Posts Tagged WSUS
Cont. WSUS
Posted by Bloggylife in windows on June 18, 2008
Created a winxp V-machine and joined it to the domain.
Now to configure the clients to get their updates from the WSUS, a new Group Policy Object (GPO) needs to be added since you are in AD. But if you are not deploying it, I think it can be done through modifying the registry or simply the local policies.
The DC is a fresh installation so I installed Group Policy Management Console (GPMC) or you can do it through management console and add snap-in (run -> mmc ), the first way is much neater.
Next I created a new GPO using GPMC, right click Group Policy Object and the name the new GPO, ex. WSUS. I only created on and applied it on the domain level but you can create multiple ones and link it to different Organizational Units (OU) depends on your organization structure and complexity.
Right click the newly created GPO and edit
Dive through computer configuration -> administrative templates -> windows components -> windows update and configure the following:
- Specify Intranet Microsoft Update Service Location
- Configure Automatic Updates
- Automatic Update Detection Frequency
Link the GPO appropriately, right click whatever object you want and link existing GPO. That was one of my mistakes linked in the wrong place so not all object got the policy. You can force the new GPO by running (gpupdate /force) on the client side
OH and a nice feature that you can do on the WSUS server level -you can configure GPO to do that-, create groups and assign computers to them so you can push updates to selected groups. I am thinking of having a testing group to test the updates before pushing it to all others, it’ll include helpdesk and IT people and maybe a server group and the rest.
When synchronizing, WSUS will connect to Microsoft updates and download whatever you specify, don’t forget to configure that option (options -> synchronization options) all you’ll download a hell lot of updates you don’t need -yeah another mistake from my side-
You can go through the updates and approve and select the group to install to. Also, the web management gives you details about what’s going on and which computers needs updates and what is installed, pretty decent.
Hmmm, I think that’s about it. I’m not sure if I am missing something but here is the link from Microsoft WSUS 3.0
If you think something is not right or I may have forgot something, please don’t hesitate to correct me 
Now I am formatting an IBM and since I am lazy I don’t have server OS image, so I have to do everything from scratch and also configure the RAID for the disks … that part NOT fun at all …
One thing down … trillion more to go …. ;D
The final thing:
WSUS
Posted by Bloggylife in technology, windows on June 16, 2008
For sometime I wanted to deploy Windows Server Update Services (WSUS) into our network, I remember back in my old job when I was playing around with Websense, which is a terrific application, you would notice a huge amount of bandwidth being used for the same package download, multiple links to Microsoft update once a critical one is released but since we didn’t have active directory, no proxy deployed into our infrastructure, I couldn’t quite figure out how to go about this.
On top of that, talk about virtualization, OK me loving it … I have been playing around with it for a while because I finally decided it is not wise to test on live environment … some people cry when I screw up ;p –talk about that later-
I like VMware, I am currently using version 5, I don’t have the latest for some reason, the only downfall that I know of is not being able to have Vista V-machine, hehehehehe, as if that’s important … OK also, server 2008 edition as well …
Set up my VMware server 2003 edition, configured it as a domain controller. I installed WSUS on it too since it is for testing, also don’t forget to install IIS before extracting WSUS package. Anyway WSUS is not a resource extensive application, all you need is enough space, I am searching for a crappy server to put it on once I go live.
The VMware workstation should be assigned sufficient hard disk space, that was my mistake and I couldn’t just re-configure that.
The OS should take a little over 4GB, WSUS needs at least 6GB to store updates locally and 2GB for SQL Engine, so you do the math and leave a little extra for whatever, so I assigned it 20GB.
After installing IIS, run WSUS which you can download from Microsoft for free, SQL server Desktop Engine will be installed if you don’t have any other DB server you want WSUS to use. It’s pretty much an easy to go through setup. And you want to skip the Mirror part if this is the only WSUS server you have and you don’t want it to mirror data from another WSUS server
I finished installing WSUS and it is managed through the web so no console or anything unless there is such a thing I don’t know about. Anyhow I believe I need to configure my policies so that my clients would know to get their updates from the WSUS server. I need to setup a VMware client to see how to go about this.
Now I am creating a client and fooling around with the web management … to be continued 
Recent Comments