Although the previous description of how to download the official offline patches and the deployment of the installation of the use of these patches to solve the system deployment patch installation part of the problem, but because the Microsoft patch has been updated, how to integrate the network internal WSUS server is a comprehensive solution, first is the system deployment of patch installation, In addition, the system deployment on-line also requires a continuous update of patches, the following is based on the actual use of the MDT Update 1 system integrated WSUS patch server method.
Of course, first of all in the deployment of the network has a can be continuously updated WSUS server, such as in the intranet, you can use the external network WSUS database and patch import method, see Baidu in detail.
1. MDT UPDATE 1 method for integrated WSUS server
As long as you add a wsusserver=http://192.168.71.27:8530 in the properties of the rules that deploy the shared folder, where the IP address is a patch server or a domain name, 8530 is the port number of the WSUS, Some of the earlier WSUS servers used port 80.
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/74/54/wKioL1YaO2zxOiy-AAP0FGLTOfg536.jpg "style=" float: none; "title=" Win2012r2u3-2015-10-11-18-10-20.png "alt=" Wkiol1yao2zxoiy-aap0fgltofg536.jpg "/>
Select a task
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/74/57/wKiom1YaO1DSYV5IAARNcx2Amu0512.jpg "style=" float: none; "title=" Win2012r2u3-2015-10-11-18-10-30.png "alt=" Wkiom1yao1dsyv5iaarncx2amu0512.jpg "/>
Select Windows Update for State Restore (pre-application), select the Option tab, and uncheck to be equal to Windows Update
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/74/54/wKioL1YaO2zi7QxLAAVkLNohxCk441.jpg "style=" float: none; "title=" Win2012r2u3-2015-10-11-18-10-46.png "alt=" Wkiol1yao2zi7qxlaavklnohxck441.jpg "/>
Select Windows Update for State Restore (post-application), select the Option tab, and uncheck to be equal to Windows Update
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/74/57/wKiom1YaO1GRVsWaAAVfg6vyEy0517.jpg "style=" float: none; "title=" Win2012r2u3-2015-10-11-18-10-55.png "alt=" Wkiom1yao1grvswaaavfg6vyey0517.jpg "/>
2. Client Installation Instance
With the WSUS server integrated, the deployment was successful, but it took a lot more time to complete the installation due to patching online.
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/74/54/wKioL1YaPgDyPdZWAAP-Cul9qYQ431.jpg "style=" float: none; "title=" Windows 7-2015-10-11-18-06-08.png "alt=" Wkiol1yapgdypdzwaap-cul9qyq431.jpg "/>
This is the most current global market share of the Windows 7 system
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/74/57/wKiom1YaPenBwt4zAAUz2s_jLYI399.jpg "style=" float: none; "title=" Windows 7-2015-10-11-18-06-09.png "alt=" Wkiom1yapenbwt4zaauz2s_jlyi399.jpg "/>
With the WSUS server, the deployed Win 7 system already has 144 critical patches installed and looks a lot less like Windows Update
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/74/54/wKioL1YaPgfR_KhpAARzKfwoUao443.jpg "style=" float: none; "title=" Windows 7-2015-10-11-18-07-03.png "alt=" Wkiol1yapgfr_khpaarzkfwouao443.jpg "/>
The options for WINDOWS update have been changed to system administrator management, and you can also modify the corresponding patch service options by using the registry or Group Policy
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/74/57/wKiom1YaPeyyhCVwAAQ3S1IVR0o923.jpg "style=" float: none; "title=" Windows 7-2015-10-11-18-07-34.png "alt=" Wkiom1yapeyyhcvwaaq3s1ivr0o923.jpg "/>
How the client can surf the Internet, or can take manual windows UPDATE, to the Microsoft Detection patch installation, shown here can also install 58 important patches and 8 optional patches
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/74/54/wKioL1YaPgixHZG4AATJvJnjhuk959.jpg "style=" float: none; "title=" Windows 7-2015-10-11-18-09-07.png "alt=" Wkiol1yapgixhzg4aatjvjnjhuk959.jpg "/>
Carefully review the patch situation, the original 58 patches are all optional patches, should be the WSUS server only download the important patches, not download optional installation patches.
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/74/57/wKiom1YaPe6jaDwQAAbNs6WOk8o243.jpg "style=" float: none; "title=" Windows 7-2015-10-11-18-09-21.png "alt=" Wkiom1yape6jadwqaabns6wok8o243.jpg "/>
3, the console to check the customer's installation time
Because of the need for online WSUS, although not to the Microsoft Internet to download, but still need a lot of time, the above client deployment directly using the WSUS server, over the past 3 hours, more than usual deployment of 2个小时40分钟.
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/74/54/wKioL1YaO22RXXdUAAQR5aZrap4544.jpg "style=" float: none; "title=" Win2012r2u3-2015-10-11-18-20-17.png "alt=" Wkiol1yao22rxxduaaqr5azrap4544.jpg "/>
This article from "Computer player Notes" blog, declined reprint!
20. MDT Update 1 Batch Deployment-How to install patches with WSUS patch server