Setup and use Microsoft SUS
We have clients running XP Pro SP3, Windows 7 64&32 and Vista 32. Controlled by a 2003 dc. Currently we have updates turned "off" via GP. We would like to start using the MS update services server to push out updates to our clients. Can anyone assist in clearing up the process to install and set this up? I have read the technet article and the MS website documentation and still am unclear. One area states you need SQL, one states IIS, they both say no patch management or app updates. It is my understanding that one is a free download and install and one is an actual server os designed for update roll outs and such. Our budget is of course zero for this, so even if it is free, we would go for the less effective solution. Has anyone had experience with either? Ideally, I would like to install it on our security server, that has our AV, network monitoring tools and software hardware inventory software. We do have a SQL server if that is a requirement.
Software/Hardware used:
server 2003, windows 7 64, windows 7 32, vista, XPpro sp3
Software/Hardware used:
server 2003, windows 7 64, windows 7 32, vista, XPpro sp3
ASKED:
May 12, 2010 7:42 PM
UPDATED:
May 14, 2010 1:05 AM
Answer Wiki:
You are looking for Windows Server Update Services (WSUS). It is a feature of Server 2000 and up. Install the feature from Add/Remove components on your 2003 DC, and set the GPO for the computers. The GPO is in Computer Configuration -> Addministrative Templates -> Windows Components -> Windows Update -> Configure Automatic Updates.
**************************
start <a href="http://technet.microsoft.com/en-us/wsus/default.aspx">here</a>
another good resource <a href="http://www.wsus.info/index.php?s=326933fdaca5822293a154009db44d56&act=idx">here</a>
and <a href="http://technet.microsoft.com/en-us/library/cc720507(WS.10).aspx">here</a>
you will also want to disable the current GP and create a new one pointing to the WSUS server. I strongly recommend a separate policy for workstation (this one automatically installs the updates) and one for servers (manually install after testing). Best practices are in the guidle=ines supplied by Microsoft, and you can check the other resources cited as well.
Another good resource is <a href="http://PatchManagement.org">here</a> and <a href="mailto:Patch Management Mailing List digest ">here</a> put subscribe in the subject line,
To see all answers submitted to the Answer Wiki: View Answer History.
Wow, “that was easy”.
I will try that out today or tomorrow and let you know how it went.
SQL server is not a requirement to install WSUS. We are running 2 WSUS servers, one for servers, one for workstations, and neither have SQL Server installed. The SQL components required will be installed when you install WSUS.
I have a related question. I am getting ready to implement WSUS as well and because many of my users will have there laptops at home for the summer (school setting), will they be without updates while they are away? None of them have admin rights. Most have power user rights.