Overview and configuration of Microsoft SUS (Software Update Service)

Ms_chat_emcee: Hello, everyone. Welcome to join the ChAT activity in the Microsoft community! Ms_chat_emcee: Today's chat topic is: Microsoft SUS (Software Update Service) Overview and configuration ms_chat_emcee: Today we are invited to: Microsoft Global Technical Center Security Team Engineer: Wang Zhe Keberos: Hello! Ms_chat_emcee: Please take the opportunity to start asking questions. Q [Q] sus can update the client when it is just installed. But after a week, you cannot. Why? [A] I don't know whether you are talking about the client or server issues. For client problems, you can view % WinDir % \ Windows Update. log. For more information, see http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx?q=susto update non-micro-soft software? [A] No. [Q] Can all Microsoft products be updated? [A] The current version only supports windows updates. Updates to other Microsoft products will be added in later versions. [Q] I also asked a question, although I haven't come and used SUS. How can I quickly enable the client to use my SUS In a LAN without a domain (300 client. [A] You need to modify the registry. You can make these registry items into a reg file and then import them. For registry items, refer to keys? [A] Yes, there is a registry entry or a group policy that does not automatically start the machine. For details, see http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx?q] the date displayed in my sus synchronization log and approval log in IE6 + SP1 is garbled. [A] Is Your sus installed in Chinese or English OS? [Q] Where can I download and try this item? What is the concept? What are the benefits? I have never heard of this before. Only the Windows Update. [A] Please download sushttp: // www.microsoft.com/downloads/details.aspx? Familyid = A7AA96E4-6E41-4F54-972C-AE66A4E4BF6C & displaylang = en [Q] Thanks for your answers. However, what is the difference between this SUS and Windows Update? [A] Simply put, if you install patches using Windows Update, end users may choose not to install the patches. However, sus gave it administrators the ability to control the patches to be installed, and how to install them. [Q] Could I develop on SUS ?? [A] No. [Q] Have you installed sus behind Isa? [A] sus can be installed behind Isa. It communicates with window update web site over HTTP. [Q] Can I develop on SUS ?? Used to update my own products ?? [A] secondary development is not allowed. Currently, patches can only be used to update Windows. [Q] I asked a question. If SUS is behind Isa, what port should we open? [A] HTTP 80 port. HTTPS 443 port [Q] is also a problem. Can sus use ad to upgrade different patches for different ou? [A] SUS is integrated with different ad. [A] to add one point, the automatic updating client of SUS will only choose to install patches that comply with its own platform. [Q] 2. When will a new version be released? [A] It is expected that sus 2.0 will come out by the end of this year [Q] 3. The server cannot record the Client installation. Can only be scanned using mbsa? The report function of mbsa is not strong. [A] currently, only mbsa is supported. If you want to know the installation status of the client, you need to deploy SMS [Q] 4. Time Setting for automatic updates. For example, if I set it to, but it has already been shut down, then the client cannot install updates? [A] The customer machine will be installed after you log on to the machine next time. You can set it through the Group Policy or registry key. [Q] when using mbsa to scan all machines in the domain, you can only find the SUS server (itself a DC) itself, and other machines will prompt the computer not found. No problem with DNS resolution. You can ping it. [A] You can specify the IP address range to search. Note that the account you run mbsa must have administrator privileges on the scanned machine. [Q] which servers and clients does sus currently support? Chinese or English? [A] clients in all languages are supported. For sus server, only the English and Japanese versions are supported. However, the SUS in English can be installed on the Windows Server in Chinese. [Q] Can sus Server 1.0 with Service Pack 1 be installed on Small Business Server 2000? [A] Yes. [Q] Correct. Does sus support updates of 2 k XP 2003? [A] Yes. However, for Win2k, it must be in SP2 or later. For XP, SP1 is required. [Q] How does the SUS server force the client to be downloaded instead of the scheduled time. (How can I force the client to check with the SUS server to get the updates immediately without setting a scheduled download time? [A] use these steps. See http://support.microsoft.com/default.aspx? SCID = KB; en-US; 326693 [Q] In addition, I installed sus server on Small Business Server 2000, and all clients are Windows XP Professional, the problem is that neither the server nor the client has automatically synchronized updates from the SUS server! [A] You need to check the log files of server side and client side. There is a good article here. You can check it step by step according to its steps. Http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx?q=sus#independent installation? [A] Yes. You want to download it from the Internet. This is a free software from Microsoft. We recommend that you use an IIS server separately, because many security settings are configured for IIS during installation. Therefore, if you have a web application on it, it may be affected. [Q] Because Small Business Server 2000 is a domain controller, it is already in the ad environment, and the clients are XP + SP1, and the server has set a Windows Update group policy, however, none of the more than 20 clients can correctly receive the Group Policy, and the client logs on to the network as a domain. [A] Check whether event log has a problem with the Group Policy. In fact, you can also make these configurations into a reg file, and then import them to each client. For details, can you use Windows XP Professional with service pack1 to deploy it as sus server? [A] No. In fact, you may be able to install it, but you know that Windows clients can only support up to five concurrent connections, so XP won't work. [Q] I don't want to synchronize the updata packet 8 [a] sus before January 8, 2002 on the decision tree sus server. You can only restrict the language version. [Q] are other constraints acceptable? [A] Currently, you can only select the constraint language version. [Q] Does it mean that you can only deploy Windows 2000 Server or Windows 2003 Server as sus server? [A] That's right. [Q] How can I observe the client action? That is, the program has been downloaded from the SUS server. [A] view two logs. First, look at % WinDir % \ Windows Update. log "querying Software Update catalog" messages reports the server Au is getting updates from only 3 CILS to AutoUpdate/getmanifest. ASP indicates updates approved on the SUS Server do not apply to this compute [a] Then read this % ProgramFiles % \ windowsupdate \ V4 \ iuhist. xml8zstony has joined the conversation. [Q]: 5. when the client downloads updates, the server sends updates to the client in the form of multicast or unicast. [A] When downloading updates, It is unicast. [Q] is the client automatically downloaded or pushed to the server? [A] The client is automatically downloaded. [Q] Does the server send an update to the client in the form of multicast or unicast ??? Is unicast correct? [A] It is obtained by the client on the server and unicast. [Q] Keberos, do you have more information about sus on the official website? [A] Yes, see here. [A] The Sus client is included in Win2k SP3 and later Windows XP SP1 and window 2003. Conclusion ms_chat_emcee: the chat time has reached ms_chat_emcee. Thank you very much for your wonderful answers. Thank you for your enthusiastic participation. Ms_chat_emcee: This chat record will be sorted and published on the Microsoft China community website. If you have more questions, go to the newsgroup. You can also stay here for discussion. Chat rooms are always open. Chinese news group server address: msnews.microsoft.com. See http://www.microsoft.com/china/community/Newsgroup/NGIntro.mspx. Ms_chat_emcee: Goodbye next Thursday!