Succeeding with Deploy

Follow these best practices to achieve maximum value and success with Tanium Deploy. These steps align with the key benchmark metrics: increasing deploy coverage, reducing endpoints missing software updates released over 30 days and mean time to deploy, and optimizing software installed by self service user requests.

Step 1: Gain organizational effectiveness

Complete the key organizational governance steps to maximize Deploy value. For more information about each task, see Gaining organizational effectiveness.

Develop a dedicated change management process.

Define distinct roles and responsibilities in a RACI chart.

Validate cross-functional organizational alignment.

Track operational metrics.

Step 2: Configure platform settings

Increase the client cache size to 2 GB to accommodate package distribution.

See Configure advanced settings.

Step 3: Install and configure Tanium modules

Install Tanium End-User Notifications. See Tanium End-User Notifications User Guide: Installing End-User Notifications.

Install Tanium Deploy. See Installing Deploy.

If you installed Deploy using the Apply All Tanium recommended configurations option, the service account is automatically set to the account that you used to install Deploy.

Install Tanium Trends. See Tanium Trends User Guide: Installing Trends.

Install Tanium Client Management, which provides Tanium Endpoint Configuration. See Tanium Client Management User Guide: Installing Client Management.

Import the IT Operations Metrics board from the Trends initial gallery. See Tanium Trends User Guide: Importing the initial gallery.

If you installed Trends using the Apply All Tanium recommended configurations option, the IT Operations Metrics board is automatically imported.

Step 4: Organize computer groups and set the Deploy action group

Step 2: Organize computer groups and set the Deploy action group

Create computer groups. See Tanium Console User Guide: Create a computer group.

Additional computer groups might be required to fulfill the requirements of your organization. See Organize computer groups.

Configuring Deploy.

If you installed Deploy using the Apply All Tanium recommended configurations option, the The Deploy action group is automatically set to the All Computers computer group.

Ensure that all operating systems that are supported by Deploy are included in the Deploy action group.

Step 5: Configure and initialize endpoints

Step 3: Configure and initialize endpoints

Create an End-User Notifications profile for End-User Self Service. See Tanium End-User Notifications User Guide: Customizing the end-user interface.

If you installed Tanium End-User Notifications using the Apply All Tanium recommended configurations option, a A default End-User Notifications profile is automatically created.

Initialize End-User Notifications endpoints. See Tanium End-User Notifications User Guide: Initialize endpoints.

Initialize End-User Notifications endpoints. From the End-User Notifications Home page, click Help , click Support, and then click Initialize Endpoints.

Initialize Deploy endpoints.

Step 6: Create maintenance windows

Step 4: Create maintenance windows

Create a maintenance window that properly overlaps with deployment times and change control process timelines.

If you installed Deploy using the Apply All Tanium recommended configurations option, an An Always On maintenance window is automatically created and enforced against the All Computers computer group.

Verify that the Computers with Enforced Maintenance Windows chart in the Health section of the Deploy Overview page shows 100% enforcement.

See Managing maintenance windows.

Step 7: Add content

Step 5: Add content

Import software packages from the Predefined Package Gallery or create your own custom packages. See Managing software.

Assign packages to software bundles. See Create a software bundle.

Create a self service profile to include the packages or bundles.

Step 8: Create deployments

Step 6: Create deployments

Create a deployment template for quick application of defaults in a deployment. See Create a deployment template.

Create a deployment to install software for each of the supported operating systems in your environment.

Ensure that deployment windows are long enough for endpoints to download and install the software, and properly overlap with maintenance window times.

Use the Make available before start time option for deployments that are set for the future.

If the software requires a restart, use the Restart and Notify User options and set the Duration of Postponement value to less than one day.

See Deploying software.

Step 9: Monitor Deploy metrics

Step 7: Monitor Deploy metrics

From the Trends menu, go to Boards and then click IT Operations Metrics to view the Deploy Coverage, Endpoints Missing Software Updates Released Over 30 Days, Mean Time to Deploy Software, and Software Installed by Self Service User Request panels in the Deploy section.

Monitor and troubleshoot Deploy coverage.

Monitor and troubleshoot endpoints missing software updates released over 30 days.

Monitor and troubleshoot mean time to deploy software .

Monitor and troubleshoot software installed by self service user request.