If you want to install window server update services(wsus), you need to create a domain, then wsus and client will join this domain. To do this, we need 3 computers as introduced in Chapter 2: Domain, WSUS and Client. Now we will create the domain on the Win_DIC machine.
Firstly, on Win_DIC machine in server manager we choose add roles and features, an add roles and features console will appear.
Figure 3. 1 Install Window Server Update Services At step before you begin choose next,
Figure 3. 2 Install Window Server Update Services Then at installation type step choose next
14
Figure 3. 3 Install Window Server Update Services At sever selection step choose next
Figure 3. 4 Install Window Server Update Services
Then in the server roles select the Active Directory Domain Services checkbox to activate it as the role to use with the server and click Next.
15
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
Figure 3. 5 Install Window Server Update Services
The required features list is displayed click Add Features to add the required features to the server.
Figure 3. 6 Install Window Server Update Services
The Select features panel is displayed. Optionally select any additional features that may be required for your server click Next.
16
Figure 3. 7 Install Window Server Update Services
The Confirm installation selections panel is displayed. If all selections are correct, click Install.
Figure 3. 8 Install Window Server Update Services
Wait for the installation process to finish successfully, then click Close to close the wizard. After the Active Directory Domain is created successfully, we need to configure
17
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
the service on the server. To do that, we set up the Active Directory Domain Services.
After the AD DS server has been added, an alert notification appears in the Server Manager. Click the notification flag. From the dropdown menu at the top right corner of the window, click Promote this server to a domain controller.
The Deployment Configuration panel is displayed. Select the option Add a new forest and enter mylab.local in the Root domain name field click Next.
Figure 3. 9 Install Window Server Update Services
The Domain Controller Options panel is displayed. Enter the Directory Services Restore Mode (DSRM) password and re-enter it in the Confirm password field Click Next twice.
18
Figure 3. 10 Install Window Server Update Services
The Additional Options panel is displayed. The value of the NetBIOS domain name field should automatically appear. Click Next.
Figure 3. 11 Install Window Server Update Services
The Paths panel is displayed. Browse and select the Active Directory Controller paths for each: Database folder, Log files folder and SYSVOL folder click Next.
19
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
Figure 3. 12 Install Window Server Update Services
Confirm all selected options and click Next. A prerequisite check will be performed.
Although some warnings may be displayed, the check should complete successfully and a confirmation message will appear click Install.
Figure 3. 13 Install Window Server Update Services
When the wizard finishes configuring the settings, you will be prompted to log out of your current session and reboot the computer.
Secondly, we need the wsus machine and the client to join the domain. Before joining the domain we have to set DNS for both machines with the DNS of the domain controller and then join by right clicking on thispc and selecting properties
20
Figure 3. 14 Install Window Server Update Services then select change setting
Figure 3. 15 Install Window Server Update Services And system properties is displayed and click change button.
Figure 3. 16 Install Window Server Update Services
21
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
Then tick the domain in member of then enter mylab.local and click ok.
Figure 3. 17 Install Window Server Update Services
We will then be prompted to enter the login information of a domain user who has the right to include the server in the domain, such as the domain administrator.
Figure 3. 18 Install Window Server Update Services
22
The corresponding successful domain login message will be displayed. At this point, you will be prompted, and it is a good idea not to skip it, to restart the server to complete the process.
Thirdly, install wsus và configure the policy on the user
First, On the wsus machine go to server manager and select add roles and features. select next 3 times skipping before you begin, installation type and server selection.
In server roles check window server update services and click add features and click next.
Figure 3. 19 Install Window Server Update Services
The next step will add all the necessary roles and components, so we won't have to configure anything else separately. Click next
23
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
Figure 3. 20 Install Window Server Update Services
Click once again next. It's just steps that proceed to finish the installation of WSUS.
Figure 3. 21 Install Window Server Update Services
Don't change anything for the Role Services of the Web Server and click Next.
24
Figure 3. 22 Install Window Server Update Services Windows Server Update Services Wizard. Just click Next
Figure 3. 23 Install Window Server Update Services
We don't need the option Sql Server Connectivity so click next again.
25
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
Figure 3. 24 Install Window Server Update Services
We must select if we want to store the Windows Updates local in your Server or not. If we store the Windows Updates local the endpoints will download quicker the Windows Updates from the WSUS. If we will not store the Windows Updates in our Server we save disk space but need more time the endpoints to download the Windows Updates from the WSUS.
Figure 3. 25 Install Window Server Update Services
In my Scenario, we choose to store the Windows Updates and gave the path. Click Install and wait until finish.
26
Figure 3. 26 Install Window Server Update Services Click Install and wait until finish.
Figure 3. 27 Install Window Server Update Services
Second, at a domain controller (Win_DIC) allows user computers to automatically download and install updates on a pre-set schedule. Set the address of the WSUS Server.
In the server manager select tools and select Active Directory Users and Computers.
27
Group 09 - RESEARCHING AND DEPLOYING WINDOWS SERVER UPDATE SERVICES
Figure 3. 28 Install Window Server Update Services
Then create a WSUS folder, in that folder create an additional Computer subfolder.
Figure 3. 29 Install Window Server Update Services
At the main Computers directory in mylab.local. We proceed to move the Win_Client virtual machine to the computer subdirectory in the WSUS directory.
28
Figure 3. 30 Install Window Server Update Services