Windows Update Services (WUS)
September 22, 2004
Published: September 26, 2004
Please note:Portions of this transcript have been edited for clarity.
Moderator: Carolyn (Microsoft)
Welcome to today's chat. Our topic today is Windows Update Services. We are pleased to welcome our experts for today. I will have them introduce themselves now.
Host: craig (Microsoft)
I'm Craig, a program manager on Windows Update Services. I am responsible for the User interface and our public API's.
Host: bobbie (Microsoft)
Good morning, Im Bobbie a Program Manager for Windows Update Services
Host: Don (Microsoft)
I'm Don, a software test engineer on Windows Update Services.
Host: bobbie (Microsoft)
We also have Mahzarm here participating in the chat who is the WUS Dev Manager
Host: Gary (Microsoft)
Hi, I’m Gary, a program manager working on Windows Update Services. I drive the Automatic Updates features side of the solution.
Moderator: Carolyn (Microsoft)
...and myself, your moderator for the chat: Carolyn. I am a technical editor for Windows Server User Assistance, working on a variety of projects.
Start of Chat
Host: craig (Microsoft)
Q: Will I still use Win2K group policy to setup workstations to participate as a WUS client?
A: yes, absolutely. You’ll need an updated ADM file, but W2K policy will work.
Host: Gary (Microsoft)
Q: When is the expected public release ?
A: We are targeting an open beta for the end of this year and a release in the first half of 2005.
Host: bobbie (Microsoft)
Q: Standard hotfiixes from Microsoft
A: Yes
Host: craig (Microsoft)
Q: Has been any decision taken, regaring using remote SQL for storing data ?
A: Yes, you will be able to use remote SQL @ RTM.
Host: Don (Microsoft)
Q: Does today's discussion include questions on SUS?
A: Sure, although we’d prefer to concentrate on WUS.
Host: Gary (Microsoft)
Q: Will there be a new adm file or is it the one from XPsp2
A: There are new policies being added specifically for WUS scenarios, so there will be a new ADM. The client will be able to automatically update when pointed to the WUS server, so your clients will automatically get the updated ADM.
Host: bobbie (Microsoft)
Q: Will my end users need admin rights to their PC in order to apply WUS updates?
A: No if AU is configured to do a scheduled install
Host: craig (Microsoft)
Q: What software platforms are going to use the WUS technology for updates...Office, Exchange, SQL, etc.?
A: Currently the plan is for Office, Exchange and SQL. With potentially other products over time.
Host: Gary (Microsoft)
Q: when will the open beta be available?
A: We are targeting an open beta for the end of this year and a release in the first half of 2005.
Host: bobbie (Microsoft)
Q: How will I import the standard hotfixes
A: You can configure the WUS synchronization to synch those types of updates
Host: craig (Microsoft)
Q: Are there any plans to allow extensibility such that I, as a system administrator/developer, could use WUS to send updates to custom applications?
A: Not for this release. This is something that we’d like to do for the next release tho.
Correction: This is something that we’re looking into for future releases.
Host: Don (Microsoft)
Q: Any difference in WUS capabilities for SA customers versus non-SA customers?
A: There will be no separate version for SA customers
Correction: There are no plans for a separate version for SA customers
Host: bobbie (Microsoft)
Q: Will I be able to upgrade to WUS or will it be a separate install?
A: Yes we will have a migration tool to migrate from SUS 1.0 to WUS. That will be included in the next beta.
Host: Gary (Microsoft)
Q: What is ADM?
A: the ADM file if used to drive policies using the group policy infrastructure. It specifies and describes the policies which can be set to drive the client behavior.
Host: bobbie (Microsoft)
Q: How can I configure the WUS to sunc for specific hotfixes, there are thousens of hosfixes for difernt issus
A: With WUS you will be able to filter updates by products as well as what type of updates, for example critical, SP etc.
Host: Don (Microsoft)
Q: Will AutoUpdate XP-SP2 in SUS legacy mode use some of the new AutoUpdate features ( such as modifying the detection frequency ) if configured by a new Group Policy?
A: If you are using a SUS 1.0 server none of the new functionality or capabilities of the new client are available.
Host: bobbie (Microsoft)
Q: Will it be possible to have WUS automatically approve and distribute critical updates (as well as other types) without needing someone to manually approve new updates?
A: yes
Host: craig (Microsoft)
Q: will the wus server maintain status information for the clients using it? (version, last check in, waiting for reboot, etc?)
A: Yes. We have some great reporting features. You will be able to see last contact date, OS version, bios & machine details etc. As well as the updates installed/needed or failed, both on a per machine or per update basis.
Host: bobbie (Microsoft)
Q: Will there be any reporting in WUS without having to use third-party software?
A: yes
Host: bobbie (Microsoft)
Q: What about .net framework and WSS SP's? will it still download all language versions, no matter what languages I selected?
A: In WUS you will only get the downloads for the languages you select.
Host: Don (Microsoft)
Q: Did the V5 windows update or XPSP2 update the client side tools for use with WUS or will there still be another upgrade required on the client side?
A: There will be another client upgrade required for WUS.
Addition: This is made simple by allowing clients to update to the latest client when they communicate with your WUS server.
Host: Gary (Microsoft)
Q: Can updates be applied automatically to test PCs immediately and then to other PCs a specified period of time after the initial release?
A: You can create auto-approval rules for a specific target group (“test computers”). Then later when you decide to deploy the updates to your entire org, you approve the updates to you other target groups (or all computers).
Host: bobbie (Microsoft)
Q: Which product do you recommend to use for patch management- wus or sms?
A: This would depend on the complexity of your organizational needs and what other actions you would like to conduct such as inventory, software distribution etc.
Host: Don (Microsoft)
Q: Will there be any functionality to include different groups? i.e. I want to deploy to this group first in order to "test" the patches/updates, then once I have tested, I can deploy to the rest of the machines?
A: There will be the ability to create groups and target updates to them. You could have a TEST group and a PRODUCTION group, for example.
Host: craig (Microsoft)
Q: Currently SUS's reporting is " blah " ... What are the reporting features for WUS?
A: We have a 1:1 update status view so you can see what machines have installed/needed/failed for a specific update. Update status reports that show update status across all target groups with drill down to specific groups & machines. Reports are filterable by group and approval action. You can also view the status per machine. We have a great set of .net API’s that expose all the reporting goo, so you can use vb.net or similar tools to build exactly the reporting you want if we didn’t do a good enough job!
Host: bobbie (Microsoft)
Q: It would be a nice function to be able to "update " the WUS repository manually for specific hotfixes.
A: what would you want to achieve by updating it manually, or what is it exactly your trying to do. Can you give me a description?
Host: Don (Microsoft)
Q: Any concept of grouping clients to be able to have different update types (testing, dev, prod etc)
A: Absolutely. See my previous answer about creating groups.
Host: bobbie (Microsoft)
Q: Is MBSA incorporated in WUS, or is it still a seperate entity?
A: it is a separate entity but we have similar functionality for predeployment checks and scanning
Host: craig (Microsoft)
Q: What about a Big Red button? (immediate push install)
A: Not directly in this release. There are client APIs that will allow you to script this, and we’ll provide some sample scripts and tools for RTM to allow this.
Host: Gary (Microsoft)
Q: What is the status on updating all MS products, are all teams in yet?
A: Office, SQL and Exchange are top partners for initial release. Other products will continue to be added.
Host: bobbie (Microsoft)
Q: If I recived a hotfix specific for my 10 servers, I would like to be able to deploy them in the same wasy I do with critical hotfixes
A: WUS does not provide this capability, SMS does
Host: craig (Microsoft)
Q: Will WUS be able to update all kind of office typ installations, Office with local chash and office that has been deployed with Active Directory
A: Yes, for per machine installs of Office.
Host: Gary (Microsoft)
Q: Is MBSA incorporated in WUS, or is it still a separate entity?
A: The long term plan is for MBSA functionality to use the same Windows Update detection functionality.
Host: bobbie (Microsoft)
Q: Actually scripts... Just hope that in the RTM will be a lot more sample scripts and a lot better documented API, cause it's very poor in my opinion.
A: I don’t think anyone will have any complaints in the number of samples we will provide or the SDK d
Host: Don (Microsoft)
Q: What is the planned installation mechanism for the updated WUS client...SUS, AD/GPO, Installer Package, .exe, etc.?
A: The clients primary install mechanism is through its native self-update capabilities when talking to the WUS server. There may also be an MSI package provided if necessary.
Correction: There may also be a standalone package provided if necessary.
Host: craig (Microsoft)
Q: How much of the reporting detail will be rolled up to parent WUS servers?
A: none. Each server doesn’t roll up to it’s parent.
Host: bobbie (Microsoft)
Q: Then WUS will not be able to deploy standard hotfixes. I dont understand why you wont give us this function. Now we need to diffent toold for installing MS hotfixes - Bad
A: We will relay your concerns to those who have had to make the tough calls on prioritization of features. Thanks for your feedback
Host: craig (Microsoft)
Q: What integration is planned for MOM2005 and WUS?
A: We will have a MOM management pack available by the time we ship.
Correction: We are planning to have a MOM management pack available by the time we ship.
Host: bobbie (Microsoft)
Q: If you installed Office though Active Directory, you cant update the client with a the "clienthotfix" you need the adminhotfix - Will WUS realy hanlde these?
A: We are looking into this scenario and hope to document how to update admin images in the deployment guide
Host: Don (Microsoft)
Q: What are the supported Office version(s) for updating through WUS?
A: Office XP and Office 2003
Host: Gary (Microsoft)
Q: Will WUS support terminal services? If I have users logged into a TS server and the update requires a reboot, what will happen?
A: Yes; depending on how you have Automatic Updates configured on a TS machine, the updates will either notify prior to install or auto install. With notification, a user with proper privileges must choose to do the install and choose to install. With auto-install, the machine would be rebooted after install, but this behavior could be further controlled by policy.
Host: craig (Microsoft)
Q: Where can I find more information on creating my own customized reports using vb.net and the WUS api?
A: We’ll have some samples in the SDK, and sample code that you can take and tweak.
Host: bobbie (Microsoft)
Q: On Bjorn's question, let me get some clarification. If we install Office via AD/GPO, then will the WUS client be able to update those installations of Office?
A: Yes if they are installed per machine/system.
Host: bobbie (Microsoft)
Q: will WUS support service packs and patches for applications other than Microsofts?
A: Not at this time
Host: Gary (Microsoft)
Q: Does Microsoft have any plans to develop a program that will detect all Microsoft products on a system and deploy available hotfixes and service packs to these?
A: The direction is for WUS to handle updates for all Microsoft products. This will give you knowledge on the server of which clients need the patch and the ability to deploy the updates to those machines.
Host: craig (Microsoft)
Q: Why are you not providing support for Office2000. There is a lot of costumers running this version and i though you had 10 years support for your products:=)
A: The office team owns the decision about which products they’ll provide support for via WUS and they have decided not to support Office 2000 via WUS at this time. You will still be able to get updates via Office update, but not via WUS.
Host: Don (Microsoft)
Q: Can we upgrade IE using WUS? That is upgrade the version, not simply update it.
A The direction is to eventually provide all Microsoft updates through WUS.
Host: bobbie (Microsoft)
Q: Is it recommended to update servers with WUS or should it be done manually?
A: Yes WUS can be used to update servers or clients
Host: craig (Microsoft)
Q: Will WUS report information on failed installations of updates?
A: Yep.
Host: bobbie (Microsoft)
Q: Will be products from the Office family supported too? I mean, Visio, Project, Project Server
A: Direction is for MS to provide updates for all MS products, however the actual schedule for when Office family products to be updated is not closed yet
Host: craig (Microsoft)
Q: Further, will it also collect/report on failures caused by an illegal copy of the OS, such as where XP-SP2 will not install?
A: Yes. We report detailed failure info and the reason for the failure.
Host: craig (Microsoft)
Q: Will WUS be able to alert admins when new updates become available? via email would be nice....
A: Not in the box, but I have a sample application that will be in the SDK that does exactly this.
Host: bobbie (Microsoft)
Q: Is there limitations on the open evaluation version, or can I go "live" with it untill the full release?
A: The open evaluation will have a beta license and is for non-production deployments
Host: craig (Microsoft)
Q: What is the scope for feature changes and additions at the timing of the next beta?
A: Are you asking what we have changed, or what changes/feature requests we’ll take?
Host: Gary (Microsoft)
Q: Then you might get a corrupt Office on the client. If the client have a more recent version the you have on the admininstallation and then request a new feature, the office applikation will be corrupt
A: There are a few scenarios where this might happen, however the options were to either not patch this or provide guidance on pros and cons by which this can work. At release time, the deployment guide will go into more details on how this can be configured to work, with caveats explained. Please stay tuned.
Host: bobbie (Microsoft)
Q: Can I use another database product (non-microsoft) to collect info from WUS?(ex. Mysql, etc. Hey, its free)
A: We will only be testing wus with MSDE, WMSDE and SQL -
Host: craig (Microsoft)
Q: If there is some missing for WUS at the next Beta, will it be considered or will be changed locked out?
A: Well, Scott, we will be feature complete @ the next beta, but we’re always open to feedback. If there’s a big enough demand then we definitely will consider changes. No promises mind you ;o)
Host: craig (Microsoft)
Q: Are there any 'expected' features now missing? You have already indicated no enterprise roll-up reporting, what are bad news do you have?.
A: Depends what you’re expecting ;o)
Moderator: Carolyn (Microsoft)
I'd like to thank our hosts for joining us today on a Microsoft Community Chat to talk about Windows Update Services. If you would like further information on today's topic, please visit the following URL: http://www.microsoft.com/wus.
Thanks for your interest and feedback! We are going to leave now. You are welcome to continue chatting in the lower window. We encourage you to use it anytime we are not doing a scheduled chat.