Microsoft Official Course
®
Module 12
Implementing Update
Management
Module Overview
• Overview of WSUS
• Deploying Updates with WSUS
Lesson 1: Overview of WSUS
• What Is WSUS?
• The WSUS Update Management Process
• Server Requirements for WSUS
What Is WSUS?
Microsoft
Update
website
Automatic
updates
Server running
Windows Server
Update Services
Test clients
LAN
Automatic
updates
Internet
The WSUS Update Management Process
Phase 1: Assess
• Set up a production environment that will support update
management for routine and emergency scenarios
Assess
Phase
Deploy
Phase 4:
4: Deploy
Phase 2: Identify
• Approve
Approve and
andschedule
schedule
update
update installations
installations
theprocess
process
• Review
Review the
after
after
the deployment
is
the deployment
is
complete
complete
Deploy
Update
Management
• Discover new updates in
Identify
Evaluate
and Plan
Phase 3: Evaluate and Plan
• Test updates in an environment that resembles, but is separate from,
the production environment
• Determine the tasks necessary to deploy updates into production,
plan the update releases, build the releases, and then conduct
acceptance testing of the releases
a convenient manner
• Determine whether
updates are relevant to
the production
environment
Server Requirements for WSUS
• Software requirements:
• Internet Information Services 6.0 or newer
• Microsoft .NET Framework 2.0 or newer
• Microsoft Management Console 3.0
• Microsoft Report Viewer Redistributable 2008 or newer
• SQL Server 2012, SQL Server 2008, SQL Server 2005 SP2,
or Windows Internal Database
• Hardware requirements:
• 1.4 GHz or faster x64 processor
• 2 GB of RAM or greater
• 10 GB available disk space (40 GB or greater is
recommended)
Lesson 2: Deploying Updates with WSUS
• Configuring Automatic Updates
• WSUS Administration
• What Are Computer Groups?
• Approving Updates
Configuring Automatic Updates
• You must configure the client computers to use
the WSUS server as the source for updates
• You can use Group Policy to configure clients,
including the following settings:
Update frequency
• Update installation schedule
• Automatic restart behavior
• Default computer group in WSUS
•
WSUS Administration
• You can use the WSUS Administration console to:
• Manage updates
• Configure computer groups
• View computer status
• View synchronization information
• Configure and view WSUS reports
• Configure WSUS settings and options
• In Windows Server 2012, WSUS also includes
Windows PowerShell cmdlets for administration
What Are Computer Groups?
• You can use computer groups to organize WSUS
clients
• The default computer groups include:
All Computers
Unassigned Computers
• You can create custom computer groups to
control how updates are applied
Approving Updates
• Updates can be approved automatically, but it is
not recommended
• Updates should be tested before they are
approved for production
• Updates can be declined if they are not needed
• Updates can be removed if they cause problems
Lab: Implementing Update Management
• Exercise 1: Implementing the WSUS Server Role
• Exercise 2: Configuring Update Settings
• Exercise 3: Approving and Deploying an Update
by Using WSUS
Logon Information
Virtual machines:
User name:
Password:
20411B-LON-DC1
20411B-LON-SVR1
20411B-LON-SVR4
20411B-LON-CL1
Adatum\Administrator
Pa$$w0rd
Estimated Time: 60 minutes
Lab Scenario
A. Datum is a global engineering and manufacturing
company with head office based in London, UK. An IT
office and a data center are located in London to
support the London location and other branch office
locations. A. Datum has recently deployed a Windows
Server 2012 server and client infrastructure.
A. Datum has been manually applying updates to
servers in a remote location. This has resulted in
difficulty identifying which servers have updates applied
and which do not. This is a potential security issue. You
have been asked to automate the update process by
extending A. Datum’s WSUS deployment to include the
branch office.
Lab Review
• You created a separate group for the Research
department. Why would you configure a separate
group for part of your organizations’ computers?
• What is the advantage of configuring a
downstream WSUS server?
Module Review and Takeaways
• Review Questions
• Tools