WSUS Install/Config
Views:
Contents |
Server Installation
- Download WSUS from the Microsoft Website, you will need to use the support '.net passport'
- Download 'BITS' and '.NET 1.1' and '.NET SP1' and install on the server
- Download and install MSDE on the server
- Install WSUS
Configuration
Setting up Syncronisation
You will need to login to the WSUS admin site, using the link provided on the IS intranet.
The synchronisation time should be set for 07.30 everyday, this will synchronise with the central MS update server and pull down the meta-data for the requested updates, once updates are approved the install files will be downloaded to the local server. The language setting should be set to only download the updates in the same language as the server is in (normally “en-us”) also the program should only download updates for the products that will be updated, e.g. Windows 2000 family, more can be added from the admin interface at any time. Also you will need to set the type of updates that you will want to download, at the moment it is only set to critical updates, this can also be changed at any time. For connection to the internet, the proxy server credentials need to be added, it is recommended from my past experience to use the NINAA admin account for this.
Setting Up the update approval options
With WSUS you can set options to automatically approve certain types of updates, so they can be installed to the workstation without the need for administrator intervention.
Client Side Setup – Group Policy
This shows the group policy for the Windows update components. Each setting should be setup as shown below.
The first setting “Configure Automatic Updates” allows you to configure the way the windows update client behaves.
For support workstations, it is configured to only automatically download the updates and the allow you to choose when to install them, for staff and student workstations it should be configured to allow the process to be fully automatic, as shown below.
This shows the setup for a Staff or Student workstation, the updates are scheduled to install at 10.00am every day. This should mean that most computers will be on by this time and receive any updates
