Build Update Management

Cc526851.chm_head_left(en-us,TechNet.10).gif Cc526851.chm_head_middle(en-us,TechNet.10).gif Cc526851.chm_head_right(en-us,TechNet.10).gif

Build Update Management

This section provides instructions for deploying update management using steps found, for the most part, in Deploying Windows Server Update Services. This guide is in Microsoft Word format, so for easier navigation, keep it open on a computer with Microsoft Word or Microsoft Word viewer installed. As you go through the steps below, you can use the Table of Contents in the document to go to the sections referenced in this section. The example server name for the Windows Server Update Services server is WSUS01.

Cc526851.arrowblueright(en-us,TechNet.10).gif Servers Used in the Update Management Deployment

Deploying the Microsoft Solution for Hosted Messaging and Collaboration requires the use of a consistent set of server and domain names. For ease-of-use, you can change the server names used in this documentation to the names you use in your data center.

The following table shows the example server names and roles used for update management in this documentation.

Table: Update Management Solution Server Names and Server Roles

Server NameRoleInstalled Software
WSUS01Windows Server Update Services serverWindows Server 2003 with SP1
Internet Information Services (IIS) 6.0
Windows Server Update Services (WSUS)
Latest updates from Microsoft Update
Cc526851.arrowblueright(en-us,TechNet.10).gif Prepare the WSUS01 Server

In this section, you will prepare the server for Windows Server Update Services (WSUS) installation by installing Microsoft Windows Server 2003 and Internet Information Services (IIS), and then moving WSUS01 to the correct organizational unit (OU).

Procedure UM.1: To install Windows Server 2003 with SP1
  1. Install Windows Server 2003 with SP1 onto WSUS01.

    Note

    You can install Windows Server 2003 by using Automate Deployment Services (ADS) to deploy an image as described in Build Service Provisioning.

  2. Join WSUS01 to the fabrikam domain.
Install IIS on WSUS01

IIS provides Web services on WSUS01.

Procedure UM.2: To install IIS manually
  1. Click Start, point to Control Panel, and then click Add or Remove Programs.
  2. Click Add/Remove Windows Components.
  3. In the Components list, click Application Server.
  4. Click OK, click Next, and then follow the instructions on the screen.
Move WSUS01 into the Management OU

Move WSUS01 into the Management OU.

Procedure UM.3: To move WSUS01 into the Management OU
  1. Log on to AD01 using an account that is a member of the Domain Administrators group.
  2. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  3. Expand fabrikam.com, and then expand Computers.
  4. Right-click WSUS01, and then click Move.
  5. Expand Servers, expand Infrastructure, expand Management, and then click OK.
Cc526851.arrowblueright(en-us,TechNet.10).gif Install WSUS

Next, install Windows Server Update Services.

Procedure UM.4: To install Windows Server Update Services on WSUS01
  1. On the Deploying Microsoft Windows Server Update Services Web page, click Download.
  2. In the Deploying Microsoft Windows Server Update Services document, from the Table of Contents, navigate to Run WSUS Server Setup, and then follow the To install WSUS on your server procedure.
Cc526851.arrowblueright(en-us,TechNet.10).gif Configure the WSUS Server and Create Computer Groups for Computers

Next, you configure WSUS for synchronization and approving updates by using the Administrator Console interface and then modifying Group Policy settings in Active Directory.

In this section you synchronize your server with the Microsoft Windows Update servers.

Procedure UM.5: To configure the WSUS server
  1. In the Deploying Microsoft Windows Server Update Services document, from the Table of Contents, navigate to Configure the WSUS Server to learn about the process of configuring WSUS.
  2. Perform the following procedures:
    • Access the WSUS Administration Console
    • Select Products and Classifications
    • Synchronize the WSUS Server
    • Create Computer Groups for Computers
    • Approve Updates
    • Verify Update Deployment
  3. You may also perform one or more of these procedures:
    • Configure WSUS to Use a Proxy Server
    • Chain WSUS Servers Together
    • Configure Advanced Synchronization Options
    • Create a Replica Group