32 cấu hình WSUS (windows server update services)

edrnSp-2180imt0g700 Active Directory Federation Services Active Directory Lightweight Directory Services Active Directory Rights Management Services Application Server DHCP Server DNS S

Cấu hình WSUS (Windows Server Update Services)

Microsoft Windows Server Update Services (WSUS) là giải pháp hữu hiệu cho các doanh nghiệp sử dụng hệ thống mạng Windows trong vấn đê cập nhật hệ thống Thử tưởng tượng một hệ thống với máy tính nào cũng cập nhật qua kết nối Internet thì lượng băng thông đường truyền bị chiếm sẽ nhiêu tới như nào WSUS đưa ra giải pháp cho vấn đề này, WSUS Server sẽ download các bản cập nhật để cung cấp lại cho các máy trạm Bạn sẽ không còn phải

lo lắng về vấn đề băng thông đường truyền nữa

TP: 192.168.1424 IP: 192.168.1.224 GW: 192.168.1.1 GW: 192.168.1.1 Preferred DNS: 192.168.1.2 Preferred DNS: 192.168.1.2 Jen Domaie: Bhapower.se Domain Ceatrofer Bhapewer va WSUS Server DNS Server

Cau hinh WSUS (Windows Server Update Services)

Tai may BKNP-DC08-01, md Active Directory Users and Computers va nhan phai chuột trên máy BKNP-WRK-

01 (đã join vào miên) chon Move

W Active Directory Users and Computers

File Action View Help

œ«®|2|m|# nlX1s.32|Hrl$wsYa®

= lấn Hepoer.n mm

#4 -1 Builtin Add to a group

| Computers Disable Account ) 2) Domain Controllers Reset Account +) 1 ForeignSecurityPrnopals

#l | Users

All Tasks >

Cut

Delete

Properties

Help

<j 1 >|

Moves the current selection to another organizational unit | |

Move may BKNP-WRK-01 vao OU IT thuéc OU HANOI

Tạo mới chính sách: Start > Programs > Administrative Tools > Group Policy Management

Nhấn phai chudt lén OU IT chon Create a GPO in this domain, and Link it here

| Group Policy Management

_ Fe 7 He ts

®© | || ñ | E1 a|H `

- #8, Group Policy Management

B A Forest: bknpower.vn

E) (gi Domains

sPO in this domain, and Link it here

—

] }

Đặt tên cho GPO mới

New GPO

Nhấn phải chuột vào WSUS chọn Edit

| -‹ Group Policy Management

a Aa Policy Management wsus tn

=) gay bknpower.vn Links

wm, Default Domain Policy Display links in this location:

EI 1 HANOI The following sites, domains, and OUs are linked to this GPO:

Filtering The settings in this GPO can only apply to the following groups, users, and computers:

& Authenticated Users

WMI Filtering This GPO is linked to the following WMI fitter:

= So

Đặt lịch cập nhật tự

động: Computer Configuration > Administrative Template > Windows Component >Windows Update Nhấn phải chuột vào Configure Automatic Update chọn Properties, tick chọn Enable và tùy chọn Auto download and Schedule the install

| Group Policy Management Editor

File Action View Help

© ®| *Ír2|1.2| HE ð

: Configure Automatic Updates Properties 2x

) Tablet PC

| Windows Calen — (°"/ Configure Automatic Updates ent to automatically w

(] (") Windows Error f®S Enabled

ŠÌ Windows Instal ay configur

Š Windows Meda The following settings are only required Not configur

| Windows Messe on a xi bsoft update service lo Not confgur

“waders Hebi | Shaded nae: [ rT |

| Windows Movie

1 Windows Powe:

[4] |) Windows Remo

_ Windows Remo — Supported on: At least Microsoft Windows 2000 Service Pack 3 or Mi

„| Windows Sideb -

CỔ Windows Syste

_Ì WWdowsUpdal [_œ | Cance | xw |

44 All Settings

#i _) Preferences «l|4| { |

7 | >{ \ Extended A Standard / 7

Nhấn phải chuột vao Specify Intranet Microsoft update service location chon Enable va nhap dia chi IP cuaWSUS Server

Specify intranet Microsoft update service locatio,

Setting Explain | Commert |

É- Specify intranet Microsoft update service location

( Not Configured (* Enabled ( Disabled

Set the intranet update service for detecting updates:

|http:⁄/192 168 1 3

Set the intranet statistics server:

|http://192.168 1 w

(example: http://Intranet Upd01)

Supported on: At least Microsoft Windows 2000 Service Pack 3 or Mi

Previous Setting | Next Setting

Nhdan chuét phai vao Automatic updates detection frequency, chon Enable va click OK

Automatic Updates detection frequency oN

Setting | Explain | Comment |

("} Automatic Updates detection frequency

( Not Configured (* Enabled ( Disabled

Check for updates at the following interval (hours): i =

Supported on: At least Microsoft Windows 2000 Service Pack 3 or Mi

Previous Setting Next Setting

[or] coms | xx |

Thực hiện cập nhat policy bang command line théng qua lệnh gpupdate /force

< C:\Windows \system32\gpupdate.exe Updating Policy

Tai may BKNP-SRV08-01 cai dat dich vu Web Server (IIS)

Add Roles Wizard

Description:

Active Directory Certificate Services Web Server (IIS) provides a reliable, manageable, and scalable Web Active Directory Domain Services #2 edrnSp-)2180imt0g700

Active Directory Federation Services Active Directory Lightweight Directory Services

Active Directory Rights Management Services

Application Server DHCP Server DNS Server Fax Server File Services Network Policy and Access Services Print Services

Terminal Services

| UDDI Services

Web Server (IIS)

Windows Deployment Services Windows Server Update Services

<Previous || Next > se | €anel |

Nhấn Next để tiếp tục

Add Roles Wizard

Before You Begin Introduction to Web Server (IIS)

Web servers are computers that have specific software that allows them to accept requests from dient computers and return responses to those requests Web servers let you share information over the Internet, or through intranets and extranets The Web Server role indudes Internet Information Services (IIS) 7.0, a unified Web platform that integrates IIS 7.0, ASP.NET, and Windows Communication Foundation IIS 7.0 also features enhanced security, simplified diagnostics, and delegated administration

Things to Note

i Using Windows System Resource Manager (WSRM) can help ensure equitable servicing of Web server traffic especially when there are multiple roles on this computer

i The default installation for the Web Server (IIS) role indudes the installation of role services that enable you to serve static content, make minor customizations (such as default documents and HTTP errors), monitor and log server activity, and configure static content compression

<Previous || Next > costal | Cancel |

Tai man hinh Select Role Services Iva chọn các thành phần cần thiết rồi nhấn Next để tiếp tục

Add Roles Wizard

Application Deve lopment

=) (i Common HTTP Features

Static Content

Default Document

Directory Browsing

HTTP Errors

|) HTTP Redirection

Cài đặt WSUS Server

Chạy tập tin càiđặt WSUS Server, tại màn hình cài đặt, nhấn Next để tiếp tục

helps

Services 3.0 SP2 server software The software helps you deploy updates from Microsoft Update to computers on your network

To continue, click Next

Lua chon ché dé cai dat Full Server Installation including Administration Console và nhấn Next để tiếp tục

!3 Windows Server Update Services 3.0 SP2 Setup Wizard xi

Installation Mode Selection

What kind of installation would you like to perform for Windows Server Update Services?

( Full server installation including Administration Console

r

< Back

Lựa chọn đồng ý với các điều khoản quy định và nhấn Next để tiếp tục

License Agreement

To install Windows Server Update Services 3.0 SP2, you must accept the terms of the 6 user license agreement

#3 Windows Server Update Services 3.0 SP2 Setup Wizard

Please read the following agreement carefully Use the scroll bar or press the PAGE DOWN key to view the rest of the text To print the text, click Print

services for the supplement as described at

@ | accept the terms of the License agreement

C | do not accept the terms of the License agreement

PLEASE NOTE: Microsoft Corporation (or based on where you live, 4!

one of its affiliates) licenses this supplement to you You may use it with each validly licensed copy of Microsoft Windows Server software (the “software”) You may not use the supplement if you

do not have a license for the software The license termsforthe — software apply to your use of this supplement To read the license terms, go to www.microsoft.com Microsoft provides support

EÌ Print |

Tại màn hình Select Update Source, nhấn Next để tiếp tục

Select Update Source You can specify the location from which client computers acquire updates

ff you have a drive formatted with NTFS and at least 6 GB of free disk space, you can use

it to store updates for client computers to download quickly

3 Windows Server Update Services 3.0 SP2 Setup Wizard

if you need to save disk space clear the check box to store updates on Microsoft Update; downloads will be slower

ff you choose to store updates locally updates are not downloaded to your WSUS server

[¥ Store updates locally

|C\WSUS

until you approve them By default when updates are approved, they are downloaded for

languages

Next >

Tai man hinh Database Option nhdan Next dé tiếp tục

WSUS

} Use an existing Getabese server on this computer

OF

Nhấn Next để kết thúc quá trình cài đặt WSUS

Windows Server Update Services 3.0 SP2 Setup Wizard

Ready to Install Windows Server Update Services 3.0 SP2

Cau hinh WSUS

Tại màn hình Before you begin, nhấn Next để tiếp tục

Fg Windows Server Update Services Configuration Wizard

Ta Before You Begin

Things you should do before starting this wizard

| i> Before you begin:

= 1 Is the server firewall configured to allow clients to access the server?

Speaty Proxy Server 3 Do you have user credentials for the proxy server, if needed?

Choose Languages

Choose Products Choose Classifications

Configure Sync Schedule Finished

What's Next

To run this wizard again, launch the WSUS Administration Snap+n and go to Options

zZ Join the Microsoft Update Improvement Program

You have the option of joining the Microsoft Update Improvement Program

Help us design the next version of Windows Server Update Services Improve § crosoft Update Improvement : quality, reliability, and performance of Microsoft Software

When you opt into the Microsoft Update Improvement Program, your WSUS

server will send information to Microsoft about the quality of updates This information indudes:

How many computers are in the organization

How many computers successfully installed each update

How many computers failed to install each update

Configure Sync Schedule Finished This information is used to improve the quality and reliability of the updates What's Next Microsoft provides

None of the information collected is used to identify or contact you or your Privacy Statement

ÍZ Yes, I would like to join the Microsoft Update Improvement Program

Tai man hinh Choose Upstream Server chon Synchronize from Microsoft Update và nhấn Next

Fg Windows Server Update Services Configuration Wizard

La 5 Choose Upstream Server

Provide the upstream server from which you want to synchronize content

Microsoft Update Improvement updates

(* Synchronize from Microsoft Update Synchronize from another Windows Server Update Services server

Server name: |

Configure Sync Schedule Port number: [so

What's Next If using SSL, ensure that the upstream WSUS server is also configured to Q °

support SSL

j a IHIIS 1S ä TEDIIGTG QÌ a a eee a Gre UST EsN SETVer

A replica server mirrors update z p

from its parent Updates can be approved only on the upstream server, Tì

Tại màn hình Specify Proxy Server, giữ nguyên tùy chọn mặc định rồi nhấn Next để tiếp tục

Fg Windows Server Update Services Configuration Wizard

Provide proxy server settings for synchronizing updates with Microsoft Update

Before You Begin If this server requires a proxy server to access the upstream server, you can

Microsoft Update Improvement configure the proxy server settings here

Program

Upstream Server [” Use a proxy server when synchronizing

= net hake ha Proxy server name: |

Choose Languages

Choose Classifications Km

Use user cecentais to connect to the proxy ser

Configure Sync Schedule

Password |

[| Allow basic authentication (password is sentin dearte

Tai man hinh Connect to Upstream Server, nhdan Start Connecting rồi nhấn Next để tiếp tục

” Download update information from Microsoft Update

Before You Begin io Microsoft Update Improvement

Program

Choose Languages

Choose Products Choose Classifications Configure Sync Schedule Finished

What's Next

E4 Windows Server Update Services Configuration Wizard

To configure Windows Server Update Services on the following screens, we

to apply your upstream server and proxy server settings and synchronize information about available updates

Information to be downloaded indudes:

Types of updates available Products that can be updated Available languages

Click Start Connecting to save and download upstream server and proxy server information This process might take several minutes or longer, depending on your connection speed

Start Connecting | Stop Connecting

Select the languages for which this server will download updates Before You Begin

Microsoft Update Improvement ữ

Program

Choose Upstream Server Specify Proxy Server

Choose Products Choose Classifications Configure Sync Schedule

What's Next

Fey Windows Server Update Services Configuration Wizard

w

If you are storing update files locally, you can filter theupdates downloade “

your server by language Choosing individual | anguages will affect which

computers can be updated onthis server and any downstream servers For

more information see lan We n

™ Download updates in alll languages, including new languages (* Download updates only in these languages:

L_] Czech E] Latvian

iv) English E—] Polish

ceak [nets | sie | conet_|

Tai man hinh Choose Product, lua chon đối tượng cập nhật là Windows 7