MGT309Overview of Windows Server Update Services version 3.0

Gary Henderson

Lead Program Manager

Our time today

Review WSUS 2.0Review WSUS 2.0

WSUS 3.0 Technical OverviewWSUS 3.0 Technical Overview

GoalsGoals

FeaturesFeatures

WSUS 3.0 DrilldownWSUS 3.0 Drilldown

DemoDemo

Platform enhancementsPlatform enhancements

More informationMore information

Q & AQ & A

WSUS 2.0’s Momentum

Ranked as #1 Patch Management Product by Ranked as #1 Patch Management Product by readers of Windows IT Pro Magazinereaders of Windows IT Pro Magazine

WSUS 2.0 SP1 released in June 2006WSUS 2.0 SP1 released in June 2006

Enabled signature distribution for Forefront Client Enabled signature distribution for Forefront Client SecuritySecurity

Integrated with SBS R2Integrated with SBS R2

Already more WSUS 2.0 SP1 deployments than Already more WSUS 2.0 SP1 deployments than WSUS 2.0 deployments (190k vs. 100k)WSUS 2.0 deployments (190k vs. 100k)

Total 290,000 distinct servers synched with Total 290,000 distinct servers synched with Microsoft Update in October 2006Microsoft Update in October 2006

WSUS 2.0’s Key Features

Integrated ReportingIntegrated Reporting

Targeting of updatesTargeting of updates

More functional Administrative ExperienceMore functional Administrative Experience

Access to more content (Office, SQL, Exch., etc.)Access to more content (Office, SQL, Exch., etc.)

Flexible and granular synchronization optionsFlexible and granular synchronization options

Classification (service packs, updates, locale, rollups) Classification (service packs, updates, locale, rollups)

Products (Application or OS)Products (Application or OS)

Extensibility APIsExtensibility APIs

WSUS 3.0 Goals

Continue to be the best Continue to be the best solutionsolution for distributing Microsoft for distributing Microsoft Updates to WindowsUpdates to Windows

Address top customer asks and feedbackAddress top customer asks and feedback

Enhance the Enhance the infrastructureinfrastructure to support advanced to support advanced management productsmanagement products

Microsoft System Center Configuration Manager (SCCM) 2007 Microsoft System Center Configuration Manager (SCCM) 2007 (formerly Microsoft Systems Management Server (SMS) v4):(formerly Microsoft Systems Management Server (SMS) v4):

Microsoft System Center Essentials (SCE) Microsoft System Center Essentials (SCE)

33rdrd party products party products

Support Windows Vista and “Longhorn” ServerSupport Windows Vista and “Longhorn” Server

Supported PlatformsAll supported Windows localesAll supported Windows locales

x86 and x64 support parityx86 and x64 support parity

For Server For Server Windows 2003, Longhorn Server (at RTM)Windows 2003, Longhorn Server (at RTM)

SQL Server 2005, SQL Express or wYukonSQL Server 2005, SQL Express or wYukon

Internet Information ServicesInternet Information Services

.NET Framework 2.0.NET Framework 2.0

MMC 3.0MMC 3.0

For ClientFor ClientWindows 2000 SP4, Windows XP SP1, VistaWindows 2000 SP4, Windows XP SP1, Vista

Windows Server 2003, Longhorn ServerWindows Server 2003, Longhorn Server

Straightforward Installation

Easy to use Setup program which also supports Easy to use Setup program which also supports unattended installsunattended installs

In-place upgrade over 2.0In-place upgrade over 2.0Clients automatically update to new versions when Clients automatically update to new versions when they contact the serverthey contact the server

WSUS 2.0 Servers can synchronize updates from WSUS 2.0 Servers can synchronize updates from a 3.0 Servera 3.0 Server

Allows for a gradual top down roll outAllows for a gradual top down roll out

New OOBE (out of the box experience) wizard to New OOBE (out of the box experience) wizard to help guide initial setuphelp guide initial setup

Flexible Deployment Options

Supports all WSUS 2.0 deployment optionsSupports all WSUS 2.0 deployment optionsAutonomous and Replica server hierarchiesAutonomous and Replica server hierarchies

Disconnected NetworkDisconnected Network

Replica improvements for branch officesReplica improvements for branch officesMove between Replica and Autonomous modes without Move between Replica and Autonomous modes without a reinstall a reinstall

Support for language sub-setting on downstream replica Support for language sub-setting on downstream replica serversservers

Replica’s can sync meta-data from a USS and content Replica’s can sync meta-data from a USS and content from MUfrom MU

Multiple, more granular, auto-approval rulesMultiple, more granular, auto-approval rules

Sync up to once/hour (rather than once/day)Sync up to once/hour (rather than once/day)

Improved Performance

50% improvement in reporting performance50% improvement in reporting performance

Initial full metadata synchronization time reduced from Initial full metadata synchronization time reduced from 1 ½ hours to 20 minutes1 ½ hours to 20 minutes

i.e., All updates available to WSUSi.e., All updates available to WSUS

Quicker search and filtering capabilitiesQuicker search and filtering capabilities

Can now support > 15,000 client per server using new Can now support > 15,000 client per server using new deployment options deployment options

Takes advantage of newer hardware through native Takes advantage of newer hardware through native support for x64 platformsupport for x64 platform

Greater Operational Reliability

Network Load Balancing (NLB) supportNetwork Load Balancing (NLB) supportAllows for faster failover in high service availability Allows for faster failover in high service availability environmentsenvironments

SQL Clusters supportSQL Clusters supportComplements NLB scenariosComplements NLB scenarios

Monitoring through MOMMonitoring through MOMMOM Management Pack that provides proactive alerts MOM Management Pack that provides proactive alerts of server healthof server health

Built in clean-up wizard for unneeded updates Built in clean-up wizard for unneeded updates and stale computersand stale computers

Richer Reporting CapabilitiesUI reporting based on Microsoft Report Viewer UI reporting based on Microsoft Report Viewer controlscontrols

Print, Save to Excel or PDFPrint, Save to Excel or PDF

Reporting rollup is in the box!Reporting rollup is in the box!Single unified view of the deployment status across all Single unified view of the deployment status across all server in an organizationserver in an organization

Roll up detailed status or summariesRoll up detailed status or summaries

From autonomous or replica serversFrom autonomous or replica servers

Read-only server access through new Read-only server access through new “Reporters” WSUS user role“Reporters” WSUS user role

Enhanced Targeting ConceptsNested target groupsNested target groups

Overlapping group membershipOverlapping group membership

A computer can be a member of > 1 groupA computer can be a member of > 1 group

Eg: Computer ABC_MESSAGING is a member of Servers as well Eg: Computer ABC_MESSAGING is a member of Servers as well as Exchange Serversas Exchange Servers

Improved Administrative ExperienceNew MMC 3.0 based consoleNew MMC 3.0 based console

Can be installed and run on remote systems (e.g. XP)Can be installed and run on remote systems (e.g. XP)

Host multiple servers in a single consoleHost multiple servers in a single console

ProvidesProvides

Home pages to give a quick overviewHome pages to give a quick overview

Column sorting & reordering, Context MenusColumn sorting & reordering, Context Menus

Custom Views and of filtering of resultsCustom Views and of filtering of results

Integrated reporting “in context”Integrated reporting “in context”

Hands off administration using built in email notifications Hands off administration using built in email notifications for status for status

More Content

Access to more content via the Microsoft Update Access to more content via the Microsoft Update (MU) Catalog site(MU) Catalog site

Enable easy access to drivers and hotfixesEnable easy access to drivers and hotfixes

Improved searching and filteringImproved searching and filtering

Personalization to make the MU Catalog customized to Personalization to make the MU Catalog customized to your downloading needsyour downloading needs

Platform-Only Improvements

Lightweight Hardware and Software InventoryLightweight Hardware and Software InventoryHardware InventoryHardware Inventory

30+ attributes collected about the hardware installed on server and client 30+ attributes collected about the hardware installed on server and client computers; Disk drives, Network Cards, BIOS, OS information, CPU, …computers; Disk drives, Network Cards, BIOS, OS information, CPU, …

Software InventorySoftware InventoryAdd / Remove programs inventory collects name and version informationAdd / Remove programs inventory collects name and version information

Off by defaultOff by default

Local publishingLocal publishingAbility to publish and distribute 3Ability to publish and distribute 3rdrd party updates and party updates and applicationsapplications

Used by advanced management tools; SCE, Used by advanced management tools; SCE, SCCM 2007, and 3SCCM 2007, and 3rdrd party solutions party solutions

Common Platform

Consumer Desktops

MU Environment

Updates & Drivers

Catalog SiteAuto-SyncManual

Import

Enterprises

WSUS

Updates & Drivers

Local Publishing

Microsoft ProductsSE Teams

OEM

WHOS

SCCM 2007

3rd Party Drivers

Product Updates

WU Agent

Corporate Desktops

WU AgentSCE 2007

3rd Party Tool

Update Management SolutionsMicrosoft UpdateMicrosoft Update

Allows a Windows machine to receive updates to Allows a Windows machine to receive updates to Microsoft products.Microsoft products.

WSUSWSUSCentralized Microsoft Update management: distributes Centralized Microsoft Update management: distributes Microsoft Updates to Windows machines in your Microsoft Updates to Windows machines in your corporation and get compliance reportscorporation and get compliance reports

No additional cost over the server CALNo additional cost over the server CAL

SBSr2SBSr2Low cost solution for managing up to 75 Windows Low cost solution for managing up to 75 Windows machines machines

Bundles WSUS for centralized Microsoft Update Bundles WSUS for centralized Microsoft Update managementmanagement

Easy to use; doesn’t require an IT administratorEasy to use; doesn’t require an IT administrator

Update Management SolutionsSCESCE

Advanced management tool for up to 500 Windows Advanced management tool for up to 500 Windows machines machines

Single administration console provides asset Single administration console provides asset management, monitoring, 3rd party update distribution, management, monitoring, 3rd party update distribution, application distribution, as well as basic Microsoft application distribution, as well as basic Microsoft Update management (using WSUS*)Update management (using WSUS*)

SCCM 2007 (aka SMSv4)SCCM 2007 (aka SMSv4)Advanced management tool with enterprise scaleAdvanced management tool with enterprise scale

Single administration console provides asset Single administration console provides asset management, 3rd party update distribution, application management, 3rd party update distribution, application distribution, software metering, operating system distribution, software metering, operating system deployment, as well as basic Microsoft Update deployment, as well as basic Microsoft Update management (using WSUS*)management (using WSUS*)

* Both SCE and SCCM support a simple in-place * Both SCE and SCCM support a simple in-place upgrade from WSUSupgrade from WSUS

Choosing a SolutionCustomeCustomer Typer Type ScenarioScenario Customer Customer

ChoosesChooses

Large Large EnterprisEnterprisee

Advanced managementAdvanced management SCCMSCCM

Only need to distribute Microsoft UpdatesOnly need to distribute Microsoft Updates WSUSWSUS

Medium Medium EnterprisEnterprisee

Advanced managementAdvanced management SCESCE

Only need to distribute Microsoft UpdatesOnly need to distribute Microsoft Updates WSUSWSUS

Small Small BusinessBusiness

Simple, centralized managementSimple, centralized management SBSr2SBSr2

Have at least 1 Windows server, 1 IT administrator, Have at least 1 Windows server, 1 IT administrator, and canand can’’t use SBSr2t use SBSr2 WSUSWSUS

All other scenariosAll other scenarios Microsoft Microsoft UpdateUpdate

ConsumerConsumer All scenariosAll scenarios Microsoft Microsoft UpdateUpdate

So, when can you get it?

Beta 2 – NOW!Beta 2 – NOW!

RC – February 2007RC – February 2007

RTM – 1st half of 2007RTM – 1st half of 2007

But wait, you want more!!

WSUS homepage: http://www.microsoft.com/updateservices

WSUS Server download – WSUS 2.0 & WSUS 3.0 BetaWSUS Server download – WSUS 2.0 & WSUS 3.0 Beta

Online Help, Deployment and Operations GuidesOnline Help, Deployment and Operations Guides

SDK and API SamplesSDK and API Samples

Tools and Tools and TroubleshootersTroubleshooters

WSUS community, Team Blogs, WSUS WikiWSUS community, Team Blogs, WSUS Wiki

Microsoft Update: http://update.microsoft.com/microsoftupdate

Thanks for your time today

Your feedback is important! Please fill out a survey for this session.

Meet me at ATE booth 20 for more questions and discussion, right now!

© 2006 Microsoft Corporation. All rights reserved.This presentation is for informational purposes only.MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.