MGT309 Overview of Windows Server Update Services version 3.0 Gary Henderson Lead Program Manager

Our time today Review WSUS 2.0 WSUS 3.0 Technical Overview GoalsFeatures WSUS 3.0 Drilldown Demo Platform enhancements More information Q & A

WSUS 2.0’s Momentum Ranked as #1 Patch Management Product by readers of Windows IT Pro Magazine WSUS 2.0 SP1 released in June 2006 Enabled signature distribution for Forefront Client Security Integrated with SBS R2 Already more WSUS 2.0 SP1 deployments than WSUS 2.0 deployments (190k vs. 100k) Total 290,000 distinct servers synched with Microsoft Update in October 2006

WSUS 2.0’s Key Features Integrated Reporting Targeting of updates More functional Administrative Experience Access to more content (Office, SQL, Exch., etc.) Flexible and granular synchronization options Classification (service packs, updates, locale, rollups) Products (Application or OS) Extensibility APIs

WSUS 3.0 Goals Continue to be the best solution for distributing Microsoft Updates to Windows Address top customer asks and feedback Enhance the infrastructure to support advanced management products Microsoft System Center Configuration Manager (SCCM) 2007 (formerly Microsoft Systems Management Server (SMS) v4): Microsoft System Center Essentials (SCE) 3 rd party products Support Windows Vista and “Longhorn” Server

Supported Platforms All supported Windows locales x86 and x64 support parity For Server Windows 2003, Longhorn Server (at RTM) SQL Server 2005, SQL Express or wYukon Internet Information Services.NET Framework 2.0 MMC 3.0 For Client Windows 2000 SP4, Windows XP SP1, Vista Windows Server 2003, Longhorn Server

Straightforward Installation Easy to use Setup program which also supports unattended installs In-place upgrade over 2.0 Clients automatically update to new versions when they contact the server WSUS 2.0 Servers can synchronize updates from a 3.0 Server Allows for a gradual top down roll out New OOBE (out of the box experience) wizard to help guide initial setup

Flexible Deployment Options Supports all WSUS 2.0 deployment options Autonomous and Replica server hierarchies Disconnected Network Replica improvements for branch offices Move between Replica and Autonomous modes without a reinstall Support for language sub-setting on downstream replica servers Replica’s can sync meta-data from a USS and content from MU Multiple, more granular, auto-approval rules Sync up to once/hour (rather than once/day)

Improved Performance 50% improvement in reporting performance Initial full metadata synchronization time reduced from 1 ½ hours to 20 minutes i.e., All updates available to WSUS Quicker search and filtering capabilities Can now support > 15,000 client per server using new deployment options Takes advantage of newer hardware through native support for x64 platform

Greater Operational Reliability Network Load Balancing (NLB) support Allows for faster failover in high service availability environments SQL Clusters support Complements NLB scenarios Monitoring through MOM MOM Management Pack that provides proactive alerts of server health Built in clean-up wizard for unneeded updates and stale computers

Richer Reporting Capabilities UI reporting based on Microsoft Report Viewer controls Print, Save to Excel or PDF Reporting rollup is in the box! Single unified view of the deployment status across all server in an organization Roll up detailed status or summaries From autonomous or replica servers Read-only server access through new “Reporters” WSUS user role

Enhanced Targeting Concepts Nested target groups Overlapping group membership A computer can be a member of > 1 group Eg: Computer ABC_MESSAGING is a member of Servers as well as Exchange Servers

Improved Administrative Experience New MMC 3.0 based console Can be installed and run on remote systems (e.g. XP) Host multiple servers in a single console Provides Home pages to give a quick overview Column sorting & reordering, Context Menus Custom Views and of filtering of results Integrated reporting “in context” Hands off administration using built in notifications for status

More Content Access to more content via the Microsoft Update (MU) Catalog site Enable easy access to drivers and hotfixes Improved searching and filtering Personalization to make the MU Catalog customized to your downloading needs

Platform-Only Improvements Lightweight Hardware and Software Inventory Hardware Inventory 30+ attributes collected about the hardware installed on server and client computers; Disk drives, Network Cards, BIOS, OS information, CPU, … Software Inventory Add / Remove programs inventory collects name and version information Off by default Local publishing Ability to publish and distribute 3 rd party updates and applications Used by advanced management tools; SCE, SCCM 2007, and 3 rd party solutions

Common Platform

Update Management Solutions Microsoft Update Allows a Windows machine to receive updates to Microsoft products. WSUS Centralized Microsoft Update management: distributes Microsoft Updates to Windows machines in your corporation and get compliance reports No additional cost over the server CAL SBSr2 Low cost solution for managing up to 75 Windows machines Bundles WSUS for centralized Microsoft Update management Easy to use; doesn’t require an IT administrator

Update Management Solutions SCE Advanced management tool for up to 500 Windows machines Single administration console provides asset management, monitoring, 3rd party update distribution, application distribution, as well as basic Microsoft Update management (using WSUS*) SCCM 2007 (aka SMSv4) Advanced management tool with enterprise scale Single administration console provides asset management, 3rd party update distribution, application distribution, software metering, operating system deployment, as well as basic Microsoft Update management (using WSUS*) * Both SCE and SCCM support a simple in-place upgrade from WSUS

Choosing a Solution Customer Type Scenario Customer Chooses Large Enterprise Advanced management SCCM Only need to distribute Microsoft Updates WSUS Medium Enterprise Advanced management SCE Only need to distribute Microsoft Updates WSUS Small Business Simple, centralized management SBSr2 Have at least 1 Windows server, 1 IT administrator, and can ’ t use SBSr2 WSUS All other scenarios Microsoft Update Consumer All scenarios Microsoft Update

So, when can you get it? Beta 2 – NOW! RC – February 2007 RTM – 1st half of 2007

But wait, you want more!! WSUS homepage: WSUS Server download – WSUS 2.0 & WSUS 3.0 Beta Online Help, Deployment and Operations Guides SDK and API Samples Tools and Troubleshooters WSUS community, Team Blogs, WSUS Wiki Microsoft Update:

Thanks for your time today Your feedback is important! Please fill out a survey for this session. Meet me at ATE booth 20 for more questions and discussion, right now!

©2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.