Configure the WSUS Server

May 16, 2008

Configure the WSUS Server and Create Computer Groups for Computers

Next, you configure WSUS for synchronization and approving updates by using the Administrator Console interface and then modifying Group Policy settings in Active Directory.

Modify Synchronization Settings

In this section you synchronize your server with the Microsoft Windows Update servers.

Procedure UM.5: To configure the WSUS server

Open up the Windows Server Update Services Deployment Guide downloaded in Install WSUS.

From the Table of Contents, navigate to Configure the WSUS Server to learn about the process of configuring WSUS.

Perform the following procedures:

•	Access the WSUS Administration Console
•	Configure WSUS to Use a Proxy Server
•	Select Products and Classifications
•	Synchronize the WSUS Server
•	Configure Advanced Synchronization Options
•	Chain WSUS Servers Together
•	Create a Replica Group
•	Create Computer Groups for Computers
•	Approve Updates

Create a Group Policy for Update Management

This procedure allows you to use Group Policy to manage software updates.

First, add the WSUS Group Policy.

Procedure UM.6: To add the Windows Server Update Services Group Policy

1.	Log on to AD01 using an account that is a member of the Domain Administrators group.
2.	Click Start, click Administrative Tools, and then click Group Policy Management.
3.	Expand Domains, and then expand your domain (for example, fabrikam.com).
4.	Expand Group Policy Objects.
5.	Right-click Group Policy Objects, and then select New.
6.	Type a name for the GPO (for example, Windows Server Update Services), and then click OK.

Import the Security Template into the New GPO

You will need the WUAU.adm file that describes the new policy settings for the Automatic Updates client. WUAU.adm is automatically installed into the %windir%\inf folder when you install Automatic Updates.

Procedure UM.7: To import the security template into the new GPO

Right-click the newly created Windows Server Update Services GPO, and then click Edit.

From the Deploying Microsoft Windows Server Update Services document, perform the steps from the Update and Configure the Automatic Updates Client Compoment section to configure the following procedures:

•	To add the WSUS Administrative Template
•	To configure the behavior of Automatic Updates
•	To redirect Automatic Updates to a WSUS server In step 3, enter http://wsus01 for the server name.
•	To enable client-side targeting In step 3, type the group name created earlier (Hosting Servers) in the box.

Close the Group Policy Object Editor.

Apply the GPO to an Active Directory OU

Finally, apply the Windows Server Update Services settings to all domain servers by linking the GPO to the Servers OU. Once all servers obtain the policy information from the domain controller, they will then check for and install updates from WSUS01 based on the configurations.

Procedure UM.8: To apply the GPO to the Servers OU

1.	Open the Group Policy Management Console.
2.	Expand Domains, and then expand your domain (for example, fabrikam.com).
3.	Expand Group Policy Objects.
4.	Click the previously created Windows Server Update Services GPO, and then drag it onto the Servers OU, to which it should be linked.
5.	In the Group Policy Management dialog box, click OK to confirm the creation of the GPO link.
6.	Click the previously created Windows Server Update Services GPO and drag it onto the Domain Controllers OU, to which it should be linked.
7.	In the Group Policy Management dialog box, click OK to confirm the creation of the GPO link.

Tagged with:

Categorised as: Microsoft, Windows Upgrade

Memorise