Smith Nguyen Studio.

ICT VIETNAM COMMUNITY

TM HIU WINDOWS SERVER UPDATE SERVICE TRONG WINDOWS SERVER 2008

Managing Software Update
ICT24H TEAM

2010

ICT24H.NET

http://www.facebook.com/SmithNguyenStudio

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Cng ngh cng ngy cng pht trin dn n my tnh cng ngy cng d dng qun l hn. Phn cng cng nh phn mm ng tin cy hn, cc h iu hnh d dng s dng hn v xut hin nhiu cc cng c qun tr t ng ha hn (chng hn t ng chng phn mnh cng). Tuy nhin, cc cng c v ng dng ngy mt pht trin v thay i, sa li , cp nht.iu ny ko theo s duy tr, cp nht thng xuyn cc ng dng. Hu qu xy ra l kh ln nu nh khng cp nht cc chng trnh, cc phn mm. Nu my tnh khng c cp nht, k tn cng c th khai thc cc l hng v xm nhp. gip bn c th cp nht tp trung ha, gim thiu thi gian qun l, Microsoft cung cp cng ngh Windows Server Update Services (WSUS). WSUS cho php bn download, ph chun (sau khi bn kim nghim bn cp nht) v phn phi cc bn cp nht ny cho ton b my tnh client trong h thng Nhng bi hc trong chng ny s cho bn ci nhn tng qut v WSUS cng nh ln k hoch trin khai cp nht cho h thng.

Ch chnh
Cu hnh Windows Server Update Services (WSUS).

Nhng bi hc
Bi hc 1: Tm hiu v Windows Server Update Services. Bi hc 2: S dng Windows Server Update Services.

Trc khi bt u
hon thnh cc bi hc, bn nn thc hin cc cng vic sau: Ci t Windows Server 2008. Nng cp ln domain controller v join cc my tnh vo domain. Tn server l SERVER v c domain l ict24h.net

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 1

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

BI HC 1: TM HIU V WINDOWS SERVER UPDATE SERVICES

Trc khi trin khai Windows Server Update Services (WSUS), bn phi hiu c cc thnh phn ca client v server c cu hnh nh th no trong cc mi trng khc nhau. Nu khng c mt k hoch c th, vic cp nht s khin bn tt nhiu thi gian, bng thng hoc c th tht bi trong vic ci t. Bi hc ny cung cp cho bn ci nhn tng qut v cc thng tin v WSUS. Nu bn quen thuc vi nhng phin bn WSUS trc, WSUS 3.0 Service Pack 1 cung cp cho bn kh nhiu chc nng. Hu ht qun l trn giao din, bn khng cn phi qun l trn trnh duyt Web. Thm vo , WSUS cho php bn linh hat trong vic trin khai cc bn cp nht n cc my tnh. Sau bi hc ny, bn s: Hiu c mc ch ca WSUS. Cu hnh WSUS client. Thit k cu trc WSUS p ng nhu cu cho c doanh nghip nh cng nh quy m ln. Lit k cc client v server cn thit cho WSUS. Tm hiu cc cng c xc nh trng thi cp nht ca cc my tnh client trong mng. Thi lng cho bi hc: 15 pht.

Tng quan v WSUS

Windows Server Update Services (WSUS) c pht trin t dch v Microsoft Update mt dch v trong Windows cho php t ng download cc bn cp nht. Bn c th chy WSUS trn mng ni b v s dng n phn phi cc bn cp nht cho cc my tnh, bn c th s dng bng thng hiu qu v kim sot cc bn cp nht trn cc my tnh client. Khi chy WSUS, n kt ni n website Microsoft Update, download cc thng tin v cc bn cp nht mi nht, sau thm chng vo danh sch cp nht qun tr vin ph chun. Sau khi qun tr vin chp nhn v thit lp u tin cho cc bn cp nht ny, WSUS s t ng ci t chng trn cc my tnh chy Windows. Dch v Windows Update trong my tnh clien s kim tra WSUS server v t ng download cc bn cp nht t server v, cui cng l ci t cc bn cp nht ny. Bn c th thit lp WSUS cho ng thi nhiu server v c th m rng t doanh nghip nh cho n doanh nghip ln.

Windows Update trn client

Windows Update l mt thnh phn thuc WSUS trn client c chc nng nhn cc phn mm, cc bn ci t t WSUS server, xc nhn bng ch k tin t hoc thut ton Secure Hash Algorithm (SHA1), thng bo n ngi dng v cc bn cp nht v ci t n (nu c cu hnh). Windows Update ci t cc bn cp nht thi gian m bn thit lp v c th t ng khi ng li my tnh nu cn thit. Nu thi im hin ti my tnh tt, cc bn cp nht c th ci t khi my tnh c bt. Ch : WSUS client cc phin bn Windows trc Trong Windows XP v Windows 2000, thnh phn ca WSUS trn client c tn gi l Automatic Updates.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 2

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

V cc thit lp Windows Update c p dng cho tt c cc my tnh trong doanh nghip nn s dng Group Policy thit lp l phng php tt nht. Thit lp Windows Update ti Computer Configuration > Administrative Templates > Windows Components > Windows Update. Cc thit lp Windows Update trong Group Policy gm :

Do not display Install Update and Shut Down option in Shut Down Windows dialog box: cho php bn qun l ty chn Install Updates v Shut Down hin th hp thoi Shut Down ca Windows. Do not adjust option to Install Updates and Shut Down in Shut Down Windows dialog box: thay i ty chn shut down mc nh Install Updates and Shut Down khi Windows Update chun b ci t mt bn cp nht. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates : nu nhn vin trong cng ty ca bn thng c thi quen shut down my tnh ca h khi ri khi vn phng. Bt thit lp ny cu hnh cc my tnh h tr t ng khi ng v ci t cc bn cp nht mt thi gian c ln lch. Cc my tnh s khng c bt nu khng c bn cp nht no ci t. Nu my tnh chy vi nng lng ca pin, my tnh s t ng tr v trng thi sleep sau 2 pht. Configure Automatic Updates: xc nh nhng my tnh client s c nhn cc bn cp nht bo mt v cc bn download quan trng khc t dch v Windows Update. Bn cng c th s dng thit lp ny cu hnh nhc nh ngi dng ci t cc bn cp nht hoc t ng ci t thng qua Windows Update. Specify intranet Microsoft update service location: xc nh WSUS server. Automatic Updates detection frequency: thit lp thi gian Windows Update kim tra nhng bn cp nht mi. Thi gian mc nh l t 17 n 22 gi. Allow non-administrators to receive update notifications: thit lp cho tt c ngi dng hoc ch c qun tr vin nhn c thng bo cp nht.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 3

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Turn on Software Notification: thit lp cho php bn kim sot ngi dng c th nhn c thng bo v cc tnh nng ca phn mm t Microsoft Update. Allow Automatic Updates immediate installation: thit lp Automatic Update t ng ci t cc bn cp nhp m khng cn phi khi ng li my tnh. Turn on recommended updates via Automatic Updates : xc nh cc my tnh client ci t c nhng bn cp nht cn thit v bn v li, bao gm c cp nht cc driver. No auto-restart with logged on users or scheduled automatic updates installations : thit lp lch ci t, Windows Update ch ngi dng khi ng my tnh khi h ng nhp vo, k c t ng khi ng. Re-prompt for restart with scheduled installations: thit lp nhc nh ngi dng khi ng li my tnh trong khong thi gian no . Ty thuc vo mt s thit lp, thit lp ny c th khin ngi dng ngng vic t khi ng. Tuy nhin, Windows Update s t ng yu cu h khi ng da trn thit lp ny. Delay Restart for scheduled installations: thit lp thi gian Windows Update ch trc khi t ng khi ng li. Reschedule Automatic Updates scheduled installations : thit lp s ln ch ca Windows Update trc khi tip tc theo lch ci t. Enable client-side targeting: thit lp cc nhm hoc tn my tnh s c nhn cc bn cp nht t dch v Microsoft Update. Allow signed updates from an intranet Microsoft update service location : thit lp cho php ci t cc bn cp nht s dng chng thc.

Cu trc WSUS
WSUS c th m rng t doanh nghip nh cho n doanh nghip ln a quc gia. Trn thc t, bn cn s dng mi WSUS cho mt chi nhnh vn phng vi hn 10 my tnh v mt WSUS c lp cho mi phng IT kim sot cp nht. Bn cng khng cn thit phi c nhng WSUS server d phng, tuy nhin bn cng cn sao lu c s d liu WSUS c th khi phc khi gp ri ro.

Doanh nghip vi mt vn phng duy nht

Nu doanh nghip ch c mt vn phng, bn c th s dng mt WSUS server duy nht m khng cn quan tm n s my tnh client trong doanh nghip l bao nhiu.

Doanh nghip vi nhiu vn phng

Nu bn s dng mt WSUS server duy nht h tr cho tt c client cc vn phng, mi client s cn phi download cc bn cp nht thng qua kt ni WAN. Vic download c th tn khong vi trm MB. V kt ni WAN s lm ng truyn chm hn so vi kt ni mng LAN, download cc bn cp nht ln thng qua WAN s nh hng khng nh n thi gian v ng truyn. Nu bng thng ca bn thp, cc client c th s khng nhn c cc bn cp nht. cho php cc client nhn cc bn cp nht trong mng LAN, cu hnh mt WSUS server cho mi chi nhnh vn phng v cu hnh WSUS server nhn cc bn cp nht theo mt cu trc phn cp t

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 4

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

nhng server chnh. V vi cch lm theo cu trc phn cp s em li cho bn s hiu qu trong vic kt ni thng qua WAN.

H thng WSUS server ton cu.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 5

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Cu trc phn cp WSUS server Trong cu trc trn, ch c server WSUS ti Boston c th nhn cc bn cp nht t Microsoft. Tt c cng vic cp nht c vn hnh bi server WSUS Boston. Cc server pha di s nhn thng tin cp nht t nhng server trn n, chng hn vi s trn, server Los Angeles (downstream server) s nhn cc bn cp nht t server Boston (upstream server). Tng t, server Argentina (downstream server) s nhn cc bn cp nht t server Costa Rica (upstream server). cung cp cc bn cp nht cho vn phng nh khng c WSUS server, bn cn phi cu hnh cc my tnh client download bn cp nht t WSUS server gn nht. Nu vn phng ca bn c ng truyn Internet nhanh, bn c th cn nhc vic c hay khng nn trin khai bn sao v WSUS ni b lu tr cc bn cp nht, bn c th cho cc client nhn cc bn cp nht trc tip t Microsoft.

Cc iu kin cn thit trin khai WSUS

Khi ln k hoch trin khai WSUS, bn cn c cc iu kin sau: WSUS server phi c k ni Internet (truy cp vo website Microsoft Update). Cc downstream server phi thit lp kt ni vi cc upstream server v s dng giao thc HTTP (TCP port 80) hoc s dng SSL (TCP port 443). Cc my tnh client phi kt ni mng cc b (HTTP hoc HTTPS) Cc my tnh client phi l mt trong cc h iu hnh sau: o Windows 2000 Service Pack 3 hoc Service Pack 4 o Windows XP Professional o Windows Vista

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 6

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

o Windows Server 2003 o Windows Server 2008 Nu my tnh client t kt ni trong mng trong khong thi gian no (v d nu mt chuyn gia no ngh php hoc mt nhn vin lm vic ti nh trong mt thng v khng kt ni n mng VPN), client cng s khng th download cc bn cp nht. Bn cn cu hnh cc my tnh t ng ci t cc bn cp nht t website Microsoft hoc s dng NAP v yu cu cc my tnh phi cp nht trc khi kt ni n mng cc b.

Ln k hoch ci t WSUS
Trong sut qu trnh ci t WSUS, bn cn lu mt s vn sau: Cp nht source: WSUS c th nhn cc bn cp nht trc tip t trang web Microsoft Update hoc t mt WSUS server khc. Bn nn cn nhc v chn phng php gim bng thng. Nu 2 WSUS server kt ni trong LAN, c 1 trong 2 server nhn bn cp nht t Microsoft Update v server cn li c th nhn bn cp nht t server th nht. Nu bn s dng WSUS cho 3 chi nhnh vn phng v kt ni VPN thng qua Internet, y l cch hiu qu chi mi vn phng khi download cc bn cp nht trc tip t Microsoft v download cc bn cp nht cn phi c kt ni Internet. Cu trc WSUS ca bn phi c s sp xp hp l, cc downstream server s nhn cc bn cp nht t cc upstream server. Ph chun v cu hnh nhn bn: nu bn s dng nhiu WSUS server v cu hnh cc server nhn cc bn cp nht t mt WSUS server no , bn c th chn vic ng b cc ph chun, thit lp, my tnh v cc nhm trong cu trc phn cp WSUS server. Nu bn cu hnh mt server ng vai tr l mt bn sao, bn khng cn ph chun cc bn cp nht t trn WSUS server. Cp nht lu tr: WSUS c th sao chp bn cp nht t Microsoft v lu tr chng vo server hoc lu tr vo chnh cc my tnh client download cc bn cp nht t Microsoft. Nu bn chn lu tr cc bn cp nht trong server, WSUS server cn ti thiu 6 GB dung lng trng trong cng (mc d con s thc t c th ln hn, ty thuc vo cc bn cp nht t Microsoft cng nh cc gi ngn ng cn thit). Vic lu tr cc bn cp nht trong server c th c xem l mt cch gim thiu bng thng Internet v cc client nhn bn cp nht thng qua LAN. C s d liu: mc nh WSUS lu tr danh sch cc bn cp nht trong Windows Internal Database. Bn cn ti thiu 3 GB dung lng trng trong cng lu tr Windows Internal Database mc d thc t khong 1 GB. Bn c th s dng server lu tr c s d liu (chng hn nh Microsoft SQL Server).

Ch : Mc nh, ng dn c s d liu trong WSUS C:\WSUS\UpdateServicesDbFiles\SUSDB.mdf Website: trin khai WSUS cn phi c IIS v cc my tnh client nhn cc bn cp nht bng cch s dng giao thc HTTP hoc HTTPS. Nu bn khng s dng IIS trn WSUS server to ra website mi v mt mc ch no , bn c th s dng website mc nh trong IIS.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 7

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Ngn ng: Cc bn cp nht c th c nhng gi ngn ng ring i km. gim thiu dung lng cng s dng, bn nn chn download ch mt gi ngn ng cn thit cc my tnh client c th truy cp n WSUS server d dng. Bn khng nn chn tt c cc ngn ng v tng dung lng v bng thng cn thit s rt cao. Sn phm: Microsoft Update cung cp cho bn mt th vin sn phm a dng khng ch l cc h iu hnh Windows. Chng hn l cc bn cp nht Exchange Server, ISA Server, SQL Server v Office. Bn ch nn chn nhng ng dng v h iu hnh cn s dng trong doanh nghip gim thiu dung lng cng.

Kim nghim vic cp nht

Sau khi trin khai WSUS, mt s my tnh client c th s khng th cp nht c v vic ci t cc bn cp nht tht bi, nguyn nhn c th do cc my tnh client ny cha c cu hnh, khng thuc Active Directory hoc t kt ni trong mt thi gian di. Bn c th s dng mt s k thut xc nh cc trng hp trn: Giao din Windows Update: bn c th s dng Computer and Report trong giao din ny xc nh cc my tnh client cha c ci t cc bn cp nht. Microsoft System Center Configuration Manager 2007 (SCCM 2007): SCCM 2007 l phin bn mi nht ca Microsoft trong h thng cc sn phm qun tr h thng tp trung. SCCM 2007 cung cp cho bn thng tin chi tit v cc bn cp nht v cc ng dng trn cc my tnh. SCCM 2007 l sn phm tt nht cho doanh nghip. Bn c th xem thm v SCCM ti:http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspx Microsoft Baseline Security Analyzer (MBSA): MBSA t ng kim tra v xc nh cc vn li v cp nht v cc l hng bo mt trong cu hnh. MBSA s qut ton mng v cho php bn c th xem c nhng my tnh no cha nm trong vng kim sot. Bn c th download MBSA ti : http://www.microsoft.com/mbsa/. Network Access Protection (NAP): bn c th s dng NAP v kt hp vi cng c xc thc trng thi ca my tnh (Windows System Health Validator, cng c ny c th xc nhn cc my tnh no va ci t cc bn cp nht.

Tng quan bi hc
WSUS cho php bn lu tr v phn phi cc bn cp nht t Microsoft thng qua mng, gip bn gim thiu c bng thng Internet. Thm vo , WSUS cn cho bn kim sot mi khi cp nht v trin khai trn cc my tnh client. Dch v Windows Update trn client nhn cc bn cp nht t WSUS server. Tuy thuc vo cch cu hnh Windows Update m bn c th thng bo n ngi dng nhng bn cp nht no c ci t hoc t ng ci t m khng cn tng tc bi ngi dng. Bn c th cu hnh Windows Update vi Group Policy.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 8

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Bn c th s dng ch mt WSUS server duy nht. Ngoi ra, trin khai mt WSUS server c lp cho mi vn phng gip bn gim thiu c bng thng Internet. Thm vo , WSUS server c cu hnh nhn bn hoc c th t ng. Vi cc trng hp ny, bn cn thit k cu trc downstream v upstream nh gii thiu phn Cu trc WSUS. Mt s nguyn nhn c th khin cc my tnh client khng th ci t cc bn cp nht. kim tra, xc nh cc client , bn c th s dng giao din WSUS, SCCM 2007, MBSA hoc NAP.

Trc nghim
1. Bn l k s h thng cho doanh nghip cung cp cc sn phm video. Doanh nghip ca bn c 6 vn phng v mt phng IT qun l tt c 1200 my tnh client. Mi vn phng c 200 my tnh. M hnh WAN ca bn s dng cu trc hub-and-spoke, vi mi vn phng c kt ni trc tip n tr s chnh. Bn c th thit k cu trc WSUS nh th no? A. Trin khai mt WSUS server cho mi vn phng. Cu hnh cc WSUS server ny c qun l bi mi vn phng v c h tr t phng IT. B. Trin khai mt WSUS server tr s chnh. Cu hnh tt c cc my tnh client nhn cc bn cp nht trc tip t Microsoft. C. Trin khai mt WSUS server tr s chnh. Cu hnh tt c cc my tnh client nhn cc bn cp nht trc tip t WSUS server. D. Trin khai mt WSUS server cho mi vn phng. Cu hnh mt WSUS server l bn sao ca WSUS server tr s chnh. 2. Bn l k s h thng v cng vic ca bn l cu hnh v qun l cp nht cho doanh nghip. Bn cn s dng Group Policy cu hnh cc client download cc bn cp nht v ci t chng t ng m khng cn nhc nh ngi dng. Thit lp no trong Group Policy gip bn lm iu ny? A. Allow automatic update immediate installation. B. Configure Automatic Updates. C. No auto-restart for scheduled automatic updates. D. Enable client-side targeting. 3. Phin bn no m bn c th s dng trin khai cc my tnh client download cc bn cp nht t WSUS. A. Windows 95 B. Windows 98 C. Windows 2000 Professional D. Windows XP Professional

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 9

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

BI HC 2: S DNG WINDOWS SERVER UPDATE SERVICES

Vi Windows Server 2008, bn c th ci t WSUS bng cch s dng Server Manager v qun l n trong giao din Update Services. Phin bn mi WSUS chy trn Windows Server 2008 cung cp cho bn nhiu tnh nng cng nh giao din ngi dng thn thin. Sau bi hc, bn s: Ci t WSUS trn Windows Server 2008. Cu hnh cc nhm my tnh, ph chun bn cp nht v xem cc bo co WSUS. X l s c khi cho c client v server khi gp vn v ci t cc bn cp nht. Thi lng bi hc: 40 pht

Ci t Windows Server Update Servers

Bn c th download WSUS min ph ti http://www.microsoft.com/wsus. Sau khi ci t bn cn ng b cp nht t Microsoft Update. Thc hin cc bc sau: 1. Click Start > Administrative Tools > Microsoft Windows Server Update Services. 2. Chn server v click vo lin kt Synchronize Now. Qu trnh ng b din ra vi pht (cng c th nhiu hn 1 gi). Sau khi ng b, bn c th bt u qun l WSUS.

Cu hnh Windows Server Update Services

Sau khi ci t WSUS v thc hin ng b ha, bn bt u thc hin cu hnh WSUS: 1. 2. 3. 4. 5. M bng cu hnh WSUS. Cu hnh cc nhm my tnh c phn phi cc bn cp nht nhng thi im khc nhau. Cu hnh cc my tnh client nhn cc bn cp nht t WSUS server. Sau khi kim tra cp nht, ph chun hoc hy b cc cp nht. Xem cc bng bo co xc nhn cc bn cp nht c phn phi thnh cng v xc nh cc vn li.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 10

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Cu hnh WSUS Option

Bn c th cu hnh cc ty chn theo tng mc sau: Update Source and Proxy Server: cu hnh cc upstream server hoc cu hnh WSUS server nhn cc bn cp nht t Microsoft. Ti y, bn c th thay i cc thit lp nu khng cn sa li cu trc WSUS. Products and Classifications: chn cc bn cp nht Microsoft m bn mun WSUS download. Bn nn chn thit lp ny khi bt u h tr cho mt sn phm mi t Microsoft hoc ngng h tr i vi mt sn phm no (chng hn l mt phin bn Microsoft Office c) Update Files and Languages: chn ni lu tr cc bn cp nht v gi ngn ng ca bn cp nht. Synchronization Schedule: cu hnh t ng ng b cc bn cp nht t nhng upstream server.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 11

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Automatic Approval: cu hnh t ng ph chun cc bn cp nht. V d, bn c th cu hnh nhng bn cp nht v li bo mt c t ng ph chun v ci t. Bn ch nn chn thit lp ny nu nh bn quyt nh b qua bc kim nghim cp nht. Computer: chn nhng my tnh t nhm no thng qua giao din Update Services hoc Group Policy. Server Cleanup Wizard: WSUS s tch ly cc bn cp nht khng cn cn thit v cc my tnh khng cn hot ng trong thi gian ngoi gi lm vic. Trong thit lp ny, bn c th xa b nhng bn cp nht qu hn hoc khng cn thit vi mc ch dn dp cng cng nh gim dung lng c s d liu WSUS. Reporting Rollup: mc nh, downstream server s gi cc bn bo co thng tin ln upstream server. Bn c th s dng thit lp ny cu hnh cho tng server c th qun l c cc bn bo co d liu. E-mail Notifications: WSUS c th gi e-mail mi khi nhng bn cp nht mi c ng b ha, nhng thng tin qun tr ph chun, kim nghim cc bn cp nht ny. Thm vo , s dng thit lp ny gi cc bn bo co trng thi cp nht hng ngy hoc hng tun. Microsoft Update Improvement Program: mc nh b v hiu ha, bn c th bt thit lp ny ln gi cho Microsoft nhng thng tin chi tit v qu trnh cp nht trong doanh nghip ca bn, bao gm s lng my tnh hon thnh v cha hon thnh cu t i vi mi bn cp nht. Microsoft s s dng nhng thng tin ny nng cao v ci thin quy trnh cp nht. Personalization: trn trang ny bn c th cu hin cho php hin th cc d liu t downstream server. Bn c th chn cc thnh phn no c hin th trong danh sch To do lisy that appears khi bn click chn vo WSUS server trn giao din Update Services. WSUS Server Configuration Wizard: cho php bn cu hnh li WSUS.

Cu hnh cc nhm my tnh

Trong a s cc mi trng, bn s khng th trin khai tt c cc bn cp nht n tt c cc client trong mt ln. cho bn kim sot c kh nng nhn cc bn cp nht ca my tnh, WSUS 3.0 cho php bn cu hnh cc nhm my tnh v trin khai cp nht n mt hoc nhiu nhm. Bn c th to thm cc nhm phn loi theo nhn hiu my tnh hoc cc phng ban trong doanh nghip. Bn c th to cc nhm theo cc v p dng cc quy trnh cp nht, c th nh sau: Kim tra th nghim: trin khai cp nht trn m hnh lab th nghim. Vic ny cho php bn xc nh c kh nng lm vic n nh hay khng. Sau bn c th kim nghim trn mt my tnh sau khi ci t cc bn cp nht. Th im: sau khi kim nghim, bn s trin khai cp nht n mt nhm th im no . Nhm ny c th l phng ban IT hoc mt nhm phng ban khc c am hiu v my tnh. Vic ny gip bn th nghim trn mt nhm my tnh v xem xt kh nng lm vic.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 12

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Trin khai tht: nu trin khai th im sun s, khng gp bt c vn no sau 1 tun th bn c th trin khai n tt c cc my tnh lm vic trong cng ty. iu ny gip bn gim thiu ri ro.

Bn c th cu hnh cc nhm my tnh theo 1 trong 2 hng sau: Server-side targeting: thch hp i vi doanh nghip nh, bn c th thm cc my tnh vo nhm bng cch cu hnh trn giao din Update Services. Client-side targeting: thch hp i vi doanh nghip ln, bn s dng Group Policy cu hnh cc my tnh no thuc nhm cc my tnh. Cc my tnh c t ng a vo ng nhm khi chng kt ni n WSUS server.

Cho d bn trin khai bng cch no i chng na th vic u tin bn cn lm l to nhm my tnh. Mc nh c mt nhm my tnh duy nht l: All Computer. Nhm ny bao gm tt c cc my tnh. to thm nhm, thc hin cc bc sau: 1. 2. 3. 4. Click Start > Administrative Tools > Microsoft Windows Server Update Services. Click Computer. R-click vo All Computers v chn Add computer group. Nhp tn nhm v click Add. Thc hin li bc 2 v 3 nu bn mun thm cc nhm khc.

Server-side targeting: thm cc my tnh vo mt nhm. Thc hin cc bc sau: 1. Trn giao din Update Services, click Computer > All Computer v chn Unassigned computers. Sau , r-click vo my tnh bn mun a vo nhm (bn c th chn nhiu my tnh bng cch click v gi phm Ctrl) v chn Change Membership. 2. Ti hp thoi Set computer group membership, nh du chn vo nhm m bn mun a my tnh vo. Click OK. Client-side targeting: bn c th s dng Group Policy object (GPO) thm cc my tnh vo cc nhm khi. Trc tin, bn cn thit lp cho php s dng client-side targeting. Thc hin cc bc sau: 1. Click Start > Administrative Tools > Microsoft Windows Server Updates Services. 2. Click Options > Computers. 3. Ti hp thoi Computer, chn Use Group Policy or Registry Settings on Computers. Sau click OK. Tip theo, cu hnh GPO di chuyn cc my tnh n cc nhm. Bn cn to mt GPO c lp cho mi nhm my tnh. Sau cu hnh cho php p dng i vi nhng my tnh thch hp. 1. Ti Group Policy Management Editor, m GPO. 2. Click Computer Configuration > Administrative Templates > Windows Components > Windows Update. 3. Double-click vo chnh sch Enable Client-side targeting. 4. Hp thoi hin th, chn Enabled. Sau nhp tn nhm my tnh m bn mun p dng v click OK. Sau khi cc client c p dng Group Policy, khi ng li Windows Update Services.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 13

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Kim tra nhanh 1. Giao thc no cho php dch v Windows Update ca client c th nhn c cc bn cp nht t server WSUS? 2. Bn nn s dng cch trin khai client-side targeting hay server-site targeting cho doanh nghip ln Tr li nhanh 1. HTTP. 2. Doanh ngip ln th nn s dng client-side targeting

Cu hnh cc my tnh client

bi hc trc, bn c tm hiu v s khc nhau ca cc chnh sch Group Policy trong vic cu hnh cc my tnh client nhn cc bn cp nht. Vic c nhiu thao tc cu hnh s khin bn tn thi gian, phn ny bn s c hng dn cu hnh gim thiu cc bc cu hnh khng cn thit nhm mc ch cc client c th download cc bn cp nht t WSUS server. 1. M GPO m bn mun s dng thc hin cu hnh. Trong Group Policy Management Editor, click Computer Configuration > Administrative Templates > Windows Components > Windows Update. 2. Double-click vo Specify intranet Microsoft Update service location. 3. Chn Enabled. Trn c trng Set the intranet update services for detecting updates v Set the intranet statistics server, nhp tn ca WSUS server, chng hn http://SERVER. Click OK.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 14

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

4. Double-click vo chnh sch Configure Automatic Updates. 5. Chn Enabled. Cu hnh thit lp t ng cp nht. Ti Scheduled install day bn c th chn tt c cc ngy trong tun hoc mt ngy c th trong tun p dng cc chnh sch. Thit lp thi gian thc hin chnh sch ti danh sch Scheduled install time. Notify for download and notify for install: thng bo download v ci t n ngi dng. Auto download and notify for install: t ng download v thng bo ci t n ngi dng. Auto download and schedule the install : t ng download v thit lp thi gian ci t. Allow local admin to choose setting : cho php ngi dng c th t chn nhng thit lp ny. Vi nhng thit lp trn, cc my tnh client s nhn c cc bn cp nht t WSUS server v t ng ci t.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 15

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Ph chun cc bn cp nht
Mc nh, tt c cc bn cp nht u cha c ph chun. Bn cn phi cu hnh ph chun cc bn cp nht, thc hin cc bc sau: 1. Click Start > Administrative Tools > Microsoft Windows Server Update Services. 2. Click vo WSUS server. Sau click Update, la chn cc ty chn sau: All updates: hin th tt c bn cp nht. Vic lm ny thun li cho vic ph chun cc bn cp nht. Critical updates: ch hin th nhng bn cp nht v li nghim trng, nhng bn v li ny cn c u tin hng u trong vic cp nht m bo an ton h thng cng nh my tnh ngi dng. Security updates: ch hin th nhng cp nht lin quan n bo mt. WSUS updates: hin th nhng bn cp nht lin quan n quy trnh x l cp nht. 3. Ti danh sch Appoval, chn Unapproved. Bn c th s dng danh sch xem cc bn cp nht c ph chun. 4. T danh sch Status, chn Any. Click Refresh lm mi hin th cc bn cp nht. sp xp cc bn cp nht theo th t u tin v ngy thng, r-click vo mt ct v chn Release Date. Sau , click v ct Release Date sp xp li. 5. Chn nhng bn cp nht bn mun ph chun, Bn c th chn nhiu bn cp nht bng cch click v gi phm Ctrl. Ngoi ra bn c th chn nhiu bn cp nht mt lc bng cch click chut v gi phm shift. Nhn Ctrl +A chn tt c cc bn cp nht. R-click vo bn cp nht chn v chn Approve (vi mc ch phn phi cc bn cp nht ny n client vo thi im cc client kim tra cp nht) hoc chn Decline (khng cho phn phi bn cp nht ny). 6. Nu hin th hp thoi Approve Updates, chn nhm my tnh bn mun p dng cp nht v chn Approved for install. Click OK nu bn hon tt qu trnh ph chun 7. thit lp thi hn cp nht, bn c th r-click vo nhm my tnh v chn Deadline, sau chn thi hn cp nht. 8. Click OK.

T chi cc bn cp nht
Sau khi ph chun cc bn cp nht cn thit, bn c th t chi ph chun nu bn khng mun ci t cc bn cp nht ny trn my tnh. Vic t chi cc bn cp nht khng nh hng g n cc my tnh client. 1. Ti giao din Update Services, r-click vo bn cp nht bn mun t chi v chn Decline. 2. Ti hp thoi Decline update, click Yes. xem li cc bn cp nht b t chi, ti danh sch Approval, chn Declined. Sau click Refresh.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 16

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Xem cc bng bo co

Bn c th xem chi tit cc bn cp nht, my tnh hoc s ng b. Click Report trn giao din Update Services. WSUS cung cp cho bn cc thng tin sau: Update Status Summary: hin th cc thng tin v mi bn cp nht m bn chn, bao gm m t y v bn cp nht (c cung cp bi Microsoft), cc bn cp nht c ph chun trn nhm my tnh, s lng my tnh ci t cc bn cp nht. Update Detailed Status: ngoi nhng thng tin hin th Update Status Summary, mc ny hin th trng thi ca tt c my tnh cho mi cp nht theo tng trang, cho php bn xc nh chnh sch my tnh ny ci t cp nht. y l nhng thng tin hu ch gip bn c th xc nh nhng l hng bo mt cng nh cc my tnh dnh l hng bo mt . Update Tabular Status: hin th nhng d liu ca c bng Update Status Summary v Update Detailed Status v xut ra bo co dng bng tnh. Computer Status Summary: hin th nhng thng tin cp nht cho mi my tnh. Computer Detailed Status: ngoi nhng thng tin Computer Status Summary, mc ny hin th nhng my tnh no ci t nhng bng cp nht no. Computer Tabular Status: cung cp cho bn thng tin ca c bng Computer Status Summary v Computer Detailed Status v xut ra bo co dng bng tnh. Syncronization Results: hin th kt qu qu trnh ng b ha mi nht.

Khi bn m mt bng co co, bn c th cu hnh lc cc thng tin hin th trong bng bo co . Chng hn nh nhng bng bo co m bn mun hin th theo tn sn phm

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 17

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Qun l ng b ha
Ti mc Synchronizations s hin th danh sch thi gian WSUS nhn danh sch cc bn cp nht t upstream server. Bn c th r-click vo mt ng b bt k v chn Synchronization xem thng tin chi tit.

Khc phc s c trong qu trnh cp nht

Thnh thong, bn s c thm kinh nghim trong vic khc phc s c ci t nu nh gp phi li trong vic cp nht. Bn c th s dng WSUS xc nh cc client no c ci t cc bn cp nht hoc cha ci t.

Khc phc s c WSUS

WSUS to ra 3 bn ghi: Application event log: bn hi ny lu tr cc s kin lin quan n vn ng b ha, li trong Update Services, li c s d liu WSUS lin quan n source ci t WSUS. Hu ht cc s kin u cung cp thng tin chi tit v nguyn nhn cng nh hng dn khc phc s c. Thm vo , bn c th tm kim li ti trang http://support.microsoft.com. C:\Program Files\Update Services\LogFiles\Change.txt: mt tp tin c nh dng *.txt lu tr cc thng tin v ci t cc bn cp nht, ng b v s thay i cu hnh WSUS. Cc thng tin ny khng chi tit nhng cng c th cho bn bit nhng thng tin quan trng chng hn nu qun tr vin thay i mt thit lp no , tp tin s ghi li dng ch WSUS confoguration has been changed. C:\Program Files\Update Services\LogFiles\SoftwareDistribution.txt: hin th thng tin chi tit v c h tr t Microsoft.

Khc phc s c Windows Update trn client

xc nh cc vn l nguyn nhn khi cp nht tht bi, thc hin cc bc sau: 1. M tp tin %Systemroot%\WindowsUpdate.log cc thng bo li. Bn c th xem hng dn c WindowsUpdate.log ti a ch http://support.microsoft.com/kb/902093/ 2. Xc nhn client no kt ni n WSUS server bng cch m trnh duyt Web v g a ch http://<tn_WSUS_server>/iuident.cab. Nu khung nhc nh hin ra thng bo bn cn download tp tin, c ngha l client kt ni n WSUS server. 3. Nu bn s dng Group Policy cu hnh Windows Update, bn c th s dng cng c Resultant set of Policy (RSOP) xc nhn cc cu hnh. Bn vo Run vo g Rsop.msc m RSOP. Trong RSOP, click Computer Configuraion > Administrative Templates > Windows Components > Windows Update xem v xc nhn cc thit lp. Nu bn pht hin ra mt vn v sau cu hnh li khc phc s c, bn cn khi ng li dch v Windows Update trn my tnh client thay i c hiu lc. Bn c th s dng cng c Services (services.msc) hoc s dng lnh sau khi ng li dch v Windows Update.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 18

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

net stop wuauserv net start wuauserv Trong khong 6 10 pht, Windows Update s gi thng tin ln server. Windows Update bt u truy vn n WSUS server, s dng lnh sau: wuauclt /a

Xa b cc bn cp nht
Thnh thong bn vn gp li cp nht, chng hn sau khi bn cp nht ln phin bn mi th ng dng khng cn tng thch, bn c th xa b cp nht , thc hin cc bc sau: 1. 2. 3. 4. 5. Click Start > Control Panel. Di Programs, click Uninstall a program. Di Tasks, click View installed updates. Chn bn cp nht bn mun xa b. Click Uninstall. Khi ng li nu cn thit.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 19

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

THC HNH: TRIN KHAI WSUS

Trong bi thc hnh, bn cu hnh WSUS trn server, s dng Group Policy cu hnh cc my tnh client, sau ph chun v phn phi cc bn cp nht.

Bi thc hnh 1: ci t WSUS v thc hin ng b ha

Trong bi thc hnh ny, bn s ci t WSUS. gim thiu dung lng lu tr, bn s cu hnh WSUS server kt ni trc tip n client nhn cc bn cp nht trc tip t Micrsoft. 1. Download WSUS ti a ch http://www.microsoft.com/wsus/ 2. Ti trang License Agreement, click I accept the terms of the License agreement chp nhn cc iu khon ci t v s dng. Click Next. 3. Ti trang Required Component to use administration UI, thng bo cho bn cn ci t ng dng Microsoft Report Viewer 2008 Redistributable xem cc bng bo co trc quan. Click Next. 4. Ti trang Select Update Source, nh du chn Store updates locally lu tr cc bn cp nht trn server. Click Browse v chn ng dn cho WSUS. Click Next.

5. Trn trang Database Options, nh du chn vo Install Windows Internal Database on this computer. Click Next.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 20

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

6. Ti trang Web Site Selection nh du chn vo Create a Windows Server Update Services 3.0 SP2 Web site s dng mt website khc website mc nh trong IIS. Click Next. 7. Ti trang Ready to Install Windows Server Update Services xem li cc thng tin cui cng trc khi ci t. Click Next tin hnh ci t.

8. Click Finish hon tt. 9. i khong 2 pht, trang Before You Begin hin th, click Next tin hnh cu hnh WSUS server. 10. Ti trang Join the Microsoft Update Improvement Program, nh du chn Yes, I would like to join the Microsoft Update Improvement Program c h tr t Microsoft trong qu trnh cp nht. Click Next. 11. Ti trang Choose Upstream Server, nh du chn vo Synchronize from Microsoft Update nu bn mun ng b n Microsoft Update. Nu bn mun ng b n mt WSUS khc nh du chn Synchronize from another Windows Server Update Services server, sau nhp tn server mun ng b v port. Ngoi ra, click vo Use SSL when synchronizing update information nu bn mun s dng chng thc SSL trong qu trnh ng b. nh du chn This is a replica of the upstream server nu bn mun server hin ti ng vai tr upstream server. Click Next. 12. Ti trang Specify Proxy Server, nu bn mun s dng proxy server nh du chn Use a proxy server when synchronizing. Click Next.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 21

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

13. Ti trang Connect to Upstream Server, click Start Connecting bt u kt ni theo s la chn m bn chn trang Choose Upstream Server. i qu trnh kt ni hon tt v click Next. 14. Ti trang Choose Languages, nh du chn vo Download updates only in these languages v chn gi ngn ng. Vic ty chn gi ngn ng s gip bn gim c bng thng. Click Next. 15. Ti trang Choose Products, chn sn phm m bn mun cp nht. Click Next. 16. Ti trang Choose Classifications, nh du chn nhng i tng bn mun cp nht. Click Next. 17. Ti trang Set Sync Schedule, nh du chn Synchronize automatically v thit lp thi gian ng b ha. Click Next. 18. i qu trnh ng b ha hon tt. Bn cng c th thc hin cch sau ng b ha. 1. Click Start > Administrative Tools > Microsoft Windows Server Update Services. 2. Giao din Update Services hin th. 3. Chn server l SERVER (tn server bn mun ci t WSUS). Ti khung Details, click Synchronize Now thc hin ng b ha vi website Microsoft Update Qu trnh ng b din ra trong vi pht (c th l hn mt gi ty ng truyn ca bn)

Bi thc hnh 2: Cu hnh cc my tnh client nhn cc bn cp nht

Trong bi thc hnh, bn s s dng Group Policy cu hnh cc my tnh client nhn cc bn cp nht t WSUS server thay v trc tip t Microsoft. 1. M GPO bn mun p dng cu hnh. Ti Group Policy Management Editor, click chn Computer Configuration > Administrative Templates > Windows Components > Windows Update. 2. Double-click vo Specify intranet Microsoft Update services location. 3. Chn Enabled. Trn c hai trng l Set the intranet update service for detecting updates v Set the intranet statistics server, g http://server. Click OK. 4. Double-click vo Configure Automatic Updates. 5. Chn Enabled. Cu hnh cc thit lp t ng cp nht. Click OK. ng nhp vo my tnh client bng quyn Administrator. Vo Run v g lnh gpupdate /force p dng cc chnh sch va cu hnh trn.

Bi thc hnh 3: Ph chun cc bn cp nht

Trong bi thc hnh ny, bn s ph chun mt bn cp nht trin khai n my tnh client. 1. Trn WSUS server, ti giao din Update Services, click Updates. Chn All Updates. 2. Ti danh sch Approval, chn Unapproved. 3. Ti danh sch Status, chn Any. Click Refresh hin th cc bn cp nht.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 22

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

4. Chn nhng bn cp nht gn y nht p dng cho my tnh client. R-click vo bn cp nht chn v click Approve. 5. Trn hp thoi Approve updates, chn All Computers v chn Approved for install. Click OK. 6. Nu hin th cc vn v bn quyn, click I accept. 7. Xem cc li hin th trong hp thoi Approval progress xc nhn cc bn cp nht c ci t n client. Sau click Close. 8. Ti giao din Update Services, chn Computers > All Computers. Ti danh sch Status, chn Any v click Refresh. My tnh client lc ny s hin th trn danh sch Trn my tnh client, khi ng li dch v Windows Update.

Tng quan bi hc
Bn c th download WSUS t Microsoft.com. Sau khi ci t WSUS v ng b nhng bn cp nht t upstream server, bn nn cu hnh cc nhm my tnh cho php chng nhn c cc bn cp nht. Tip theo, ph chun hoc t chi cc bn cp nht v i cho chng c phn phi xung cc client. S dng bng bo co xc nhn qu trnh cp nht hon tt v xc nh nhng my client no hoc cha ci t cc bn cp nht. Bn c th xem bn ghi log v qu trnh cp nht khc phc s c v WSUS hoc trn client. Mc d bn c th xa mt s bn cp nht bng cch s dng WSUS, tuy nhin bn nn xa cc bn cp nht t nhng my tnh client.

Trc nghim
1. Bn l k s h thng mng ca mt doanh nghip chuyn v thit b m thanh nh sng. Mi y, bn s dng MBSA kim tra cc vn cp nht bo mt ca my tnh client. Bn nhn thy c mt s my tnh khng th ci t c cc bn cp nht. Bn c th xem thng tin cc my tnh ny u? (chn tt c cc p n ng) A. Xem System log trn my tnh client. B. Xem Application and Services logs \Microsoft\Windows\Windows UpdateClient\Operational trn my tnh client. C. Xem System log trn WSUS server. D. Xem %SystemRoot%\WindowsUpdate.log. 2. Bn l k s h thng ca mt cng ty kin trc. Bn va mi trin khai WSUS v bn cn xc nhn cc bn cp nht phn phi thnh cng. Thng tin no sau y m bn nhn c t bo co Update Status Summary? A. Cc nhm my tnh c ph chun cc bn cp nht. B. Cc my tnh hon tt ci t cc bn cp nht. C. Bn cp nht b xa b. D. S lng my tnh khng th ci t mt bn cp nht.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 23

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

3. Bn ang trin khai WSUS cho doanh nghip ln. Hin ti, bn cu hnh cc my tnh client thuc cc nhm khc nhau bn c th trin khai cp nht. Bn c th cu hnh a my tnh vo nhm bng cch no? (chn tt c cc p n ng) A. Bt chnh sch Configure Automatic Updates. B. Thit lp Client-side targeting trong Group Policy. C. Ti Update Services, r-click vo my tnh v chn Change Membership. D. Ti Update Services, a my tnh vo nhm thch hp.

Tm tt chng
WSUS cho php bn kim sot v phn phi cc bn cp nht t Microsoft n my tnh client. Mt WSUS server c th sao chp cc bn cp nht t Microsoft v lu tr chng ti server . Sau cc my tnh client s download cc bn cp nht t WSUS server thay v download chng t Microsoft thng qua Internet. h tr doanh nghip vi nhiu vn phng, downstream WSUS server c th ng b ha cc bn cp nht, ph chun v cu hnh thit lp t upstream WSUS server, cho php bn c th thit k cu trc phn cp c th m rng quy m. Ci t WSUS cn phi ci t IIS v WSUS c th s dng site mc nh c sn khi mi ci t IIS l Default Web Site. Sau khi ci t WSUS, bn c th qun l WSUS vi giao din Update Services. Trc tin, bn nn ng b WSUS server vi website Microsoft Update. Sau , to cc nhm my tnh trin khai. Tip theo, cu hnh cc my tnh client c th download cc bn cp nht t WSUS server thay v download t Microsoft Update server thng qua Internet.

Thut ng
Downstream server Upstream server Windows Server Update Services (WSUS)

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 24

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Ng cnh
Trong nhng ng cnh sau y, bn s c p dng thit k h tng WSUS.

Ng cnh 1: Ln k hoch trin khai h tng WSUS c bn

Bn l mt k s h thng ca ICT24H. Hin ti, bn cu hnh tt c my tnh client download cc bn cp nht trc tip t Microsoft v t ng ci t cc bn cp nht ny. Tuy nhin, sau khi m t phin bn mi c tung ra, bn nhn thy ha n dch v bng thng Internet tng t bin sau khi Microsoft tung ra phin bn mi trn website Windows Update. V th, bn s dng WSUS gim bng thng s dng cho tr s chnh cha khong 250 my tnh. Thm ch, bn bt u kim tra th nghim cp nht trc khi trin khai tht. Tuy nhin bn khng c nhn vin no vn hnh vic kim nghim , v th bn chn cch t ng ph chun v ci t cc bn cp nht. Bn ti phng gim c tho lun v ha n ph thu bao t ISP. Gim c yu cu bn tr li mt s cu hi sau: 1. Lm th no gim bng thng t WSUS? 2. Cn bao nhiu WSUS server? 3. Lm th no cu hnh WSUS t ng ph chun cc bn cp nht?

Ng cnh 2: Ln k hoch trin khai mt h tng WSUS phc tp

Bn l k s h thng ca ICT24H, mt tp on a quc gia vi nhiu chi nhnh vn phng khp nm chu. Tr s chnh t ti London v bn c cc chi nhnh vn phng t ti New York, Mexico, Tokyo v France. Tt c cc vn phng u c trang b ng truyn Internet tc cao v chng c kt ni VPN theo cu trc full-mesh (mng li khp kn). Hay ni mt cch khc l mi vn phng kt ni trc tip n 4 vn phng cn li. Hin ti, phng IT London qun l c vn phng London v New York. Cc vn phng Mexico, Tokyo v France c cc phng IT ca ring h. Bn bt u trin khai WSUS trn Windows Server 2008 v t o ra mt cu trc p ng kt ni cho 5 vn phng. Sau l cuc tr chuyn gia trng phng IT vn phng Mexico v gim c ca bn. Ni dung nh sau: Trng phng IT vn phng Mexico: Ti ni chuyn vi cc trng phng IT Tokyo v France, v h c nhng yu cu k thut , ngn ng, h iu hnh v kim nghim ring bit. V th, chng ti cn qun l vic ph chun cp nht. Tuy nhin, chng ti ch ng b ha cp nht t server trung tm Gim c ca bn: Khng thnh vn cho d bn c ng b cp nht gia cc vn phng hoc t Internet. V chng ta s dng VPN v tt c thng qua Internet.

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 25

Smith Nguyen Studio. ICT VIETNAM COMMUNITY

Cu hi: 1. Bn cn bao nhiu WSUS server v cu trc nh th no? 2. WSUS server no s c nhn bn v c qun l c lp? --- Ht ---

ICT24H.NET http://www.facebook.com/SmithNguyenStudio

Page 26