TNT1-95

1
TNT1-95
2
Software and Patch Management
Eileen Brown IT Evangelist Microsoft
Ltd. http//blogs.technet.com/eileen_brown
3
What we will cover

• Configuring Automatic Updates
• Software Update Services Server Installation
• Software Update Services Server and Client
  Configuration
• Systems Management Server
• Software Feature Packs

4
Prerequisite Knowledge

• Familiarity with the Windows User Interface
• Experience with Windows Update
• Experience managing Windows Servers
• Experience managing Microsoft Systems Management
  Server

Level 200
5
Agenda

• Software Update Services
• SUS Configuration
• SUS Feature Pack for SMS
• Using SUS Feature Packs

6
Software Update ServicesImportance of Software
Updates

• Fixes bugs and upgrades components
• Get Secure Stay Secure initiative
• Critical Update Notification
• Automatic Updates client
• Security and virus bulletins
• http//www.microsoft.com/security/
• Many critical security issues could have been
  prevented

7
Software Update ServicesAutomatic Updates
8
Software Update ServicesIssues with Automatic
Updates

• Must be configured on each client
• Administrators want more control
• Want to accept or reject them individually
• Downloading updates
• Downloads take too long
• Clients cant connect to the Internet
• Security / firewall issues
• Result difficult to automate the process

9
Software Update ServicesSoftware Update Services
Features

• For Windows 2000 and later clients
• Addresses Automatic Update issues
• Centralizes Downloads
• Centralizes Approvals
• Allows client download to be automated
• Synchronizes with Windows Update site
• Administrator can approve/disapprove updates
• Clients use SUS server to obtain updates

10
Software Update ServicesSoftware Update Services
Client

• Automate configuration with Policies
• Local Policies
• Group Policies
• Updates for the entire enterprise can be
  automated
• Automatic Update Clients
• Software Update Services Clients

11
Software Update ServicesSUS Deployment Option 1
Firewall
Download these approved updates from Windows
Update Server
Windows Update Server
Downloading approved updates
Downloading list of updates
Windows Update Server
Checking for approved updates
Administrator
12
Software Update ServicesSUS Deployment Option 2
Firewall
Downloading updates
Windows Update Server
Downloading updates
Checking for approved updates
Administrator
13
Software Update ServicesSUS Deployment Option 3
Synchronizing
Site 1 SUS Server
14
Demonstration 1 Automatic Updates SUS
Installation Automatic UpdatesInstall SUS
Server
15
Agenda

• Software Update Services
• SUS Configuration
• SUS Feature Pack for SMS
• Using SUS Feature Packs

16
SUS ConfigurationAdministration Console
17
SUS ConfigurationConfiguring Synchronization
18
SUS ConfigurationApproval Process
19
SUS ConfigurationClient Group Policy
Configuration
20
Demonstration 2Configure SUS Server and Clients
Configure SUS ServerConfigure Active Directory
ClientInstall Updates from SUS ServerConfigure
Standalone Client
21
Agenda

• Software Update Services
• SUS Configuration
• SUS Feature Pack for SMS
• Using SUS Feature Packs

22
SUS Feature Pack for SMS What is the SUS Feature
Pack?

• Add-on for Systems Management Server
• Helps determine updates required in your
  organization
• Addresses critical updates
• Delivers critical updates quickly
• Detects when clients are missing critical updates
• Facilitates quick implementation
• Provides reporting

23
SUS Feature Pack for SMS Installing the Feature
Pack

• Free download from Microsoft
• Formerly called a Value Pack
• http//www.microsoft.com/smserver/downloads/20/fea
  turepacks/suspack/
• Must register
• New version available since April 11, 2003
• Install each component

24
Demonstration 3 SUS Feature Pack for SMS SMS
OverviewInstall SUS Feature PackDistribute SUS
Packages
25
Agenda

• Software Update Services
• SUS Configuration
• SUS Feature Pack for SMS
• Using SUS Feature Packs

26
Using SUS Feature Packs Feature Pack Contents

• Security Update Inventory Tool
• Microsoft Office Inventory Tool for Updates
• Distribute Software Updates Wizard
• Tracks update status of clients
• Builds and distributes packages
• SMS Web Reporting Tool
• Web Reports Add-in for Software Updates

27
Using SUS Feature Packs Feature Pack Contents

• Security Update Inventory Tool
• Microsoft Office Inventory Tool for Updates
• Distribute Software Updates Wizard
• Tracks update status of clients
• Builds and distributes packages
• SMS Web Reporting Tool
• Web Reports Add-in for Software Updates

28
Using SUS Feature Packs How the Feature Pack
Works
Installation Phase
Synchronization Phase
Scan and Update Process
29
Using SUS Feature Packs How the Feature Pack
Works
Installation Phase
Synchronization Phase
Scan and Update Process
30
Demonstration 4Using SUS Feature Packs View
Client FilesView Web ReportsDeploy Software
Updates
31
Session Summary

• Software Update Services centralizes
• Download of software updates
• Approval of Software updates
• Centralized approval allows you to automate
  client installation
• The SUS Feature Pack deploys critical software
  updates quickly
• The SUS Feature Pack was updated after April 11
  to include MBSA

32
For More Information

• Main TechNet Web site at www.microsoft.com/technet
  
• This sessions resource page

• www.microsoft.com/technet/tnt1-95

33
For More Information

• Systems Management Server Web Site
• http//www.microsoft.com/smserver
• Software Update Services Feature Pack Web Site
• http//www.microsoft.com/smserver/evaluation/overv
  iew/featurepacks/default.asp