Scribd
Upload
35 views

Window Server Update Services

Uploaded by

Moreen Ngururi
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
35 views

Window Server Update Services

Uploaded by

Moreen Ngururi
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 2

Window server update services

 WSUS is a Microsoft tool that lets organizations manage and distribute Windows updates locally and
acts as an intermediate server between Microsoft Update servers and your network computers. You
can deploy one or more WSUS servers depending on the number of client machines—including
server machines whose updates you want to manage through WSUS—and other technical
considerations in your organization’s IT network

Core Components:
WSUS Server- It is the central component that downloads and stores updates

WSUS Database- It stores update metadata and client computer information

Administrative Console- Web-based interface for managing updates

Client computers- Network computers that receive updates from WSUS

Working Process:
a) Update Synchronization:

WSUS connects to Microsoft Update servers after establishing a secure HTTPS connection to Microsoft
Update servers and downloads updates based on configured categories and products. It then stores
updates locally to save internet bandwidth.

The synchronization process is crucial because it ensures your WSUS server has the latest updates and
allows for efficient bandwidth usage. It also provides basis for update approval workflow and enables
centralized update management

b) Client Configuration:

Deploying a WSUS server to a network isn't enough; clients must be configured to connect to it instead
of to Microsoft update. System admins often configure the client using group policy, but could also set it
up through Microsoft System Center Configuration Manager, mobile device management or manually
with registry keys. Admins can set how clients install updates, if they reboot after installation and notify
users of the updates.

c) Testing and approving updates

After synchronization, admins should review the available updates in the WSUS console. They can
approve updates for deployment to specific computer groups or all computers within the organization.
It's recommended to test updates on a subset of machines before approving them for widespread
deployment.

d) Automating tasks

The WSUS Administration Console helps automate approvals using rules and admins can specify rules
based on when a particular update becomes available, which products have updates available or when
an update should be approved. Windows PowerShell scripting can also be used to automate tasks such
as approvals, cleanups, synchronization and update installation scheduling.
Once you have finalized the architecture and set up the upstream and downstream servers, you should
allow and connect client machines to get updates from WSUS servers. Accordingly, whenever updates
are available, you can review and test those updates and then distribute them to specific client
machines. You can also define groups to manage client machines categorically and distribute updates
based on group policies.

You might also like