Module 16: Software Maintenance Using

Windows Server Update Services

Overview

Introduction to Windows Server Update Services

Installing and Configuring Windows Server Update Services

Managing Windows Server Update Services

Changes to Service Pack 1

Lesson 1: Introduction to Windows Server Update Services

What Is Microsoft Update?

What Is Automatic Updates?

What Is Windows Server Update Services?

Windows Server Update Services Process

Changes to Service Pack 1

What Is Microsoft Update?

Microsoft Update is a Microsoft Web site that includes:Microsoft Update is a Microsoft Web site that includes:

Updates for Microsoft Windows operating systems, software, and device drivers

Updates for Microsoft applications

New content that is added to the site regularly

Updates for Microsoft Windows operating systems, software, and device drivers

Updates for Microsoft applications

New content that is added to the site regularly

What Is Automatic Updates?

Automatic Updates is client software that:Automatic Updates is client software that:

Communicates with Microsoft Update or WSUS

Automatically downloads updates

Notifies users of update availability

Communicates with Microsoft Update or WSUS

Automatically downloads updates

Notifies users of update availability

Automatic Updates

Server running Windows Server Update Services

Automatic Updates

LAN

What Is Windows Server Update Services?

Microsoft Update Web site

Internet

Test Clients

Windows Server Update Services Process

Server-Side ProcessServer-Side Process

1. WSUS runsscheduled synch1. WSUS runsscheduled synch

No?

2. Testing? Yes?

3. Admin approves new packages

Test new packages

Client-Side ProcessClient-Side Process

5. AU waits for next scheduled check5. AU waits for next scheduled check

System restart 4. Do any packages require a restart?

3. Scheduled install job begins

1. Automatic Updates on client checks WSUS

2. Is Administrator logged on?Yes?

No?

Administrator sees status balloon, can deferinstallation

Yes?

No?

Changes to Service Pack 1

Support for Windows Vista

Full client language support

New version of Microsoft SQL Server Desktop Engine

Faster performance

Hotfix rollup

Support for Microsoft SQL Server 2005 and 2008

Enhanced bulk approval capability

Detailed reporting

Support for Windows Vista

Full client language support

New version of Microsoft SQL Server Desktop Engine

Faster performance

Hotfix rollup

Support for Microsoft SQL Server 2005 and 2008

Enhanced bulk approval capability

Detailed reporting

Lesson 2: Installing and Configuring Windows Server Update Services

WSUS Deployment Scenarios

Server Requirements for Windows Server Update Services

Automatic Updates Configuration

Security Configuration Wizard

WSUS Deployment Scenarios

Main OfficeWSUS Server

DisconnectedWSUS Server

Remote Office Client Computers

Main Office ClientComputers

Regional Client Computers

IndependentWSUS Server

ReplicaWSUS Server

Firewall

Microsoft Update

Server Requirements for Windows Server Update Services

On Windows Server 2003

Internet Information Services .NET 2.0 MMC 3.0 Microsoft Report Viewer SQL Server 2005 SP1 or later

On Windows Server 2008

32 bit or 64 bit version Microsoft Report Viewer SQL Server 2005 SP2 or later

On Windows Server 2003

Internet Information Services .NET 2.0 MMC 3.0 Microsoft Report Viewer SQL Server 2005 SP1 or later

On Windows Server 2008

32 bit or 64 bit version Microsoft Report Viewer SQL Server 2005 SP2 or later

Automatic Updates Configuration

Configure Automatic Updates by using Group Policy

Requires updated wuau.adm administrative template

Requires:

Windows 2000 SP4

Windows XP SP2

Windows Server 2003

Windows Server 2008

SCW automatically installed with Server 2008Modify the configuration of a default component on a Windows

Server 2008-based computer.However, using SCW after modifying a role or feature through Server Manager is not a requirement.

Create and apply policy for server roles not installed through Server Manager

SCW includes policies for many roles and features not installed with Server Manager.

Define new roles for non-Microsoft applications and create and apply policy for those roles

Create new custom roles

SCW automatically installed with Server 2008Modify the configuration of a default component on a Windows

Server 2008-based computer.However, using SCW after modifying a role or feature through Server Manager is not a requirement.

Create and apply policy for server roles not installed through Server Manager

SCW includes policies for many roles and features not installed with Server Manager.

Define new roles for non-Microsoft applications and create and apply policy for those roles

Create new custom roles

Security Configuration Wizard

Use to configure WSUS security prerequisitesUse to configure WSUS security prerequisites

Lesson 3: Managing Windows Server Update Services

Windows Server Update Services Management Console

How Synchronization Works

Managing Computer Groups

Approving Updates

Using Reports

Backing Up and Restoring Windows Server Update Services

Guidelines for Deploying Updates

Windows Server Update Services Administration

Rapid access to common tasks

Advanced filtering

Sort updates

Shortcut menus with right-click access

Integrated reporting

Custom views

Rapid access to common tasks

Advanced filtering

Sort updates

Shortcut menus with right-click access

Integrated reporting

Custom views

MOM/SCOM Management pack for enterprise wide monitoring and reporting

MOM/SCOM Management pack for enterprise wide monitoring and reporting

How Synchronization Works

WSUS Server

Microsoft Update Web site

Internet

Corporate HeadquartersCorporate Headquarters

Client

Administrator

LAN

Automatic Synchronization

Manual Synchronization

Managing Computer Groups

Computers are automatically added

Default computer groups

All Computers Unassigned Computers

Client-side targeting

Computers are automatically added

Default computer groups

All Computers Unassigned Computers

Client-side targeting

Approving Updates

Approve updates to initiate an action

Detection Installation Removal

Decline updates

Automate approvals

Approve updates to initiate an action

Detection Installation Removal

Decline updates

Automate approvals

Using Reports

Types of reportsTypes of reports

Summary compliance

Individual computer

Individual update

Downstream server summary compliance

Synchronization

Summary compliance

Individual computer

Individual update

Downstream server summary compliance

Synchronization

Backing Up and Restoring WSUS

Use the Backup Utility

Backup database

Stop MSSQL$WSUS service

Contains metadata, configuration information, and client computer information

Updates folder

Guidelines for Deploying Updates

Configure an initial test groupConfigure an initial test group

Configure a business testing group Configure a business testing group

Deploy updates one department at a timeDeploy updates one department at a time

Remove problem updatesRemove problem updates

Use computer groups for testingUse computer groups for testing