wsus - smith.n studio

7/28/2019 WSUS - Smith.N Studio

1/27

I C T 2 4 H . N E T

2010

TM HIU WINDOWSSERVER UPDATE

SERVICE TRONG

WINDOWS SERVER2008

Managing Software Update

ICT24H TEAM

ICT VIETNAM COMMUNITY

Smith Nguyen St

ttp://www.facebook.com/SmithNguyenStudio
http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudio


2/27


I C T 2 4 H . N E T Page 1

Cng ngh cng ngy cng pht trin dn n my tnh cng ngy cng d dng qun l hn. Phn cngcng nh phn mm ng tin cy hn, cc hiu hnh d dng sdng hn v xut hin nhiu cccng c qun tr tng ha hn (chng hn tng chng phn mnh cng). Tuy nhin, cc cngc v ng dng ngy mt pht trin v thay i, sa li , cp nht.iu ny ko theo sduy tr, cpnht thng xuyn cc ng dng.

Hu qu xy ra l kh ln nu nh khng cp nht cc chng trnh, cc phn mm. Nu my tnhkhng c cp nht, k tn cng c thkhai thc cc l hng v xm nhp.

gip bn c thcp nht tp trung ha, gim thiu thi gian qun l, Microsoft cung cp cng nghWindows Server Update Services (WSUS). WSUS cho php bn download, ph chun (sau khi bn kim nghim bn cp nht) v phn phi cc bn cp nht ny cho ton b my tnh client trong hthng

Nhng bi hc trong chng ny s cho bn ci nhn tng qut vWSUS cng nh ln khoch trinkhai cp nht cho h thng.

Ch chnh Cu hnh Windows Server Update Services (WSUS).

Nhng bi hc

Bi hc 1: Tm hiu v Windows Server Update Services. Bi hc 2: Sdng Windows Server Update Services.

Trc khi bt u

hon thnh cc bi hc, bn nn thc hin cc cng vic sau:

Ci t Windows Server 2008. Nng cp ln domain controller v join cc my tnh vo domain. Tn server l SERVER v c domain l ict24h.net

Smith Nguyen St



3/27



BI HC 1: TM HIU V WINDOWS SERVERUPDATE SERVICES

Trc khi trin khai Windows Server Update Services (WSUS), bn phi hiu c cc thnh phn caclient v server c cu hnh nh thno trong cc mi trng khc nhau. Nu khng c mt khochc th, vic cp nht s khin bn tt nhiu thi gian, bng thng hoc c ththt bi trong vic ci t.Bi hc ny cung cp cho bn ci nhn tng qut v cc thng tin v WSUS.

Nu bn quen thuc vi nhng phin bn WSUS trc, WSUS 3.0 Service Pack 1 cung cp cho bnkh nhiu chc nng. Hu ht qun l trn giao din, bn khng cn phi qun l trn trnh duyt Web.Thm vo , WSUS cho php bn linh hat trong vic trin khai cc bn cp nht n cc my tnh.

Sau bi hc ny, bn s: Hiu c mc ch ca WSUS. Cu hnh WSUS client.

Thit kcu trc WSUS p ng nhu cu cho c doanh nghip nhcng nh quy m ln. Lit k cc client v server cn thit cho WSUS. Tm hiu cc cng cxc nh trng thi cp nht ca cc my tnh client trong mng.

Thi lng cho bi hc: 15 pht.

Tng quan v WSUS

Windows Server Update Services (WSUS) c pht trin tdch v Microsoft Update mt dch vtrong Windows cho php tng download cc bn cp nht. Bn c thchy WSUS trn mng ni bv sdng n phn phi cc bn cp nht cho cc my tnh, bn c thsdng bng thng hiu quv kim sot cc bn cp nht trn cc my tnh client.

Khi chy WSUS, n kt ni n website Microsoft Update, download cc thng tin v cc bn cp nhtmi nht, sau thm chng vo danh sch cp nht qun tr vin ph chun. Sau khi qun tr vinchp nhn v thit lp u tin cho cc bn cp nht ny, WSUS s tng ci t chng trn cc mytnh chy Windows. Dch v Windows Update trong my tnh clien s kim tra WSUS server v tngdownload cc bn cp nht tserver v, cui cng l ci t cc bn cp nht ny. Bn c ththit lpWSUS cho ng thi nhiu server v c thm rng tdoanh nghip nhcho n doanh nghip ln.

Windows Update trn client

Windows Update l mt thnh phn thuc WSUS trn client c chc nng nhn cc phn mm, cc bnci t tWSUS server, xc nhn bng chk tin thoc thut ton Secure Hash Algorithm (SHA1),thng bo n ngi dng v cc bn cp nht v ci t n (nu c cu hnh). Windows Update cit cc bn cp nht thi gian m bn thit lp v c thtng khi ng li my tnh nu cn thit.Nu thi im hin ti my tnh tt, cc bn cp nht c thci t khi my tnh c bt.

Ch : WSUS client cc phin bn Windows trcTrong Windows XP v Windows 2000, thnh phn ca WSUS trn client c tn gi l AutomaticUpdates.

Smith Nguyen St



4/27



V cc thit lp Windows Update c p dng cho tt c cc my tnh trong doanh nghip nn sdngGroup Policy thit lp l phng php tt nht. Thit lp Windows Update ti ComputerConfiguration > Administrative Templates > Windows Components > Windows Update. Ccthit lp Windows Update trong Group Policy gm :

Do not display Install Update and Shut Down option in Shut Down Windows dialogbox: cho php bn qun l ty chn Install Updates v Shut Down hin th hp thoi ShutDown ca Windows.

Do not adjust option to Install Updates and Shut Down in Shut Down Windowsdialog box: thay i ty chn shut down mc nh Install Updates and Shut Down khi WindowsUpdate chun bci t mt bn cp nht.

Enabling Windows Update Power Management to automatically wake up the systemto install scheduled updates : nu nhn vin trong cng ty ca bn thng c thi quen shutdown my tnh ca h khi ri khi vn phng. Bt thit lp ny cu hnh cc my tnh h trtng khi ng v ci t cc bn cp nht mt thi gian c ln lch. Cc my tnh skhng c bt nu khng c bn cp nht no ci t. Nu my tnh chy vi nng lngca pin, my tnh s tng tr v trng thi sleep sau 2 pht.

Configure Automatic Updates: xc nh nhng my tnh client sc nhn cc bn cpnht bo mt v cc bn download quan trng khc tdch v Windows Update. Bn cng cthsdng thit lp ny cu hnh nhc nhngi dng ci t cc bn cp nht hoc tng ci t thng qua Windows Update.

Specify intranet Microsoft update service location: xc nh WSUS server. Automatic Updates detection frequency: thit lp thi gian Windows Update kim tra

nhng bn cp nht mi. Thi gian mc nh l t17 n 22 gi. Allow non-administrators to receive update notifications: thit lp cho tt cngi dng

hoc ch c qun tr vin nhn c thng bo cp nht.

Smith Nguyen St



5/27



Turn on Software Notification: thit lp cho php bn kim sot ngi dng c th nhnc thng bo vcc tnh nng ca phn mm tMicrosoft Update.

Allow Automatic Updates immediate installation: thit lp Automatic Update tng cit cc bn cp nhp m khng cn phi khi ng li my tnh.

Turn on recommended updates via Automatic Updates: xc nh cc my tnh client cit c nhng bn cp nht cn thit v bn v li, bao gm c cp nht cc driver.

No auto-restart with logged on users or scheduled automatic updates installations:thit lp lch ci t, Windows Update chngi dng khi ng my tnh khi hng nhp vo,kc tng khi ng.

Re-prompt for restart with scheduled installations: thit lp nhc nhngi dng khing li my tnh trong khong thi gian no . Ty thuc vo mt sthit lp, thit lp ny cthkhin ngi dng ngng vic tkhi ng. Tuy nhin, Windows Update s tng yu cuh khi ng da trn thit lp ny.

Delay Restart for scheduled installations: thit lp thi gian Windows Update chtrc khitng khi ng li.

Reschedule Automatic Updates scheduled installations: thit lp sln ch ca WindowsUpdate trc khi tip tc theo lch ci t.

Enable client-side targeting: thit lp cc nhm hoc tn my tnh sc nhn cc bn cpnht tdch v Microsoft Update.

Allow signed updates from an intranet Microsoft update service location: thit lp chophp ci t cc bn cp nht sdng chng thc.

Cu trc WSUSWSUS c thm rng tdoanh nghip nhcho n doanh nghip ln a quc gia. Trn thc t, bncn sdng mi WSUS cho mt chi nhnh vn phng vi hn 10 my tnh v mt WSUS c lp cho miphng IT kim sot cp nht.

Bn cng khng cn thit phi c nhng WSUS server dphng, tuy nhin bn cng cn sao lu c sdliu WSUS c thkhi phc khi gp ri ro.

Doanh nghip vi mt vn phng duy nht

Nu doanh nghip ch c mt vn phng, bn c thsdng mt WSUS server duy nht m khng cnquan tm n smy tnh client trong doanh nghip l bao nhiu.

Doanh nghip vi nhiu vn phng

Nu bn sdng mt WSUS server duy nht h tr cho tt c client cc vn phng, mi client scn phi download cc bn cp nht thng qua kt ni WAN. Vic download c thtn khong vi trmMB. V kt ni WAN slm ng truyn chm hn so vi kt ni mng LAN, download cc bn cp nhtln thng qua WAN snh hng khng nhn thi gian v ng truyn. Nu bng thng ca bnthp, cc client c ths khng nhn c cc bn cp nht.

cho php cc client nhn cc bn cp nht trong mng LAN, cu hnh mt WSUS server cho mi chinhnh vn phng v cu hnh WSUS server nhn cc bn cp nht theo mt cu trc phn cp t

Smith Nguyen St



6/27



nhng server chnh. V vi cch lm theo cu trc phn cp sem li cho bn shiu qu trong vickt ni thng qua WAN.

H thng WSUS server ton cu.

Smith Nguyen St



7/27



Cu trc phn cp WSUS server

Trong cu trc trn, ch c server WSUS ti Boston c thnhn cc bn cp nht tMicrosoft. Tt ccng vic cp nht c vn hnh bi server WSUS Boston. Cc server pha di s nhn thng tincp nht tnhng server trn n, chng hn vi s trn, server Los Angeles (downstream server)

s nhn cc bn cp nht t server Boston (upstream server). Tng t, server Argentina(downstream server) s nhn cc bn cp nht tserver Costa Rica (upstream server).

cung cp cc bn cp nht cho vn phng nh khng c WSUS server, bn cn phi cu hnh ccmy tnh client download bn cp nht tWSUS server gn nht. Nu vn phng ca bn c ngtruyn Internet nhanh, bn c thcn nhc vic c hay khng nn trin khai bn sao v WSUS ni blu trcc bn cp nht, bn c thcho cc client nhn cc bn cp nht trc tip tMicrosoft.

Cc iu kin cn thit trin khai WSUS

Khi ln khoch trin khai WSUS, bn cn c cc iu kin sau:

WSUS server phi c kni Internet (truy cp vo website Microsoft Update). Cc downstream server phi thit lp kt ni vi cc upstream server v s dng giao thc

HTTP (TCP port 80) hoc sdng SSL (TCP port 443). Cc my tnh client phi kt ni mng cc b (HTTP hoc HTTPS) Cc my tnh client phi l mt trong cc hiu hnh sau:

o Windows 2000 Service Pack 3 hoc Service Pack 4o Windows XP Professionalo Windows Vista

Smith Nguyen St



8/27



o Windows Server 2003o Windows Server 2008

Nu my tnh client t kt ni trong mng trong khong thi gian no (v d nu mtchuyn gia no ngh php hoc mt nhn vin lm vic ti nh trong mt thng v khng ktni n mng VPN), client cng s khng thdownload cc bn cp nht. Bn cn cu hnh cc

my tnh tng ci t cc bn cp nht twebsite Microsoft hoc sdng NAP v yu cucc my tnh phi cp nht trc khi kt ni n mng cc b.

Ln khoch ci t WSUS

Trong sut qu trnh ci t WSUS, bn cn lu mt svn sau:

Cp nht source: WSUS c thnhn cc bn cp nht trc tip ttrang web Microsoft Updatehoc tmt WSUS server khc. Bn nn cn nhc v chn phng php gim bng thng.Nu 2 WSUS server kt ni trong LAN, c 1 trong 2 server nhn bn cp nht tMicrosoftUpdate v server cn li c thnhn bn cp nht tserver thnht. Nu bn sdng WSUScho 3 chi nhnh vn phng v kt ni VPN thng qua Internet, y l cch hiu qu chi mi vn

phng khi download cc bn cp nht trc tip tMicrosoft v download cc bn cp nht cnphi c kt ni Internet. Cu trc WSUS ca bn phi c ssp xp hp l, cc downstreamserver s nhn cc bn cp nht tcc upstream server.

Ph chun v cu hnh nhn bn: nu bn sdng nhiu WSUS server v cu hnh ccserver nhn cc bn cp nht tmt WSUS server no , bn c thchn vic ng b ccph chun, thit lp, my tnh v cc nhm trong cu trc phn cp WSUS server. Nu bn cuhnh mt server ng vai tr l mt bn sao, bn khng cn ph chun cc bn cp nht ttrnWSUS server.

Cp nht lu tr: WSUS c th sao chp bn cp nht t Microsoft v lu tr chng voserver hoc lu trvo chnh cc my tnh client download cc bn cp nht tMicrosoft. Nubn chn lu trcc bn cp nht trong server, WSUS server cn ti thiu 6 GB dung lngtrng trong cng (mc d con sthc tc thln hn, ty thuc vo cc bn cp nht tMicrosoft cng nh cc gi ngn ngcn thit). Vic lu trcc bn cp nht trong server cthc xem l mt cch gim thiu bng thng Internet v cc client nhn bn cp nht thngqua LAN.

C s d liu: mc nh WSUS lu trdanh sch cc bn cp nht trong Windows InternalDatabase. Bn cn ti thiu 3 GB dung lng trng trong cng lu trWindows InternalDatabase mc d thc tkhong 1 GB. Bn c th sdng server lu trc s d liu(chng hn nh Microsoft SQL Server).

Ch : Mc nh, ng dn c s dliu trong WSUSC:\WSUS\UpdateServicesDbFiles\SUSDB.mdf

Website: trin khai WSUS cn phi c IIS v cc my tnh client nhn cc bn cp nht bngcch sdng giao thc HTTP hoc HTTPS. Nu bn khng sdng IIS trn WSUS server tora website mi v mt mc ch no , bn c thsdng website mc nh trong IIS.

Smith Nguyen St



9/27



Ngn ng: Cc bn cp nht c thc nhng gi ngn ngring i km. gim thiu dunglng cng sdng, bn nn chn download ch mt gi ngn ngcn thit cc my tnhclient c th truy cp n WSUS server d dng. Bn khng nn chn tt c cc ngn ngvtng dung lng v bng thng cn thit s rt cao.

Sn phm: Microsoft Update cung cp cho bn mt th vin sn phm a dng khng ch l cchiu hnh Windows. Chng hn l cc bn cp nht Exchange Server, ISA Server, SQL Serverv Office. Bn ch nn chn nhng ng dng v hiu hnh cn sdng trong doanh nghipgim thiu dung lng cng.

Kim nghim vic cp nht

Sau khi trin khai WSUS, mt smy tnh client c ths khng thcp nht c v vic ci t ccbn cp nht tht bi, nguyn nhn c thdo cc my tnh client ny cha c cu hnh, khng thucActive Directory hoc t kt ni trong mt thi gian di. Bn c thsdng mt sk thut xc nhcc trng hp trn:

Giao din Windows Update: bn c thsdng Computer and Report trong giao din ny xc nh cc my tnh client cha c ci t cc bn cp nht.

Microsoft System Center Configuration Manager 2007 (SCCM 2007): SCCM 2007 lphin bn mi nht ca Microsoft trong h thng cc sn phm qun tr h thng tp trung.SCCM 2007 cung cp cho bn thng tin chi tit v cc bn cp nht v cc ng dng trn ccmy tnh. SCCM 2007 l sn phm tt nht cho doanh nghip. Bn c thxem thm v SCCMti:http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspx

Microsoft Baseline Security Analyzer (MBSA): MBSA tng kim tra v xc nh cc vn li v cp nht v cc l hng bo mt trong cu hnh. MBSA s qut ton mng v cho php

bn c thxem c nhng my tnh no cha nm trong vng kim sot. Bn c thdownloadMBSA ti :http://www.microsoft.com/mbsa/.

Network Access Protection (NAP): bn c thsdng NAP v kt hp vi cng c xc thctrng thi ca my tnh (Windows System Health Validator, cng c ny c thxc nhn cc mytnh no va ci t cc bn cp nht.

Tng quan bi hc

WSUS cho php bn lu trv phn phi cc bn cp nht tMicrosoft thng qua mng, gipbn gim thiu c bng thng Internet. Thm vo , WSUS cn cho bn kim sot mi khicp nht v trin khai trn cc my tnh client.

Dch v Windows Update trn client nhn cc bn cp nht tWSUS server. Tuy thuc vo cchcu hnh Windows Update m bn c ththng bo n ngi dng nhng bn cp nht no c ci t hoc tng ci t m khng cn tng tc bi ngi dng. Bn c thcu hnhWindows Update vi Group Policy.

Smith Nguyen St

http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspxhttp://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspxhttp://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspxhttp://www.microsoft.com/mbsa/http://www.microsoft.com/mbsa/http://www.microsoft.com/mbsa/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.microsoft.com/mbsa/http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspx


10/27



Bn c thsdng ch mt WSUS server duy nht. Ngoi ra, trin khai mt WSUS server c lpcho mi vn phng gip bn gim thiu c bng thng Internet. Thm vo , WSUS serverc cu hnh nhn bn hoc c thtng. Vi cc trng hp ny, bn cn thit kcu trcdownstream v upstream nh gii thiu phn Cu trc WSUS.

Mt snguyn nhn c thkhin cc my tnh client khng thci t cc bn cp nht. kim tra, xc nh cc client , bn c thsdng giao din WSUS, SCCM 2007, MBSA hocNAP.

Trc nghim

1. Bn l k s h thng cho doanh nghip cung cp cc sn phm video. Doanh nghip ca bn c6 vn phng v mt phng IT qun l tt c 1200 my tnh client. Mi vn phng c 200 mytnh. M hnh WAN ca bn sdng cu trc hub-and-spoke, vi mi vn phng c kt nitrc tip n tr s chnh. Bn c ththit kcu trc WSUS nh thno?

A. Trin khai mt WSUS server cho mi vn phng. Cu hnh cc WSUS server ny cqun l bi mi vn phng v c h tr tphng IT.

B. Trin khai mt WSUS server tr s chnh. Cu hnh tt c cc my tnh client nhn ccbn cp nht trc tip tMicrosoft.

C. Trin khai mt WSUS server tr s chnh. Cu hnh tt c cc my tnh client nhn ccbn cp nht trc tip tWSUS server.

D. Trin khai mt WSUS server cho mi vn phng. Cu hnh mt WSUS server l bn saoca WSUS server tr s chnh.

2. Bn l k s h thng v cng vic ca bn l cu hnh v qun l cp nht cho doanh nghip.Bn cn sdng Group Policy cu hnh cc client download cc bn cp nht v ci t chngtng m khng cn nhc nhngi dng. Thit lp no trong Group Policy gip bn lm iuny?

A. Allow automatic update immediate installation.B. Configure Automatic Updates.C. No auto-restart for scheduled automatic updates.D. Enable client-side targeting.

3. Phin bn no m bn c thsdng trin khai cc my tnh client download cc bn cpnht tWSUS.

A. Windows 95B. Windows 98C. Windows 2000 ProfessionalD. Windows XP Professional

Smith Nguyen St



11/27



BI HC 2: SDNG WINDOWS SERVERUPDATE SERVICES

Vi Windows Server 2008, bn c thci t WSUS bng cch sdng Server Manager v qun l ntrong giao din Update Services. Phin bn mi WSUS chy trn Windows Server 2008 cung cp cho bnnhiu tnh nng cng nh giao din ngi dng thn thin.

Sau bi hc, bn s: Ci t WSUS trn Windows Server 2008. Cu hnh cc nhm my tnh, ph chun bn cp nht v xem cc bo co WSUS. Xl sckhi cho c client v server khi gp vn vci t cc bn cp nht.

Thi lng bi hc: 40 pht

Ci t Windows Server Update Servers

Bn c thdownload WSUS min ph tihttp://www.microsoft.com/wsus.

Sau khi ci t bn cn ng b cp nht tMicrosoft Update. Thc hin cc bc sau:

1. ClickStart >Administrative Tools > Microsoft Windows Server Update Services.2. Chn server v click vo lin kt Synchronize Now.

Qu trnh ng b din ra vi pht (cng c thnhiu hn 1 gi). Sau khi ng b, bn c thbt uqun l WSUS.

Cu hnh Windows Server Update ServicesSau khi ci t WSUS v thc hin ng b ha, bn bt u thc hin cu hnh WSUS:

1. M bng cu hnh WSUS.2. Cu hnh cc nhm my tnh c phn phi cc bn cp nht nhng thi im khc nhau.3. Cu hnh cc my tnh client nhn cc bn cp nht tWSUS server.4. Sau khi kim tra cp nht, ph chun hoc hy b cc cp nht.5. Xem cc bng bo co xc nhn cc bn cp nht c phn phi thnh cng v xc nh

cc vn li.

Smith Nguyen St

http://www.microsoft.com/wsushttp://www.microsoft.com/wsushttp://www.microsoft.com/wsushttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.microsoft.com/wsus


12/27



Cu hnh WSUS Option

Bn c thcu hnh cc ty chn theo tng mc sau:

Update Source and Proxy Server: cu hnh cc upstream server hoc cu hnh WSUS servernhn cc bn cp nht tMicrosoft. Ti y, bn c ththay i cc thit lp nu khng cn sali cu trc WSUS.

Products and Classifications: chn cc bn cp nht Microsoft m bn mun WSUSdownload. Bn nn chn thit lp ny khi bt u h tr cho mt sn phm mi tMicrosofthoc ngng h tri vi mt sn phm no (chng hn l mt phin bn Microsoft Officec)

Update Files and Languages: chn ni lu trcc bn cp nht v gi ngn ngca bn cpnht.

Synchronization Schedule: cu hnh tng ng b cc bn cp nht tnhng upstreamserver.

Smith Nguyen St



13/27



Automatic Approval: cu hnh tng ph chun cc bn cp nht. V d, bn c thcu hnhnhng bn cp nht v li bo mt c tng ph chun v ci t. Bn ch nn chn thitlp ny nu nh bn quyt nh bqua bc kim nghim cp nht.

Computer: chn nhng my tnh tnhm no thng qua giao din Update Services hocGroup Policy.

Server Cleanup Wizard: WSUS stch ly cc bn cp nht khng cn cn thit v cc mytnh khng cn hot ng trong thi gian ngoi gi lm vic. Trong thit lp ny, bn c thxab nhng bn cp nht qu hn hoc khng cn thit vi mc ch dn dp cng cng nhgim dung lng c s dliu WSUS.

Reporting Rollup: mc nh, downstream server s gi cc bn bo co thng tin ln upstreamserver. Bn c thsdng thit lp ny cu hnh cho tng server c thqun l c ccbn bo co dliu.

E-mail Notifications: WSUS c thgi e-mail mi khi nhng bn cp nht mi c ng bha, nhng thng tin qun trph chun, kim nghim cc bn cp nht ny. Thm vo ,sdng thit lp ny gi cc bn bo co trng thi cp nht hng ngy hoc hng tun.

Microsoft Update Improvement Program: mc nh b v hiu ha, bn c thbt thit lpny ln gi cho Microsoft nhng thng tin chi tit v qu trnh cp nht trong doanh nghipca bn, bao gm slng my tnh hon thnh v cha hon thnh cu t i vi mi bncp nht. Microsoft s sdng nhng thng tin ny nng cao v ci thin quy trnh cp nht.

Personalization: trn trang ny bn c th cu hin cho php hin th cc d liu tdownstream server. Bn c thchn cc thnh phn no c hin th trong danh sch To do

lisy that appears khi bn click chn vo WSUS server trn giao din Update Services.

WSUS Server Configuration Wizard: cho php bn cu hnh li WSUS.Cu hnh cc nhm my tnh

Trong a scc mi trng, bn s khng thtrin khai tt c cc bn cp nht n tt c cc clienttrong mt ln. cho bn kim sot c khnng nhn cc bn cp nht ca my tnh, WSUS 3.0 chophp bn cu hnh cc nhm my tnh v trin khai cp nht n mt hoc nhiu nhm. Bn c thtothm cc nhm phn loi theo nhn hiu my tnh hoc cc phng ban trong doanh nghip. Bn c thto cc nhm theo cc v p dng cc quy trnh cp nht, c thnh sau:

Kim tra thnghim: trin khai cp nht trn m hnh lab thnghim. Vic ny cho phpbn xc nh c khnng lm vic n nh hay khng. Sau bn c thkim nghim trnmt my tnh sau khi ci t cc bn cp nht.

Th im: sau khi kim nghim, bn s trin khai cp nht n mt nhm th im no .Nhm ny c thl phng ban IT hoc mt nhm phng ban khc c am hiu v my tnh. Vicny gip bn thnghim trn mt nhm my tnh v xem xt khnng lm vic.

Smith Nguyen St



14/27



Trin khai tht: nu trin khai th im sun s, khng gp bt cvn no sau 1 tun thbn c thtrin khai n tt c cc my tnh lm vic trong cng ty. iu ny gip bn gimthiu ri ro.

Bn c thcu hnh cc nhm my tnh theo 1 trong 2 hng sau:

Server-side targeting: thch hp i vi doanh nghip nh, bn c ththm cc my tnh vonhm bng cch cu hnh trn giao din Update Services.

Client-side targeting: thch hp i vi doanh nghip ln, bn sdng Group Policy cuhnh cc my tnh no thuc nhm cc my tnh. Cc my tnh c tng avo ngnhm khi chng kt ni n WSUS server.

Cho d bn trin khai bng cch no i chng na th vic u tin bn cn lm l to nhm my tnh.Mc nh c mt nhm my tnh duy nht l:All Computer. Nhm ny bao gm tt ccc my tnh. to thm nhm, thc hin cc bc sau:

1. ClickStart >Administrative Tools > Microsoft Windows Server Update Services.2. Click Computer. R-click voAll Computers v chnAdd computer group.3. Nhp tn nhm v clickAdd.4. Thc hin li bc 2 v 3 nu bn mun thm cc nhm khc.

Server-side targeting: thm cc my tnh vo mt nhm. Thc hin cc bc sau:

1. Trn giao din Update Services, click Computer > All Computer v chn Unassignedcomputers. Sau , r-click vo my tnh bn mun a vo nhm (bn c thchn nhiu mytnh bng cch click v giphm Ctrl) v chn Change Membership.

2. Ti hp thoi Set computer group membership, nh du chn vo nhm m bn mun amy tnh vo. ClickOK.

Client-side targeting: bn c thsdng Group Policy object (GPO) thm cc my tnh vo ccnhm khi. Trc tin, bn cn thit lp cho php sdng client-side targeting. Thc hin cc bc sau:

1. ClickStart >Administrative Tools > Microsoft Windows Server Updates Services.2. ClickOptions > Computers.3. Ti hp thoi Computer, chn Use Group Policy or Registry Settings on Computers. Sau

clickOK.

Tip theo, cu hnh GPO di chuyn cc my tnh n cc nhm. Bn cn to mt GPO c lp cho minhm my tnh. Sau cu hnh cho php p dng i vi nhng my tnh thch hp.

1. Ti Group Policy Management Editor, m GPO.2. ClickComputer Configuration > Administrative Templates > Windows Components >Windows Update.3. Double-click vo chnh sch Enable Client-side targeting.4. Hp thoi hin th, chn Enabled. Sau nhp tn nhm my tnh m bn mun p dng v

clickOK. Sau khi cc client c p dng Group Policy, khi ng li Windows Update Services.

Smith Nguyen St



15/27



Kim tra nhanh1. Giao thc no cho php dch v Windows Update ca client c thnhn c cc bn cp nht

tserver WSUS?2. Bn nn sdng cch trin khai client-side targeting hay server-site targeting cho doanh nghip

lnTr li nhanh

1. HTTP.2. Doanh ngip ln th nn sdng client-side targeting

Cu hnh cc my tnh client

bi hc trc, bn c tm hiu v skhc nhau ca cc chnh sch Group Policy trong vic cuhnh cc my tnh client nhn cc bn cp nht. Vic c nhiu thao tc cu hnh s khin bn tn thigian, phn ny bn sc hng dn cu hnh gim thiu cc bc cu hnh khng cn thit nhmmc ch cc client c thdownload cc bn cp nht tWSUS server.

1. M GPO m bn mun s dng thc hin cu hnh. Trong Group Policy ManagementEditor, click Computer Configuration > Administrative Templates > WindowsComponents > Windows Update.

2. Double-click vo Specify intranet Microsoft Update service location.3. Chn Enabled. Trn ctrng Set the intranet update services for detecting updates v

Set the intranet statistics server, nhp tn ca WSUS server, chng hnhttp://SERVER. ClickOK.

Smith Nguyen St

http://server/http://server/http://server/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://server/


16/27



4. Double-click vo chnh sch Configure Automatic Updates.5. Chn Enabled. Cu hnh thit lp tng cp nht. Ti Scheduled install day bn c th

chn tt c cc ngy trong tun hoc mt ngy c thtrong tun p dng cc chnh sch. Thitlp thi gian thc hin chnh sch ti danh sch Scheduled install time.

Notify for download and notify for install: thng bo download v ci t n ngidng.

Auto download and notify for install: tng download v thng bo ci t nngi dng.

Auto download and schedule the install: tng download v thit lp thi gian cit.

Allow local admin to choose setting: cho php ngi dng c th tchn nhngthit lp ny.

Vi nhng thit lp trn, cc my tnh client s nhn c cc bn cp nht tWSUS server v tngci t.

Smith Nguyen St



17/27



Ph chun cc bn cp nht

Mc nh, tt c cc bn cp nht u cha c ph chun. Bn cn phi cu hnh ph chun cc bncp nht, thc hin cc bc sau:

1. ClickStart >Administrative Tools > Microsoft Windows Server Update Services.2. Click vo WSUS server. Sau clickUpdate, la chn cc ty chn sau:

All updates: hin th tt c bn cp nht. Vic lm ny thun li cho vic ph chuncc bn cp nht.

Critical updates: ch hin th nhng bn cp nht v li nghim trng, nhng bn v liny cn c u tin hng u trong vic cp nht m bo an ton h thng cngnh my tnh ngi dng.

Security updates: ch hin th nhng cp nht lin quan n bo mt. WSUS updates: hin th nhng bn cp nht lin quan n quy trnh xl cp nht.

3. Ti danh schAppoval, chn Unapproved. Bn c th sdng danh sch xem cc bn cpnht c ph chun.

4. Tdanh sch Status, chnAny. ClickRefreshlm mi hin th cc bn cp nht.sp xp cc bn cp nht theo thtu tin v ngy thng, r-click vo mt ct v chn ReleaseDate. Sau , click v ct Release Datesp xp li.

5. Chn nhng bn cp nht bn mun ph chun, Bn c thchn nhiu bn cp nht bng cchclick v giphm Ctrl. Ngoi ra bn c thchn nhiu bn cp nht mt lc bng cch clickchut v giphm shift. Nhn Ctrl +Achn tt c cc bn cp nht. R-click vo bn cp nht chn v chn Approve (vi mc ch phn phi cc bn cp nht ny n client vo thiim cc client kim tra cp nht) hoc chn Decline (khng cho phn phi bn cp nht ny).

6. Nu hin th hp thoiApprove Updates, chn nhm my tnh bn mun p dng cp nht vchnApproved for install. ClickOKnu bn hon tt qu trnh ph chun7. thit lp thi hn cp nht, bn c thr-click vo nhm my tnh v chn Deadline, sau chn thi hn cp nht.

8. ClickOK.Tchi cc bn cp nht

Sau khi ph chun cc bn cp nht cn thit, bn c thtchi ph chun nu bn khng mun ci tcc bn cp nht ny trn my tnh. Vic tchi cc bn cp nht khng nh hng g n cc my tnhclient.

1. Ti giao din Update Services, r-click vo bn cp nht bn mun tchi v chn Decline.2. Ti hp thoi Decline update, clickYes.

xem li cc bn cp nht b t chi, ti danh sch Approval, chn Declined. Sau clickRefresh.

Smith Nguyen St



18/27



Xem cc bng bo co

Bn c th xem chi tit cc bn cp nht, my tnh hoc s ng b. Click Report trn giao dinUpdate Services.

WSUS cung cp cho bn cc thng tin sau:

Update Status Summary: hin th cc thng tin v mi bn cp nht m bn chn, bao gmm ty v bn cp nht (c cung cp bi Microsoft), cc bn cp nht c ph chuntrn nhm my tnh, slng my tnh ci t cc bn cp nht.

Update Detailed Status: ngoi nhng thng tin hin thUpdate Status Summary, mcny hin th trng thi ca tt c my tnh cho mi cp nht theo tng trang, cho php bn xcnh chnh sch my tnh ny ci t cp nht. y l nhng thng tin hu ch gip bn cthxc nh nhng l hng bo mt cng nh cc my tnh dnh l hng bo mt .

Update Tabular Status: hin th nhng d liu ca c bng Update Status Summary vUpdate Detailed Status v xut ra bo co dng bng tnh.

Computer Status Summary: hin th nhng thng tin cp nht cho mi my tnh. Computer Detailed Status: ngoi nhng thng tin Computer Status Summary, mc ny

hin th nhng my tnh no ci t nhng bng cp nht no. Computer Tabular Status: cung cp cho bn thng tin ca c bng Computer Status

Summary v Computer Detailed Status v xut ra bo co dng bng tnh. Syncronization Results: hin th kt ququ trnh ng b ha mi nht.

Khi bn m mt bng co co, bn c thcu hnh lc cc thng tin hin th trong bng bo co .Chng hn nh nhng bng bo co m bn mun hin th theo tn sn phm

Smith Nguyen St



19/27



Qun l ng b ha

Ti mc Synchronizations s hin th danh sch thi gian WSUS nhn danh sch cc bn cp nht tupstream server. Bn c thr-click vo mt ng b bt k v chn Synchronizationxem thng tinchi tit.

Khc phc sctrong qu trnh cp nhtThnh thong, bn s c thm kinh nghim trong vic khc phc scci t nu nh gp phi li trongvic cp nht. Bn c thsdng WSUS xc nh cc client no c ci t cc bn cp nhthoc cha ci t.

Khc phc scWSUS

WSUS to ra 3 bn ghi:

Application event log: bn hi ny lu trcc skin lin quan n vn ng b ha, litrong Update Services, li c s dliu WSUS lin quan n source ci t WSUS. Hu ht ccskin u cung cp thng tin chi tit vnguyn nhn cng nh hng dn khc phc sc.Thm vo , bn c thtm kim li ti tranghttp://support.microsoft.com.

C:\Program Files\Update Services\LogFiles\Change.txt: mt tp tin c nh dng *.txtlu trcc thng tin vci t cc bn cp nht, ng b v sthay i cu hnh WSUS. Ccthng tin ny khng chi tit nhng cng c thcho bn bit nhng thng tin quan trng chnghn nu qun trvin thay i mt thit lp no , tp tin s ghi li dng chWSUSconfoguration has been changed.

C:\Program Files\Update Services\LogFiles\SoftwareDistribution.txt: hin th thng tinchi tit v c h tr tMicrosoft.

Khc phc scWindows Update trn client

xc nh cc vn l nguyn nhn khi cp nht tht bi, thc hin cc bc sau:

1. M tp tin %Systemroot%\WindowsUpdate.log cc thng bo li. Bn c thxem hng dnc WindowsUpdate.log ti a chhttp://support.microsoft.com/kb/902093/

2. Xc nhn client no kt ni n WSUS server bng cch m trnh duyt Web v g a chhttp:///iuident.cab. Nu khung nhc nh hin ra thng bo bn cndownload tp tin, c ngha l client kt ni n WSUS server.

3. Nu bn s dng Group Policy cu hnh Windows Update, bn c th s dng cng cResultant set of Policy (RSOP) xc nhn cc cu hnh. Bn vo Run vo g Rsop.mscmRSOP. Trong RSOP, clickComputer Configuraion >Administrative Templates > WindowsComponents > Windows Updatexem v xc nhn cc thit lp.

Nu bn pht hin ra mt vn v sau cu hnh li khc phc sc, bn cn khi ng lidch v Windows Update trn my tnh client thay i c hiu lc. Bn c th s dng cng cServices (services.msc) hoc sdng lnh sau khi ng li dch v Windows Update.

Smith Nguyen St

http://support.microsoft.com/http://support.microsoft.com/http://support.microsoft.com/http://support.microsoft.com/kb/902093/http://support.microsoft.com/kb/902093/http://support.microsoft.com/kb/902093/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://support.microsoft.com/kb/902093/http://support.microsoft.com/


20/27



net stop wuauserv

net start wuauserv

Trong khong 6 10 pht, Windows Update s gi thng tin ln server.

Windows Update bt u truy vn n WSUS server, sdng lnh sau:

wuauclt /a

Xa b cc bn cp nht

Thnh thong bn vn gp li cp nht, chng hn sau khi bn cp nht ln phin bn mi th ng dngkhng cn tng thch, bn c thxa b cp nht , thc hin cc bc sau:

1. ClickStart > Control Panel.2. Di Programs, clickUninstall a program.3. Di Tasks, clickView installedupdates.4.

Chn bn cp nht bn mun xa b. ClickUninstall.5. Khi ng li nu cn thit.

Smith Nguyen St



21/27



THC HNH: TRIN KHAI WSUS

Trong bi thc hnh, bn cu hnh WSUS trn server, sdng Group Policy cu hnh cc my tnhclient, sau ph chun v phn phi cc bn cp nht.

Bi thc hnh 1: ci t WSUS v thc hin ng b haTrong bi thc hnh ny, bn sci t WSUS. gim thiu dung lng lu tr, bn s cu hnh WSUSserver kt ni trc tip n client nhn cc bn cp nht trc tip tMicrsoft.

1. Download WSUS ti a chhttp://www.microsoft.com/wsus/2. Ti trang License Agreement, clickI accept the terms of the License agreementchp

nhn cc iu khon ci t v sdng. ClickNext.3. Ti trang Required Component to use administration UI, thng bo cho bn cn ci t

ng dng Microsoft Report Viewer 2008 Redistributablexem cc bng bo co trcquan. ClickNext.

4. Ti trang Select Update Source, nh du chn Store updates locally lu trcc bncp nht trn server. ClickBrowse v chn ng dn cho WSUS. ClickNext.

5. Trn trang Database Options, nh du chn vo Install Windows Internal Database onthis computer. ClickNext.

Smith Nguyen St

http://www.microsoft.com/wsus/http://www.microsoft.com/wsus/http://www.microsoft.com/wsus/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.microsoft.com/wsus/


22/27



6. Ti trang Web Site Selection nh du chn vo Create a Windows Server UpdateServices 3.0 SP2 Web site sdng mt website khc website mc nh trong IIS. ClickNext.

7. Ti trang Ready to Install Windows Server Update Services xem li cc thng tin cui cngtrc khi ci t. ClickNexttin hnh ci t.

8. ClickFinishhon tt.9. i khong 2 pht, trang Before You Begin hin th, clickNexttin hnh cu hnh WSUS

server.

10.Ti trang Join the Microsoft Update Improvement Program, nh du chnYes, I wouldlike to join the Microsoft Update Improvement Programc h tr tMicrosoft trongqu trnh cp nht. ClickNext.

11.Ti trang Choose Upstream Server, nh du chn vo Synchronize from MicrosoftUpdate nu bn mun ng bn Microsoft Update. Nu bn mun ng bn mt WSUSkhc nh du chn Synchronize from another Windows Server Update Services server,sau nhp tn server mun ng b v port. Ngoi ra, click vo Use SSL whensynchronizing update information nu bn mun sdng chng thc SSL trong qu trnhng b. nh du chn This is a replica of the upstream server nu bn mun server hinti ng vai tr upstream server. ClickNext.

12.Ti trang Specify Proxy Server, nu bn mun sdng proxy server nh du chn Use aproxy server when synchronizing. ClickNext.

Smith Nguyen St



23/27



13.Ti trang Connect to Upstream Server, clickStart Connectingbt u kt ni theo sla chn m bn chn trang Choose Upstream Server. i qu trnh kt ni hon tt vclickNext.

14.Ti trang Choose Languages, nh du chn vo Download updates only in theselanguages v chn gi ngn ng. Vic ty chn gi ngn ng s gip bn gim c bng

thng. ClickNext.15.Ti trang Choose Products, chn sn phm m bn mun cp nht. ClickNext.16.Ti trang Choose Classifications, nh du chn nhng i tng bn mun cp nht. Click

Next.17.Ti trang Set Sync Schedule, nh du chn Synchronize automatically v thit lp thi

gian ng b ha. ClickNext.18.i qu trnh ng b ha hon tt.

Bn cng c ththc hin cch sau ng b ha.

1. ClickStart >Administrative Tools > Microsoft Windows Server Update Services.2. Giao din Update Services hin th.3. Chn server l SERVER (tn server bn mun ci t WSUS). Ti khung Details, click

Synchronize Nowthc hin ng b ha vi website Microsoft Update

Qu trnh ng b din ra trong vi pht (c thl hn mt gity ng truyn ca bn)

Bi thc hnh 2: Cu hnh cc my tnh client nhn cc bn cpnht

Trong bi thc hnh, bn s sdng Group Policy cu hnh cc my tnh client nhn cc bn cp nhttWSUS server thay v trc tip tMicrosoft.

1. M GPO bn mun p dng cu hnh. Ti Group Policy Management Editor, click chnComputer Configuration > Administrative Templates > Windows Components >Windows Update.

2. Double-click vo Specify intranet Microsoft Update services location.3. Chn Enabled. Trn c hai trng l Set the intranet update service for detecting

updates v Set the intranet statistics server, ghttp://server. ClickOK.4. Double-click vo Configure Automatic Updates.5. Chn Enabled. Cu hnh cc thit lp tng cp nht. ClickOK.

ng nhp vo my tnh client bng quyn Administrator. Vo Run v g lnh gpupdate /forcepdng cc chnh sch va cu hnh trn.

Bi thc hnh 3: Ph chun cc bn cp nht

Trong bi thc hnh ny, bn s ph chun mt bn cp nht trin khai n my tnh client.

1. Trn WSUS server, ti giao din Update Services, clickUpdates. ChnAll Updates.2. Ti danh schApproval, chn Unapproved.3. Ti danh sch Status, chnAny. ClickRefreshhin th cc bn cp nht.

Smith Nguyen St

http://server/http://server/http://server/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://server/


24/27



4. Chn nhng bn cp nht gn y nht p dng cho my tnh client. R-click vo bn cp nht chn v clickApprove.

5. Trn hp thoi Approve updates, chn All Computers v chn Approved for install. ClickOK.

6. Nu hin th cc vn v bn quyn, clickI accept.7.

Xem cc li hin th trong hp thoiApproval progressxc nhn cc bn cp nht cci t n client. Sau clickClose.

8. Ti giao din Update Services, chn Computers > All Computers. Ti danh sch Status,chnAny v clickRefresh. My tnh client lc ny s hin th trn danh sch

Trn my tnh client, khi ng li dch v Windows Update.

Tng quan bi hc

Bn c thdownload WSUS tMicrosoft.com. Sau khi ci t WSUS v ng b nhng bn cp nht tupstream server, bn nn cu hnh cc

nhm my tnh cho php chng nhn c cc bn cp nht. Tip theo, ph chun hoc tchi cc bn cp nht v i cho chng c phn phi xung cc client. Sdng bng bo coxc nhn qu trnh cp nht hon tt v xc nh nhng my client no hoc cha ci tcc bn cp nht.

Bn c thxem bn ghi log v qu trnh cp nht khc phc scv WSUS hoc trn client. Mc d bn c thxa mt sbn cp nht bng cch sdng WSUS, tuy nhin bn nn xa

cc bn cp nht tnhng my tnh client.

Trc nghim1. Bn l k s h thng mng ca mt doanh nghip chuyn v thit b m thanh nh sng. Mi

y, bn sdng MBSA kim tra cc vn cp nht bo mt ca my tnh client. Bn nhnthy c mt smy tnh khng thci t c cc bn cp nht. Bn c thxem thng tin ccmy tnh ny u? (chn tt ccc p n ng)

A. Xem System log trn my tnh client.B. Xem Application and Services logs \Microsoft\Windows\Windows

UpdateClient\Operational trn my tnh client.

C. Xem System log trn WSUS server.D. Xem %SystemRoot%\WindowsUpdate.log.2. Bn l k s h thng ca mt cng ty kin trc. Bn va mi trin khai WSUS v bn cn xc

nhn cc bn cp nht phn phi thnh cng. Thng tin no sau y m bn nhn c tbo co Update Status Summary?

A. Cc nhm my tnh c ph chun cc bn cp nht.B. Cc my tnh hon tt ci t cc bn cp nht.C. Bn cp nht b xa b.D. Slng my tnh khng thci t mt bn cp nht.

Smith Nguyen St



25/27



3. Bn ang trin khai WSUS cho doanh nghip ln. Hin ti, bn cu hnh cc my tnh client thuccc nhm khc nhau bn c thtrin khai cp nht. Bn c thcu hnh a my tnh vonhm bng cch no? (chn tt ccc p n ng)

A. Bt chnh sch Configure Automatic Updates.B. Thit lp Client-side targeting trong Group Policy.C.

Ti Update Services, r-click vo my tnh v chn Change Membership.D. Ti Update Services, a my tnh vo nhm thch hp.

Tm tt chng WSUS cho php bn kim sot v phn phi cc bn cp nht tMicrosoft n my tnh client.

Mt WSUS server c thsao chp cc bn cp nht tMicrosoft v lu trchng ti server .Sau cc my tnh client s download cc bn cp nht t WSUS server thay v downloadchng t Microsoft thng qua Internet. h tr doanh nghip vi nhiu vn phng,downstream WSUS server c thng b ha cc bn cp nht, ph chun v cu hnh thit lptupstream WSUS server, cho php bn c ththit kcu trc phn cp c thm rngquy m.

Ci t WSUS cn phi ci t IIS v WSUS c thsdng site mc nh c sn khi mi ci tIIS l Default Web Site. Sau khi ci t WSUS, bn c thqun l WSUS vi giao din Update

Services. Trc tin, bn nn ng b WSUS server vi website Microsoft Update. Sau , tocc nhm my tnh trin khai. Tip theo, cu hnh cc my tnh client c thdownload ccbn cp nht tWSUS server thay v download tMicrosoft Update server thng qua Internet.

Thut ng

Downstream server Upstream server Windows Server Update Services (WSUS)

Smith Nguyen St



26/27



Ngcnh

Trong nhng ngcnh sau y, bn sc p dng thit kh tng WSUS.

Ngcnh 1: Ln khoch trin khai h tng WSUS c bn

Bn l mt k s h thng ca ICT24H. Hin ti, bn cu hnh tt c my tnh client download cc bncp nht trc tip tMicrosoft v tng ci t cc bn cp nht ny. Tuy nhin, sau khi mt phinbn mi c tung ra, bn nhn thy ha n dch v bng thng Internet tng t bin sau khiMicrosoft tung ra phin bn mi trn website Windows Update.

V th, bn sdng WSUS gim bng thng sdng cho tr s chnh cha khong 250 my tnh.Thm ch, bn bt u kim tra thnghim cp nht trc khi trin khai tht. Tuy nhin bn khng cnhn vin no vn hnh vic kim nghim , v thbn chn cch tng ph chun v ci t cc

bn cp nht.

Bn ti phng gim c tho lun vha n ph thu bao tISP. Gim c yu cu bn tr li mtscu hi sau:

1. Lm thno gim bng thng tWSUS?2. Cn bao nhiu WSUS server?3. Lm thno cu hnh WSUS tng ph chun cc bn cp nht?

Ngcnh 2: Ln khoch trin khai mt h tng WSUS phc tp

Bn l k s h thng ca ICT24H, mt tp on a quc gia vi nhiu chi nhnh vn phng khp nmchu. Tr schnh t ti London v bn c cc chi nhnh vn phng t ti New York, Mexico, Tokyov France. Tt ccc vn phng u c trang bng truyn Internet tc cao v chng c ktni VPN theo cu trc full-mesh (mng li khp kn). Hay ni mt cch khc l mi vn phng kt nitrc tip n 4 vn phng cn l i.

Hin ti, phng IT London qun l cvn phng London v New York. Cc vn phng Mexico, Tokyov France c cc phng IT ca ring h. Bn bt u trin khai WSUS trn Windows Server 2008 v tora mt cu trc p ng kt ni cho 5 vn phng.

Sau l cuc tr chuyn gia trng phng IT vn phng Mexico v gim c ca bn. Ni dung nhsau:

Trng phng IT vn phng Mexico: Ti ni chuyn vi cc trng phng IT Tokyo vFrance, v h c nhng yu cu k thut , ngn ng, hiu hnh v kim nghim ring bit. Vth, chng ti cn qun l vic ph chun cp nht. Tuy nhin, chng ti chng b ha cpnht tserver trung tm

Gim c ca bn: Khng thnh vn cho d bn c ng b cp nht gia cc vn phnghoc tInternet. V chng ta sdng VPN v tt cthng qua Internet.

Smith Nguyen St



27/27


Cu hi:

1. Bn cn bao nhiu WSUS server v cu trc nh thno?2. WSUS server no sc nhn bn v c qun l c lp?

--- Ht ---

Smith Nguyen St
http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudio

wsus - smith.n studio

Documents