{"id":2124,"date":"2017-02-23T11:32:19","date_gmt":"2017-02-23T11:32:19","guid":{"rendered":"http:\/\/emtunc.org\/blog\/?p=2124"},"modified":"2017-02-23T11:32:19","modified_gmt":"2017-02-23T11:32:19","slug":"ninite-appsheet-patching-just-got-easier","status":"publish","type":"post","link":"https:\/\/emtunc.org\/blog\/02\/2017\/ninite-appsheet-patching-just-got-easier\/","title":{"rendered":"Ninite Appsheet &#8211; Patching Just Got Easier"},"content":{"rendered":"<p><a href=\"https:\/\/ninite.com\/\" target=\"_blank\">Ninite<\/a> has long been my number one tool for deploying, updating and removing popular 3rd party applications&#8230; I especially enjoy the feeling of removing Flash and Java from any where I\u00a0can get my hands on \ud83d\ude42<\/p>\n<p>Up until now, Ninite has been completely agentless. You get a simple light-weight .exe which you can either run by double clicking or by using <a href=\"https:\/\/ninite.com\/help\/features\/switches.html\" target=\"_blank\">switches in the CLI<\/a> (NinitePro.exe).<br \/>\nTo automate the process of deploying or updating applications you previously had to script something together\u00a0and schedule the .exe to run at a schedule. I don&#8217;t mean to make it sound like scripting it to make it work in your environment is difficult &#8211; it really isn&#8217;t <strong>but<\/strong> sometimes it can be\u00a0tricky to implement for machines that are either not on the domain or simply not on the premises to receive those updates.<\/p>\n<p>Please note that these new features are designed for business\/enterprise environments so only available for Ninite Pro users.<\/p>\n<p><!--more--><\/p>\n<h3>Ninite Appsheet<\/h3>\n<p>Ninite Appsheet is like NinitePro.exe on steroids. Here&#8217;s why&#8230;<\/p>\n<ol>\n<li>It&#8217;s\u00a0<strong>browser based<\/strong>. Yes, you can now add, remove and patch your machines via a web browser. From anywhere.<\/li>\n<li>It presents a very intuitive interface. You can instantly see an overview of your estate in the Overview tab<\/li>\n<li>Easily patch a single application on all machines or all applications on a single machine &#8211; the flexibility to patch your machines\u00a0makes life a lot easier here<\/li>\n<li><strong>Policies!!!<\/strong> I&#8217;m really excited about this one. You now have the ability to set policies so that updates are checked for and applied hourly. You can also set exceptions here so don&#8217;t worry guys, that finance application will still have access to Java 6 (kill me now).<\/li>\n<\/ol>\n<p>What I really like about the new management interface is that because it is so easy to use I feel confident giving my colleagues on the service desk staff access to run wild with it.<\/p>\n<p>Below I will briefly go over the installation of the agent and then move on to summarise the different tabs in the Ninite Appsheet web interface.<\/p>\n<h3>Installing the Agent and How it Works<\/h3>\n<p>In typical Ninite fashion, the agent is only a few hundred Kilobytes. Installation literally takes seconds and no reboot is necessary.<\/p>\n<p>There are a number of ways you can install the agent:<\/p>\n<ul>\n<li>There is a .msi available so you can script something together (GPO, SCCM, PDQ Deploy, MDT, etc)<\/li>\n<li>You can use the Ninite agent .exe which you&#8217;d use if you want to manually install it on a machine (non-domain joined for example)<\/li>\n<li>Lastly you can use a special Ninite network installer .exe which is basically exactly the same as the NinitePro.exe except it only pushes out the Ninite Agent<\/li>\n<\/ul>\n<p>The agent does the following:<\/p>\n<ul>\n<li>Installs a Service called\u00a0<strong>Ninite Agent<\/strong> which runs as Local System<\/li>\n<li>Starts a process called\u00a0<strong>NiniteAgent.exe<\/strong><\/li>\n<li>Establishes a TLS tunnel to remote.ninite.com<\/li>\n<li>Sends the necessary information over the established tunnel so that Ninite can know which software can and can&#8217;t be installed (compatability, etc). For example the running OS version, applications it can support, version numbers, etc.<br \/>\nYou can view this information in the Appsheet interface.<\/li>\n<\/ul>\n<h3>Logging in to Appsheet<\/h3>\n<p>You can access the Appsheet portal with any modern web browser. The interface is very intuitive and easy to use so it&#8217;ll only take you a few minutes to get the hang of things.<\/p>\n<p>The URL to access Appsheet is: <a href=\"https:\/\/ninite.com\/appsheet\" target=\"_blank\">https:\/\/ninite.com\/appsheet<\/a><\/p>\n<p>You&#8217;ll be taken to the Overview tab as soon as you log-in. Here you&#8217;ll see a summary of how many machines have the Ninite Agent installed and which applications need updating.<\/p>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_13_16-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2428\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_13_16-Ninite-Appsheet.png\" alt=\"\" width=\"1437\" height=\"449\" srcset=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_13_16-Ninite-Appsheet.png 1437w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_13_16-Ninite-Appsheet-300x94.png 300w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_13_16-Ninite-Appsheet-768x240.png 768w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_13_16-Ninite-Appsheet-1024x320.png 1024w\" sizes=\"auto, (max-width: 1437px) 100vw, 1437px\" \/><\/a><\/p>\n<h3>Apps<\/h3>\n<p>Here is where you&#8217;ll be doing most of your work; installing, updating, re-installing and removing applications is done from this tab.<\/p>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_15_33-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2429\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_15_33-Ninite-Appsheet.png\" alt=\"\" width=\"1237\" height=\"454\" srcset=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_15_33-Ninite-Appsheet.png 1237w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_15_33-Ninite-Appsheet-300x110.png 300w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_15_33-Ninite-Appsheet-768x282.png 768w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_15_33-Ninite-Appsheet-1024x376.png 1024w\" sizes=\"auto, (max-width: 1237px) 100vw, 1237px\" \/><\/a><\/p>\n<p>See the\u00a0options in the top right corner? Here you can select only #online machines with installed applications&#8230; or #online machines with outdated applications only.<\/p>\n<p>This is what I have done in my example below &#8211; here you can see a subset of #online machines with out of date applications. Ignore the thunderbolt and padlock icons for the time being &#8211; I&#8217;ll explain those later.<\/p>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_20_19-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2430\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_20_19-Ninite-Appsheet.png\" alt=\"\" width=\"905\" height=\"492\" srcset=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_20_19-Ninite-Appsheet.png 905w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_20_19-Ninite-Appsheet-300x163.png 300w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_20_19-Ninite-Appsheet-768x418.png 768w\" sizes=\"auto, (max-width: 905px) 100vw, 905px\" \/><\/a><\/p>\n<h3>Kill + Retry<\/h3>\n<p>Kill + Retry is a cool addition that the Ninite agent can perform which the agentless approach cannot do (without additional scripting); essentially what it can do is kill applications that are preventing them from being updated (think applications like Skype which start on boot) then retry the update.<\/p>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_27_53-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2431\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_27_53-Ninite-Appsheet.png\" alt=\"\" width=\"156\" height=\"213\" \/><\/a><\/p>\n<h3>Machine Details<\/h3>\n<p>The machine details tab allows you to assign policies to machines (we&#8217;ll come on to policies next), add tags to machines, delete machines from the dashboard and uninstall agents from machines remotely.<\/p>\n<p>It also shows you some additional information such as disk utilisation, whether there is an anti-virus installed on the machine and if it&#8217;s enabled and up-to-date.<\/p>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_30_31-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2432\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_30_31-Ninite-Appsheet.png\" alt=\"\" width=\"1869\" height=\"651\" srcset=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_30_31-Ninite-Appsheet.png 1869w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_30_31-Ninite-Appsheet-300x104.png 300w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_30_31-Ninite-Appsheet-768x268.png 768w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_30_31-Ninite-Appsheet-1024x357.png 1024w\" sizes=\"auto, (max-width: 1869px) 100vw, 1869px\" \/><\/a><\/p>\n<h3>Policies<\/h3>\n<p>This is where you can get really clever and apply policies to your estate.\u00a0By doing this you can be almost virtually hands off Ninite and let it handle itself.<\/p>\n<p>Take the policy below as an example.<\/p>\n<ul>\n<li><strong>Policy Name:<\/strong> This can be anything you desire. Give it a sensible name.<\/li>\n<li><strong>Update Policy:<\/strong> <strong>Manual<\/strong> means &#8220;don&#8217;t touch anything &#8211; I&#8217;ll handle it all myself&#8221;. <strong>Automatic<\/strong> means &#8220;update everything please&#8221; and <strong>Locked<\/strong> means &#8220;stop me from accidentally updating\/removing this app&#8221;<\/li>\n<li><strong>Disable built-in updater and update notifications:<\/strong> I always enable this as I don&#8217;t want my users to be notified of updates &#8211; IT will handle everything (I have an exception for Chrome though)<\/li>\n<li><strong>Disable desktop shortcuts:<\/strong> I always enable this too &#8211; I don&#8217;t want to clutter up user&#8217;s Desktops&#8217;&#8230; if they want a shortcut they can make one.<\/li>\n<li><strong>App Exceptions:<\/strong> Remember that 10 year old finance app still using Java 6? Yeah, you can set an exception here so that it stays\u00a0<em>locked<\/em>.<br \/>\nI also have an exception for Chrome for two reasons &#8211; (i) Chrome is pretty good and handling itself without causing disruptions and (ii) by disabling the updater for Chrome you may get issues\u00a0<em>manually<\/em> updating Chrome &#8211; I got the message &#8220;Chrome Updates are disabled by your Administrator&#8221; if I disabled the Chrome updater via Ninite without an exception.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_36_49-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2433\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_36_49-Ninite-Appsheet.png\" alt=\"\" width=\"1064\" height=\"910\" srcset=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_36_49-Ninite-Appsheet.png 1064w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_36_49-Ninite-Appsheet-300x257.png 300w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_36_49-Ninite-Appsheet-768x657.png 768w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_36_49-Ninite-Appsheet-1024x876.png 1024w\" sizes=\"auto, (max-width: 1064px) 100vw, 1064px\" \/><\/a><\/p>\n<p>To actually apply policies you will need to do this in the <strong>Machine details<\/strong> tab.<\/p>\n<p><a href=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_53_19-Ninite-Appsheet.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2435\" src=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_53_19-Ninite-Appsheet.png\" alt=\"\" width=\"589\" height=\"255\" srcset=\"https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_53_19-Ninite-Appsheet.png 589w, https:\/\/emtunc.org\/blog\/wp-content\/uploads\/2017\/02\/2017-02-22-16_53_19-Ninite-Appsheet-300x130.png 300w\" sizes=\"auto, (max-width: 589px) 100vw, 589px\" \/><\/a><\/p>\n<h3>How Secure is it?<\/h3>\n<p>It all sounds well and good but can we trust the agent? After all it runs as the\u00a0<em>local system<\/em> account and runs executables downloaded off the internet. I also had these concerns and directed them at the team over at Ninite and this is what they had to say:<\/p>\n<p><em>&#8220;Right now the agent&#8217;s actions are limited to basically what Ninite Pro itself can do. So there&#8217;s no agent command or anything to do arbitrary downloads or run arbitrary .exes. The commands are just like &#8216;install Firefox&#8217;, &#8216;uninstall Skype'&#8221;.<\/em><\/p>\n<p>You can also see some more information around security on this page @\u00a0<a href=\"https:\/\/ninite.com\/security\/\" target=\"_blank\">https:\/\/ninite.com\/security\/<\/a><\/p>\n<p>In addition, two factor authentication is coming soon to\u00a0prevent someone who has obtained your account credentials from wreaking havoc on your systems &#8211; What could be worse than someone logging in to your Ninite account and mass installing Flash and Java 6 on <em>everything<\/em>&#8230; *shudder*.<\/p>\n<p>I hope that gives a good overview of the new features &#8211; I think it&#8217;s definitely a big step forward in that it will allow administrators to <em>more easily<\/em> keep systems patched; in turn you keep your environment safer from potential vulnerabilities and threats from these 3rd party applications.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ninite has long been my number one tool for deploying, updating and removing popular 3rd party applications&#8230; I especially enjoy the feeling of removing Flash and Java from any where I\u00a0can get my hands on \ud83d\ude42 Up until now, Ninite has been completely agentless. You get a simple light-weight .exe which you can either run [&hellip;]<\/p>\n","protected":false},"author":32,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":""},"categories":[1],"tags":[257,72],"class_list":["post-2124","post","type-post","status-publish","format-standard","hentry","category-tech","tag-appsheet","tag-ninite"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p1trTO-yg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts\/2124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/comments?post=2124"}],"version-history":[{"count":15,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts\/2124\/revisions"}],"predecessor-version":[{"id":2460,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts\/2124\/revisions\/2460"}],"wp:attachment":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/media?parent=2124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/categories?post=2124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/tags?post=2124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}