Hng dn ci t dch v WSUS 3.0 (Windows Server Update Services).

Wsus 3.0 l mt dch v cho php ta download tt c cc bn v li (hotfix) ca

tt c cc chng trnh ca Microsoft (trc y, vi bn SUS th ch cho php
update vi h iu hnh) v mt my ng vai tr my ch update. Vic lm ny
s gip gim bng thng truy cp internet, d dng trong vic qun tr, v bo
mt h thng.
M hnh ca chng ta nh sau:



ci t dch v WSUS 3.0. ta cn phi ci t cc thnh phn h tr sau:
Windows 2003 Sp1 tr ln
IIS 6.0 tr ln
Microsoft .NET Framework 2.0
Microsoft Management Console 3.0
Microsoft Report Viewer
Tt c cc thnh phn trn u c th download t trang ch ca Microsoft mt
cch d dng.







1. Ci t WSUS 3.0 ln my server:
WSUSSetup.exe ri kch i vo file ny. Ti ca s Welcomebn nhp Next.



Ti ca s Installion Mode Selection, chn Full server installion including
Administration Console ri chn Next.










Ca s License Agreement, bn chn I accept the terms of the License
agreement nhn Next.



Ti ca s Select Update Source, chn Store updates locally client c th
download cc updates c xc thc t WSUS server mt cch nhanh
chng m khng cn cp nht t Microsoft. Theo khuyn co ca Microsoft
partition ny cn trng t nht 6GB.







Ti ca s Database Options, check vo mc Install Windows Internal Database
on this computer. Chn Next tip tc.



Trong ca s Web Site Selection, chn Use the exitsting IIS Default Web site
(recommended) ri nhn Next. Lc ny client s truy cp n WSUS server theo
ng dn http://SERVER port mc nh l 80. Nu chn Create a WSUS Web
site th lc ny client truy cp n WSUS theo ng dn http://SERVER:8530








Ti ca s Ready to Install Windows Server Update Services, bn xem li cc
thng tin trc khi ci t, cn ch n
- Content folder : E:\WSUS\WsusContent
- Database files : E:\WSUS
- Client self update site: http://SERVER/selfupdate
ri nhn Next.



Qu trnh ci t din ra.







Chn Finish kt thc qu trnh ci t.



2. Cu hnh WSUS cp nht updates t Microsoft.
Sau khi ci t xong WSUS 3.0, chng trnh WSUS Configuration Wizard s t
ng kch hot. Bn c th s dng chng trnh ny cu hnh WSUS hoc
c th b qua mi cu hnh trong Wizard ny bn c th cu hnh li trong mc
Options ca cng c WSUS Administration console.





Mc nh, WSUS c cu hnh s dng Microsoft Update l ni cp
nht. Nhng nu bn c mt my WSUS khc server trong mng ni b, bn c
th cu hnh WSUS s dng my WSUS server ny. Nu c tng la gia
WSUS v Internet, bn cn cu hnh tng la cho php WSUS c th nhn
c cc bn updates.

Bn chn du check Yes, I would like to join the Microsoft Update Improvement
Program. Nu bn mun gi thng tin v cht lng ca vic updates n
Microsoft.



Ti ca s Choose Upstream Server, bn c th chn ni ng b cc bn
updates t Microsoft Update hay t mt WSUS khc.






Ti ca s Specific Proxy Server, bn ch nh tn hoc a ch IP ca proxy
server nu trong mng s dng proxy server.



Ti ca s Connect to Upstream Server, nhn chn Start Connecting.








Ti ca s Choose Languages, bn la chn ngn ng cho cc bn updates.



Ti ca s Choose Products, la chn cc sn phm ca Microsoft cn updates.
y gi s chng ta ch cn updates cho Windows XP. Bn check vo mc
Windows XP.






Ti ca s Choose Classifications, bn la chn loi updates y gi s
chng ta ch cn chn Security Updates ri nhp Next.



Ti ca s Set Sync Schedule, bn chn Do not display user policy settings in
the results ri nhp Next.






Ti ca s Finished nu bn mun khi ng WSUS v bt u ng b vi
Microsoft bn th mc nh v nhp Next.



Sau khi ng b xong

Ti ca s Whats Next, l thng tin hng dn gip bn cu hnh thm cc
phn khc ca WSUS. Bn nhn Finish kt thc qu trnh hng dn cu
hnh WSUS.

3. Cu hnh sao cho cc my trm cp nht update t WSUS
Cch tt nht cu hnh Automatic Updates l s dng Group Policy. Trong
mi trng Active Directory, bn c th s dng chnh sch nhm da trn mi
trng domain. (GPMC.msc) Cn trong mi trng khng s dng domain bn
c th s dng Local Group Policy ti my Client

Trn WSUS server bn cu hnh cho php Client update thng qua GPO. Ti
ca s WSUS Administration console,pha bn phi bn chn Options, pha
bn tri bn nhp chn vo mc Computers. Chn vo User Group Policy or
registry settings on computers.



VD l trin khai trn Local

Ti my trm Client1, bn m cng c Local Group Policy thm vo WSUS
Administrative Template.
Bn nhp chut phi vo mc Administrative Template, chn Add/Remove
Templates. Ti ca s Add/Remove Templates bn nhp nt Add chn
wuau.adm.



Cu hnh chnh sch cp nht Automatic Updates cho my trm.

Trong ca s Local Group Policy, bn m rng mc Computer Configuration
>Administrative Templates >Windows Components > Windows Update.
Nhp i vo mc Configure Automatic Updates chn Enable.



Bn la chn mt trong cc ty chn:
Notify for download and notify for install: Ty chn ny cho php bn nhn
c thng bo khi ti xung v khi ci t updates.
Auto download and notify for install: Ty chn ny cho php cc bn
updates t ng c ti xung v thng bo cho administrator trc khi ci
t.
Auto download and schedule the install: Automatic Updates c cu hnh
lp lch ci t, bn phi ch nh ngy gi v thi gian c th.











ch nh a ch WSUS cho my trm, bn nhp i vo mc Specify intranet
Microsoft update service location, chn Enabled. Bn nhp vo a ch
webhttp://SERVER ca WSUS server trong mc Set the intranet update
service for detecting updates v Set the intranet statistics server .



chnh sch Automatic Updates c tc dng nhanh chng bn c th s
dng lnh gpupdate /force hoc chng trnh Automatic Updates trn
client kt ni vi WSUS server ngay lp tc bn c th dng lnh wuauclt.exe
/detectnow.




4. Xc nhn, phn phi v kim tra trng thi cc bn updates.
Trong ca s WSUS Administration console, nhp vo Updates, chn All
Updates. Trong danh sch cc bn updates, chut phi vo cc bn updates m
bn mun chp nhn ci t chn Approve.



Trong ca s Approve Updates, la chn Click Approved for Install and then
click OK.

Ti ca s WSUS Administration console, nhp vo Reports chn Update
Status Summary xem li trng thi updates