giovedì 19 ottobre 2017

How to install WSUS on Server 2012 Step by Step

Here’s my step by step account of installing WSUS on a member server in your domain. I understand that it can be a bit buggy sometimes installing this Role on a server due to account restrictions during the role creation especially when creating the database. This method is my simple way of creating the WSUS database on a remote SQL server usually a highly available SQL cluster used for management of infrastructure separate from the Production / Application databases.

ws1
ws2
ws3
ws4
Select Windows Server Update Services
ws5
Click add features
ws6
ws7
You do not require any other extra features for this role so just click next.
ws8
ws9
Deselect WID database Only Select the bottom two WSUS Services and Database
ws10
Select Store updates in following location (I always pre-create this folder on a drive with enough space to store the content) enter the location to your content folder.
ws11
Enter the name and instance of your Database server and test the connection.
ws12
ws13
The defaults are fine so just click next.
ws14
On the confirmation page just click next.
ws15
ws16
ws17
Once the role is installed you have to finish some configuration tasks. This is where you can find yourself scratching your head why isn’t it continuing successfully. My tip is to go to this location C:\Program Files\Update Services\AdministrationSnapin and startup the WSUS.msc
ws18
Here you can re-enter the SQL Server name and instance of your database server for WSUS to go and create the database on. Also add the path where you would like to store the content for WSUS. Click on Run!
ws19
WSUS should now have successfully created your database and startup the wsus console.
ws20
ws21
ws22
Leave the sync with Microsoft update option and click next.
ws23
If you require a Proxy server for access to internet you can enter the details here. I didn’t so I just clicked next.
ws24
Click on Start Connecting to start up your connection to Microsoft Update.
ws25
ws26
ws27
Here you can select an extra language to support if you require a specific language for the software you installed.
ws28
Choose the products for which you want updates you can always update this list if you forget something.
ws29
Now choose the type of updates you want to receive or you would want to service to your clients.
ws30
Configure your sync schedule I always set mine to a time that won’t impact the backup schedule or Network bandwidth.
ws31
Select begin initial sync to get the update classifications for the products you selected.
ws32
Click Finish you WSUS should now be configured properly to get the updates for the clients you specified. That completes the setup of WSUS!
You are still not done though there are still a few tasks to complete before your clients will gather the updates from this newly installed WSUS server.
1. You need to create computer groups within WSUS.
2. You need to create a policy (GPO) to specify the clients to use this WSUS server and put them into a specific group.
3.Configure your auto approval rules …
Now a hint create a test group I usually place non important servers like a management server I setup for Admin tasks with RSAT tools etc including other test servers here you can go and implement an auto approval rule… once updated and everything works fine on these servers usually after a day or 2. Then you can go and approve the updates for the rest of the servers in your organization. Good luck with setting up WSUS !

Nessun commento: