02-20-2010
|
|
|
|
RE: WSUS basics
"GC Email Manager" wrote:
> I am new to WSUS. I installed it perfectly fine. It sis downloading updates.
> I have a few basic questions:
>
> 1. I installed an XP x64 VM with SP3 from Server 2003 x64. I saw Windows XP
> 64-bit Edition Server 2003 as an option for updates and figured this was the
> match because when I look at the OS in system properties for that VM it says
> "Microsoft Windows XP x64 Edition Version 2003 Service Pack 2". However I
> found some obscure website that said the WSUS XP 64-bit Edition Server 2003
> was for Itanium editions. So then I unchecked that product and selected XP
> x64. Which is the right version for my XP Pro x64 VM?
>
> 2. I can't believe I'm having a hard time managing WSUS. Basically all my
> machines are patched except one last update prior to me installing WSUS. I
> wanted it this way so I could see at least one update available to apply via
> WSUS. However the screen is a bit confusing to me (using WSUS 3.0 SP2). I
> want the following:
>
> a. don't download updates for anything except Office 2007, Server 2008,
> Server 2003, XP x64, Vista, Windows Defender, and IE 8 updates. No machine
> has any previous version of anything else (OS, software, browser, etc). It
> seems that WSUS is downloading tons of updates that I will never push out.
> Our WsusContent folder is almost 7 GB!!!
>
> b. find a way to sort the updates ready to be deployed. I created a group
> for each OS type as each PC (vista, xp, windows7) is in it's own sub-OU in
> AD. I created a WSUS GPO for each of these with client side targeting enabled
> and pointing to the appropriate group in WSUS. The computers are in the
> correct WSUS groups. BasicallY i want to click on a filter for XP PCs and see
> the new updates that are ready to be deployed.
>
> c. understand the process for applying updates. I tried reading the help
> file but it isn't so much step by step as it is a description. Basically I
> want to (1) see updates ready for an application (or OS), (2) tell WSUS to
> download it to the WSUS server, (3) pick a group of PCs and approve that
> update for that group of PCs, (4), and let the PCs download this copy from
> the WSUS server. I still want the users applying the update when they are
> ready, not forcing it upon them yet. I have created the GPO for all PCs to
> pull from the WSUS server and that GPO seems to be working fine.
>
> d. set a time for when WSUS deletes old updates. I don't want it holding on
> to update files (taking up HD space) for a long period of time since we know
> any new machines won't be on our network without being manually updated
> first. Especially since there are so few updates needed, why is it taking
> huge chunks of disk space and downloading updates that none of my PCs need?
>
> e. learn how to schedule updates and reboots for an exact time (like at 3am
> to install and then reboot).
>
>
> Every blog I read seems that WSUS seems so simple to people. So either it's
> been a long week or they're all geniuses. I still can't find anything that
> explains what the "Installed/Not applicable" column means and other columns.
> --
>
> Regards,
>
> Shifty1981
|
Linear Mode
