Migration from Software Migration from Software Update Services to Windows Update Services to Windows Server Update Services Server Update Services Jeff Alexander Jeff Alexander IT Pro IT Pro Evangelist Evangelist Microsoft Microsoft Australia Australia Scott Korman Scott Korman WSUS MVP WSUS MVP SEC316
30
Embed
Migration from Software Update Services to Windows Server Update Services Jeff Alexander IT Pro Evangelist Microsoft Australia Scott Korman WSUS MVP SEC316.
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Migration from Software Update Migration from Software Update Services to Windows Server Services to Windows Server Update Services Update Services
Jeff AlexanderJeff AlexanderIT Pro EvangelistIT Pro EvangelistMicrosoft AustraliaMicrosoft Australia
Scott KormanScott KormanWSUS MVPWSUS MVP
SEC316
Our time todayOur time today
Review WSUS CapabilitiesReview WSUS Capabilities
WSUS DemoWSUS Demo
Migration ScenariosMigration Scenarios
Considerations Considerations
ToolsTools
Migration DemoMigration Demo
WSUS continues to support…WSUS continues to support…
Single serverSingle server
Multiple serversMultiple serversAutonomous vs. ReplicaAutonomous vs. Replica
Client policy settingsClient policy settings
Language selectionLanguage selection
Download only update descriptions – Download only update descriptions – binaries stay on Windows Updatebinaries stay on Windows Update
Microsoft Windows updatesMicrosoft Windows updates
New WSUS CapabilitiesNew WSUS Capabilities
Solution and infrastructureSolution and infrastructureTarget groups (Client or Server)Target groups (Client or Server)Port configuration (not just 80)Port configuration (not just 80)Detect only evaluationDetect only evaluationMore products (Microsoft Windows and other More products (Microsoft Windows and other Microsoft products) Microsoft products) Update classifications selectionUpdate classifications selectionDownload updates to server only after Download updates to server only after approval (default)approval (default)ReportingReportingNew client policy settingsNew client policy settings
New Client ConfigurationsNew Client Configurations
Polling frequencyPolling frequency
Target groupTarget group
Reboot behaviorsReboot behaviors
Allow local admin to configure AU settings Allow local admin to configure AU settings except for disableexcept for disable
Non-administrators can install updates (like Non-administrators can install updates (like administrators)administrators)
Update at shutdown (Microsoft Windows XP Update at shutdown (Microsoft Windows XP SP2 and later only)SP2 and later only)
WSUS ReviewWSUS Review
Migration …Migration …
Migration ScenariosMigration Scenarios
Single serverSingle serverWSUS and SUS 1.0 on a single serverWSUS and SUS 1.0 on a single server
Multiple serversMultiple serversWSUS and SUS 1.0 on separate serversWSUS and SUS 1.0 on separate servers
Multiple SUS 1.0 servers to a single Multiple SUS 1.0 servers to a single WSUS serverWSUS server
Multiple SUS 1.0 servers to multiple Multiple SUS 1.0 servers to multiple WSUS serversWSUS servers
Ease of updating client settingsEase of updating client settingsE.g., policy or scriptedE.g., policy or scripted
New clients coming into environment New clients coming into environment which are not yet WSUS compatiblewhich are not yet WSUS compatible
Branch office scenariosBranch office scenarios
Targeting group modelTargeting group model
Migration ConsiderationsMigration Considerations
WSUS and SUS 1.0 can not synchronise WSUS and SUS 1.0 can not synchronise metadata with each othermetadata with each other
Only one way SUS 1.0 to WSUS migrationOnly one way SUS 1.0 to WSUS migration
Migration of update approvals overwrites Migration of update approvals overwrites any pre-existing approvals per target any pre-existing approvals per target group group
What doesn’t migrateWhat doesn’t migrateproxy server settingsproxy server settings
Internet Information Services (IIS) settingsInternet Information Services (IIS) settings
Single Server MigrationSingle Server Migration
For customers with few serversFor customers with few serversRequires WSUS to be initially installed Requires WSUS to be initially installed on a different port than SUS 1.0on a different port than SUS 1.0Requires updating all clients as they Requires updating all clients as they connect once the WSUS server is connect once the WSUS server is installedinstalledPotentially requires redirecting clients Potentially requires redirecting clients to a different port on the same serverto a different port on the same serverClients will still use SUS 1.0 for updates Clients will still use SUS 1.0 for updates until redirected to the WSUS port, or until redirected to the WSUS port, or SUS 1.0 is decommissionedSUS 1.0 is decommissioned
SUS 1.0 serverSUS 1.0 server WSUS server WSUS server
SUS clientSUS client
Single Server MigrationSingle Server Migration
WSUS serverWSUS serverSUS 1.0 serverSUS 1.0 server
Separate Server MigrationSeparate Server Migration
More flexibility in client self update More flexibility in client self update deployment optionsdeployment options
More flexibility in configuring the More flexibility in configuring the server port server port
Clients continue to use SUS 1.0 until Clients continue to use SUS 1.0 until client policy changes to point to new client policy changes to point to new WSUS serverWSUS server
Requires another Windows Server Requires another Windows Server
SUS 1.0 serverSUS 1.0 server
Separate Server MigrationSeparate Server Migration
WSUS serverWSUS server
Port 80
SUS
selfupdate tree Port 80
WSUS
selfupdate tree
SUS clientSUS clientWSUS clientWSUS clientSUS clientSUS clientWSUS clientWSUS client
A C
Multiple SUS server migrationMultiple SUS server migration
To a single WSUS serverTo a single WSUS serverTake advantage of target groups Take advantage of target groups
Consolidate Windows Servers Consolidate Windows Servers
To multiple WSUS serversTo multiple WSUS serversMaintain organisational structures with Maintain organisational structures with different administratorsdifferent administrators
Support branch officesSupport branch offices
SUS 1.0 serverSUS 1.0 server
Multiple SUS Server MigrationMultiple SUS Server Migration
Port 80
SUS
selfupdate tree
WSUS serverWSUS server
Port 80
WSUS
selfupdate tree
SUS clientSUS clientWSUS clientWSUS client““Test”Test”SUS clientSUS clientWSUS clientWSUS client
““Test”Test”
SUS 1.0 serverSUS 1.0 server
Port 80
SUS
selfupdate tree
SUS clientSUS clientWSUS clientWSUS client““Production”Production”
ProductionProductiontarget grouptarget group
TestTesttarget grouptarget group
A CA C
What are the Migration capabilitiesWhat are the Migration capabilities
Enabled through the Migration toolEnabled through the Migration tool
Content and approvals to all computers groupContent and approvals to all computers group
Content and approvals to a specific target groupContent and approvals to a specific target group
Content onlyContent only
Approvals onlyApprovals only
Remember …Remember …
Tool is in %programfiles%\Update Services\ToolsTool is in %programfiles%\Update Services\Tools
You must synchronise your WSUS server before You must synchronise your WSUS server before using the migration tool using the migration tool
Tool must be run on the target WSUS serverTool must be run on the target WSUS server
Migration ToolMigration Tool
WSUSUTIL.EXE migratesusWSUSUTIL.EXE migratesus
/content <content share>/content <content share>Migrate content from a SUS 1.0 <content share>Migrate content from a SUS 1.0 <content share>
/approvals <server name>/approvals <server name>Migrate approvals from the SUS 1.0 serverMigrate approvals from the SUS 1.0 server
““target_group”target_group”Apply approvals to the target group Apply approvals to the target group "target_group"."target_group".
Requires /approvals to be specified.Requires /approvals to be specified.
/log <log_file>/log <log_file>Log the migration activities to the <log file> fileLog the migration activities to the <log file> file
Content and Approvals to All Content and Approvals to All Computers GroupComputers Group
Status data merged on central serverStatus data merged on central server
Sample tool using WSUS APISample tool using WSUS API
To be released by MondayTo be released by Monday
We invite you to participate in ourWe invite you to participate in our online evaluationonline evaluation on CommNet,on CommNet,
accessible Friday onlyaccessible Friday only
If you choose to complete the evaluation online, If you choose to complete the evaluation online, there isthere is no need to complete the paper evaluationno need to complete the paper evaluation