Microsoft Corporation
Published: January 16, 200
This paper documents the major tasks involved in administering and troubleshooting Microsoft® Windows Server™ Update Services.
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.
This White Paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.
Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred.
© 2005 Microsoft Corporation. All rights reserved.
Microsoft, SQL Server, Windows, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Microsoft Windows Server Update Services Operations Guide 9
Administering Windows Server Update Services 9
Overview of Windows Server Update Services 9
How WSUS works 10
Managing Windows Server Update Services 10
Setting Up and Running Synchronizations 10
Synchronizing Updates by Product and Classification 11
Configuring Proxy-server Settings 12
Configuring the Update Source 13
Specifying Where to Store Updates 14
Synchronizing Manually or Automatically 14
Managing Computers and Computer Groups 15
Managing Client Computers 15
Managing Computers on the Computers Page 16
Managing Computer Groups 17
Server-side Targeting 18
Client-side Targeting 18
Managing Computer Groups on Your WSUS Server 19
Managing Updates 20
Updates Overview 20
How WSUS Stores Updates 20
Managing Updates by Using WSUS 20
Update Products and Classifications 22
Products Updated by WSUS 22
Update Classifications 22
Viewing Updates 23
Approving Updates 25
Approving Updates for Detection 25
Approving Updates for Installation 26
Declining Updates 28
Approving Updates for Removal 28
Approving Updates Automatically 29
Automatically Approving Updates for Detection 29
Automatically Approve Updates for Installation 30
Automatically Approving Revisions to Updates 31
Approving Superseding or Superseded Updates 32
Recommended Process for Approving a Superseding Update 33
Approving Office Updates 33
Approving SQL Server and Exchange Server Updates 34
Updating Microsoft SQL Server Instances 34
Updating Microsoft SQL Server and Microsoft Exchange Servers That Are Part of a Cluster 34
Testing Updates 35
Storing Updates 36
Specifying Where to Store Updates 36
Local Storage Considerations 36
About Express Installation Files 36
Changing the Location where You Store Update Files Locally 37
Managing the Databases 38
Migrating the database from MSDE or WMDSE to SQL Server 2000 40
Reasons to migrate the WSUS database to SQL Server 2000 40
Database Requirements 40
Scenarios 41
Migrating the WSUS database from a MSDE or WMSDE instance to SQL Server 2000 instance running on the same server 41
To migrate the WSUS database from an MSDE or WMSDE instance to a SQL Server 2000 instance on the same server 41
Migrating the WSUS database from an MSDE or WMSDE instance to a SQL Server 2000 instance on another server 43
Remote SQL Scenario Limitations 43
About this procedure 44
To migrate the WSUS database from an MSDE or WMSDE instance to a SQL Server 2000 instance on another server 44
See Also 49
Running in Replica Mode 50
Backing Up Windows Server Update Services 51
Best Practices with Windows Server Update Services 54
Use Group Policy to Update Multiple Computers 54
Schedule Update Installations when there is Little Chance for Lost Productivity 56
For maximum control over when your servers are restarted as necessitated by an update installation, set Group Policy to Download the updates automatically and notify when they are ready to be installed, and then create a script that enables to you accept and install the updates and then restart the computer on demand 57
Managing WSUS from the Command Line 58
Running WSUSutil.exe 58
Export 62
Syntax 62
Import 62
Migratesus 63
Syntax 63
Movecontent 63
If the drive is full 64
If the hard disk fails 64
Syntax 65
Reset 65
Deleteunneededrevisions 65
Syntax 66
Listinactiveapprovals 66
Syntax 67
Removeinactiveapprovals 67
Monitoring Windows Server Update Services 67
Update Status Terminology 68
Running Reports 70
Using the Reports Page 70
Status of Updates Report 71
Update summary view 72
Computer group view 73
Computer view 74
Printing the report 75
Status of Computers Report 76
Synchronization Results Report 77
Settings Summary Report 78
Running Compliance Status Reports 80
Securing Windows Server Update Services 81
Troubleshooting Windows Server Update Services 81
Verifying WSUS Server Settings 81
Settings for Update File Synchronization and Download 81
Registry settings 82
Configuration settings 83
IIS settings 85
Permissions 87
Disk 87
Registry 87
WSUS Server Administration Issues 88
Setup Issues 88
Check for required software and hardware 88
In some cases, setup might fail if you choose the WMSDE database 89
If the Server service is not running when you install WSUS, the WSUS installation fails 89
Upgrade Issues 89
When an upgrade fails, WSUS might be uninstalled 89
Uninstalling WSUS from SQL Server 89
Uninstalling might leave some WSUS configurations on computers running SQL server 90
Cannot access the WSUS console 90
...
k.turowskii