Overview of WSUS servers

WSUSMicrosoft®Windows™Server Update Services) is a free Windows Update Management Service released by Microsoft. The latest version is 2.0.0.2472, which supports Windows 2000, Windows XP, and Windows server 2003) in addition to update management, WSUS also supports update management for SQL Server, Exchange 2000/2003, Office XP/2003, and other systems. In the future, WSUS will implement update management for Microsoft's full range of products.

Many friends may dislike updates. In fact, I think that updates represent the vendor's sense of responsibility for their products. Only vendors responsible for their own products will provide updates. With the development of technology, there is no absolutely secure system, and no product can always meet your security, performance, or other requirements. At this time, the update released by the manufacturer is extremely important. By updating your system, you can make your system run more securely and efficiently. Why not?

First, let me introduce Microsoft's service update system. Before providing the WSUS service and the SUS Service replaced by the WSUS Service), Microsoft's update service system consists of two components:

1. Microsoft Update

A Microsoft website that provides Update Services is composed of a series of Microsoft sites, which are common:

• Windowsupdate.microsoft.com
• Update.microsoft.com
• Download.windowsupdate.com
• Download.microsoft.com

Update programs, drivers, and Service packs.

2. Automatic update

The client update component is built in Windows 2000 SP3 or later, Windows XP, and Windows server 2003. By default, it automatically connects to Microsoft Update through HTTP/HTTPS protocol to download the Update program, so as to Update the System of the client computer.

In small-scale enterprise networks, client computers connect to Microsoft Update for system updates by means of automatic updates, which does not have a great impact on the enterprise's external network bandwidth, for example, if each of the five client computers downloads an update program of 20 mb, the total external network traffic of the enterprise is only 100 mb. However, in a large-scale enterprise network, if each client computer is updated by connecting to Microsoft Update, the external network bandwidth of the Enterprise will be greatly affected. For example, if 500 client computers download an Update program of 20 mb, it will occupy 10 Gb of traffic.

With this in mind, Microsoft launched the WSUS server, which is provided for free. WSUS server and Microsoft Update implement automatic updates on client computers in exactly the same way. Through WSUS, you can achieve centralized management and distribution of Update programs. Its main advantages include:

You can choose to update programs including Feature Pack, Service Pack, Security Update, Key Update, update program, update assembly, tool, and driver) download from Microsoft Update to local installation source to save the external network bandwidth of the enterprise;

Manage the update program to control the distribution of updates. You can approve the update to be installed on the client computer, or simply check whether the update is required on the client computer, you can also reject the update program;

Group client computers in the network to control the distribution of update programs on different client computers.

Therefore, the current Microsoft Update service system has a three-level structure: Microsoft Update-> WSUS server in the local enterprise network-> automatic Update of client computers. After WSUS is deployed, you only need to configure the client computer to use the Update Service on the WSUS server to enjoy the benefits of the WSUS server. For example, in the large and medium-sized enterprise network mentioned above, after the WSUS server is deployed, only the WSUS server downloads updates from Microsoft Update, and the external network traffic occupied is only 20 mb, the internal client computer automatically accesses the WSUS server to obtain updates. Therefore, it no longer needs to access external Windows Update, thus saving a lot of external network bandwidth.