How to Cheat at Managing Windows Server Update Services

How to Cheat at Managing Windows Server Update Services

by B. Barber
Released December 2005
Publisher(s): Syngress
ISBN: 9780080488981

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

Over 95% of computers around the world are running at least one Microsoft product. Microsoft Windows Software Update Service is designed to provide patches and updates to every one of these computers.

The book will begin by describing the feature set of WSUS, and the benefits it provides to system administrators. Next, the reader will learn the steps that must be taken to configure their servers and workstations to make the compatible with WSUS. A special section then follows to help readers migrate from Microsoft’s earlier update service, Software Update Service (SUS) to WSUS. The next chapters will then address the particular needs and complexities of managing WSUS on an enterprise network. Although WSUS is designed to streamline the update process, this service can still be a challenge for administrators to use effectively. To address these issues, the next chapters deal specifically with common problems that occur and the reader is provides with invaluable troubleshooting information. One of the other primary objectives of WSUS is to improve the overall security of Windows networks by ensuring that all systems have the most recent security updates and patches. To help achieve this goal, the next sections cover securing WSUS itself, so that critical security patches are always applied and cannot be compromised by malicious hackers.

* Only book available on Microsoft's brand new, Windows Server Update Services

* Employs Syngress' proven "How to Cheat" methodology providing readers with everything they need and nothing they don't

* WSUS works with every Microsoft product, meaning any system administrator running a Windows-based network is a potential customer for this book

Table of contents

  1. Copyright
  2. Register for Free Membership to: solutions@syngress.com
  3. Acknowledgments
  4. Technical Editor and Lead Author
  5. Contributing Authors
  6. Foreword Contributor
  7. Foreword
  8. 1. Windows Server Update Services Essentials
    1. Introduction
    2. Patch Management for the Enterprise
      1. What Is Patch Management?
      2. Why Do We Need It?
      3. What System Is Best for You?
    3. Introducing Microsoft Windows Server Update Services
      1. Features
      2. Limitations
    4. Software Update Services vs. Windows Server Update Services
      1. New Features in WSUS
    5. Summary
    6. Solutions Fast Track
      1. Patch Management for the Enterprise
      2. Introducing Microsoft Windows Server Update Services
      3. Software Update Services vs. Windows Server Update Services
    7. Frequently Asked Questions
  9. 2. Preparing for WSUS
    1. Introduction
    2. Assessing Your Current Infrastructure
      1. Geographic Considerations
        1. Single Location
        2. Multiple Locations
        3. Language Selection
      2. Network Architecture
        1. Active Directory
      3. Security Requirements and Policies
      4. Servers and Clients
    3. Selecting a WSUS Management Preference
      1. Available Options
        1. Single WSUS
        2. Multiple WSUS Servers
        3. Multiple Autonomous WSUS Servers
        4. Central Management
        5. Distributed Management (Default Mode)
        6. Networks Not Connected to the Internet
      2. Decision Criteria
        1. Single WSUS
        2. Multiple Independent WSUS Servers
        3. Centrally Managed WSUS (Replica Mode)
        4. Distributed Management (Default Mode): Multiple Synchronized WSUS
        5. Disconnected WSUS Server
    4. Designing the WSUS Environment
      1. Computer Groups
      2. Database Selection
      3. Update Storage
        1. Local
          1. Pros
          2. Cons
        2. Remote
          1. Pros
          2. Cons
      4. Key Differences
      5. Bandwidth Options
        1. Deferring Downloads
          1. Pros
          2. Cons
        2. Filtering Updates
        3. Express Installation Files
        4. BITS 2.0
      6. Capacity Requirements
      7. WSUS Server Requirements
      8. Automatic Update Clients
    5. Summary
    6. Solutions Fast Track
      1. Assessing Your Current Infrastructure
      2. Selecting a WSUS Management Preference
      3. Designing the WSUS Environment
    7. Frequently Asked Questions
  10. 3. Installing WSUS
    1. Introduction
    2. System Requirements
      1. Software Requirements
      2. Server Requirements
      3. Client Requirements
    3. Installing Supporting Applications
      1. Microsoft IIS
      2. Databases
        1. Microsoft SQL Server
          1. Installing MSDE on Windows 2000
    4. Installing WSUS on Microsoft Windows Server 2003
      1. Patches
      2. Typical Server Installation
      3. Unattended Server Installation
      4. Completing a Remote SQL Installation
        1. Configuring the Front-end Server
        2. Finishing the Back-End Configuration
        3. Connecting the Front-End Server to the Back-End Server
    5. Summary
    6. Solutions Fast Track
      1. System Requirements
      2. Installing Supporting Applications
      3. Installing WSUS on Microsoft Windows Server 2003
    7. Frequently Asked Questions
  11. 4. Upgrading from SUS to WSUS
    1. Introduction
    2. In-Place Upgrade
      1. Steps to Success
        1. Meeting the Prerequisites
          1. Installing MSDE
        2. Installing WSUS onto the SUS Server
        3. Installing WSUS on a Server with SUS Already Installed
        4. Configuring WSUS
          1. Setting Proxy Settings
        5. Configuring Proxy Settings for WSUS
          1. Configuring Languages and Download Options
        6. Choosing the Languages Supported by WSUS
          1. Configuring Synchronization
        7. Migrating SUS Approvals and Content
        8. Decommissioning SUS
    3. Across-the-Wire Upgrade
      1. Steps to Success
        1. Using WSUS Target Groups
        2. Creating a Computer Group
        3. Sharing Remote Content on SUS Server
          1. Sharing the Content Folder on the SUS Server
        4. Migrate Remote Content and Approvals
        5. Pointing Clients to the New WSUS Server
        6. Creating a New GPO for WSUS
    4. Summary
    5. Solutions Fast Track
      1. In-Place Upgrade
      2. Across-the-Wire Upgrade
    6. Frequently Asked Questions
  12. 5. Deploying WSUS in the Enterprise
    1. Introduction
    2. Installing Multiple Servers
      1. Distributed vs. Central Management
    3. Deploying WSUS Client Software
    4. Managing Bandwidth Concerns
      1. Deferring Some Downloads
      2. Limiting Superfluous Downloads
      3. Express Installation
    5. Using Computer Groups
    6. Creating Group Policies
      1. Group Policies in Active Directory
      2. Local Group Policies
    7. Summary
    8. Solutions Fast Track
      1. Installing Multiple Servers
      2. Deploying WSUS Client Software
      3. Managing Bandwidth Concerns
      4. Using Computer Groups
      5. Creating Group Policies
    9. Frequently Asked Questions
  13. 6. Administering WSUS Servers
    1. Introduction
    2. Downloading and Synchronizing Updates
      1. Navigating to the Synchronization Options
      2. Scheduling Synchronization
      3. Configuring Internet Access
      4. Update Files and Languages
        1. Storing Updates
          1. Express Installation Files
          2. Changing the Local Storage Location
          3. Moving the Location of WSUS Update Files
    3. Managing Updates
      1. Classifying Updates
        1. Configuring Products and Update Classifications Supported by WSUS
      2. Viewing Updates
      3. Approving Updates
        1. Approving an Update for Installation with a Deadline
        2. Superseding and Superseded Updates
        3. Automatic Approvals
          1. Configuring WSUS to Use Automatic Approvals
      4. Testing Updates
    4. Backing Up and Restoring WSUS Servers
      1. Using NTBackup to Back Up WSUS
      2. Using NTBackup to Restore WSUS
    5. Summary
    6. Solutions Fast Track
      1. Downloading and Synchronizing Updates
      2. Managing Updates
      3. Backing Up and Restoring WSUS Servers
    7. Frequently Asked Questions
  14. 7. Configuring and Administering WSUS Clients
    1. Introduction
    2. Using Active Directory
      1. Group Policy
        1. The wuau.adm File
        2. Configuration
        3. WSUS Client Settings
          1. Computer Configuration Settings
          2. User Configuration Settings
        4. GPO Location and the Use of OUs
    3. Using Local Settings
      1. Local Group Policy
      2. Local Machine Registry
        1. Sample AU Client Registry Export
      3. System Policy
        1. Specifying a Path to Your System Policy
      4. Control Panel
    4. AU Client
      1. Client Version History
      2. Selfupdate
      3. Continued Patch Support
    5. Using WSUS to Update Clients and Servers
      1. Updating Windows Clients
        1. Using Deadlines
          1. Immediate Installation
          2. Forced Installation
        2. Superseding Gotchas
      2. Updating the Microsoft Office Suite
      3. Updating Microsoft Server Family Products
        1. Microsoft Exchange
        2. Microsoft SQL Server
      4. Updating Microsoft IIS
      5. Updating Microsoft Clusters
    6. AU Client Investigation
      1. Log Files
        1. WindowsUpdate.log
        2. ReportingEvents.log
      2. Event Logs
        1. Windows Update Agent
        2. NtServicePack
      3. Command Line Tools
        1. WSUS Client Diagnostic Tool
        2. Speeding Up Group Policy and Client Detection
        3. Troubleshooting Group Policy Conflicts
        4. Miscellaneous Useful Commands
      4. Disk Cloning Gotchas
      5. Resources
    7. Summary
    8. Solutions Fast Track
      1. Using Active Directory
      2. Using Local Settings
      3. AU Client
      4. Using WSUS to Update Clients and Servers
      5. AU Client Investigation
    9. Frequently Asked Questions
  15. 8. Securing WSUS
    1. Introduction
    2. Configuring Firewalls
      1. Configuring Firewalls for Inbound Access to WSUS
    3. Using SSL
      1. Configuring WSUS for SSL
        1. Applying the Certificate
        2. Enabling SSL on the WSUS Virtual Directories
    4. Applying WSUS Client Security
      1. Applying WSUS for Clients via Group Policy
      2. Applying WSUS for Clients Manually
    5. Summary
    6. Solutions Fast Track
      1. Configuring Firewalls
      2. Using SSL
      3. Applying WSUS Client Security
    7. Frequently Asked Questions
  16. 9. Managing the WSUS Environment
    1. Introduction
    2. Centralized vs. Distributed Environments
      1. Centralized Management
      2. Distributed Management
      3. Mixing Centralized and Distributed Management
    3. Synchronization
      1. Chaining
      2. Replicas
      3. Disconnected Networks
    4. Managing Computer Groups
    5. Producing Reports
      1. Status of Updates Report
      2. Status of Computers Report
      3. Synchronization Results Report
      4. Settings Summary Report
    6. Summary
    7. Solutions Fast Track
      1. Centralized vs. Distributed Environments
      2. Synchronization
      3. Managing Computer Groups
      4. Producing Reports
    8. Frequently Asked Questions
  17. 10. Using WSUS on a Disconnected Network
    1. Introduction
    2. Disconnected Networks
      1. Sample Disconnected Networks
        1. Disconnected Remote Office
        2. Disconnected DMZ
        3. Disconnected Lab
    3. Configuring WSUS
      1. Setting the Advanced Synchronization Options
      2. Copying Updates
      3. Copying the WSUS Metadata
    4. Summary
    5. Solutions Fast Track
      1. Disconnected Networks
      2. Configuring WSUS
    6. Frequently Asked Questions
  18. 11. Troubleshooting WSUS
    1. Introduction
    2. Installation Issues
    3. Administration Issues
      1. Synchronization
      2. Console Access Issues
      3. Update Approvals
      4. Storage
    4. WSUS Client Software Issues
      1. Client Self-Update Problems
      2. Client-Side Targeting Issues
    5. Summary
    6. Solutions Fast Track
      1. Installation Issues
      2. Administration Issues
      3. WSUS Client Software Issues
    7. Frequently Asked Questions

Product information

  • Title: How to Cheat at Managing Windows Server Update Services
  • Author(s): B. Barber
  • Release date: December 2005
  • Publisher(s): Syngress
  • ISBN: 9780080488981