Enterprise WSUS Admin and Server Administrator

Justin Blocksom

** *********** ***** ******, ** *7517 cell: 610-***-**** aco6ih@r.postjobfree.com

Education

Arcadia University, Glenside, PA – Bachelor’s Degree

CVE 4.1, MCSA, & Network+ Certified

ITIL Foundation Certification and MCITP:SA/Windows Server 2008 – anticipated completion December 2015

Objective

To assist a growing IT team by implementing best practices, securing their environment from known threats,

and streamlining workflows to maximize the effectiveness of IT efforts.

Achievements and Success

Daily/Monthly Workflow

• Server administrator for 212 downstream Windows Server and Update Services (WSUS) servers

o Ensured network connectivity, server health and WSUS functionality

o Researched and remediated issues involving hardware failures and coordinating support

• Supported the Computer Associates ITCM/DSM servers for the Corporate office, Acute Care hospitals, and Behavioral Health

facilities

• Generated monthly WSUS Enterprise reports

o Compiled WSUS Health Analysis for use in the monthly meetings with the Acute Care local IT

o Communicated and recommended remediation steps to the local IT for the sites with the most patch failures

• Microsoft Patch research and analysis

o Monitored internet blogs and attended webcasts to identify emerging issues and trends with Microsoft patches

o Tested and monitored WSUS patches through our standalone WSUS test environment

• Coordinated and Project Managed the bi-monthly Corp Datacenter patch event

o Created the ITCM/DSM patch jobs with the team lead

o Grouped servers into patching tiers to enable patching of non-critical servers outside of the main window

• Compiled post-window patching report to measure success of the event and outstanding issues & trends to be addressed

Server maintenance

• Used the RAID 1 rebuild capabilities on 10 servers running out of disk space

o To get larger drives in the mix, then by utilizing mount points, I fixed the drive space issue without any downtime

• Fixed RAID 1 constant rebuild by fixing a mismatched driveset with zero downtime

• Purged IIS logs, Temp directory, and Windows Patch uninstaller files older than 3 months to fix low disk space issues

• Monitored high memory issues and facilitated the downtime necessary to add more RAM (physical and virtual)

• Responded to server down events by creating a full analysis to see the root cause

o Looked at all system, application, and last login logs and then communicated it to the application owner

Special Projects

• Facilitated the successful integration and management of 10,400 desktops and 479 servers across 8 hospital networks, into a

WSUS Enterprise Environment (2014)

o Worked with each local IT teams to integrate them successfully

o Assisted in creating a monthly patch workflow for critical 24x7 PCs to prevent a data corruption issue (when the PC

was rebooted incorrectly due to improper automatic patch and reboot targeting)

o Assembled a Ghost Casting environment that allowed for the imaging of 200 desktops and laptops in a 3 day period,

while simultaneously creating a master image for a Vostros model Dell and packaged for image upload.

• Datacenter outage response

o Restored our ticketing system to log incidents and track issues

o Verified the up status of several dozen servers that I directly supported

o Had the following critical resources in place ahead of time:

An updated offline copy of spreadsheet documenting all information about datacenter servers.

• This was then used by a half dozen people multiple times to get IPs and rack locations for servers

An updated offline SharePoint copy of all of our documentation

• This was used by multiple people to facilitate getting familiar and unfamiliar environments up

Improvements to the infrastructure workflows

• Facilitated the creation and implementation of the “CORP New Server Alerts” email distribution group. This consisted of key

members of the team who had a role to “tie in” or “unlink” a server from our infrastructure when a server was added or

removed from the domain. (AD cleanup, backups, monitoring, WSUS, Static IP assignment, etc.)

• Researched an affordable UPS battery solution and then communicated it to 190 remote IT contacts to ensure that our remote

servers were protected from power spikes and dirty power events

• Assisted in the consolidation and eventual decommission of seven interface servers, two clustered SQL servers, one application

server and a Citrix server.

o This eliminated the need for 11 HP extended service warranties as all servers had already lapsed in their HP warranty

coverage, not to mention the cost of the power savings by removing them from our datacenter.

• By working closely with an application team, I was able to free up 125 GB of high tiered SAN storage while giving the

application team what they needed on low tiered disk with room for future expansion

Patch security and break/fix efforts

• Resolved an issue for two patches that broke an old version of Citrix

• Researched, tested and deployed the Out of Band patch MS14-068 to all domain controllers within 6 days of its release

• Discovered and remediated 28 Windows 7 Virtual PCs that had not talked to WSUS due to a Windows licensing issue

• Remediated WSUS sync failure issues on 100 downstream servers

WSUS workflow success

• Architected an automated approval WSUS environment consisting of

o Test WSUS environment (day one patch approval for test desktops and servers)

o Datacenter WSUS environment (automated approvals but segmented for approvals based on application group)

• WSUS Enterprise with 212 downstream WSUS servers with automated WSUS reports and access given to the local IT for self-

service reporting for investigation and remediation

• Revoked a patch that was reported to cause a Blue Screen of Death issue due to a recent patch release

o Acted quickly on information obtained from tech blogs, preventing this issue on all desktops and servers in the

enterprise. (KB2823324 released 4/9/13 – Microsoft pulled back 4/11/13)

• Created a trusted patch source and WSUS patch workflow to leverage the custom approval of patches for a server application

group at one facility and applied it to 3 other facilities with servers running the same application

• By working with a 3rd party vendor I was able to empower a local facility to have oversight into the WSUS environment of their

vendor supported application and injected WSUS best practice into the vendor’s process as a result of that interaction

• Created monthly WSUS health and analysis reports to use in meetings with the local IT contacts of the Acute Care hospitals

• Devised an Active Directory structure to ensure that all computers on our domain were seen by the WSUS server and were not

creating “honeypots” on our network due to improper targeting

• Identified 43 XP and Windows 2000 machines still in use in an old unused domain via WSUS administration

• Advanced troubleshooting and resolution of difficult Windows Patch Installation issues

• Project Management of scheduled downtime patch windows

o Reported and communicated all the specific patches and Microsoft security bulletins to be applied during a given

window to the application and server support teams

o Communicated via email, IM, and conference call with the System Admin team throughout the window

o Found and remediated dependent update scenarios, patch failure occurrences, server downs, and pending reboot

conditions during the downtime windows

Work History

Universal Health Services, King of Prussia, PA May 05’ – present

• Enterprise Management Analyst: Utilizing Computer Associates enterprise products (DSM, Software Delivery, eTrust

AntiVirus, Asset Management, etc.) to support and administer assets across all 200+ UHS hospital sites.

• WSUS Enterprise Administrator: WSUS project management, policy creation, policy maintenance, planning and deployment

of all Microsoft patches for all laptops, desktops and servers based out of the corporate office and across a Behavioral Health

Enterprise.

• Senior PC/LAN Technician: Added the role of team lead, direct report for two contracted Technicians, and managed 3 file and

print servers and all associated roles and rights for file and folder management for the Corporate office

• PC/LAN Technician: supported 500+ users as part of a team for all their desktop, software, and printer needs

Job experience previous to 2005 and references available upon request

Contact this candidate