Anda di halaman 1dari 45

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Information Technology Blog


By Raihan Al-Beruni Home About Me Contact Me TechNet References Tutorials

Install and configure WSUS 3.0 SP2 Step-By-Step


71 Votes
Microsoft Windows Server Update Services 3.0 SP2 (WSUS 3.0 SP2) enables information technology administrators to deploy the latest Microsoft updates, hotfixes and service packs to computers running Microsoft Windows Server 2003 family, Windows Server 2008, Microsoft Windows Vista family, Microsoft Windows XP with Service Pack 2 operating systems. By using WSUS, administrators can fully manage and take control of the distribution of updates that are released through Microsoft Update. Prerequisites for WSUS server Windows Server 2003 SP1 or Windows Server 2008 Microsoft Internet Information Services (IIS) 6.0 or later Windows Installer 3.1 or later Microsoft .NET Framework 2.0 Microsoft Report Viewer Redistributable 2005 Microsoft Management Console 3.0 SQL Server 2005 SP1 or later Prerequisites for WSUS clients (x86 and x64) Windows XP SP2, Windows Vista, Windows 7 Windows Server 2003 or Windows Server 2008 WSUS Deployment Scenarios WSUS is flexible enough to deploy starting from small to enterprise organisation. just you need to make sure active directory, DNS and DHCP working perfect. If port 80 is occupied by your company web site you can use port 8530. I used port 8530 on WSUS server. I have ISA 2004 so I will show how to add WSUS publishing rule in ISA 2004 also.

Install Prerequisites
1. IIS installation

1 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

go to add/remove windows component and select Application server

click next

Select as above. you must select ASP.net and IIS, then check Internet Information Services and click Details.

2 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Check BITS, check IIS manager and click on details

Check ASP and WWW and click ok.

3 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

2. MMC 3.0 installation no need to install you installed service pack on your server 3. .net framework installation Download .net 2 framework from the link http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D8EDD-AAB15C5E04F5&displaylang=en run installation, click next, accept EULA and follow the installation screen.

4 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

4. MS report viewer installation, Download report viewer from the Link run installation, click next, accept EULA and follow the installation screen.

5 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

5. SQL Server 2005 SP1 installation download SQL server 2005 from the link

6 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click next and click install, click next again

7 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

follow installation screen until finish.

8 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Now you have fulfil prerequisite as mention above.

WSUS installation
download WSUS from http://connect.microsoft.com/directory/ website. sign in using hotmail or live account. download x86 or x64 as you prefer. here I am installing x86 version.

9 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click on run

click next

Check Full server installation radio button, click next

10 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Accept EULA

You must have two partition in your server as you can see above. I selected D:\WSUS . click next

11 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Check use existing database. It is required for enterprise deployment. internal database will not work if you have large number of desktop and server. click next.

12 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click next On the next screen web site selection check create Microsoft Windows Server Update Services Web Site on port 8530 DO NOT CHECK RECOMMENDED

13 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click next

14 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click next , Click next again

15 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click finish. WSUS config wizard will start next

16 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

click next

17 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click next

Provide proxy server IP and credentials above if you have proxy server. in my case I typed my ISA server IP, port 80 and my domain admin credentials.

18 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click on start connecting and wait until finish, click next and follow the config screen to select your language, products, classification

19 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

wait until synchronisation finish. It might take 30/40 minutes depending on speed of your internet.

20 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Setup IIS Security


Now set permission in IIS in WSUS server, you may set anonymous logon. Dont worry its inside your firewall.

21 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Configure WSUS
open WSUS management console. In the Left hand side pan, click on Options then click on Change Update File and Language. Check Download Update files to the server when updates are approved. Select appropriate language. Then Click Apply and Ok.

22 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

23 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click on Automatic Approval and create new rules and run the rules. In my case I have two custom rules.

24 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

25 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

In the left hand side pan right click on All Computers, Click on Add Computer Group. For example, I have three computer groups; desktop, Windows7 and Server.

Group Policy Configuration This part describes how to use GPO to deliver Automatic Updates

26 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Open group policy management console, Right click on the Group policy objects container and click new. create policies for each of computer groups. For Example, WSUS Policy for desktop, WSUS Policy for Windows 7 and WSUS Server policy.

Now right click on WSUS policy that is desktop policy you just created and change settings of four GPO that are enabled here on screen Configure Auto download and schedule installation that fit for you Point WSUS server and port as http://yourserver:8530 in both the box Type target group to populate desktop/pc in WSUS Server.

27 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Check enabled in following box not to reboot machine if user logged on

28 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

29 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Repeat this process for WSUS server policy, Windows 7 Policy and so on.

In GPO management console, Right click on the organisational unit that contain desktop/workstation and link existing WSUS
policy you created in above steps with this organisational unit. Link it with WSUS policy Repeat same steps for all other organisational unit in GPO management console. Now you may close GPO now.

30 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Important! Do NOT link WSUS policy in child OU. Link directly to the top of OU hierarchy otherwise workstation will not populate.

Publish WSUS policy in ISA Server


If you have ISA 2004/2006 or Forefront TMG 2010, you have to set WSUS policy in ISA firewall access rule. so that ISA doesnt block communication between server and client. You dont need to do it if nothing blocking between Client and Server communication and dont have a firewall. To publish WSUS policy, Open ISA management console Go to Network Object and expand WEB listener, right click on web listener click new. Type Name of WSUS server. Name should be netbios name of WSUS server. Follow the screen shot.

31 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

32 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Click next, click finish. In the right hand side Tasks Pan, Click on publish a web server and follow the screen shot

33 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

34 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

35 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

On the next screen shot select the web listener (WSUS server) you added in the previous steps.

36 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Right click on the WSUS Publishing policy, click on property>Click Bridging Tab and check web server and port 8530

37 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

On the paths add these path if these arent exist already

38 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

39 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

uncheck verify and block option. Apply Changes and click ok. Troubleshooting Go to client machine, run gpupdate /force if client not showing on WSUS Run wuauclt /resetauthorization /detectnow command from client machine. Check Registry of client.

Conclusion Auto update and patch up gives administrator more time to concentrate other things without spending time on patching up servers and pc. I enjoyed deploying WSUS. I hope these instruction would be handy for you.

40 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Relevant Articles:

WSUS 3.0 SP2: Understanding WSUS deployment topology How to configure automatic updates by using Group Policy or registry settings How to configure Windows Server Update Services (WSUS) to use BranchCache How to Configure WSUS for Roaming Clients Troubleshooting WSUS server Windows Server 2008: Windows Server Update Services RoleStep by Step Guide WSUS: Best practice guide lines for WSUS installation, configuration and management WSUS Health Check

A D VE R TI S E M E N T

Share this:

Like this:

3 bloggers like this post.

This entry was posted on Thursday, August 13th, 2009 at 11:03 AM and is filed under Windows Server Update Services (WSUS). You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.

Post navigation
Previous Post Next Post

2 Responses to Install and configure WSUS 3.0 SP2 Step-By-Step


1. Windows Server 2008: Windows Server Update Services Role IT BLOG says: November 3, 2009 at 4:20 PM [...] my previous blog how to deploy Microsoft update Services using WSUS and Group Policy Object. WSUS SP2 installation and GPO deployment instruction. Read my previous installation instruction and follow WSUS SP2 installation on windows server 2008 [...] 2. Blogging year 2010-what stats says | MicrosoftGURU says:

41 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

January 3, 2011 at 11:58 AM [...] Install and configure WSUS 3.0 SP2 Step-By-Step August 2009 [...] Search

Categories
Cisco Exchange Server 2010 Forefront TMG 2010 Group Policy Object Microsoft Active Directory Microsoft Internet Security and Acceleration Server Microsoft System Centre Configuration Manager (SCCM) Miscellaneous SharePoint Server Virtualization Windows 2003 Server Windows 2008 Server Windows 7 Windows Deployment Services (WDS) Windows Server Update Services (WSUS) Windows XP

Blog Stats
980,870 hits

Top Rated
Posts | Pages | Comments
All | Today | This Week | This Month

WSUS 3.0 SP2: Understanding WSUS deployment topology 5/5 (4 votes) How to create an external trust between two seperate domains/forests 5/5 (3 votes) How to deploy custom windows 7 using windows deployment services (WDS) 2008 5/5 (3 votes) Windows Server 2008: Install and configure windows media services 2008step by step 5/5 (3 votes) How to configure Windows Server Update Services (WSUS) to use BranchCache 5/5 (3 votes)

My Profile
42 de 45 1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

I am currently working as a Senior Systems Engineer-Wintel in Fujitsu Australia based in Perth WA. I have been working on ICT field since 1999 specializing in Microsoft Windows Server, Microsoft Active Directory Infrastructure, Microsoft Messaging & Collaboration Technologies, Microsoft ISA, Microsoft Forefront Technologies and System Centre Configuration Manager (SCCM), Hyper-v and VMware vSphere.

Visitor Location

Calender
August 2009 M T W T F S S 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 Mar Sep

Previous Posts

Recent Comments
Raihan Al-Beruni on Forefront TMG 2010: How to ins help on Forefront TMG 2010: How to ins Jaffer on Forefront TMG 2010: How to ins Raihan Al-Beruni on Forefront TMG 2010: How to ins

43 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

tilo on How to configure Exchange 2010 efawr on Forefront TMG 2010: How to ins Raihan Al-Beruni on How to configure L2TP IPSec VP Jayesh Soni on How to configure L2TP IPSec VP vandara on Forefront TMG 2010: How to ins Suman Pal on How to migrate Windows 2003 Ac RSS - Posts RSS - Comments

Email Subscription
Enter your email address to subscribe to this blog and receive notifications of new posts by email. Join 118 other followers

Top Posts
Windows Server 2008: how to configure Network Policy Server or Radius Server --Step by Step Guide Forefront TMG 2010: How to install and configure Forefront TMG 2010 ----Step by step How to configure L2TP IPSec VPN using Network Policy Server in Windows Server 2008 R2 Install and configure WSUS 3.0 SP2 - Step-By-Step Step by Step guide to build a Cisco wireless infrastructure using Cisco WLC 5500, Cisco 1142 AP and Microsoft Radius server Install and configure Microsoft Active Directory Certificate Services (AD CS) using Windows Server 2008 R2 Step by Step Guide on Exchange Server 2010 Edge Transport Role How to configure Exchange 2010 Client Access Server (CAS) Role How to configure Exchange 2010 Hub Transport (HT) Server Transitioning from Exchange 2007 to Exchange 2010----Step by Step

44 de 45

1/31/2012 6:30 PM

Install and configure WSUS 3.0 SP2 Step-By-Step Information Tech...

http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...

Top Clicks
araihan.files.wordpress.c araihan.files.wordpress.c araihan.files.wordpress.c araihan.files.wordpress.c araihan.files.wordpress.c

Blogroll
Raihan's Blog

SocialVibe

Spam Blocked
43,560
spam comments

Theme: Contempt by Vault9. Blog at WordPress.com.

45 de 45

1/31/2012 6:30 PM