IT:Network:Microsoft Server 2 Chapter 27 WINDOWS SERVER UPDATE SERVICES

PATCH MANAGMENT 4 phases Assess—determine effectiveness of current patch management plan. Inventory all computers and software. Determine whether you can accommodate your update needs. Identify—notified when update is available, is it applicable, and prioritize when and what should be updated. Evaluate and plan—submit a change request and plan to perform updates during non-peak times. Deploy—test on subset of computers and then perform final rollout.

WINDOWS SERVER UPDATE SERVICES (WSUS) What is it? WSUS (previously called Windows Update Services) is the new name for the next version of Software Update Services (SUS). WSUS is a patch and update component of Windows Server and offers an effective and quick way to help you get secure and stay secure. WSUS represents an important step toward delivering a core software distribution and update management infrastructure in Windows. WSUS has both a server and client component.

WHICH PLATFORMS DOES THE CLIENT RUN? Windows XP Windows Vista Windows 7 Windows 8 Windows Server 2003 Windows Server 2003 R2 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012

WHICH PLATFORMS DOES THE SERVER RUN? Windows Server 2003 Windows Server 2003 R2 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012

WHAT WILL IT UPDATE?  WSUS supports updating Windows operating systems additional Microsoft software products.  WSUS supports updating: ◦ Server and Client OS’s ◦ Microsoft Office XP, Office 2003/2007/2010… ◦ Microsoft SQL Server ◦ Microsoft SharePoint ◦ Microsoft Exchange Server 2003/2007/2010… ◦ Zune (not anymore though) ◦ Windows Media Center ◦ Etc

WSUS OFFERS THE FOLLOWING FEATURES:  An administrator-controlled content synchronization service within the intranet. ◦ The synchronization service is a server-side component that retrieves the latest critical updates from Microsoft Update. ◦ As new updates are added to Windows Update, the server running WSUS automatically downloads and stores them, based on an administrator-defined schedule. ◦ If an administrator does not wish to set a schedule, they can manual synchronize their server running WSUS with Windows/Microsoft Update.

FEATURES CONTINUED. An intranet-hosted Windows Update server. This easy-to-use server acts as the virtual Windows Update server for client computers. It contains the synchronization service and administrative tools for managing updates. This server can also host critical updates downloaded from the synchronization service and refer client computers to those updates.

WSUS FEATURES Administrator control over updates. The administrator can test and approve updates from the public Windows Update site before deployment on the corporate intranet. Deployment takes place on a schedule created by the administrator. If multiple servers are running WSUS, the administrator controls which computers access particular servers running WSUS. Administrators enable this level of control with a Group Policy in an Active Directory environment, or through registry keys.

WSUS FEATURES Automatic Updates on computers (desktops or servers). Automatic Updates is a Windows feature that can be setup to automatically check for updates published on Windows Update. You can configure Windows to install updates on a schedule.

WSUS INSTALLATION WSUS is added as a role in Windows Server 2008 R2

WSUS INSTALLATION IIS is required along with other role services

WSUS INTERFACE

CLIENT SIDE CONFIGURATION

OTHER SOLUTIONS Windows Intune Cloud managed Antivirus and update deployment Remote Assistance Support various devices Surface RT Windows Phone 8 Android, iOS,

OTHER SOLUTIONS View/update multiple systems Deploy software

REFERENCES AND OTHER SOLUTIONS