1. Module 16: Software Maintenance Using Windows Server Update Services

2. Overview Introduction to Windows Server Update Services Installing and Configuring Windows Server Update Services Managing Windows Server Update Services Changes to Service Pack 1

3. Lesson 1: Introduction to Windows Server Update Services What Is Microsoft Update? What Is Automatic Updates? What Is Windows Server Update Services? Windows Server Update Services Process Changes to Service Pack 1

4. What Is Microsoft Update? Microsoft Update is a Microsoft Web site that includes: Updates for Microsoft Windows operating systems, software, and device drivers Updates for Microsoft applications New content that is added to the site regularly Updates for Microsoft Windows operating systems, software, and device drivers Updates for Microsoft applications New content that is added to the site regularly

5. What Is Automatic Updates? Automatic Updates is client software that: Communicates with Microsoft Update or WSUS Automatically downloads updates Notifies users of update availability Communicates with Microsoft Update or WSUS Automatically downloads updates Notifies users of update availability

6. Automatic Updates Server running Windows Server Update Services Automatic Updates LAN What Is Windows Server Update Services? Microsoft Update Web site Internet Test Clients

7. Windows Server Update Services Process Server-Side Process 1. WSUS runs scheduled synch 1. WSUS runs scheduled synch No? 2. Testing? Yes? 3. Admin approves new packages Test new packages Client-Side Process 5. AU waits for next scheduled check System restart 4. Do any packages require a restart? 3. Scheduled install job begins 1. Automatic Updates on client checks WSUS 2. Is Administrator logged on? Yes? No? Administrator sees status balloon, can defer installation Yes? No?

8. Changes to Service Pack 1 Support for Windows Vista Full client language support New version of Microsoft SQL Server Desktop Engine Faster performance Hotfix rollup Support for Microsoft SQL Server 2005 and 2008 Enhanced bulk approval capability Detailed reporting Support for Windows Vista Full client language support New version of Microsoft SQL Server Desktop Engine Faster performance Hotfix rollup Support for Microsoft SQL Server 2005 and 2008 Enhanced bulk approval capability Detailed reporting

9. Lesson 2: Installing and Configuring Windows Server Update Services WSUS Deployment Scenarios Server Requirements for Windows Server Update Services Automatic Updates Configuration Security Configuration Wizard

10. WSUS Deployment Scenarios Main Office WSUS Server Disconnected WSUS Server Remote Office Client Computers Main Office Client Computers Regional Client Computers Independent WSUS Server Replica WSUS Server Firewall Microsoft Update

11. Server Requirements for Windows Server Update Services On Windows Server 2003  Internet Information Services .NET 2.0  MMC 3.0  Microsoft Report Viewer  SQL Server 2005 SP1 or later On Windows Server 2008  32 bit or 64 bit version  Microsoft Report Viewer  SQL Server 2005 SP2 or later On Windows Server 2003  Internet Information Services .NET 2.0  MMC 3.0  Microsoft Report Viewer  SQL Server 2005 SP1 or later On Windows Server 2008  32 bit or 64 bit version  Microsoft Report Viewer  SQL Server 2005 SP2 or later

12. Automatic Updates Configuration Configure Automatic Updates by using Group Policy Requires updated wuau.adm administrative template Requires:  Windows 2000 SP4  Windows XP SP2  Windows Server 2003  Windows Server 2008

13. SCW automatically installed with Server 2008 Modify the configuration of a default component on a Windows Server 2008-based computer.However, using SCW after modifying a role or feature through Server Manager is not a requirement. Create and apply policy for server roles not installed through Server Manager SCW includes policies for many roles and features not installed with Server Manager. Define new roles for non-Microsoft applications and create and apply policy for those roles Create new custom roles SCW automatically installed with Server 2008 Modify the configuration of a default component on a Windows Server 2008-based computer.However, using SCW after modifying a role or feature through Server Manager is not a requirement. Create and apply policy for server roles not installed through Server Manager SCW includes policies for many roles and features not installed with Server Manager. Define new roles for non-Microsoft applications and create and apply policy for those roles Create new custom roles Security Configuration Wizard Use to configure WSUS security prerequisites

14. Lesson 3: Managing Windows Server Update Services Windows Server Update Services Management Console How Synchronization Works Managing Computer Groups Approving Updates Using Reports Backing Up and Restoring Windows Server Update Services Guidelines for Deploying Updates

15. Windows Server Update Services Administration Rapid access to common tasks Advanced filtering Sort updates Shortcut menus with right-click access Integrated reporting Custom views Rapid access to common tasks Advanced filtering Sort updates Shortcut menus with right-click access Integrated reporting Custom views MOM/SCOM Management pack for enterprise wide monitoring and reporting

16. How Synchronization Works WSUS Server Microsoft Update Web site Internet Corporate Headquarters Client Administrator LAN Automatic Synchronization Manual Synchronization

17. Managing Computer Groups Computers are automatically added Default computer groups  All Computers  Unassigned Computers Client-side targeting Computers are automatically added Default computer groups  All Computers  Unassigned Computers Client-side targeting

18. Approving Updates Approve updates to initiate an action  Detection  Installation  Removal Decline updates Automate approvals Approve updates to initiate an action  Detection  Installation  Removal Decline updates Automate approvals

19. Using Reports Types of reports Summary compliance Individual computer Individual update Downstream server summary compliance Synchronization Summary compliance Individual computer Individual update Downstream server summary compliance Synchronization

20. Backing Up and Restoring WSUS Use the Backup Utility Backup database  Stop MSSQL$WSUS service  Contains metadata, configuration information, and client computer information Updates folder

21. Guidelines for Deploying Updates Configure an initial test group Configure a business testing group Deploy updates one department at a time Remove problem updates Use computer groups for testing