Microsoft® Official Course

Module 12

Implementing Update Management

Module Overview

Overview of WSUS•Deploying Updates with WSUS

Lesson 1: Overview of WSUS

What Is WSUS?

The WSUS Update Management Process•Server Requirements for WSUS

What Is WSUS?

Automatic updates

Server running Windows Server Update Services

Automatic updates

LAN

Internet

Test clients

Microsoft Update website

The WSUS Update Management Process

Update Management

Phase 1: Assess

•Set up a production environment that will support update management for routine and emergency scenarios

Phase 3: Evaluate and Plan

•Test updates in an environment that resembles, but is separate from, the production environment

•Determine the tasks necessary to deploy updates into production, plan the update releases, build the releases, and then conduct acceptance testing of the releases

Phase 4: Deploy

•Approve and schedule update installations•Review the process after the deployment is complete

Phase 4: Deploy

•Approve and schedule update installations

•Review the process after the deployment is complete

Phase 2: Identify

•Discover new updates in a convenient manner

•Determine whether updates are relevant to the production environment

Identify

Evaluate and Plan

Deploy

Assess

Server Requirements for WSUS

•Software requirements:• Internet Information Services 6.0 or newer• Microsoft .NET Framework 2.0 or newer• Microsoft Management Console 3.0• Microsoft Report Viewer Redistributable 2008 or newer• SQL Server 2012, SQL Server 2008, SQL Server 2005 SP2, or Windows Internal Database

•Hardware requirements:• 1.4 GHz or faster x64 processor• 2 GB of RAM or greater• 10 GB available disk space (40 GB or greater is recommended)

Lesson 2: Deploying Updates with WSUS

Configuring Automatic Updates

WSUS Administration

What Are Computer Groups?•Approving Updates

Configuring Automatic Updates

•You must configure the client computers to use the WSUS server as the source for updates•You can use Group Policy to configure clients, including the following settings:• Update frequency• Update installation schedule• Automatic restart behavior• Default computer group in WSUS

WSUS Administration

•You can use the WSUS Administration console to:• Manage updates• Configure computer groups• View computer status• View synchronization information• Configure and view WSUS reports• Configure WSUS settings and options

• In Windows Server 2012, WSUS also includes Windows PowerShell cmdlets for administration

What Are Computer Groups?

•You can use computer groups to organize WSUS clients•The default computer groups include:

•You can create custom computer groups to control how updates are applied

All Computers Unassigned Computers

Approving Updates

•Updates can be approved automatically, but it is not recommended•Updates should be tested before they are approved for production•Updates can be declined if they are not needed•Updates can be removed if they cause problems

Lab: Implementing Update Management

Exercise 1: Implementing the WSUS Server Role

Exercise 2: Configuring Update Settings•Exercise 3: Approving and Deploying an Update by Using WSUSLogon InformationVirtual machines: 20411B-LON-DC1

20411B-LON-SVR120411B-LON-SVR420411B-LON-CL1

User name: Adatum\AdministratorPassword: Pa$$w0rdEstimated Time: 60 minutes

Lab Scenario

A. Datum is a global engineering and manufacturing company with head office based in London, UK. An IT office and a data center are located in London to support the London location and other branch office locations. A. Datum has recently deployed a Windows Server 2012 server and client infrastructure.

A. Datum has been manually applying updates to servers in a remote location. This has resulted in difficulty identifying which servers have updates applied and which do not. This is a potential security issue. You have been asked to automate the update process by extending A. Datum’s WSUS deployment to include the branch office.

Lab Review

•You created a separate group for the Research department. Why would you configure a separate group for part of your organizations’ computers?•What is the advantage of configuring a downstream WSUS server?

Module Review and Takeaways

Review Questions•Tools