LabAnswerKey_Module6_DeployingandManagingSoftwareUpdates.pdf

download LabAnswerKey_Module6_DeployingandManagingSoftwareUpdates.pdf

If you can't read please download the document

Transcript of LabAnswerKey_Module6_DeployingandManagingSoftwareUpdates.pdf

  • Administering System Center

    2012 R2 Configuration Manager

    Module 6 Deploying and Managing Software Updates

    Student Lab Manual

    1 3.08. 2015

  • Contents Lab: Configuring the Site for Software Updates ............................................................................................................ 3

    Exercise 1: Configuring and Synchronizing the Software Update Point .............................................................. 3

    Task 1: Confirm Windows Server Update Service Installation ................................................................... 3

    Task 2: Add Software Update Point ...................................................................................................................... 6

    Task 3: Configure Software Update Point ........................................................................................................... 13

    Task 4: Synchronize Software Updates ............................................................................................................... 15

    Task 5: Monitoring Software Updates Synchronization ....................................................................................... 20

    Lab: Deploying and Managing Software Updates ....................................................................................................... 23

    Exercise 1: Deploying Software Updates to Clients ........................................................................................... 23

    Task 1: Configure Cl ient Settings for Software Updates .................................................................... 23

    Task 2 : Create Software Update Group .................................................................................................. 26

    Task 3 : Download Updates ......................................................................................................................... 28

    Task 4 : Check Content Status .................................................................................................................... 37

    Task 5 : Create a Software Update Group Deployment ....................................................................... 39

    Task 6 : Ini t iate a Software Update Scan ................................................................................................ 48

    Task 7 : Instal l Updates on a Client Computer....................................................................................... 50

    Exercise 2: Configuring Automatic Deployment Rules ....................................................................................... 54

    Task 1: Create an Automatic Deployment Rule ..................................................................................... 54

    Task 2 : Run Automatic Deployment Rule ............................................................................................... 64

    Task 3: Instal l Updates on a Cl ient Computer ....................................................................................... 65

    Task 4: Deployment Status and Compliance State .............................................................................................. 71

    Task 5: Create Automatic Deployment Rule for Windows 7 (Optional) ............................................................... 74

    Task 6: Create Automatic Deployment Rule for Windows Server 2012 R2 (Optional) .......................................... 83

  • Module 6 Deploying and Managing Software Updates

    ________________________________________________

    Student Lab Manual

    Virtual Machines

    na-dc-01 Domain Controller

    na-sccm-01 Configuration Manager

    server

    na-cli-01 Client Computer

    Domain Info

    Domain name dnosi.cv

    Credentials Administrator / Pa$$w0rd

    System Administration

    Ernndia Lima

  • Lab: Configuring the Site for Software Updates

    Exercise 1: Configuring and Synchronizing the Software Update Point

    Task 1: Confirm Windows Server Update Service Installation

    1. On the configuration manager server na-sccm-01 logon with dnosi\ administrator / Pa$$w0rd

    2. From Server Manager, click Tools and then click Windows Server Update Services

    3. If ask click Run

  • 4. Click Close

    5. Click Cancel

  • 6. Expand na-sccm-01 and review the options. Close the window.

  • Task 2: Add Software Update Point

    1. On the SCCM Console, click in Administration workspace, expand Site Configuration and click Servers and Site System Roles

    2. Click Next

  • 3. Accept the Default and click Next

    4. Select Software Update point and click Next

  • 5. Click WSUS in configured to use ports 8530 and 8531 for client communications (default settings for WSUS on Windows Server 2012) and click Next

  • 6. Click Next

    7. Accept the defaults anc click Next

  • 8. Select Enable synchronization on a schedule and in the Run every select 2 Hours

    9. Click Next

  • 10. Select Critical Updates, Definition Updates and Security Updates

    11. Click Next

  • 12. Select the languages (English) and click Next

  • 13. Click Next

    14. Click Close

    Task 3: Configure Software Update Point

    1. On the SCCM Console, click in Administration workspace, expand Site Configuration and click Sites. On the Ribonn click Settings, click Configure Site Components and then click Software Update Point

  • 2. Click Products, unselecct all products seleted in the Office option and select/unselect Windows to unselect all options. Then select windows 7.

  • Task 4: Synchronize Software Updates

    1. On the SCCM Console, click in Monitoring workspace, expand Software Updates. Rigth click on All Software Updates and click Syncrhonize Software Updates.

  • 2. Click Yes

    3. Navigate to C:\Program Files\ Microsoft Configuraiton manager\ Logs

  • 4. Open WCM log and wait untill the synchronization finished

    5. Return to SCCM Console, click in Administration workspace, expand Site Configuration and click Sites. On the Ribonn click Settings, click Configure Site Components and then click Software Update Point

  • 6. Select windows 8.1 and Windows Server 2012 R2 and click OK

  • 7. Synchronize the Software Updates again

  • Task 5: Monitoring Software Updates Synchronization

    8. On the Configuration Manager console, click Monitoring, expand System Status and click Component Status. Rigth click on SMS_WSUS_SYNC_MANAGER and click Show Messages and then All

    9. Click OK

  • 10. Look at the Message ID 6202. This means that the synchronization terminated successfully.

    Note: You can also monitor from SCCM server, navigating to C:\Program Files\ Microsoft Configuration Manager\ Logs. Open wsyncmgr.log and WCM.log to view the logs.

    WCM.log

  • Wsyncmgr.log

  • Lab: Deploying and Managing Software Updates

    Exercise 1: Deploying Software Updates to Clients

    Task 1: Configure Cl ient Settings for Software Updates

    1. On the configuration manager server na-sccm-01 logon with dnosi\ administrator / Pa$$w0rd

    2. Rigth click on Start and click Search

    3. Type Configuration Manager and click Configuration Manager Console

  • 4. On the Configuration Manager console, click Administration workspace and then click Client Settings. Right click on NOSiAcademy Client Settings and click Properties

    5. Select Software Updates

  • 6. Click Software Updates on the left and Guarantee that the both options are Enable and YES is selected in the combo box. Click OK.

  • Task 2 : Create Software Update Group

    1. On the Configuration Manager Console, click Software Library workspace and expand Software Updates and then All Software Updates.

    2. Click Add Criteria near the Search button and select Product and Update Classification then click Add.

    3. Specify the following for Product/Update Classification:

  • a. Product: Windows 8.1 b. Update Classification: Security Updates c. Click Search

    4. Security Update for Windows 8.1 with the option Required 1 and right-click and select Create Software Update Group.

    5. On Create Software Update Group page, enter Name Windows 8_1 Critical Security Update Group and click Create.

  • Task 3 : Download Updates

    1. On the Configuration Manager Console, click Software Library workspace and expand Software Updates and then Software Update Group.

    2. Right-click Windows 8_1 Critical Security Update Group and select Download.

  • 3. On Deployment Package page, Select Create a new deployment package and specify the following:

    a. Name: Windows 8_1 Critical Updates

    b. Package source: \ \ na-sccm-01\ SourceUpdates\ Windows8.1

    c. Click Next.

  • 4. On Distribution Points page, click Add and then Distribution Point.

  • 5. Select na-sccm-01.dnosi.cv and click OK and Next.

    6. On Distribution Settings page, keep all defaults and click Next.

    7. On Download Location page, select Download Software Updates from Internet and click Next

  • 8. On Language Selection page, ensure that only English language is selected and click Next.

  • 9. On Summary page, click Next.

  • 10. On Completion page, click Close to exit

  • 11. Navigate to Software Library, Software Updates and Software Update Group. Double click on Windows 8_1 Critical Security Update Group

  • 12. Review the results, and you should have Downloaded status to Yes.

  • Task 4 : Check Content Status

    1. On Configuration Manager Console, select Monitoring workspace and expand Distribution Status and Content Status.

    2. Select Windows 8_1 Critical Updates and review the results of the page under Completion Statistics. It should show Success: 1 status.

  • Note: If shows in progress: 1 wait until Success: 1

  • Task 5 : Create a Software Update Group Deployment

    1. On Configuration Manager Console, select Software Library workspace and expand Software Updates and then Software Update Group.

  • 2. Right-click Windows 8_1 Critical Security Update Group and select Deploy.

  • 3. On General page, specify the following:

    a. Deployment Name: Windows 8_1 Security software update group Deployment

    b. Next to Collection: Click Browse and select the collection Workstations Collection and click OK

    c. Click Next

  • 4. On Deployment Settings page, select Required for the Type of deployment and click Next.

    5. On Scheduling page:

    a. Accept the default settings of Client local time for Schedule Evaluation.

    b. Verify Software available time is set to As soon as possible.

    c. Under Installation Deadline settings, select As soon as possible option.

    d. Click Next.

  • 6. On User Experience page, accept the default settings and click Next.

  • 7. On Alerts page Click Next

  • 8. On Download Settings page, accept the default settings and click Next.

  • 9. On Summary page, click Next.

  • 10. On Completion page, click Close to exit.

  • Task 6 : Init iate a Software Update Scan

    1. Logon to na-cli-01 using dnosi\ administrator and password Pa$$w0rd.

    2. Rigth Click on Start and click Control Panel

  • 3. Click on Configuration Manager icon

    4. Click on Actions tab, select Software Update Scan Cycle and click Run Now.

  • Task 7 : Instal l Updates on a Cl ient Computer

    1. On na-cli-01 Windows 8.1 client computer, Right Click the Start button, Control Panel, System and Security and open Configuration Manager.

    2. Click Machine Policy Retrieval & Evaluation Cycle and click Run Now.

  • 3. Click Software Update Deployment Evaluation Cycle and click Run Now.

  • 4. The notification icon will appear, review the options and click Install.

    5. If the notification does not appear then right click on Start - type software center and select Software Center and click Install

  • Exercise 2: Configuring Automatic Deployment Rules

    Task 1: Create an Automatic Deployment Rule

    1. On na-sccm-01, using Configuration Manager Console, select Software Library workspace and expand Software Updates - Automatic Deployment Rules.

    2. Right-click Automatic Deployment rules and select Create Automatic Deployment Rule.

  • 3. On General page, specify the following:

    a. Name Windows 8.1 Automatic Deployments

    b. Collection: click Browse and select the collection Workstations Collection and click

    OK

    c. Make sure Add to an existing Software Update Group and Enable the deployment

    after this rule is run are selected

    d. Click Next.

  • 4. On Deployment Settings page, change the Detail level to All messages and click Next.

    5. On Software Updates page, select the following:

    a. Product: Windows 8.1

    b. Update Classification: Critical Updates

    c. Click Next

  • 6. On Evaluation Schedule page, select Do not run this rule automatically and click

    Next.

    7. On Deployment Schedule page, accept the default settings and click Next.

  • 8. On User Experience page, select the following and click Next:

    a. Change User notifications to Display in Software Center and Show all notifications

    b. Under Device restart behavior - Suppress the system restart on the following devices and check Servers and Workstations

  • 9. On Alerts page, accept the default settings and click Next.

    10. On Download Settings page, accept the default settings and click Next.

  • 11. On Deployment Package page, click Browse and select Windows 8_1 Critical Updates package. Click OK and Next.

  • 12. On Download Location page, select Download software updates from the Internet and click Next.

    13. On Language Selection page, ensure that only English language is selected and click Next.

  • 14. On Summary page, click Next.

  • 15. On Completion page, click Close to exit.

  • Task 2 : Run Automatic Deployment Rule

    1. On the Configuration Manager Console, click Software Library, under Automatic Deployment rules right-click Windows 8.1 Automatic Deployments and select Run Now.

    2. When prompted click OK.

    3. Navigate to Monitoring - Distribution Status - Content Status - Windows 8_1 Critical Updates.

    4. Review the Completion Statistics and wait until the content has been successfully distributed to the Distribution Point. Make sure that Date Created is also changes to the current date and time

  • Task 3: Install Updates on a Cl ient Computer

    1. Log on to na-cli-01 Windows 8.1 client computer using dnosi\ administrator and password as Pa$$w0rd.

    2. Right click Start Button - Control Panel - System and Security - Configuration Manager

  • 3. Select Actions tab

    4. Click Software Update Scan Cycle and click Run Now.

  • 5. Click Machine Policy Retrieval & Evaluation Cycle and click Run Now.

  • 6. Click Software Update Deployment Evaluation Cycle and click Run Now.

  • 7. The notification icon will appear, review the options and Select either INSTALL or INSTALL ALL REQUIRED.

  • Task 4: Deployment Status and Compliance State

    1. On Configuration Manager Server, na-sccm-01, using Configuration Manager Console, select Monitoring workspace and navigate to Deployments.

    2. Select Windows 8_1 Critical Security Update Group and right click and select Run Summarization

  • 3. Click OK when prompted

    4. Repeat the step 2 and 3

    5. Click Refresh on Ribbon.

    6. On bottom half of the console, under Completion Statistics, make sure Last Update date is updated to reflect the time when deployment was created and click View Status.

  • 7. Review the status and compliance information regarding your Windows 8.1 client computer as well as other systems if any.

  • Task 5: Create Automatic Deployment Rule for Windows 7 (Optional)

    1. On na-sccm-01, using Configuration Manager Console, select Software Library workspace and expand Software Updates - Automatic Deployment Rules. Right-click Automatic Deployment rules and select Create Automatic Deployment Rule.

  • 2. On General page, specify the following:

    a. Name Windows 7 Automatic Deployments

    b. Collection: click Browse and select the collection Workstations Collection and click

    OK

    c. Make sure Add to an existing Software Update Group and Enable the deployment

    after this rule is run are selected

    d. Click Next.

  • 3. On Deployment Settings page, click Next.

    4. On Software Updates page, select the following:

    a. Product: Windows 7

    b. Update Classification: Critical Updates and Security Updates

    c. Click Next

  • 5. On Evaluation Schedule page, click Next.

    6. On Deployment Schedule page, accept the default settings and click Next.

  • 7. On User Experience page, select the following and click Next:

    a. Change User notifications to Display in Software Center and Show all notifications

    b. Under Device restart behavior - Suppress the system restart on the following devices and check Servers and Workstations

  • 8. On Alerts page, accept the default settings and click Next.

    9. On Download Settings page, accept the default settings and click Next.

  • 10. On Deployment Package page, click Create a new deployment package and select the following and click Next:

    a. Name: Windows 7 Updates

    b. Package Source: \ \ na-sccm-01\ SourceUpdates\ Windows7

  • 11. On the Distribution Point, click Add and then Distribution Points. Select NA-SCCM-01.DNOSI.CV and click OK and then click Next.

    12. On Download Location page, select Download software updates from the Internet and click Next.

    13. On Language Selection page, ensure that only English language is selected and click Next.

  • 14. On Summary page, click Next.

  • 15. On Completion page, click Close

    Task 6: Create Automatic Deployment Rule for Windows Server 2012 R2 (Optional)

    1. On na-sccm-01, using Configuration Manager Console, select Software Library workspace and expand Software Updates - Automatic Deployment Rules. Right-click Automatic Deployment rules and select Create Automatic Deployment Rule.

  • 2. On General page, specify the following:

    a. Name Windows Server 2012 R2 Automatic Deployments

    b. Collection: click Browse and select the collection Servers Collection and click OK

    c. Make sure Add to an existing Software Update Group and Enable the deployment

    after this rule is run are selected

    d. Click Next.

  • 3. On Deployment Settings page, click Next.

    4. On Software Updates page, select the following:

    a. Product: Windows Server 2012 R2

    b. Update Classification: Critical Updates and Security Updates

    c. Click Next

  • 5. On Evaluation Schedule page, click Next.

    6. On Deployment Schedule page, accept the default settings and click Next.

  • 7. On User Experience page, select the following and click Next:

    a. Change User notifications to Display in Software Center and Show all notifications

    b. Under Device restart behavior - Suppress the system restart on the following devices and check Servers and Workstations

  • 8. On Alerts page, accept the default settings and click Next.

    9. On Download Settings page, accept the default settings and click Next.

  • 10. On Deployment Package page, click Create a new deployment package and select the following and click Next:

    c. Name: Windows Server 2012 R2 Updates

    d. Package Source: \ \ na-sccm-01\ SourceUpdates\ WindowsServer2012R2

  • 11. On the Distribution Point, click Add and then Distribution Points. Select NA-SCCM-01.DNOSI.CV and click OK and then click Next.

    12. On Download Location page, select Download software updates from the Internet and click Next.

    13. On Language Selection page, ensure that only English language is selected and click Next.

  • 14. On Summary page, click Next.

  • 15. On Completion page, click Close