Shulou(Shulou.com)06/02 Report--

Preparatory work

1) Windows Server 2016

2) doNET Framework 3.5

3) Microsoft Report Viewer 2008

1. Install the WSUS 4.0 server role

In Server Manager, click Dashboard, and then click add roles and Features.

two。 Check the Windows Server update service in the service role-next

3. Check .net Framework 3.5 function in the function wizard-next step

4. In the role service wizard, we choose the default option, the first is WID database, WSUS can use SQL database or self-contained WID database, generally we use our own database, unless the company's requirements are very high, database administrators need to use the report server that comes with the database or provide NLB function, otherwise they all use their own WID database.

5. Here, you need to specify the storage path of the patch update package (this example is placed in C:\ WSUS)

6. Since Windows Server 2016 does not have .NET Framework 3.5 installed by default, you need to manually specify an offline package for installation (.net Framework 3.5 is ready before you start, and you can add it to the installation)

7. After the installation is complete, you can see it in the start menu-Windows Management tool

Windows Server Update Service, Internet Information Services (IIS) Manager

8. To open the Windows Server update service for the first time, you need to run the configuration wizard

9. Open WSUS to see this screen, indicating that the server has been installed

10. Modify the group policy

After the WSUS server is installed, the servers in the domain are not aware of WSUS, so you need to modify the group policy to get the server to synchronize WSUS.

Open the group policy in AD (domain control) and create a new global policy. Let's not modify the default policy. We do this by creating a new one for the domain global policy.

11. Create a new WSUS policy and edit it

twelve。 Expand policies-Administrative templates-Windows components-Windows updates in computer configuration

13. In the configuration automatic update window, select automatic download and notify the installation, do not select automatic installation, otherwise, it will be automatically updated and restarted, when the server restarts, the business will be interrupted.

14. Specify the IP address of the WSUS server in the Intranet Microsoft update service location properties window, followed by the default port number 8530 http://xxx.xxx.xxx.xxx:8530

15. In the automatic update detection frequency window, specify the detection frequency time (4 hours in this case)

16. After the initial completion, we still don't see servers and clients on all computers, because we haven't joined so quickly, and these machines need to report the status to the WSUS server before they join one by one. We can add computer groups, such as Win 7, Win 10, Win 2008, Win 2012 and Win 2016, to distinguish the system version of the computer, and then push updates in batches according to the system version.

17. A lot of patches that need to be approved for the first time will be slow, and then you can push patches to the server and client after selecting unapproved patches as needed.

Note:

In viewing server and client status reports, you need to use the Microsoft Report Viewer 2008 redistributable component if prompted for this feature. Please close the WSUS console before installing this package.

Before setting up the WSUS server, you have already prepared this component. Double-click to install it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.