Beruflich Dokumente
Kultur Dokumente
With Windows Server 2012 R2 Essentials in your business, it is important to centrally manage your workstations to ensure they are secure and up-to-date. With Windows Server Update Services, you can do just that. If you are running Windows Server 2012 Essentials, these directions will not work without performing additional steps. The WSUS role on Windows Server 2012 Essentials (non-R2) requires some pre-configuration before it can be installed. What youll need: A server running Windows Server 2012 R2 Essentials with at least 4GB of RAM, 8GB or higher is recommended SQL Server 2012 Management Studio available from http://download.microsoft.com/download/5/2/9/529FEF7B-2EFB-439E-A2D1A1533227CD69/SQLManagementStudio_x64_ENU.exe (download and copy to a shared folder on the server)
Table of Contents:
Install Windows Server Update Services Role ......................................................................................... 2 Perform initial WSUS configuration ......................................................................................................... 6 Install SQL Server Management Studio ................................................................................................... 9 Move WSUS database to a new location .............................................................................................. 11 Adjust memory usage settings for Windows Internal Database ........................................................ 17 Configure WSUS to integrate with Group Policy.................................................................................. 18 Create automatic approval rules for update deployment................................................................... 20
Once connected, click the Administrative Tools icon on the Start screen.
Accept defaults for the installation type, and then click Next.
Select your Windows Server 2012 R2 Essentials system and click Next.
Select Windows Server Update Services on the Server Roles selection, then click Next.
When prompted to add additional required features for installation, click Add Features then click Next.
Create a folder on a drive with enough space to handle the WSUS content. Ensure the Store updates in the following location is checked, specify the path to the folder you created, and then click Next.
Installation will then proceed. This step can take some time depending on your system.
After installation completes, click the blue Launch Post-Installation tasks link near the top of the results pane. The Windows Server Update Services Configuration Wizard will launch.
Choose if you want to join the Microsoft Update Improvement Program, then click Next.
In most cases, you should be able to leave the proxy server settings alone. However, if you have a proxy server, you will need to specify the information, then click Next.
WSUS will need to connect to obtain initial metadata. Click Start Connecting. This process should be fairly quick.
Choose any necessary languages for the client PCs that your server will support, then click Next.
Choose the products you want your WSUS server to house updates for, then click Next.
Choose the classifications want your server to house, then click Next. NOTE: Below the checklist is the description of each classification. This can be helpful in determining what to download. The screenshot at right is similar to SBS systems of the past and what classifications were downloaded out of the box. The classifications are: - Critical Updates - Definition Updates - Security Updates - Service Packs - Update Rollups Choose the appropriate synchronization schedule for your environment, then click Next.
Do not check the box to begin synchronization at this point. The database will be moved first from its default location on the system partition to a different partition to ensure that the system partition does not run out of room because of WSUS database growth. Click Finish.
Read and accept the license terms, and then click Next.
Leave the defaults for feature selection and then click Next.
Choose whether or not to enable Error Reporting and then click Next.
10
11
Click the Security tab, and then click the Advanced button.
12
On the Select Users or Groups screen, click Locations and change the location to your server name, then click OK. The account that needs to be added is called NT SERVICE\MSSQL$MICROSOFT##WID. Type the account name, click Check Names, and then click OK. On the right side of the window, click Show advanced permissions.
The service account needs the following permissions checked. List folder / read data Read attributes Read extended attributes Create files / write data Create folders / append data Write attributes Write extended attributes Delete Read permissions Click OK to add the account and its permissions.
13
Go to the Start screen, click the arrow in the lower left hand corner to show All Apps, then right click on SQL Server Management Studio. Click Run as Administrator. Accept the User Account Control prompt that appears. On the Connect to server screen, type \\.\pipe\MICROSOFT##WID\tsql\query. Ensure that Windows Authentication is selected, then click Connect.
Expand Databases in the Object Explorer, and right-click on SUSDB. Click on Tasks > Detach.
14
On the Detach Database screen, check the Drop Connections checkbox, and click OK.
Browse to C:\Windows\WID\Data You may need to accept a User Account Control prompt.
Go back to SQL Server Management Studio and right click on Databases, then click Attach.
15
Browse to the folder where the database files have been moved to, and then click on SUSDB.mdf. Click OK.
Verify that the information is correct for the location of the Data and Log files and then click OK.
Verify that SUSDB appears in the database listing. Restart the WSUS Service, by launching Command Prompt as an Administrator, and type net start wsusservice.
16
Click on the Memory tab and then specify the Maximum server memory to be between 256512MB, then click OK. Most WSUS installations in the 2012 R2 Essentials space should not require much more RAM for SQL than this due to the smaller number of connected clients.
17
For the new memory settings to take effect, the service needs to be restarted. Right click on \\.pipe\MICROSOFT##WID\tsql\query and then click Restart.
Now that the database has been moved, the initial synchronization of updates can occur. To begin the sync, go to Administrative Tools from the Start screen, and locate Windows Server Update Services. Click Synchronizations from the left pane. Click Synchronize Now.
The status of the synchronization will appear in the bottom middle pane. It will also show in the listing above the status pane.
18
In the Computers property window that appears, click on Use Group Policy or registry settings on computers. By enabling this option, we can use Client-Side Targeting within Group Policy to add computers to the appropriate groups within WSUS. In the navigation pane, expand Computers, and then right click on All Computers and click Add Computer Group.
19
Create two computer groups, or more if needed for your environment. For example, I have created the groups Servers and Workstations. After the groups have been created, verify that they appear in the navigation pane.
20
Check the box for Workstations only and then click OK.
21
Ensure the box is checked next to the name of the rule, click Apply. Then to run the rule, click the Run Rule button. Repeat the automatic approval rule steps until you are satisfied with the rules youve created.
To configure your systems to connect to your WSUS server it is strongly recommended to use Group Policy. Configuring Group Policy is outside the scope of this document, however, I have prepared some sample group policy settings that can be used as a base for building your policy on top of. Those policy settings and necessary WMI filters can be found at http://www.tomontech.com/2013/10/configuringgroup-policy-for-windows-server-update-services-on-windows-server-2012-r2-essentials. Congratulations! You have installed Windows Server Update Services on Windows Server 2012 R2 Essentials!
22