Deploy, manage, and maintain servers - Administering Windows Server 2012 R2 - page 22

Thought experiment
Setting up new deployments and patching services
In this thought experiment, apply what you've learned about this objective. You can
find answers to these questions in the “Answers” section at the end of this chapter.
You are the network administrator for TreyResearch.net. Trey Research has added a
new building and is hiring, and you've been tasked to set up new deployment and
patching services in the new building, which will be on a separate subdomain and
subnet. Updates will be synchronized to the existing company WSUS server.
Company policy dictates a minimum number of physical servers and a minimum
security and patching footprint for servers on the network, with no unnecessary
roles or features installed.
With these requirements, answer the following questions:
1. Can you install your patching and deployment servers to the same physical
server while minimizing the security footprint?
2. What is the minimum number of physical servers required?
3. What virtualized servers can you group together while meeting the
requirements?
Objective summary
■ The Windows Server Update Services role can be installed on both a Windows Server
full installation and a Windows Server Core installation.
■ WSUS supports either the WID or a SQL Server database, but you have to make a
choice at install time.
■ The installation of the Windows Deployment Services role can't use the
-InstallAllSubFeatures parameter to the Install-WindowsFeature cmdlet because both
databases can't be installed at the same time.
■ The postinstallation tasks normally handled by the Server Manager Add Roles And
Features Wizard can be done on the command line by using a combination of the
wsusutil.exe utility and Windows PowerShell.
■ Managing remote WSUS servers using Windows PowerShell uses the Get-WsusServer
cmdlet to generate an IUpdateServer object.
■ You can use the Group Policy Management console (gpmc.msc) and Group Policy
Management Editor (gpedit.msc) to create and edit GPOs that control how WSUS is
used in your organization.