Build sus service in LAN

In addition to upgrading all servers under his jurisdiction in the first time, he also needs to download Patch packages suitable for multiple platforms and multi-language environments for the client, and then check whether these patch packages are all upgraded. Often one patch is not completed yet, and another patch is coming again. People can't help asking where is "Zero management" initiated by Microsoft? In fact, Microsoft has already launched the Software Update Services (SUS) Service to realize its "Zero management ".

■ Sus Service Workflow
Build a sus server in the LAN → regularly and selectively synchronize content with the Microsoft Update Website → redirect the upgrade URL of the Intranet client, transfer the website upgraded from Microsoft to the internal sus server → use the Group Policy to automatically install the SUS client program → customize the client Upgrade Method and upgrade schedule at the same time.

■ Install and configure the SUS Service

1. Install the SUS Server

(1) Hardware minimum configuration of SUS server: Pentium III 700 MHz, MB memory, 6 GB hard disk space.

(2) Minimum Software Configuration: Windows 2000 Server, SP2, IIS 5.0, ie5.5, NTFS partition, preferably a domain controller (DC ).

(3) The software configuration of the SUS client is Windows 2000/XP.

The download link for (4)susserver installer package (sus10sp1.exe) and client installer package (wuau22chs. MSI) is as follows: http://go.microsoft.com/fwlink? Linkid = 6930.

Installing the SUS server is simple. You can select a typical installation without user intervention. If your default partition is not large enough, you 'd better choose custom installation and re-specify other partitions, because only downloading patches in Chinese and English versions will occupy 1 GB of hard disk space.

2. Sus Server Configuration

(1) After the installation is complete, the configuration page is automatically displayed. Click "set options" to enter the setting options. In addition to the local sus Server IP Address "168.192.0.1", select "Chinese Simplified", and "English", you can retain the default settings. Click [apply] OK.

(2) Click "Synchronize server" and Microsoft to upgrade the website for content synchronization. This process takes a long time and requires about 1 GB of content to be downloaded. It is best to set a synchronization schedule for the future.

(3) After the content is synchronized, click "approve updates" to selectively provide the downloaded content to the Intranet users. The configuration of the SUS server ends here. To modify the configuration in the future, you only need to enter "http: // servername/susadmin/" in the address bar of the browser. For remote management, the administrator password is required.

3. Group Policy Configuration

(1) customize the client Upgrade Method and upgrade schedule
Click Start> program> Administrative Tools> Active Directory users and computers, right-click Organization Unit (OU), which can be a domain or a group, and select Properties ", select "Group Policy", click "new", name the policy "Sus", click "edit", and right-click "manage template" under "Computer Configuration" on the new page ", select "Add/delete template", click "add" to browse to the WINNT \ INF directory, and select "wuau. click Open and Close after the ADM file ".

Expand "manage template> Windows Components> Windows Update" on the above page, and double-click "Configure Automatic Updates". The page shown in the figure is displayed. After configuring according to the parameters shown in the figure, click [next policy], fill in the local sus Server IP Address "http: // 168.192.0.1", and click [OK].

 

(2) automatically install the client program
Copy the Chinese client package wuau22chs. MSI downloaded from the Microsoft website to the netlogon shared directory of the SUS server (the actual path is winnt \ sysvol \ domainname \ scripts ).
Click Start> program> Administrative Tools> Active Directory users and computers, and right-click the configured Organization Unit (OU) "select" Properties> Group Policy> sus> edit ", expand" software Settings "on the new page, right-click" software installation ", and select" New> package ", enter \ servername \ netlogon \ wuau22chs in the file name column. msi, click open, select assigned, and click [OK].

■ Necessary testing methods
After a service is successfully built, the Administrator must check its effect. However, the current sus version does not provide an intuitive management interface. Two-way checks must be performed on servers and clients through special means.

The server side inspection method is to add wutrack. bin log: click "Start> program> Management Tools> Internet Service Manager", click "web site", and right-click "wutrack" in the left column. bin, select "properties", select "Log Access", and click [OK]. The log file is stored in the WINNT \ system32 \ logfiles directory. The format of the log file is/wutrack. Bin? U = & amp; C = & amp; A = & amp; I = & amp; D = & amp; P = & amp; L = & amp; S = & amp; E = & amp; M = & amp && X =

For more information, see the SUS whitepaper deploying Microsoft Software Update Services on page 83rd.

The client checks the HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ windowsupdate in the Registry and the Windows Update. log file in the WINNT/Windows directory.

Note the following two points:
(1) The Sus service only provides key updates;
(2) Windows 9.x series are not managed by SUS.