The default location is the Core Server's \LDLogon\Patch directory.
   
4. If the UNC path entered above is to a location other than the core server, enter a valid username and password to authenticate to that location.
   
5. Enter a Web URL where devices can access the downloaded patches for deployment. This Web URL should match the UNC path above.
   
6. Click Test Settings to check to see if a connection can be made to the Web address specified above.
   
   Note: If you want to restore the UNC path and Web URL to their default locations, click Restore to Default.
   

Creating the UNC Share

1. Connect directory or through remote desktop to the share server where the patches will be stored.
2. Create a new directory.
3. Right-click the newly created directory and click Properties
4. Click the Sharing Tab.
5. Verify the Share name is correct.
6. Click Share...
7. The account you specified in step 3 of "Changing Patch Location" needs Full control permissions to this UNC share.  Note: You will also need to set up the permissions on the new share to have the same security settings as the original patch location.
8. Click Share
9. Click the Security tab.
10. You will need to set up the Group or User Names section to match the original patch location.
11. If you click Test settings when you are setting the patch location in the Security and Patch Manager Tool and you get the error "Failed to write test file to UNC path \\ServerName\sharename\TestWritePatchData.txt" it means you have not given the user in the credentials field write rights to the share.

Note: In IIS Manager be sure that the folder your are using is not an application.  To check this simply right click on the folder and if near the field Application Name (in the Virtual Directory tab of the properties) the button Remove exists, click on it.  Then the Application Name field will become gray.

How to properly set up a web and UNC share for the new patch location in Server 2008/2012

Creating the Web Share

1. Go to Start > Administrative Tools > Internet Information Services (IIS) Manager:
2. Expand Server Name > Sites                                                             
3. Right click on Default Web Site and then click on 'Add Virtual Directory'
4. Alias will be the name of the folder in IIS. It should be the same as the actual folder name and should not contain any spaces
5. Browse to your physical path that you created and then hit OK.
6. Ensure that Directory Browsing is enabled by double-clicking the Directory Browsing icon in the features view.
7. Test the share by going tohttp://CORESERVER/PathToHTTPShare

How to properly set up a web and UNC share for the new patch location in Server 2003

Creating the UNC Share

1. Connect directory or through remote desktop to the share server where the patches will be stored.
2. Create a new directory.
3. Right-click the newly created directory and choose Sharing and Security.
4. Click the Sharing Tab.
5. Click Share this folder.
6. Verify the Share name is correct.
7. Click Permissions.
8. An account needs Full control permissions to this UNC share. These are the credentials you will use in step 3 of "Changing Patch Location" (In download updates tool).  Note: You will also need to set up the permissions on the new share to have the same security settings as the original patch location.
9. Click OK.
10. If you click Test settings when you are setting the patch location in the Security and Patch Manager Tool and you get the error "Failed to write test file to UNC path \\ServerName\sharename\TestWritePatchData.txt" it means you have not given the user in the credentials field write rights to the share.

Creating the Web Share

1. Right-click on the folder you want to share and select Properties.
2. Click on the Web Sharing tab.
3. Click Share this folder.
4. Check Read and Directory browsing.
5. Click OK once.
6. Click on the Security tab.
7. Add the IUSR_computername account and give it Read & Execute permissions.
8. Click OK.
9. Open IIS Manager, navigate to the default web site and expand its contents.
10. Right-click on the newly created virtual directory and select properties
11. Click on the Directory Security tab, then Edit... under Authentication and access control.

Check Enable anonymous access and apply the changes.