SUS ServicesSUS Services

ECE Computer FacilitiesECE Computer Facilities

SUS ServicesSUS ServicesSoftware Update ServicesSoftware Update Services

Microsoft Security And Critical Update ServiceMicrosoft Security And Critical Update Service Automatically Apply Security And Critical Automatically Apply Security And Critical

UpdatesUpdates Uses Existing Windows CapabilitiesUses Existing Windows Capabilities

– Available With Windows 2003, Windows-XP SP1 Available With Windows 2003, Windows-XP SP1 And Windows-2000 SP3And Windows-2000 SP3

CCC Maintains A SUS Server Containing CCC CCC Maintains A SUS Server Containing CCC Tested Updates Downloaded From MicrosoftTested Updates Downloaded From Microsoft

ECE PCs Connect To CCC SUS Server And ECE PCs Connect To CCC SUS Server And Update ThemselvesUpdate Themselves

SUS ServicesSUS ServicesBenefitsBenefits

Reduce Your PCs Vulnerability To Reduce Your PCs Vulnerability To Hackers, Viruses, Worms And TrojansHackers, Viruses, Worms And Trojans

Automatically Maintain Security Automatically Maintain Security PatchesPatches

Allows Selective PatchingAllows Selective Patching Does Not Require SMS, Active Does Not Require SMS, Active

Directory Or Domain MembershipDirectory Or Domain Membership

SUS ServiceSUS ServiceHow ToHow To Add SUS Form (Template) to Add SUS Form (Template) to

Group Policy EditorGroup Policy Editor Fill Out and Complete the New Fill Out and Complete the New

FormForm

Add SUS FormAdd SUS Form(Adding SUS Policy Template)(Adding SUS Policy Template)

Click on “Start”Click on “Start” Select “Run”Select “Run” Enter “gpedit.msc”Enter “gpedit.msc” Right Click on Right Click on

“Administrative “Administrative Templates”Templates”

Select “Add/Remove Select “Add/Remove Templates”Templates”

Add a New Form (Template) to gpedit.msc

Add SUS Policy Add SUS Policy TemplateTemplate Select “Add”Select “Add”

Add the template file Add the template file \\ece-bin\pub\wuau.adm\\ece-bin\pub\wuau.adm

Click on “Close”Click on “Close”

Select “Add” Open the template file

\\ece-bin\pub\wuau.adm An old version of wuau.adm may already exist on your system. Please ignore

it and add the file from \\ece-bin\... Click on “Close”

SUS Policy TemplateSUS Policy TemplateSelect and use the New “Windows Updates” Form Select and use the New “Windows Updates” Form (Template)(Template)

Double Click onDouble Click on“Configure Automatic Updates”“Configure Automatic Updates”

Set Update TimeSet Update Time

Enable Automatic UpdatesEnable Automatic Updates Select “4” Auto Select “4” Auto

download..download.. Check everyday for new Check everyday for new

updates and perform updates and perform update at 4:00 AMupdate at 4:00 AM

Click “Next Setting”Click “Next Setting”

The above recommendation schedules updates everyday at 4 AM. If an update is available, it is downloaded and installed.

See the last slide for an alternate configuration idea

Set Update Server Set Update Server LocationLocation

Enable and enter CCC’s Update Enable and enter CCC’s Update Server Location Server Location “http://galaxy.wpi.edu”“http://galaxy.wpi.edu”

Click “Next Setting”Click “Next Setting”

Reschedule Missed Reschedule Missed UpdatesUpdates

Select “Not Configured”Select “Not Configured”– Prevents reschedule updatesPrevents reschedule updates– Re-try missed updates on the Re-try missed updates on the

next scheduled updatenext scheduled update Click “Next Setting”Click “Next Setting”

Set Auto-RestartSet Auto-Restart

Disable no auto-restart Disable no auto-restart to allow auto-restartto allow auto-restart

Performs a reboot after Performs a reboot after updatingupdating

Click “Ok”Click “Ok”

Update NotificationUpdate NotificationAlternative Configuration – Update “3”Alternative Configuration – Update “3”

Allows for Allows for selective updatingselective updating

Automatically Automatically download updatesdownload updates

Notify user before Notify user before installing updatesinstalling updates

Configure Update Configure Update process as “3” process as “3” auto download auto download and notify for and notify for installinstall