63956311-wsus

27
 ICT24H.NET  2010 TÌM HIU WINDOWS SERVER UPDATE SERVICE TRONG WINDOWS SERVER 2008 Managing Software Update ICT24H TEAM ICT VIETNAM COMMUNITY

Transcript of 63956311-wsus

  • 5/25/2018 63956311-wsus

    1/27

    I C T 2 4 H . N E T

    2010

    TM HIU WINDOWSSERVER UPDATE

    SERVICE TRONG

    WINDOWS SERVER2008

    Managing Software Update

    ICT24H TEAM

    ICT VIETNAM COMMUNITY

  • 5/25/2018 63956311-wsus

    2/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 1

    Cng nghcng ngy cng pht trin dn n my tnh cng ngy cng ddng qun l hn. Phn cngcng nh phn mm ng tin cy hn, cc hiu hnh ddng sdng hn v xut hin nhiu cccng cqun trtng ha hn (chng hn tng chng phn mnh cng). Tuy nhin, cc cngcv ng dng ngy mt pht trin v thay i, sa li , cp nht.iu ny ko theo sduy tr, cpnht thng xuyn cc ng dng.

    Hu qu xy ra l kh ln nu nh khng cp nht cc chng trnh, cc phn mm. Nu my tnhkhng c cp nht, ktn cng c thkhai thc cc lhng v xm nhp.

    gip bn c thcp nht tp trung ha, gim thiu thi gian qun l, Microsoft cung cp cng nghWindows Server Update Services (WSUS). WSUS cho php bn download, ph chun (sau khi bn kim nghim bn cp nht) v phn phi cc bn cp nht ny cho ton bmy tnh client trong hthng

    Nhng bi hc trong chng ny scho bn ci nhn tng qut vWSUS cng nh ln khoch trinkhai cp nht cho hthng.

    Chchnh Cu hnh Windows Server Update Services (WSUS).

    Nhng bi hc

    Bi hc 1: Tm hiu vWindows Server Update Services. Bi hc 2: Sdng Windows Server Update Services.

    Trc khi bt u

    hon thnh cc bi hc, bn nn thc hin cc cng vic sau:

    Ci t Windows Server 2008. Nng cp ln domain controller v join cc my tnh vo domain. Tn server l SERVER v c domain l ict24h.net

  • 5/25/2018 63956311-wsus

    3/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 2

    BI HC 1: TM HIU VWINDOWS SERVERUPDATE SERVICES

    Trc khi trin khai Windows Server Update Services (WSUS), bn phi hiu c cc thnh phn caclient v server c cu hnh nh thno trong cc mi trng khc nhau. Nu khng c mt khochcth, vic cp nht skhin bn tt nhiu thi gian, bng thng hoc c ththt bi trong vic ci t.Bi hc ny cung cp cho bn ci nhn tng qut v cc thng tin vWSUS.

    Nu bn quen thuc vi nhng phin bn WSUS trc, WSUS 3.0 Service Pack 1 cung cp cho bnkh nhiu chc nng. Hu ht qun l trn giao din, bn khng cn phi qun l trn trnh duyt Web.Thm vo , WSUS cho php bn linh hat trong vic trin khai cc bn cp nht n cc my tnh.

    Sau bi hc ny, bn s: Hiu c mc ch ca WSUS. Cu hnh WSUS client.

    Thit kcu trc WSUS p ng nhu cu cho cdoanh nghip nhcng nh quy m ln. Lit k cc client v server cn thit cho WSUS. Tm hiu cc cng cxc nh trng thi cp nht ca cc my tnh client trong mng.

    Thi lng cho bi hc: 15 pht.

    Tng quan vWSUS

    Windows Server Update Services (WSUS) c pht trin t dch vMicrosoft Update mt dch vtrong Windows cho php tng download cc bn cp nht. Bn c thchy WSUS trn mng ni bv sdng n phn phi cc bn cp nht cho cc my tnh, bn c thsdng bng thng hiu quv kim sot cc bn cp nht trn cc my tnh client.

    Khi chy WSUS, n kt ni n website Microsoft Update, download cc thng tin vcc bn cp nhtmi nht, sau thm chng vo danh sch cp nht qun trvin ph chun. Sau khi qun trvinchp nhn v thit lp u tin cho cc bn cp nht ny, WSUS stng ci t chng trn cc mytnh chy Windows. Dch vWindows Update trong my tnh clien skim tra WSUS server v tngdownload cc bn cp nht tserver v, cui cng l ci t cc bn cp nht ny. Bn c ththit lpWSUS cho ng thi nhiu server v c thmrng tdoanh nghip nhcho n doanh nghip ln.

    Windows Update trn client

    Windows Update l mt thnh phn thuc WSUS trn client c chc nng nhn cc phn mm, cc bn

    ci t tWSUS server, xc nhn bng chk tin thoc thut ton Secure Hash Algorithm (SHA1),thng bo n ngi dng vcc bn cp nht v ci t n (nu c cu hnh). Windows Update cit cc bn cp nht thi gian m bn thit lp v c thtng khi ng li my tnh nu cn thit.Nu thi im hin ti my tnh tt, cc bn cp nht c thci t khi my tnh c bt.

    Ch : WSUS client cc phin bn Windows trcTrong Windows XP v Windows 2000, thnh phn ca WSUS trn client c tn gi l AutomaticUpdates.

  • 5/25/2018 63956311-wsus

    4/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 3

    V cc thit lp Windows Update c p dng cho tt ccc my tnh trong doanh nghip nn sdngGroup Policy thit lp l phng php tt nht. Thit lp Windows Update ti ComputerConfiguration> Administrative Templates> Windows Components> Windows Update. Ccthit lp Windows Update trong Group Policy gm :

    Do not display Install Update and Shut Down option in Shut Down Windows dialogbox: cho php bn qun l ty chn Install Updates v Shut Down hin thhp thoi ShutDown ca Windows.

    Do not adjust option to Install Updates and Shut Down in Shut Down Windowsdialog box: thay i ty chn shut down mc nh Install Updates and Shut Down khi WindowsUpdate chun bci t mt bn cp nht.

    Enabling Windows Update Power Management to automatically wake up the systemto install scheduled updates: nu nhn vin trong cng ty ca bn thng c thi quen shutdown my tnh ca hkhi ri khi vn phng. Bt thit lp ny cu hnh cc my tnh htrtng khi ng v ci t cc bn cp nht mt thi gian c ln lch. Cc my tnh skhng c bt nu khng c bn cp nht no ci t. Nu my tnh chy vi nng lngca pin, my tnh stng trvtrng thi sleep sau 2 pht.

    Configure Automatic Updates: xc nh nhng my tnh client sc nhn cc bn cpnht bo mt v cc bn download quan trng khc tdch vWindows Update. Bn cng cthsdng thit lp ny cu hnh nhc nhngi dng ci t cc bn cp nht hoc tng ci t thng qua Windows Update.

    Specify intranet Microsoft update service location: xc nh WSUS server. Automatic Updates detection frequency: thit lp thi gian Windows Update kim tra

    nhng bn cp nht mi. Thi gian mc nh l t17 n 22 gi. Allow non-administrators to receive update notifications: thit lp cho tt cngi dng

    hoc chc qun trvin nhn c thng bo cp nht.

  • 5/25/2018 63956311-wsus

    5/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 4

    Turn on Software Notification: thit lp cho php bn kim sot ngi dng c th nhnc thng bo vcc tnh nng ca phn mm tMicrosoft Update.

    Allow Automatic Updates immediate installation: thit lp Automatic Update tng cit cc bn cp nhp m khng cn phi khi ng li my tnh.

    Turn on recommended updates via Automatic Updates: xc nh cc my tnh client cit cnhng bn cp nht cn thit v bn v li, bao gm ccp nht cc driver.

    No auto-restart with logged on users or scheduled automatic updates installations:thit lp lch ci t, Windows Update chngi dng khi ng my tnh khi hng nhp vo,kctng khi ng.

    Re-prompt for restart with scheduled installations: thit lp nhc nhngi dng khing li my tnh trong khong thi gian no . Ty thuc vo mt sthit lp, thit lp ny cthkhin ngi dng ngng vic tkhi ng. Tuy nhin, Windows Update stng yu cuhkhi ng da trn thit lp ny.

    Delay Restart for scheduled installations: thit lp thi gian Windows Update chtrc khitng khi ng li.

    Reschedule Automatic Updates scheduled installations: thit lp sln chca WindowsUpdate trc khi tip tc theo lch ci t.

    Enable client-side targeting: thit lp cc nhm hoc tn my tnh sc nhn cc bn cpnht tdch vMicrosoft Update.

    Allow signed updates from an intranet Microsoft update service location: thit lp chophp ci t cc bn cp nht sdng chng thc.

    Cu trc WSUSWSUS c thmrng tdoanh nghip nhcho n doanh nghip ln a quc gia. Trn thc t, bncn sdng mi WSUS cho mt chi nhnh vn phng vi hn 10 my tnh v mt WSUS c lp cho miphng IT kim sot cp nht.

    Bn cng khng cn thit phi c nhng WSUS server dphng, tuy nhin bn cng cn sao lu c sdliu WSUS c thkhi phc khi gp ri ro.

    Doanh nghip vi mt vn phng duy nht

    Nu doanh nghip chc mt vn phng, bn c thsdng mt WSUS server duy nht m khng cnquan tm n smy tnh client trong doanh nghip l bao nhiu.

    Doanh nghip vi nhiu vn phng

    Nu bn sdng mt WSUS server duy nht htrcho tt cclient cc vn phng, mi client scn phi download cc bn cp nht thng qua kt ni WAN. Vic download c thtn khong vi trmMB. V kt ni WAN slm ng truyn chm hn so vi kt ni mng LAN, download cc bn cp nhtln thng qua WAN snh hng khng nhn thi gian v ng truyn. Nu bng thng ca bnthp, cc client c thskhng nhn c cc bn cp nht.

    cho php cc client nhn cc bn cp nht trong mng LAN, cu hnh mt WSUS server cho mi chinhnh vn phng v cu hnh WSUS server nhn cc bn cp nht theo mt cu trc phn cp t

  • 5/25/2018 63956311-wsus

    6/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 5

    nhng server chnh. V vi cch lm theo cu trc phn cp sem li cho bn shiu qutrong vickt ni thng qua WAN.

    Hthng WSUS server ton cu.

  • 5/25/2018 63956311-wsus

    7/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 6

    Cu trc phn cp WSUS server

    Trong cu trc trn, chc server WSUS ti Boston c thnhn cc bn cp nht tMicrosoft. Tt ccng vic cp nht c vn hnh bi server WSUS Boston. Cc server pha di snhn thng tincp nht tnhng server trn n, chng hn vi s trn, server Los Angeles (downstream server)

    s nhn cc bn cp nht t server Boston (upstream server). Tng t, server Argentina(downstream server) snhn cc bn cp nht tserver Costa Rica (upstream server).

    cung cp cc bn cp nht cho vn phng nhkhng c WSUS server, bn cn phi cu hnh ccmy tnh client download bn cp nht tWSUS server gn nht. Nu vn phng ca bn c ngtruyn Internet nhanh, bn c thcn nhc vic c hay khng nn trin khai bn sao vWSUS ni blu trcc bn cp nht, bn c thcho cc client nhn cc bn cp nht trc tip tMicrosoft.

    Cc iu kin cn thit trin khai WSUS

    Khi ln khoch trin khai WSUS, bn cn c cc iu kin sau:

    WSUS server phi c kni Internet (truy cp vo website Microsoft Update). Cc downstream server phi thit lp kt ni vi cc upstream server v s dng giao thc

    HTTP (TCP port 80) hoc sdng SSL (TCP port 443). Cc my tnh client phi kt ni mng cc b(HTTP hoc HTTPS) Cc my tnh client phi l mt trong cc hiu hnh sau:

    o Windows 2000 Service Pack 3 hoc Service Pack 4o Windows XP Professionalo Windows Vista

  • 5/25/2018 63956311-wsus

    8/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 7

    o Windows Server 2003o Windows Server 2008

    Nu my tnh client t kt ni trong mng trong khong thi gian no (v d nu mtchuyn gia no nghphp hoc mt nhn vin lm vic ti nh trong mt thng v khng ktni n mng VPN), client cng skhng thdownload cc bn cp nht. Bn cn cu hnh cc

    my tnh tng ci t cc bn cp nht twebsite Microsoft hoc sdng NAP v yu cucc my tnh phi cp nht trc khi kt ni n mng cc b.

    Ln khoch ci t WSUS

    Trong sut qu trnh ci t WSUS, bn cn lu mt svn sau:

    Cp nht source: WSUS c thnhn cc bn cp nht trc tip ttrang web Microsoft Updatehoc tmt WSUS server khc. Bn nn cn nhc v chn phng php gim bng thng.Nu 2 WSUS server kt ni trong LAN, c 1 trong 2 server nhn bn cp nht tMicrosoftUpdate v server cn li c thnhn bn cp nht tserver thnht. Nu bn sdng WSUScho 3 chi nhnh vn phng v kt ni VPN thng qua Internet, y l cch hiu quchi mi vnphng khi download cc bn cp nht trc tip tMicrosoftv download cc bn cp nht cnphi c kt ni Internet. Cu trc WSUS ca bn phi c s sp xp hp l, cc downstreamserver snhn cc bn cp nht tcc upstream server.

    Ph chun v cu hnh nhn bn: nu bn s dng nhiu WSUS server v cu hnh ccserver nhn cc bn cp nht tmt WSUS server no , bn c thchn vic ng bccph chun, thit lp, my tnh v cc nhm trong cu trc phn cp WSUS server. Nu bn cuhnh mt server ng vai tr l mt bn sao, bn khng cn ph chun cc bn cp nht ttrnWSUS server.

    Cp nht lu tr: WSUS c th sao chp bn cp nht t Microsoft v lu tr chng voserver hoc lu trvo chnh cc my tnh client download cc bn cp nht tMicrosoft. Nubn chn lu trcc bn cp nht trong server, WSUS server cn ti thiu 6 GB dung lngtrng trong cng (mc d con sthc tc thln hn, ty thuc vo cc bn cp nht tMicrosoft cng nh cc gi ngn ngcn thit). Vic lu trcc bn cp nht trong server cthc xem l mt cch gim thiu bng thng Internet v cc client nhn bn cp nht thngqua LAN.

    C sd liu: mc nh WSUS lu trdanh sch cc bn cp nht trong Windows InternalDatabase. Bn cn ti thiu 3 GB dung lng trng trong cng lu trWindows InternalDatabase mc d thc t khong 1 GB. Bn c th s dng server lu trc s d liu(chng hn nh Microsoft SQL Server).

    Ch : Mc nh, ng dn c sdliu trong WSUSC:\WSUS\UpdateServicesDbFiles\SUSDB.mdf

    Website: trin khai WSUS cn phi c IIS v cc my tnh client nhn cc bn cp nht bngcch sdng giao thc HTTP hoc HTTPS. Nu bn khng sdng IIS trn WSUS server tora website mi v mt mc ch no , bn c thsdng website mc nh trong IIS.

  • 5/25/2018 63956311-wsus

    9/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 8

    Ngn ng: Cc bn cp nht c thc nhng gi ngn ngring i km. gim thiu dunglng cng sdng, bn nn chn download chmt gi ngn ngcn thit cc my tnhclient c thtruy cp n WSUS server ddng. Bn khng nn chn tt ccc ngn ngvtng dung lng v bng thng cn thit srt cao.

    Sn phm: Microsoft Update cung cp cho bn mt th vin sn phm a dng khng chl cchiu hnh Windows. Chng hn l cc bn cp nht Exchange Server, ISA Server, SQL Serverv Office. Bn chnn chn nhng ng dng v hiu hnh cn sdng trong doanh nghipgim thiu dung lng cng.

    Kim nghim vic cp nht

    Sau khi trin khai WSUS, mt smy tnh client c thskhng thcp nht c v vic ci t ccbn cp nht tht bi, nguyn nhn c thdo cc my tnh client ny cha c cu hnh, khng thucActive Directory hoc t kt ni trong mt thi gian di. Bn c thsdng mt sk thut xc nhcc trng hp trn:

    Giao din Windows Update: bn c thsdng Computer and Report trong giao din ny xc nh cc my tnh client cha c ci t cc bn cp nht.

    Microsoft System Center Configuration Manager 2007 (SCCM 2007): SCCM 2007 lphin bn mi nht ca Microsoft trong h thng cc sn phm qun tr h thng tp trung.SCCM 2007 cung cp cho bn thng tin chi tit vcc bn cp nht v cc ng dng trn ccmy tnh. SCCM 2007 l sn phm tt nht cho doanh nghip. Bn c thxem thm vSCCMti:http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspx

    Microsoft Baseline Security Analyzer (MBSA):MBSA tng kim tra v xc nh cc vnli vcp nht v cc lhng bo mt trong cu hnh. MBSA squt ton mng v cho phpbn c thxem c nhng my tnh no cha nm trong vng kim sot. Bn c thdownloadMBSA ti :http://www.microsoft.com/mbsa/.

    Network Access Protection (NAP): bn c thsdng NAP v kt hp vi cng cxc thctrng thi ca my tnh (Windows System Health Validator, cng cny c thxc nhn cc mytnh no va ci t cc bn cp nht.

    Tng quan bi hc

    WSUS cho php bn lu trv phn phi cc bn cp nht tMicrosoft thng qua mng, gipbn gim thiu c bng thng Internet. Thm vo , WSUS cn cho bn kim sot mi khicp nht v trin khai trn cc my tnh client.

    Dch vWindows Update trn client nhn cc bn cp nht tWSUS server. Tuy thuc vo cchcu hnh Windows Update m bn c ththng bo n ngi dng nhng bn cp nht no c ci t hoc tng ci t m khng cn tng tc bi ngi dng. Bn c thcu hnhWindows Update vi Group Policy.

    http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspxhttp://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspxhttp://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspxhttp://www.microsoft.com/mbsa/http://www.microsoft.com/mbsa/http://www.microsoft.com/mbsa/http://www.microsoft.com/mbsa/http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspx
  • 5/25/2018 63956311-wsus

    10/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 9

    Bn c thsdng chmt WSUS server duy nht. Ngoi ra, trin khai mt WSUS server c lpcho mi vn phng gip bn gim thiu c bng thng Internet. Thm vo , WSUS serverc cu hnh nhn bn hoc c thtng. Vi cc trng hp ny, bn cn thit kcu trcdownstream v upstream nh gii thiu phn Cu trc WSUS.

    Mt snguyn nhn c thkhin cc my tnh client khng thci t cc bn cp nht. kim tra, xc nh cc client , bn c thsdng giao din WSUS, SCCM 2007, MBSA hocNAP.

    Trc nghim

    1. Bn l k s hthng cho doanh nghip cung cp cc sn phm video. Doanh nghip ca bn c6 vn phng v mt phng IT qun l tt c1200 my tnh client. Mi vn phng c 200 mytnh. M hnh WAN ca bn sdng cu trc hub-and-spoke, vi mi vn phng c kt nitrc tip n trschnh. Bn c ththit kcu trc WSUS nh thno?

    A. Trin khai mt WSUS server cho mi vn phng. Cu hnh cc WSUS server ny cqun l bi mi vn phng v c htrtphng IT.

    B. Trin khai mt WSUS server trschnh. Cu hnh tt ccc my tnh client nhn ccbn cp nht trc tip tMicrosoft.

    C. Trin khai mt WSUS server trschnh. Cu hnh tt ccc my tnh client nhn ccbn cp nht trc tip tWSUS server.

    D. Trin khai mt WSUS server cho mi vn phng. Cu hnh mt WSUS server l bn saoca WSUS server trschnh.

    2. Bn l k s hthng v cng vic ca bn l cu hnh v qun l cp nht cho doanh nghip.Bn cn sdng Group Policy cu hnh cc client download cc bn cp nht v ci t chngtng m khng cn nhc nhngi dng. Thit lp no trong Group Policy gip bn lm iuny?

    A. Allow automatic update immediate installation.B. Configure Automatic Updates.C. No auto-restart for scheduled automatic updates.D. Enable client-side targeting.

    3. Phin bn no m bn c thsdng trin khai cc my tnh client download cc bn cpnht tWSUS.

    A. Windows 95B. Windows 98C. Windows 2000 ProfessionalD. Windows XP Professional

  • 5/25/2018 63956311-wsus

    11/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 10

    BI HC 2: SDNG WINDOWS SERVERUPDATE SERVICES

    Vi Windows Server 2008, bn c thci t WSUS bng cch sdng Server Manager v qun l ntrong giao din Update Services. Phin bn mi WSUS chy trn Windows Server 2008 cung cp cho bnnhiu tnh nng cng nh giao din ngi dng thn thin.

    Sau bi hc, bn s: Ci t WSUS trn Windows Server 2008. Cu hnh cc nhm my tnh, ph chun bn cp nht v xem cc bo co WSUS. Xl sckhi cho cclient v server khi gp vn vci t cc bn cp nht.

    Thi lng bi hc: 40 pht

    Ci t Windows Server Update Servers

    Bn c thdownload WSUS min ph tihttp://www.microsoft.com/wsus.

    Sau khi ci t bn cn ng bcp nht tMicrosoft Update. Thc hin cc bc sau:

    1. Click Start>Administrative Tools> Microsoft Windows Server Update Services.2. Chn server v click vo lin kt Synchronize Now.

    Qu trnh ng bdin ra vi pht (cng c thnhiu hn 1 gi). Sau khi ng b, bn c thbt uqun l WSUS.

    Cu hnh Windows Server Update ServicesSau khi ci t WSUS v thc hin ng bha, bn bt u thc hin cu hnh WSUS:

    1. Mbng cu hnh WSUS.2. Cu hnh cc nhm my tnh c phn phi cc bn cp nht nhng thi im khc nhau.3. Cu hnh cc my tnh client nhn cc bn cp nht tWSUS server.4. Sau khi kim tra cp nht, ph chun hoc hy bcc cp nht.5. Xem cc bng bo co xc nhn cc bn cp nht c phn phi thnh cng v xc nh

    cc vn li.

    http://www.microsoft.com/wsushttp://www.microsoft.com/wsushttp://www.microsoft.com/wsushttp://www.microsoft.com/wsus
  • 5/25/2018 63956311-wsus

    12/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 11

    Cu hnh WSUS Option

    Bn c thcu hnh cc ty chn theo tng mc sau:

    Update Source and Proxy Server: cu hnh cc upstream server hoc cu hnh WSUS servernhn cc bn cp nht tMicrosoft. Ti y, bn c ththay i cc thit lp nu khng cn sali cu trc WSUS.

    Products and Classifications: chn cc bn cp nht Microsoft m bn mun WSUSdownload. Bn nn chn thit lp ny khi bt u h trcho mt sn phm mi tMicrosofthoc ngng htri vi mt sn phm no (chng hn l mt phin bn Microsoft Officec)

    Update Files and Languages: chn ni lu trcc bn cp nht v gi ngn ngca bn cpnht.

    Synchronization Schedule: cu hnh tng ng bcc bn cp nht tnhng upstreamserver.

  • 5/25/2018 63956311-wsus

    13/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 12

    Automatic Approval: cu hnh tng ph chun cc bn cp nht. V d, bn c thcu hnhnhng bn cp nht v li bo mt c tng ph chun v ci t. Bn chnn chn thitlp ny nu nh bn quyt nh bqua bc kim nghim cp nht.

    Computer: chn nhng my tnh tnhm no thng qua giao din Update Services hocGroup Policy.

    Server Cleanup Wizard: WSUS stch ly cc bn cp nht khng cn cn thit v cc mytnh khng cn hot ng trong thi gian ngoi gilm vic. Trong thit lp ny, bn c thxabnhng bn cp nht qu hn hoc khng cn thit vi mc ch dn dp cng cng nhgim dung lng c sdliu WSUS.

    Reporting Rollup: mc nh, downstream server sgi cc bn bo co thng tin ln upstreamserver. Bn c thsdng thit lp ny cu hnh cho tng server c thqun l c ccbn bo co dliu.

    E-mail Notifications: WSUS c thgi e-mail mi khi nhng bn cp nht mi c ng bha, nhng thng tin qun trph chun, kim nghim cc bn cp nht ny. Thm vo ,sdng thit lp ny gi cc bn bo co trng thi cp nht hng ngy hoc hng tun.

    Microsoft Update Improvement Program: mc nh bv hiu ha, bn c thbt thit lpny ln gi cho Microsoft nhng thng tin chi tit vqu trnh cp nht trong doanh nghipca bn, bao gm slng my tnh hon thnh v cha hon thnh cu t i vi mi bncp nht. Microsoft ssdng nhng thng tin ny nng cao v ci thin quy trnh cp nht.

    Personalization: trn trang ny bn c th cu hin cho php hin th cc d liu tdownstream server. Bn c thchn cc thnh phn no c hin thtrong danh sch To do

    lisy that appears khi bn click chn vo WSUS server trn giao din Update Services.

    WSUS Server Configuration Wizard: cho php bn cu hnh li WSUS.Cu hnh cc nhm my tnh

    Trong a scc mi trng, bn skhng thtrin khai tt ccc bn cp nht n tt ccc clienttrong mt ln. cho bn kim sot c khnng nhn cc bn cp nht ca my tnh, WSUS 3.0 chophp bn cu hnh cc nhm my tnh v trin khai cp nht n mt hoc nhiu nhm. Bn c thtothm cc nhm phn loi theo nhn hiu my tnh hoc cc phng ban trong doanh nghip. Bn c thto cc nhm theo cc v p dng cc quy trnh cp nht, c thnh sau:

    Kim tra thnghim: trin khai cp nht trn m hnh lab thnghim. Vic ny cho phpbn xc nh c khnng lm vic n nh hay khng. Sau bn c thkim nghim trnmt my tnh sau khi ci t cc bn cp nht.

    Th im: sau khi kim nghim, bn s trin khai cp nht n mt nhm th im no .Nhm ny c thl phng ban IT hoc mt nhm phng ban khc c am hiu vmy tnh. Vicny gip bn thnghim trn mt nhm my tnh v xem xt khnng lm vic.

  • 5/25/2018 63956311-wsus

    14/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 13

    Trin khai tht: nu trin khai th im sun s, khng gp bt cvn no sau 1 tun thbn c th trin khai n tt ccc my tnh lm vic trong cng ty. iu ny gip bn gimthiu ri ro.

    Bn c thcu hnh cc nhm my tnh theo 1 trong 2 hng sau:

    Server-side targeting: thch hp i vi doanh nghip nh, bn c ththm cc my tnh vonhm bng cch cu hnh trn giao din Update Services.

    Client-side targeting: thch hp i vi doanh nghip ln, bn sdng Group Policy cuhnh cc my tnh no thuc nhm cc my tnh. Cc my tnh c tng avo ngnhm khi chng kt ni n WSUS server.

    Cho d bn trin khai bng cch no i chng na th vic u tin bn cn lm l to nhm my tnh.Mc nh c mt nhm my tnh duy nht l:All Computer. Nhm ny bao gm tt ccc my tnh. to thm nhm, thc hin cc bc sau:

    1. Click Start>Administrative Tools> Microsoft Windows Server Update Services.2.

    Click Computer. R-click voAll Computersv chnAdd computer group.3. Nhp tn nhm v clickAdd.

    4. Thc hin li bc 2 v 3 nu bn mun thm cc nhm khc.Server-side targeting: thm cc my tnh vo mt nhm. Thc hin cc bc sau:

    1. Trn giao din Update Services, click Computer > All Computer v chn Unassignedcomputers. Sau , r-click vo my tnh bn mun a vo nhm (bn c thchn nhiu mytnh bng cch click v giphm Ctrl) v chn Change Membership.

    2. Ti hp thoi Set computer group membership, nh du chn vo nhm m bn mun amy tnh vo. Click OK.

    Client-side targeting: bn c thsdng Group Policy object (GPO) thm cc my tnh vo ccnhm khi. Trc tin, bn cn thit lp cho php sdng client-side targeting. Thc hin cc bc sau:

    1. Click Start>Administrative Tools> Microsoft Windows Server Updates Services.2. Click Options> Computers.3. Ti hp thoi Computer, chn Use Group Policy or Registry Settings on Computers. Sau

    click OK.

    Tip theo, cu hnh GPO di chuyn cc my tnh n cc nhm. Bn cn to mt GPO c lp cho minhm my tnh. Sau cu hnh cho php p dng i vi nhng my tnh thch hp.

    1. Ti Group Policy Management Editor, mGPO.2. Click Computer Configuration> Administrative Templates> Windows Components >

    Windows Update.3. Double-click vo chnh sch Enable Client-side targeting.4. Hp thoi hin th, chn Enabled. Sau nhp tn nhm my tnh m bn mun p dng v

    click OK. Sau khi cc client c p dng Group Policy, khi ng li Windows Update Services.

  • 5/25/2018 63956311-wsus

    15/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 14

    Kim tra nhanh1. Giao thc no cho php dch vWindows Update ca client c thnhn c cc bn cp nht

    tserver WSUS?2. Bn nn sdng cch trin khai client-side targeting hay server-site targeting cho doanh nghip

    lnTrli nhanh

    1. HTTP.2. Doanh ngip ln th nn sdng client-side targeting

    Cu hnh cc my tnh client

    bi hc trc, bn c tm hiu vskhc nhau ca cc chnh sch Group Policy trong vic cuhnh cc my tnh client nhn cc bn cp nht. Vic c nhiu thao tc cu hnh skhin bn tn thigian, phn ny bn sc hng dn cu hnh gim thiu cc bc cu hnh khng cn thit nhmmc ch cc client c thdownload cc bn cp nht tWSUS server.

    1. M GPO m bn mun s dng thc hin cu hnh. Trong Group Policy ManagementEditor, click Computer Configuration > Administrative Templates > WindowsComponents> Windows Update.

    2. Double-click vo Specify intranet Microsoft Update service location.3. Chn Enabled. Trn ctrng Set the intranet update services for detecting updatesv

    Set the intranet statistics server, nhp tn ca WSUS server, chng hnhttp://SERVER.ClickOK.

    http://server/http://server/http://server/http://server/
  • 5/25/2018 63956311-wsus

    16/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 15

    4. Double-click vo chnh sch Configure Automatic Updates.5. Chn Enabled. Cu hnh thit lp tng cp nht. Ti Scheduled install day bn c th

    chn tt ccc ngy trong tun hoc mt ngy cthtrong tun p dng cc chnh sch. Thitlp thi gian thc hin chnh sch ti danh sch Scheduled install time.

    Notify for download and notify for install: thng bo download v ci t n ngidng.

    Auto download and notify for install: tng download v thng bo ci t nngi dng.

    Auto download and schedule the install: tng download v thit lp thi gian cit.

    Allow local admin to choose setting: cho php ngi dng c th t chn nhngthit lp ny.

    Vi nhng thit lp trn, cc my tnh client snhn c cc bn cp nht tWSUS server v tngci t.

  • 5/25/2018 63956311-wsus

    17/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 16

    Ph chun cc bn cp nht

    Mc nh, tt ccc bn cp nht u cha c ph chun. Bn cn phi cu hnh ph chun cc bncp nht, thc hin cc bc sau:

    1. Click Start>Administrative Tools> Microsoft Windows Server Update Services.2. Click vo WSUS server. Sau click Update, la chn cc ty chn sau:

    All updates: hin thtt cbn cp nht. Vic lm ny thun li cho vic ph chuncc bn cp nht.

    Critical updates: chhin thnhng bn cp nht v li nghim trng, nhng bn v liny cn c u tin hng u trong vic cp nht m bo an ton hthng cngnh my tnh ngi dng.

    Security updates: chhin thnhng cp nht lin quan n bo mt. WSUS updates: hin thnhng bn cp nht lin quan n quy trnh xl cp nht.

    3. Ti danh schAppoval, chn Unapproved. Bn c th sdng danh sch xem cc bn cpnht c ph chun.

    4. Tdanh sch Status, chnAny. Click Refreshlm mi hin thcc bn cp nht.sp xp cc bn cp nht theo thtu tin vngy thng, r-click vo mt ct v chn ReleaseDate. Sau , click v ct Release Datesp xp li.

    5. Chn nhng bn cp nht bn mun ph chun, Bn c thchn nhiu bn cp nht bng cchclick v giphm Ctrl. Ngoi ra bn c thchn nhiu bn cp nht mt lc bng cch clickchut v giphm shift. Nhn Ctrl +Achn tt ccc bn cp nht. R-click vo bn cp nht chn v chn Approve (vi mc ch phn phi cc bn cp nht ny n client vo thiim cc client kim tra cp nht) hoc chn Decline(khng cho phn phi bn cp nht ny).

    6. Nu hin thhp thoiApprove Updates, chn nhm my tnh bn mun p dng cp nht vchnApproved for install. Click OKnu bn hon tt qu trnh ph chun

    7. thit lp thi hn cp nht, bn c thr-click vo nhm my tnh v chn Deadline, sau chn thi hn cp nht.

    8. Click OK.Tchi cc bn cp nht

    Sau khi ph chun cc bn cp nht cn thit, bn c thtchi ph chun nu bn khng mun ci tcc bn cp nht ny trn my tnh. Vic tchi cc bn cp nht khng nh hng g n cc my tnhclient.

    1. Ti giao din Update Services, r-click vo bn cp nht bn mun tchi v chn Decline.2. Ti hp thoi Decline update, clickYes.

    xem li cc bn cp nht b t chi, ti danh sch Approval, chn Declined. Sau clickRefresh.

  • 5/25/2018 63956311-wsus

    18/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 17

    Xem cc bng bo co

    Bn c th xem chi tit cc bn cp nht, my tnh hoc s ng b. Click Report trn giao dinUpdate Services.

    WSUS cung cp cho bn cc thng tin sau:

    Update Status Summary: hin thcc thng tin vmi bn cp nht m bn chn, bao gmm ty vbn cp nht (c cung cp bi Microsoft), cc bn cp nht c ph chuntrn nhm my tnh, slng my tnh ci t cc bn cp nht.

    Update Detailed Status: ngoi nhng thng tin hin thUpdate Status Summary, mcny hin thtrng thi ca tt cmy tnh cho mi cp nht theo tng trang, cho php bn xcnh chnh sch my tnh ny ci t cp nht. y l nhng thng tin hu ch gip bn cthxc nh nhng lhng bo mt cng nh cc my tnh dnh lhng bo mt .

    Update Tabular Status: hin th nhng d liu ca c bng Update Status Summary vUpdate Detailed Statusv xut ra bo co dng bng tnh.

    Computer Status Summary: hin thnhng thng tin cp nht cho mi my tnh. Computer Detailed Status: ngoi nhng thng tin Computer Status Summary, mc ny

    hin thnhng my tnh no ci t nhng bng cp nht no. Computer Tabular Status: cung cp cho bn thng tin ca c bng Computer Status

    Summaryv Computer Detailed Statusv xut ra bo co dng bng tnh. Syncronization Results: hin thkt ququ trnh ng bha mi nht.

    Khi bn mmt bng co co, bn c thcu hnh lc cc thng tin hin thtrong bng bo co .Chng hn nh nhng bng bo co m bn mun hin ththeo tn sn phm

  • 5/25/2018 63956311-wsus

    19/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 18

    Qun l ng bha

    Ti mc Synchronizationsshin thdanh sch thi gian WSUS nhn danh sch cc bn cp nht tupstream server. Bn c thr-click vo mt ng bbt k v chn Synchronizationxem thng tinchi tit.

    Khc phc sctrong qu trnh cp nhtThnh thong, bn sc thm kinh nghim trong vic khc phc scci t nu nh gp phi li trongvic cp nht. Bn c thsdng WSUS xc nh cc client no c ci t cc bn cp nhthoc cha ci t.

    Khc phc scWSUS

    WSUS to ra 3 bn ghi:

    Application event log: bn hi ny lu trcc skin lin quan n vn ng bha, litrong Update Services, li c sdliu WSUS lin quan n source ci t WSUS. Hu ht ccskin u cung cp thng tin chi tit vnguyn nhn cng nh hng dn khc phc sc.Thm vo , bn c thtm kim li ti tranghttp://support.microsoft.com.

    C:\Program Files\Update Services\LogFiles\Change.txt: mt tp tin c nh dng *.txtlu trcc thng tin vci t cc bn cp nht, ng bv sthay i cu hnh WSUS. Ccthng tin ny khng chi tit nhng cng c thcho bn bit nhng thng tin quan trng chnghn nu qun trvin thay i mt thit lp no , tp tin sghi li dng chWSUSconfoguration has been changed.

    C:\Program Files\Update Services\LogFiles\SoftwareDistribution.txt: hin ththng tinchi tit v c htrtMicrosoft.

    Khc phc scWindows Update trn client

    xc nh cc vn l nguyn nhn khi cp nht tht bi, thc hin cc bc sau:

    1. Mtp tin

    %Systemroot%\WindowsUpdate.log cc thng bo li. Bn c thxem hng dnc WindowsUpdate.log ti a chhttp://support.microsoft.com/kb/902093/

    2. Xc nhn client no kt ni n WSUS server bng cch m trnh duyt Web v g a ch

    http:///iuident.cab. Nu khung nhc nh hin ra thng bo bn cndownload tp tin, c ngha l client kt ni n WSUS server.

    3. Nu bn s dng Group Policy cu hnh Windows Update, bn c th s dng cng cResultant set of Policy (RSOP) xc nhn cc cu hnh. Bn vo Runvo g Rsop.mscmRSOP. Trong RSOP, click Computer Configuraion>Administrative Templates> WindowsComponents > Windows Updatexem v xc nhn cc thit lp.

    Nu bn pht hin ra mt vn v sau cu hnh li khc phc sc, bn cn khi ng lidch v Windows Update trn my tnh client thay i c hiu lc. Bn c th s dng cng cServices (services.msc) hoc sdng lnh sau khi ng li dch vWindows Update.

    http://support.microsoft.com/http://support.microsoft.com/http://support.microsoft.com/http://support.microsoft.com/kb/902093/http://support.microsoft.com/kb/902093/http://support.microsoft.com/kb/902093/http://support.microsoft.com/kb/902093/http://support.microsoft.com/
  • 5/25/2018 63956311-wsus

    20/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 19

    net stop wuauserv

    net start wuauserv

    Trong khong 610 pht, Windows Update sgi thng tin ln server.

    Windows Update bt u truy vn n WSUS server, sdng lnh sau:

    wuauclt /a

    Xa bcc bn cp nht

    Thnh thong bn vn gp li cp nht, chng hn sau khi bn cp nht ln phin bn mi th ng dngkhng cn tng thch, bn c thxa bcp nht , thc hin cc bc sau:

    1. Click Start> Control Panel.2. Di Programs, click Uninstall a program.3. Di Tasks, clickView installedupdates.4. Chn bn cp nht bn mun xa b. Click Uninstall.5. Khi ng li nu cn thit.

  • 5/25/2018 63956311-wsus

    21/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 20

    THC HNH: TRIN KHAI WSUS

    Trong bi thc hnh, bn cu hnh WSUS trn server, sdng Group Policy cu hnh cc my tnhclient, sau ph chun v phn phi cc bn cp nht.

    Bi thc hnh 1: ci t WSUS v thc hin ng bhaTrong bi thc hnh ny, bn sci t WSUS. gim thiu dung lng lu tr, bn scu hnh WSUSserver kt ni trc tip n client nhn cc bn cp nht trc tip tMicrsoft.

    1. Download WSUS ti a chhttp://www.microsoft.com/wsus/2. Ti trang License Agreement, click I accept the terms of the License agreementchp

    nhn cc iu khon ci t v sdng. Click Next.3. Ti trang Required Component to use administration UI, thng bo cho bn cn ci t

    ng dng Microsoft Report Viewer 2008 Redistributable xem cc bng bo co trcquan. Click Next.

    4. Ti trang Select Update Source, nh du chn Store updates locally lu trcc bncp nht trn server. Click Browsev chn ng dn cho WSUS. Click Next.

    5. Trn trang Database Options, nh du chn vo Install Windows Internal Database onthis computer. Click Next.

    http://www.microsoft.com/wsus/http://www.microsoft.com/wsus/http://www.microsoft.com/wsus/http://www.microsoft.com/wsus/
  • 5/25/2018 63956311-wsus

    22/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 21

    6. Ti trang Web Site Selection nh du chn vo Create a Windows Server UpdateServices 3.0 SP2 Web site sdng mt website khc website mc nh trong IIS. ClickNext.

    7. Ti trang Ready to Install Windows Server Update Servicesxem li cc thng tin cui cngtrc khi ci t. Click Nexttin hnh ci t.

    8. Click Finishhon tt.9. i khong 2 pht, trang Before You Beginhin th, click Nexttin hnh cu hnh WSUS

    server.

    10.Ti trang Join the Microsoft Update Improvement Program, nh du chnYes, I wouldlike to join the Microsoft Update Improvement Programc htrtMicrosoft trongqu trnh cp nht. Click Next.

    11.Ti trang Choose Upstream Server, nh du chn vo Synchronize from MicrosoftUpdate nu bn mun ng bn Microsoft Update. Nu bn mun ng bn mt WSUSkhc nh du chn Synchronize from another Windows Server Update Services server,sau nhp tn server mun ng b v port. Ngoi ra, click vo Use SSL whensynchronizing update informationnu bn mun sdng chng thc SSL trong qu trnhng b. nh du chn This is a replica of the upstream servernu bn mun server hinti ng vai tr upstream server. Click Next.

    12.Ti trang Specify Proxy Server, nu bn mun sdng proxy server nh du chn Use aproxy server when synchronizing. Click Next.

  • 5/25/2018 63956311-wsus

    23/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 22

    13.Ti trang Connect to Upstream Server, click Start Connectingbt u kt ni theo sla chn m bn chn trang Choose Upstream Server. i qu trnh kt ni hon tt vclick Next.

    14.Ti trang Choose Languages, nh du chn vo Download updates only in theselanguages v chn gi ngn ng. Vic ty chn gi ngn ng s gip bn gim c bng

    thng. Click Next.15.Ti trang Choose Products, chn sn phm m bn mun cp nht. Click Next.16.Ti trang Choose Classifications, nh du chn nhng i tng bn mun cp nht. Click

    Next.17.Ti trang Set Sync Schedule, nh du chn Synchronize automaticallyv thit lp thi

    gian ng bha. Click Next.18.i qu trnh ng bha hon tt.

    Bn cng c ththc hin cch sau ng bha.

    1. Click Start>Administrative Tools> Microsoft Windows Server Update Services.2. Giao din Update Serviceshin th.3. Chn server l SERVER (tn server bn mun ci t WSUS). Ti khung Details, click

    Synchronize Nowthc hin ng bha vi website Microsoft Update

    Qu trnh ng bdin ra trong vi pht (c thl hn mt gity ng truyn ca bn)

    Bi thc hnh 2: Cu hnh cc my tnh client nhn cc bn cpnht

    Trong bi thc hnh, bn ssdng Group Policy cu hnh cc my tnh client nhn cc bn cp nhttWSUS server thay v trc tip tMicrosoft.

    1. M GPO bn mun p dng cu hnh. Ti Group Policy Management Editor, click chnComputer Configuration > Administrative Templates > Windows Components >Windows Update.

    2. Double-click vo Specify intranet Microsoft Update services location.3. Chn Enabled. Trn c hai trng l Set the intranet update service for detecting

    updatesv Set the intranet statistics server, ghttp://server.Click OK.4. Double-click vo Configure Automatic Updates.5. Chn Enabled. Cu hnh cc thit lp tng cp nht. Click OK.

    ng nhp vo my tnh client bng quyn Administrator. Vo Runv g lnh gpupdate /forcepdng cc chnh sch va cu hnh trn.

    Bi thc hnh 3: Ph chun cc bn cp nht

    Trong bi thc hnh ny, bn sph chun mt bn cp nht trin khai n my tnh client.

    1. Trn WSUS server, ti giao din Update Services, click Updates. ChnAll Updates.2. Ti danh schApproval, chn Unapproved.3. Ti danh sch Status, chnAny. Click Refreshhin thcc bn cp nht.

    http://server/http://server/http://server/http://server/
  • 5/25/2018 63956311-wsus

    24/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 23

    4. Chn nhng bn cp nht gn y nht p dng cho my tnh client. R-click vo bn cp nht chn v clickApprove.

    5. Trn hp thoi Approve updates, chn All Computersv chn Approved for install. ClickOK.

    6. Nu hin thcc vn vbn quyn, click I accept.7.

    Xem cc li hin thtrong hp thoiApproval progressxc nhn cc bn cp nht cci t n client. Sau click Close.

    8. Ti giao din Update Services, chn Computers> All Computers. Ti danh sch Status,chnAnyv click Refresh. My tnh client lc ny shin thtrn danh sch

    Trn my tnh client, khi ng li dch vWindows Update.

    Tng quan bi hc

    Bn c thdownload WSUS tMicrosoft.com. Sau khi ci t WSUS v ng bnhng bn cp nht tupstream server, bn nn cu hnh cc

    nhm my tnh cho php chng nhn c cc bn cp nht. Tip theo, ph chun hoc tchi cc bn cp nht v i cho chng c phn phi xung cc client. Sdng bng bo coxc nhn qu trnh cp nht hon tt v xc nh nhng my client no hoc cha ci tcc bn cp nht.

    Bn c thxem bn ghi log vqu trnh cp nht khc phc scvWSUS hoc trn client. Mc d bn c thxa mt sbn cp nht bng cch sdng WSUS, tuy nhin bn nn xa

    cc bn cp nht tnhng my tnh client.

    Trc nghim1. Bn l k s hthng mng ca mt doanh nghip chuyn vthit bm thanh nh sng. Mi

    y, bn sdng MBSA kim tra cc vn cp nht bo mt ca my tnh client. Bn nhnthy c mt smy tnh khng thci t c cc bn cp nht. Bn c thxem thng tin ccmy tnh ny u? (chn tt ccc p n ng)

    A. Xem System log trn my tnh client.B. Xem Application and Services logs \Microsoft\Windows\Windows

    UpdateClient\Operational trn my tnh client.

    C. Xem System log trn WSUS server.D. Xem %SystemRoot%\WindowsUpdate.log.2. Bn l k s hthng ca mt cng ty kin trc. Bn va mi trin khai WSUS v bn cn xc

    nhn cc bn cp nht phn phi thnh cng. Thng tin no sau y m bn nhn c tbo co Update Status Summary?

    A. Cc nhm my tnh c ph chun cc bn cp nht.B. Cc my tnh hon tt ci t cc bn cp nht.C. Bn cp nht bxa b.D. Slng my tnh khng thci t mt bn cp nht.

  • 5/25/2018 63956311-wsus

    25/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 24

    3. Bn ang trin khai WSUS cho doanh nghip ln. Hin ti, bn cu hnh cc my tnh client thuccc nhm khc nhau bn c thtrin khai cp nht. Bn c thcu hnh a my tnh vonhm bng cch no? (chn tt ccc p n ng)

    A. Bt chnh sch Configure Automatic Updates.B. Thit lp Client-side targeting trong Group Policy.C.

    Ti Update Services, r-click vo my tnh v chn Change Membership.D. Ti Update Services, a my tnh vo nhm thch hp.

    Tm tt chng WSUS cho php bn kim sot v phn phi cc bn cp nht tMicrosoft n my tnh client.

    Mt WSUS server c thsao chp cc bn cp nht tMicrosoft v lu trchng ti server .Sau cc my tnh client s download cc bn cp nht tWSUS server thay v downloadchng t Microsoft thng qua Internet. h tr doanh nghip vi nhiu vn phng,downstream WSUS server c thng bha cc bn cp nht, ph chun v cu hnh thit lptupstream WSUS server, cho php bn c ththit kcu trc phn cp c thmrngquy m.

    Ci t WSUS cn phi ci t IIS v WSUS c thsdng site mc nh c sn khi mi ci tIIS l Default Web Site. Sau khi ci t WSUS, bn c thqun l WSUS vi giao din Update

    Services. Trc tin, bn nn ng bWSUS server vi website Microsoft Update. Sau , tocc nhm my tnh trin khai. Tip theo, cu hnh cc my tnh client c thdownload ccbn cp nht tWSUS server thay v download tMicrosoft Update server thng qua Internet.

    Thut ng

    Downstream server Upstream server Windows Server Update Services (WSUS)

  • 5/25/2018 63956311-wsus

    26/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 25

    Ngcnh

    Trong nhng ngcnh sau y, bn sc p dng thit khtng WSUS.

    Ngcnh 1: Ln khoch trin khai htng WSUS c bn

    Bn l mt k s hthng ca ICT24H. Hin ti, bn cu hnh tt cmy tnh client download cc bncp nht trc tip tMicrosoft v tng ci t cc bn cp nht ny. Tuy nhin, sau khi mt phinbn mi c tung ra, bn nhn thy ha n dch v bng thng Internet tng t bin sau khiMicrosoft tung ra phin bn mi trn website Windows Update.

    V th, bn sdng WSUS gim bng thng sdng cho trschnhcha khong 250 my tnh.Thm ch, bn bt u kim tra thnghim cp nht trc khi trin khai tht. Tuy nhin bn khng cnhn vin no vn hnh vic kim nghim , v thbn chn cch tng ph chun v ci t cc

    bn cp nht.

    Bn ti phng gim c tho lun vha n ph thu bao tISP. Gim c yu cu bn trli mtscu hi sau:

    1. Lm thno gim bng thng tWSUS?2. Cn bao nhiu WSUS server?3. Lm thno cu hnh WSUS tng ph chun cc bn cp nht?

    Ngcnh 2: Ln khoch trin khai mt htng WSUS phc tp

    Bn l k s hthng ca ICT24H, mt tp on a quc gia vi nhiu chi nhnh vn phng khp nmchu. Trschnh t ti London v bn c cc chi nhnh vn phng t ti New York, Mexico, Tokyov France. Tt ccc vn phng u c trang bng truyn Internet tc cao v chng c ktni VPN theo cu trc full-mesh (mng li khp kn). Hay ni mt cch khc l mi vn phngkt nitrc tip n 4 vn phng cn l i.

    Hin ti, phng IT London qun l cvn phng London v New York. Cc vn phng Mexico, Tokyov France c cc phng IT ca ring h. Bn bt u trin khai WSUS trn Windows Server 2008 v tora mt cu trc p ng kt ni cho 5 vn phng.

    Sau l cuc tr chuyn gia trng phng IT vn phng Mexico v gim c ca bn. Ni dung nhsau:

    Trng phng IT vn phng Mexico: Ti ni chuyn vi cc trng phng IT Tokyo vFrance, v hc nhng yu cu k thut , ngn ng, hiu hnh v kim nghim ring bit. Vth, chng ti cn qun l vic ph chun cp nht. Tuy nhin, chng ti chng bha cpnht tserver trung tm

    Gim c ca bn: Khng thnh vn cho d bn c ng bcp nht gia cc vn phnghoc tInternet. V chng ta sdng VPN v tt cthng qua Internet.

  • 5/25/2018 63956311-wsus

    27/27

    ICT VIETNAM COMMUNITY

    I C T 2 4 H . N E T Page 26

    Cu hi:

    1. Bn cn bao nhiu WSUS server v cu trc nh thno?2. WSUS server no sc nhn bn v c qun l c lp?

    --- Ht ---