Information Technology Blog By Raihan Al-Beruni Home About Me Contact Me TechNet References Tutorials Install and configure WSUS 3.0 SP2 – Step-By-Step 71 Votes Microsoft Windows Server Update Services 3.0 SP2 (WSUS 3.0 SP2) enables information technology administrators to deploy the latest Microsoft updates, hotfixes and service packs to computers running Microsoft Windows Server 2003 family, Windows Server 2008, Microsoft Windows Vista family, Microsoft Windows XP with Service Pack 2 operating systems. By using WSUS, administrators can fully manage and take control of the distribution of updates that are released through Microsoft Update. Prerequisites for WSUS server Windows Server 2003 SP1 or Windows Server® 2008 Microsoft Internet Information Services (IIS) 6.0 or later Windows Installer 3.1 or later Microsoft .NET Framework 2.0 Microsoft Report Viewer Redistributable 2005 Microsoft Management Console 3.0 SQL Server 2005 SP1 or later Prerequisites for WSUS clients (x86 and x64) Windows XP SP2, Windows Vista, Windows 7 Windows Server 2003 or Windows Server 2008 WSUS Deployment Scenarios WSUS is flexible enough to deploy starting from small to enterprise organisation. just you need to make sure active directory, DNS and DHCP working perfect. If port 80 is occupied by your company web site you can use port 8530. I used port 8530 on WSUS server. I have ISA 2004 so I will show how to add WSUS publishing rule in ISA 2004 also. Install Prerequisites 1. IIS installation Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0... 1 de 45 1/31/2012 6:30 PM
45
Embed
Install and configure WSUS 3.0 SP2 and ISA Server – Step-By-Step
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Information Technology Blog
By Raihan Al-Beruni
Home
About Me
Contact Me
TechNet References
Tutorials
Install and configure WSUS 3.0 SP2 – Step-By-Step
71 Votes
Microsoft Windows Server Update Services 3.0 SP2 (WSUS 3.0 SP2) enables information technology administrators to deploy the
latest Microsoft updates, hotfixes and service packs to computers running Microsoft Windows Server 2003 family, Windows Server
2008, Microsoft Windows Vista family, Microsoft Windows XP with Service Pack 2 operating systems. By using WSUS,
administrators can fully manage and take control of the distribution of updates that are released through Microsoft Update.
Prerequisites for WSUS server
Windows Server 2003 SP1 or Windows Server® 2008
Microsoft Internet Information Services (IIS) 6.0 or later
Windows Installer 3.1 or later
Microsoft .NET Framework 2.0
Microsoft Report Viewer Redistributable 2005
Microsoft Management Console 3.0
SQL Server 2005 SP1 or later
Prerequisites for WSUS clients (x86 and x64)
Windows XP SP2, Windows Vista, Windows 7
Windows Server 2003 or Windows Server 2008
WSUS Deployment Scenarios
WSUS is flexible enough to deploy starting from small to enterprise organisation. just you need to make sure active directory, DNS
and DHCP working perfect. If port 80 is occupied by your company web site you can use port 8530. I used port 8530 on WSUS server.
I have ISA 2004 so I will show how to add WSUS publishing rule in ISA 2004 also.
Install Prerequisites
1. IIS installation
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
1 de 45 1/31/2012 6:30 PM
go to add/remove windows component and select Application server
click next
Select as above. you must select ASP.net and IIS, then check Internet Information Services and click Details.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
2 de 45 1/31/2012 6:30 PM
Check BITS, check IIS manager and click on details
Check ASP and WWW and click ok.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
3 de 45 1/31/2012 6:30 PM
2. MMC 3.0 installation
no need to install you installed service pack on your server
3. .net framework installation
Download .net 2 framework from the link http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-
8EDD-AAB15C5E04F5&displaylang=en
run installation, click next, accept EULA and follow the installation screen.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
4 de 45 1/31/2012 6:30 PM
4. MS report viewer installation, Download report viewer from the Link
run installation, click next, accept EULA and follow the installation screen.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
5 de 45 1/31/2012 6:30 PM
5. SQL Server 2005 SP1 installation
download SQL server 2005 from the link
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
6 de 45 1/31/2012 6:30 PM
Click next and click install, click next again
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
7 de 45 1/31/2012 6:30 PM
follow installation screen until finish.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
8 de 45 1/31/2012 6:30 PM
Now you have fulfil prerequisite as mention above.
WSUS installation
download WSUS from http://connect.microsoft.com/directory/ website. sign in using hotmail or live account. download x86 or x64 as
you prefer. here I am installing x86 version.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
9 de 45 1/31/2012 6:30 PM
Click on run
click next
Check Full server installation radio button, click next
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
10 de 45 1/31/2012 6:30 PM
Accept EULA
You must have two partition in your server as you can see above. I selected D:\WSUS . click next
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
11 de 45 1/31/2012 6:30 PM
Check use existing database. It is required for enterprise deployment. internal database will not work if you have large number of
desktop and server. click next.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
12 de 45 1/31/2012 6:30 PM
Click next
On the next screen “web site selection” check create Microsoft Windows Server Update Services Web Site on port 8530
DO NOT CHECK RECOMMENDED
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
13 de 45 1/31/2012 6:30 PM
Click next
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
14 de 45 1/31/2012 6:30 PM
Click next , Click next again
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
15 de 45 1/31/2012 6:30 PM
Click finish. WSUS config wizard will start next
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
16 de 45 1/31/2012 6:30 PM
click next
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
17 de 45 1/31/2012 6:30 PM
Click next
Provide proxy server IP and credentials above if you have proxy server. in my case I typed my ISA server IP, port 80 and my domain
admin credentials.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
18 de 45 1/31/2012 6:30 PM
Click on start connecting and wait until finish, click next and follow the config screen to select your language, products, classification
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
19 de 45 1/31/2012 6:30 PM
wait until synchronisation finish. It might take 30/40 minutes depending on speed of your internet.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
20 de 45 1/31/2012 6:30 PM
Setup IIS Security
Now set permission in IIS in WSUS server, you may set anonymous logon. Don’t worry its inside your firewall.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
21 de 45 1/31/2012 6:30 PM
Configure WSUS
open WSUS management console. In the Left hand side pan, click on Options then click on Change Update File and Language. Check
Download Update files to the server when updates are approved. Select appropriate language. Then Click Apply and Ok.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
22 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
23 de 45 1/31/2012 6:30 PM
Click on Automatic Approval and create new rules and run the rules. In my case I have two custom rules.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
24 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
25 de 45 1/31/2012 6:30 PM
In the left hand side pan right click on All Computers, Click on Add Computer Group. For example, I have three computer groups;
desktop, Windows7 and Server.
Group Policy Configuration
This part describes how to use GPO to deliver Automatic Updates
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
26 de 45 1/31/2012 6:30 PM
Open group policy management console, Right click on the Group policy objects container and click new. create policies for each of
computer groups. For Example, WSUS Policy for desktop, WSUS Policy for Windows 7 and WSUS Server policy.
Now right click on WSUS policy that is
desktop policy you just created and change
settings of four GPO that are enabled here on
screen
Configure Auto download and schedule
installation that fit for you
Point WSUS server and port as
http://yourserver:8530 in both the box
Type target group to populate desktop/pc in
WSUS Server.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
27 de 45 1/31/2012 6:30 PM
Check enabled in following box not to reboot
machine if user logged on
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
28 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
29 de 45 1/31/2012 6:30 PM
Repeat this process for WSUS server policy, Windows 7 Policy and so on.
In GPO management console, Right click on the organisational unit that contain desktop/workstation and link existing WSUS
policy you created in above steps with this organisational unit.
Link it with WSUS policy
Repeat same steps for all other organisational
unit in GPO management console. Now you
may close GPO now.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
30 de 45 1/31/2012 6:30 PM
Important! Do NOT link WSUS policy in
child OU. Link directly to the top of OU
hierarchy otherwise workstation will not
populate.
Publish WSUS policy in ISA
Server
If you have ISA 2004/2006 or Forefront
TMG 2010, you have to set WSUS policy in
ISA firewall access rule. so that ISA doesn’t
block communication between server and
client. You don’t need to do it if nothing
blocking between Client and Server
communication and don’t have a firewall.
To publish WSUS policy, Open ISA
management console
Go to Network Object and expand WEB
listener, right click on web listener click new.
Type Name of WSUS server. Name should be
netbios name of WSUS server. Follow the
screen shot.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
31 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
32 de 45 1/31/2012 6:30 PM
Click next, click finish.
In the right hand side Tasks Pan, Click on publish a web server and follow the screen shot
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
33 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
34 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
35 de 45 1/31/2012 6:30 PM
On the next screen shot select the web listener (WSUS server) you added in the previous steps.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
36 de 45 1/31/2012 6:30 PM
Right click on the WSUS Publishing policy, click on property>Click Bridging Tab and check web server and port 8530
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
37 de 45 1/31/2012 6:30 PM
On the paths add these path if these aren’t exist already
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
38 de 45 1/31/2012 6:30 PM
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
39 de 45 1/31/2012 6:30 PM
uncheck verify and block option. Apply Changes and click ok.
Troubleshooting
Go to client machine, run gpupdate /force if client not showing on WSUS
Run wuauclt /resetauthorization /detectnow command from client machine.
Check Registry of client.
Conclusion
Auto update and patch up gives administrator more
time to concentrate other things without spending
time on patching up servers and pc. I enjoyed
deploying WSUS. I hope these instruction would
be handy for you.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
40 de 45 1/31/2012 6:30 PM
Share this:
Like this: 3 bloggers like this post.
Relevant Articles:
WSUS 3.0 SP2: Understanding WSUS
deployment topology
How to configure automatic updates by
using Group Policy or registry settings
How to configure Windows Server Update Services (WSUS) to use BranchCache
How to Configure WSUS for Roaming Clients
Troubleshooting WSUS server
Windows Server 2008: Windows Server Update Services Role–Step by Step Guide
WSUS: Best practice guide lines for WSUS installation, configuration and management
WSUS Health Check
ADVERTISEMENT
This entry was posted on Thursday, August 13th, 2009 at 11:03 AM and is filed under Windows Server Update Services (WSUS). You
can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own
site.
Post navigation
« Previous Post Next Post »
2 Responses to Install and configure WSUS 3.0 SP2 – Step-By-Step
Windows Server 2008: Windows Server Update Services Role « IT BLOG says:
November 3, 2009 at 4:20 PM
[...] my previous blog how to deploy Microsoft update Services using WSUS and Group Policy
Object. WSUS SP2 installation and GPO deployment instruction. Read my previous installation
instruction and follow WSUS SP2 installation on windows server 2008 [...]
1.
Blogging year 2010—-what stats says | MicrosoftGURU says:2.
Install and configure WSUS 3.0 SP2 – Step-By-Step « Information Tech... http://araihan.wordpress.com/2009/08/13/install-and-configure-wsus-3-0...
41 de 45 1/31/2012 6:30 PM
January 3, 2011 at 11:58 AM
[...] Install and configure WSUS 3.0 SP2 – Step-By-Step August 2009 [...]
Search
Categories
Cisco
Exchange Server 2010
Forefront TMG 2010
Group Policy Object
Microsoft Active Directory
Microsoft Internet Security and Acceleration Server
Microsoft System Centre Configuration Manager (SCCM)