Windows Server R2 WSUS-13: Deploying Level Two WSUS

In some of the larger branches, the number may be thousands of people, this time you can consider a separate WSUS server in the branch, the WSUS server directly contact the headquarters of the first-level WSUS to update, and then through the Group Policy set for the branch and computer group to send patches to the branch of the client.

Let's take a look at the deployment process for level two WSUS.

First I prepared a server with the name wsus02.contoso.com. Then I install the WSUS server role on that server, and the installation process is exactly the same as the first-level SUS installation, which is no longer described again, after the installation is complete.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_139988227269ij.png "height=" 459 "/>

then we'll focus on the configuration process for level two WSUS. When configuring level two WSUS, we can specify the operating mode of level two WSUS, which is autonomous mode and replica mode. The pattern we are deploying today is Autonomous , and the following is an introduction and architecture diagram of the autonomous model.

The "autonomous" mode (also known as distributed management) is the default installation option for WSUS. In "autonomous" mode, the upstream WSUS server shares updates with the downstream server during synchronization. Manage downstream WSUS servers independently, and they do not receive update approval status or computer group information from upstream servers. Using Distributed management mode, each WSUS server administrator chooses to update the language, create computer groups, assign computers to groups, test and approve updates, and ensure that the correct updates are installed to the appropriate computer group. To show you how you might deploy an autonomous WSUS server in a branch office environment:

650) this.width=650; "title=" IC594401 "style=" Border-top:0px;border-right:0px;background-image:none;border-bottom : 0px;border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" IC594401 "src="/http Img1.51cto.com/attachment/201405/12/639838_1399882275phzq.gif "height=" 392 "/>

Let's take a look at the configuration steps for level two WSUS in autonomous mode.

First open the management console for level two WSUS.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" "src=" http:// Img1.51cto.com/attachment/201405/12/639838_1399882276wwwd.png "height=" 404 "/>

On the start page of the Configuration Wizard, select Next.

650) this.width=650, "title=", "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_139988227652jx.png "height=" 484 "/>

Choose whether to join the Microsoft Update Improvement Program, and then next.

650) this.width=650; "title=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px "style="; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882277ttfy.png "height=" 484 "/>

In the select Upstream server interface, specify the synchronization from the WSUS server, where I enter the address and port number of the first-level WSUS server, and the other options remain the default.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" "src="/HTTP// Img1.51cto.com/attachment/201405/12/639838_13998822788zx6.png "height=" 484 "/>

In the proxy server interface, select whether to specify a proxy server.

650) this.width=650; "title=" style= "border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_139988227800iw.png "height=" 484 "/>

In connection to the upstream server interface, select Start connection, download update information from wsus01.contoso.com (that is, download update information from my upstream server).

650) this.width=650; "title=" style= "border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882279kc2s.png "height=" 484 "/>

After the download is successful, select Next.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" "src=" http:// Img1.51cto.com/attachment/201405/12/639838_1399882279zl2q.png "height=" 484 "/>

In the Select Language interface, leave the default.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882279m3te.png "height=" 484 "/>

Set up a synchronization schedule.

650) this.width=650; "title=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px "style="; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_13998822809plf.png "height=" 484 "/>

After the initial configuration is complete, tick "Start initial sync" and click Finish.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" "src=" http:// Img1.51cto.com/attachment/201405/12/639838_1399882280znk3.png "height=" 484 "/>

Level two WSUS starts synchronizing updates from the first-level WSUS server.

650) this.width=650; "title=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px "style="; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" "src=" http:// Img1.51cto.com/attachment/201405/12/639838_13998822809wqm.png "height=" 425 "/>

After the update is complete,.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" "src=" http:// Img1.51cto.com/attachment/201405/12/639838_1399882281pbwe.png "height=" 460 "/>

So far, the deployment and configuration of level two WSUS in autonomous mode has been introduced.

Of course, here again, we can actually deploy level two WSUS as a replica mode: With the upstream WSUS server that shares the update, approval status, and computer group with the downstream server, you are ready to use replica mode (also known as centralized management).

The replica server inherits the update approval and cannot be managed out of its upstream WSUS server. To show you how you might deploy a replica WSUS server in a branch office environment:

650) this.width=650; "title=" IC594402 "style=" Border-top:0px;border-right:0px;background-image:none;border-bottom : 0px;border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" IC594402 "src="/http Img1.51cto.com/attachment/201405/12/639838_139988228130ir.gif "height=" 484 "/>

In fact, the configuration replica mode is also very simple, we open the WSUS Server Configuration Wizard, select the upstream server step, tick "this is a copy of the upstream server". When we tick this option, some server options for level two WSUS will be disabled, and the behavior of these options will be controlled by the first level of WSUS.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_13998822810l6k.png "height=" 484 "/>

In autonomous mode, level two WSUS can be managed separately, configure updates, computer groups, options, and so on, but in replica mode, some options are disabled, that is, only one-level WSUS can be configured, and let's look at what features are disabled.

Changing products and classifications is not allowed in replica mode.

650) this.width=650; "title=" style= "border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882282xbaq.png "height=" 445 "/>

Setting update rules is not allowed in replica mode.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882282htcf.png "height=" 449 "/>

The Set Report Rollup option is not allowed in replica mode.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px; "border=" 0 "alt=" "src="/HTTP/ Img1.51cto.com/attachment/201405/12/639838_1399882283a534.png "height=" 484 "/>

The update improvement plan cannot be modified in replica mode.

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882283hvsf.png "height=" 449 "/>

As can be seen from the above, the replica server inherits the update approval from the first-level WSUS, but cannot be managed separately from its upstream WSUS server.

In autonomous mode, all administrative operations are not affected by the first level of WSUS, such as creating new computer groups, approving patches, and so on.

650) this.width=650; "title=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px "style="; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" src= "http:// Img1.51cto.com/attachment/201405/12/639838_1399882283ggcq.png "height=" 452 "/>

650) this.width=650; "title=" "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0px; border-left:0px;padding-top:0px;padding-left:0px;padding-right:0px, "border=" 0 "alt=" "src="/HTTP// Img1.51cto.com/attachment/201405/12/639838_1399882284t6o9.png "height=" 326 "/>

The deployment and configuration of level two WSUS is described here, and the next article will continue to cover the PowerShell management of WSUS.

This article from "Zeng Hung Xin Technical column" blog, declined to reprint!