WSUS

1
WSUS??? ????? ??????? ??????(????)

• ????? ????
• ???? ???? ????? ?????, ????? Wintel
• ???
• elkana_at_team.co.il

2
?? ???? ??? ????

• ??? ??????? ??????
• ??????? ????? / ?????
• ??????
• ?? ???? ??????... ?????? GPO
• ????? SUS ? WSUS

3
?????? ??????

• ????? ?????? ??????? ????? ??????
• ???? ??????? ?????
• ?????? ?? ????? ???? (??? ????? ???????)
• ????? ??? ?????, ??? ???????
• ??????? ????? ??????? ?????? ?????
• ?????? ?????? ?"? ?????? ???? ????
• ????? ???????? ?????? ??????

????? ???????? ????? / ????????
4
?????? Microsoft Update, Windows Update
Services, and SMS 2003

• Adopt the solution that best meets the needs of
  your organization

5
??? ?? ????
?????
6
?????? ?????
7
????? ???? SQL
??? !
8
??????? ????? ??????
Http 80 / 8530
Http 80 Https 443
9
??????? ????? ?????
Down-stream Server
Up-stream Server
10
??????? ??? ?????? ?????????
WsusUtil - Export File Backup
WsusUtil - Import File Restore
11
?????? ?????
12
WSUS Update type
13
WSUS Update type
14
???? ????????
15
?????? ??????

• Windows 2000 with Service Pack 3 or Service
  Pack 4
• Windows XP with Service Pack 1 or Service Pack 2
• Windows Server 2003
• ?? ??? ????? ?? ???? ???? ???? ?????? ????? ?? ?
  Automatic update clienthttp//go.microsoft.com/fw
  link/?LinkId22338

16
?????
17
????? ?????? ??????

• c\Windows\WindowsUpdate.log
• wuauclt.exe /detectnow ????? ?????? ???? ??
  ???????? ?????
• wuauclt.exe /resetauthorization /detectnow ?????
  ???? ?? ????? ? WSUS
• GPResult???? ?????? ????? ?? ? GPO
• Reg query "HKLM\SOFTWARE\Policies\Microsoft\Window
  s\WindowsUpdate" /s???? ?????? ????? ?????
• ???? ???? ???? wuauclt.exe, ????? ????? ?????
  5.4.3790.1851 ?????

18
SUS ? WSUS Migration
19
Migration Scenarios

• Single server
• WSUS and SUS 1.0 on a single server
• Multiple servers
• WSUS and SUS 1.0 on separate servers
• Multiple SUS 1.0 servers to a single WSUS server
• Multiple SUS 1.0 servers to multiple WSUS servers

20
Considerations

• Ease of updating client settings
• E.g., policy or scripted
• New clients coming into environment which are not
  yet WSUS compatible
• Branch office scenarios
• Targetting group model

21
Migration Limitations

• WSUS and SUS 1.0 can not synchronize metadata
  with each other
• No proxy server settings migration
• No Internet Information Services (IIS) settings
  migration
• Only one way SUS 1.0 to WSUS migration
• Migration of update approvals overwrites any
  pre-existing approvals per target group

22
Single Server Migration

• For customers with few servers
• Requires WSUS to be initially installed on a
  different port than SUS 1.0
• Requires updating all clients as they connect
  once the WSUS server is installed
• Potentially requires redirecting clients to a
  different port on the same server
• Clients will still use SUS 1.0 for updates until
  redirected to the WSUS port, or SUS 1.0 is
  decommissioned

23
Single Server Migration
WSUS server
SUS 1.0 Server
SUS 1.0 Server WSUS server
Port 80 SUS selfupdate tree
Port 8530 WSUS selfupdate tree
Port 80 WSUS selfupdate tree
SUS client
SUS client
WSUS client
WSUS client
24
Separate Server Migration

• Requires a separate Windows Server
• More flexibility in configuring the server port
• More flexibility in client self update deployment
  options
• Clients continue to use SUS 1.0 until client
  policy changes to point to new WSUS server

25
Separate Server Migration
SUS 1.0 Server
WSUS server
Port 80 SUS selfupdate tree
Port 80 WSUS selfupdate tree
SUS client
WSUS client
WSUS client
SUS client
26
Multiple SUS servers

• To a single WSUS server
• Using multiple SUS servers in order to support
  targeting of updates to particular users
• Using Replica Mode on SUS servers
• To multiple WSUS servers
• Using multiple SUS servers to support different
  organizational structures with different
  administrators
• Servers are independent and do not sync with each
  other

27
Migration Tool

• Content and approvals to all computers group
• Content and approvals to a specific target group
• Content only
• Approvals only
• Note You must synchronize your WSUS server to
  use the migration tool
• Note Found in programfiles\Update
  Services\Tools
• Note Tool must be run on the target WSUS server

28
Migration Tool

• WSUSUTIL.EXE migratesus
• /content ltcontent sharegt
• Migrate content from a SUS 1.0 ltcontent sharegt
• /approvals ltserver namegt
• Migrate approvals from the SUS 1.0 server
• target_group
• Apply approvals to the target group
  "target_group".
• Requires /approvals to be specified.
• /log ltlog_filegt
• Log the migration activities to the ltlog filegt
  file

29
Content and Approvals to All Computers Group

• At the command prompt, navigate to the directory
  that contains WSUSutil.exe
• Type the following
• wsusutil.exe migratesus /content path_to
  local_SUS_content /approvals SUSservername /log fi
  lename
• For example
• wsusutil.exe migratesus /content
  c\sus\content\cabs /approvals sus1 /log
  local_migration.log

30
Content and Approvals to a Specific Target Group

• At the command prompt, navigate to the directory
  that contains WSUSutil.exe
• Type the following
• wsusutil.exe migratesus /content path_to
  local_SUS_content  /approvals SUSserver_name "WSUS
  _target_group name" /log filename
• For example
• wsusutil.exe migratesus /content
  c\sus\content\cabs /approvals sus1 "all
  desktops" /log local_migration.log

31
Content Only

• At the command prompt, navigate to the directory
  that contains WSUSutil.exe
• Type the following
• wsusutil.exe migratesus /content path_to
  local_SUS_content /log filename
• For example
• wsusutil.exe migratesus /content
  c\sus\content\cabs /log local_migration.log

32
Approvals Only

• At the command prompt, navigate to the directory
  that contains WSUSutil.exe.
• Type the following
• wsusutil.exe migratesus /approvals SUS
  server_name /log filename
• For example
• wsusutil.exe migratesus /approvals sus1 /log
  local_migration.log

33
????? - ?? ????? ????

• ????? ? WSUS ?????? ????? ??????? ????? ??????
• ?????? ?????? ???????? ????? / ????????
• ?????? ????? ??????? ??????? ?????
• ?????? ???? ??? ? GPO ?? ?- Registry

34
??????
35
????

• ???? ??? ???? ? 26.7 ??? ????? ?????? ?????
• ???????
• ?????? SMS ??? ?? ????, ????? ???????
• Troubleshooting SMS ??? ?????? ???...

• ????? ????
• Elkana_at_team.co.il