module 16: software maintenance using windows server update services
TRANSCRIPT
Module 16: Software Maintenance Using
Windows Server Update Services
Overview
Introduction to Windows Server Update Services
Installing and Configuring Windows Server Update Services
Managing Windows Server Update Services
Changes to Service Pack 1
Lesson 1: Introduction to Windows Server Update Services
What Is Microsoft Update?
What Is Automatic Updates?
What Is Windows Server Update Services?
Windows Server Update Services Process
Changes to Service Pack 1
What Is Microsoft Update?
Microsoft Update is a Microsoft Web site that includes:Microsoft Update is a Microsoft Web site that includes:
Updates for Microsoft Windows operating systems, software, and device drivers
Updates for Microsoft applications
New content that is added to the site regularly
Updates for Microsoft Windows operating systems, software, and device drivers
Updates for Microsoft applications
New content that is added to the site regularly
What Is Automatic Updates?
Automatic Updates is client software that:Automatic Updates is client software that:
Communicates with Microsoft Update or WSUS
Automatically downloads updates
Notifies users of update availability
Communicates with Microsoft Update or WSUS
Automatically downloads updates
Notifies users of update availability
Automatic Updates
Server running Windows Server Update Services
Automatic Updates
LAN
What Is Windows Server Update Services?
Microsoft Update Web site
Internet
Test Clients
Windows Server Update Services Process
Server-Side ProcessServer-Side Process
1. WSUS runsscheduled synch1. WSUS runsscheduled synch
No?
2. Testing? Yes?
3. Admin approves new packages
Test new packages
Client-Side ProcessClient-Side Process
5. AU waits for next scheduled check5. AU waits for next scheduled check
System restart 4. Do any packages require a restart?
3. Scheduled install job begins
1. Automatic Updates on client checks WSUS
2. Is Administrator logged on?Yes?
No?
Administrator sees status balloon, can deferinstallation
Yes?
No?
Changes to Service Pack 1
Support for Windows Vista
Full client language support
New version of Microsoft SQL Server Desktop Engine
Faster performance
Hotfix rollup
Support for Microsoft SQL Server 2005 and 2008
Enhanced bulk approval capability
Detailed reporting
Support for Windows Vista
Full client language support
New version of Microsoft SQL Server Desktop Engine
Faster performance
Hotfix rollup
Support for Microsoft SQL Server 2005 and 2008
Enhanced bulk approval capability
Detailed reporting
Lesson 2: Installing and Configuring Windows Server Update Services
WSUS Deployment Scenarios
Server Requirements for Windows Server Update Services
Automatic Updates Configuration
Security Configuration Wizard
WSUS Deployment Scenarios
Main OfficeWSUS Server
DisconnectedWSUS Server
Remote Office Client Computers
Main Office ClientComputers
Regional Client Computers
IndependentWSUS Server
ReplicaWSUS Server
Firewall
Microsoft Update
Server Requirements for Windows Server Update Services
On Windows Server 2003
Internet Information Services .NET 2.0 MMC 3.0 Microsoft Report Viewer SQL Server 2005 SP1 or later
On Windows Server 2008
32 bit or 64 bit version Microsoft Report Viewer SQL Server 2005 SP2 or later
On Windows Server 2003
Internet Information Services .NET 2.0 MMC 3.0 Microsoft Report Viewer SQL Server 2005 SP1 or later
On Windows Server 2008
32 bit or 64 bit version Microsoft Report Viewer SQL Server 2005 SP2 or later
Automatic Updates Configuration
Configure Automatic Updates by using Group Policy
Requires updated wuau.adm administrative template
Requires:
Windows 2000 SP4
Windows XP SP2
Windows Server 2003
Windows Server 2008
SCW automatically installed with Server 2008Modify the configuration of a default component on a Windows
Server 2008-based computer.However, using SCW after modifying a role or feature through Server Manager is not a requirement.
Create and apply policy for server roles not installed through Server Manager
SCW includes policies for many roles and features not installed with Server Manager.
Define new roles for non-Microsoft applications and create and apply policy for those roles
Create new custom roles
SCW automatically installed with Server 2008Modify the configuration of a default component on a Windows
Server 2008-based computer.However, using SCW after modifying a role or feature through Server Manager is not a requirement.
Create and apply policy for server roles not installed through Server Manager
SCW includes policies for many roles and features not installed with Server Manager.
Define new roles for non-Microsoft applications and create and apply policy for those roles
Create new custom roles
Security Configuration Wizard
Use to configure WSUS security prerequisitesUse to configure WSUS security prerequisites
Lesson 3: Managing Windows Server Update Services
Windows Server Update Services Management Console
How Synchronization Works
Managing Computer Groups
Approving Updates
Using Reports
Backing Up and Restoring Windows Server Update Services
Guidelines for Deploying Updates
Windows Server Update Services Administration
Rapid access to common tasks
Advanced filtering
Sort updates
Shortcut menus with right-click access
Integrated reporting
Custom views
Rapid access to common tasks
Advanced filtering
Sort updates
Shortcut menus with right-click access
Integrated reporting
Custom views
MOM/SCOM Management pack for enterprise wide monitoring and reporting
MOM/SCOM Management pack for enterprise wide monitoring and reporting
How Synchronization Works
WSUS Server
Microsoft Update Web site
Internet
Corporate HeadquartersCorporate Headquarters
Client
Administrator
LAN
Automatic Synchronization
Manual Synchronization
Managing Computer Groups
Computers are automatically added
Default computer groups
All Computers Unassigned Computers
Client-side targeting
Computers are automatically added
Default computer groups
All Computers Unassigned Computers
Client-side targeting
Approving Updates
Approve updates to initiate an action
Detection Installation Removal
Decline updates
Automate approvals
Approve updates to initiate an action
Detection Installation Removal
Decline updates
Automate approvals
Using Reports
Types of reportsTypes of reports
Summary compliance
Individual computer
Individual update
Downstream server summary compliance
Synchronization
Summary compliance
Individual computer
Individual update
Downstream server summary compliance
Synchronization
Backing Up and Restoring WSUS
Use the Backup Utility
Backup database
Stop MSSQL$WSUS service
Contains metadata, configuration information, and client computer information
Updates folder
Guidelines for Deploying Updates
Configure an initial test groupConfigure an initial test group
Configure a business testing group Configure a business testing group
Deploy updates one department at a timeDeploy updates one department at a time
Remove problem updatesRemove problem updates
Use computer groups for testingUse computer groups for testing