Configure the WSUS Server
Configure the WSUS Server and Create Computer Groups for Computers
Next, you configure WSUS for synchronization and approving updates by using the Administrator Console interface and then modifying Group Policy settings in Active Directory.
Modify Synchronization Settings
In this section you synchronize your server with the Microsoft Windows Update servers.
Procedure UM.5: To configure the WSUS server
|1.||Open up the Windows Server Update Services Deployment Guide downloaded in Install WSUS.|
|2.||From the Table of Contents, navigate to Configure the WSUS Server to learn about the process of configuring WSUS.|
|3.||Perform the following procedures:
Create a Group Policy for Update Management
This procedure allows you to use Group Policy to manage software updates.
First, add the WSUS Group Policy.
Procedure UM.6: To add the Windows Server Update Services Group Policy
|1.||Log on to AD01 using an account that is a member of the Domain Administrators group.|
|2.||Click Start, click Administrative Tools, and then click Group Policy Management.|
|3.||Expand Domains, and then expand your domain (for example, fabrikam.com).|
|4.||Expand Group Policy Objects.|
|5.||Right-click Group Policy Objects, and then select New.|
|6.||Type a name for the GPO (for example, Windows Server Update Services), and then click OK.|
Import the Security Template into the New GPO
You will need the WUAU.adm file that describes the new policy settings for the Automatic Updates client. WUAU.adm is automatically installed into the %windir%\inf folder when you install Automatic Updates.
Procedure UM.7: To import the security template into the new GPO
|1.||Right-click the newly created Windows Server Update Services GPO, and then click Edit.|
|2.||From the Deploying Microsoft Windows Server Update Services document, perform the steps from the Update and Configure the Automatic Updates Client Compoment section to configure the following procedures:
|3.||Close the Group Policy Object Editor.|
Apply the GPO to an Active Directory OU
Finally, apply the Windows Server Update Services settings to all domain servers by linking the GPO to the Servers OU. Once all servers obtain the policy information from the domain controller, they will then check for and install updates from WSUS01 based on the configurations.
Procedure UM.8: To apply the GPO to the Servers OU
|1.||Open the Group Policy Management Console.|
|2.||Expand Domains, and then expand your domain (for example, fabrikam.com).|
|3.||Expand Group Policy Objects.|
|4.||Click the previously created Windows Server Update Services GPO, and then drag it onto the Servers OU, to which it should be linked.|
|5.||In the Group Policy Management dialog box, click OK to confirm the creation of the GPO link.|
|6.||Click the previously created Windows Server Update Services GPO and drag it onto the Domain Controllers OU, to which it should be linked.|
|7.||In the Group Policy Management dialog box, click OK to confirm the creation of the GPO link.|