Module 14

Updating Windows Server

Module Overview

• Overview of WSUS
• Deploying updates with WSUS
Lesson 1: Overview of WSUS

• What is WSUS?
• WSUS server deployment options
• The WSUS update management process
• Server requirements for WSUS
• Configuring clients to use WSUS
• Configuring products and classifications
What is WSUS?

Microsoft
Automatic Update
updates website

Server running
Windows Server
Update Services
Test clients

LAN

Internet

Automatic
updates
WSUS server deployment options

WSUS implementation:
• Single server
• Multiple servers
• Disconnected servers
WSUS hierarchies:
• Autonomous mode
• Replica mode
WSUS database:
• Windows Internal Database
• SQL Server database
 The WSUS update management process

Phase 1: Assess
• Setup production
environment

Assess

Phase 4: Deploy Phase 2: Identify

• Approve and schedule
Update • Discover new
updates Deploy Management Identify updates
• Review process • Determine if
updates are
relevant
Evaluate
and Plan

Phase 3: Evaluate and Plan

• Testupdates
• Determine how to update production
environment
Server requirements for WSUS

Software requirements:
• Internet Information Services 6.0 or later
• Microsoft .NET Framework 2.0 or later
• Microsoft Management Console 3.0
• Microsoft Report Viewer Redistributable 2008 or later
• SQL Server 2012, SQL Server 2008, SQL Server 2005 SP2,
or Windows Internal Database

Hardware requirements:
• 1.4 GHz or faster x64 processor
• 2 GB of RAM or greater
• 10 GB available disk space (40 GB or greater is
recommended)
Configuring clients to use WSUS

Use a GPO to:

• Configure automatic updates
• Specify intranet Microsoft update service location

To use Automatic Maintenance for installing updates on computers

running Windows 8 and Windows Server 2012 and later, configure a
GPO to:
• Enable automatic updates with the following option:
• 4 - Auto download and schedule the install

• Enable the Automatic Maintenance Activation Boundary with the

desired automatic maintenance window start time.
For computers running older operating systems, you should:
• Automatically download updates
• Automatically install updates
Configuring products and classifications
Lesson 2: Deploying updates with WSUS

• WSUS administration
• What are computer groups?
• Approving updates
• Configuring Automatic Updates
• Demonstration: Approving updates by
using WSUS
• WSUS reporting
• WSUS troubleshooting
WSUS administration

You can use the WSUS Administration console to:

• Manage updates
• Configure computer groups
• View computer status
• View synchronization information
• Configure and view WSUS reports
• Configure WSUS settings and options

In Windows Server 2016, WSUS also includes

Windows PowerShell cmdlets for administration
What are computer groups?

• You can use computer groups to organize

WSUS clients
• The default computer groups include:

All computers Unassigned computers

• You can create custom computer groups to

control how updates are applied
Approving updates

Updates can be:

• Approved automatically, but it is not recommended
• Declined if they are not needed
• Removed if they cause problems

Updates should be tested before they are approved

for production
Configuring Automatic Updates

You must configure the client computers to use the

WSUS server as the source for updates

You can use Group Policy to configure clients,

including the following settings:
• Update frequency
• Update installation schedule
• Automatic restart behavior
• Default computer group in WSUS
Demonstration: Approving updates by using WSUS

In this demonstration, you will see how to approve

an update
WSUS reporting

Update Reports:
• Update Status Summary
• Update Detailed Status
• Update Tabular Status
• Update Tabular Status for Approved Updates

Computer Updates:
• Computer Status Summary
• Computer Detailed Status
• Computer Tabular Status for Approved Updates

Synchronization Updates:
• Synchronization Results
WSUS troubleshooting

Clients not appearing in WSUS:

• Check GPO and client settings

When the WSUS server stops, you should:

• Check database server
• Reinstall WSUS

When you cannot connect to WSUS, you should:

• Check network connectivity
• Telnet to HTTP and HTTPS ports

If you encounter other problems you should use the:

• Server diagnostics tool
• Client diagnostics tool
Lab: Implementing update management

• Exercise 1: Implementing the WSUS server role

• Exercise 2: Configuring update settings
• Exercise 3: Approving and deploying an update by
using WSUS
Logon Information
Virtual machines: 20744A-LON-DC1
20744A-LON-SVR1
20744A-LON-SVR2
20744A-LON-CL1
User name: Adatum\Administrator
Password: Pa55w.rd
Estimated Time: 90 minutes
Lab Scenario
A. Datum Corporation is a medical research company with
about 5,000 employees worldwide that has specific needs
for ensuring that medical data and records remain private.
The company has a headquarters location and multiple
worldwide sites. A. Datum has recently deployed a
Windows Server 2016 server and Windows 10 client
infrastructure.
A. Datum has been manually applying updates to servers
in the datacenter. Doing this has resulted in a situation
where it is difficult to identify which servers have had
updates applied and which have not. Compliance
regulations for the storage of medical data require that
A. Datum Corporation apply the updates in a timely and
comprehensive manner. With this in mind, a centralized
update solution is necessary.
Lab Review

• You created a separate group for the Research

department. Why would you configure a separate
group for part of your organization’s computers?
• What is the advantage of configuring a
downstream WSUS server?
Module Review and Takeaways

• Review Questions
• Tools
Course Evaluation

• Your evaluation of this course will help Microsoft

understand the quality of your learning
experience.
• Please work with your training provider to access
the course evaluation form.
• Microsoft will keep your answers to this survey
private and confidential and will use your
responses to improve your future learning
experience. Your open and honest feedback is
valuable and appreciated.