Information Technology Reference
In-Depth Information
Centralizing your patch management is an important server function and one that can't be
entirely managed with Windows PowerShell. You need a combination of tools to fully manage
your network's updates.
Windows Server Update Services (WSUS) is the primary technology for deploying updates.
This objective covers how to:
■
Install and configure the Windows Server Update Services role
■
Configure Group Policy Objects (GPOs) for updates
■
Configure WSUS groups
■
Configure WSUS synchronization
■
Configure client-side targeting
■
Manage patch management in mixed environments
Services role
You can install and configure the Windows Server Update Services role and its supporting
services by using Server Manager, the command line, or a mixture of the two. If you choose
the command line, use a combination of Windows PowerShell and the Wsusutil.exe utility for
configuration. The Windows Server Update Services role is supported on a Windows Server
Core installation.
Installing and configuring by using GUI
Windows Server Manager is the GUI way to install and configure the Windows Server Update
Services role on a server. Use the Add Roles And Features Wizard with the role-based or
feature-based option to install the Windows Server Update Services role. Server Manager can
be used to insert roles and features into virtual hard disks or to manage multiple servers from
a single console.
When you install the Windows Server Update Services role using Server Manager, it auto-
matically prompts you to install the necessary management tools and the other features and
roles that are required (see Figure 1-5).
