Qt Cai Dat WSUS Tren Widows Server 2003

Embed Size (px)

Citation preview

QUI TRNH CI T VN HNH WSUS TRN WINOWS SERVER 2003 I. Yu cu ci t c WSUS 1. Yu cu v cu hnh phn cng Yu cu cu hnh phn cng ca my tnh ci t WSUS cp nht cho h thng gm 300 my trm ti thiu nh sau: CPU 1 GHz 512 MB RAM 1GB a trng cho partition h thng 10 GB cng cha ni dung cp nht, ti u l 30GB. 2. Yu cu phn mm My ch ci t WSUS cn c cc phn mm sau: My ch ci h iu hnh Windows Server 2003 nh dng HDD l NTFS IIS 5.0 hoc phin bn cao hn IE 6.0 SP1 hoc phin bn cao hn DotNET Frammework 1.1 SP1 hoc phin bn cao hn BITS 2.0 hoc phin bn cao hn MSDE2000 hoc SQL Server 2000. 3. Yu cu i vi phn mm c cp nht t ng Cc phn mm sau y c cp nht vi h thng WSUS: Win2K Pro SP3/SP4, Win2K Server SP3/SP4, Win2K Advance Server SP3/SP4. WinXP Pro SP1/SP2. Windows Server 2003, Standard Edition, Windows Server 2003 Enterprise Edit, Cc phin bn Office ca Windows Cc cng c ca Windows nh Internet Explore, Windows Media, 4. Cc bc thc hin S dng my tnh d nh lm my ch WSUS c ci h iu hnh Windows Server 2003 Ci t IIS trn my ch WSUS. Ci t Internet Explorer 6 trn my ch WSUS. Ci t phn mm DotNet Framework 1.1, cc bn v li trn my ch WSUS. Ci t BIST 2.0 trn my ch WSUS.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

1

Ci t MSDE2000 trn my ch WSUS Server, cp nht cho bn v li cho MSDE 2000 (SQL2000-KB815495) Ci t WSUS trn my ch WSUS. Thit lp kt ni Proxy cho my ch WSUS ng b my ch WSUS vi my ch WSUS ca Microsoft trn Internet ti v cc bn cp nht To nhm cc my tnh trong mng cho phn mm WSUS. Cu hnh chnh sch cp nht t ng trn my ch Domain(Evnitsrv01). Phn phi cc bn cp nht cho my trm t my ch WSUS. Ngi dng ci t cc bn cp nht cho my trm. II. Ci t IIS trn my ch WSUS 1. ng nhp vo my tnh s ci WSUS vi account c quyn administrator. Bm vo Start\Setting\Control Panel\Add/Remove Program, ca s Add remove Programs xut hin. Bm nt Add/Remove Components s xut hin ca s Windows Component Wizard, ta chn ti dng Aplication Server ri bm nt Detail..

2. Chn ti dng Internet Information Services nu chn bn cnh c tch nh sau th kt thc bc Ci t IIS.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

2

3. Nu chn ca dng Internet Information Services cn b trng nh hnh sau th tch vo chn v bm OK.

4. Chng trnh s tr li ca s sau, bm Next tip tc

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

3

5. Chng trnh hin th tin trnh ci t, trong qu trnh ci t c th s yu cu mt s file th a a ci Windows Server 2003 vo tip tc

6. Sau khi ci t xong s hin th ca s sau, bn bm Finish ng ca s li.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

4

III.

Ci t IE6.0 cho my ch WSUS 1. Kim tra phin bn ci t ca chng trnh Internet Explorer bng cch m chng trnh IE, chn Help, chn About Internet Explorer. Kim tra nu phin bn IE trn 6.0 th thot khi bc Ci t IE6.0. i vi Windows Server 2003 hoc Windows XP SP2 th phin bn ca Internet Explorer c ci t mc nh l 6.0.

2. Nu phin bn thp hn IE6.0 th thc hin ci t IE bng cch chy file ie6setup.exe ci t. Ca s sau hin ra, chn I accept the agreement v bm Next

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

5

3. Ca s ci t xut hin nh sau, bm Next:

4. Ca s tin trnh ci t xut hin nh hnh minh ho sau, i n khi ci t xong.

5. Khi ci t xong h thng ca s sau xut hin yu cu khi ng li my tnh, bm nt Finish kt thc v i my ch khi ng li.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

6

IV.

Ci t SP1 cho DotNet Framework 1.1 i vi h iu hnh Windows Server 2003 phn mm DotNet Framework 1.1 c ci t mc nh trong qu trnh ci h iu hnh, thc hin cc bc sau ci t SP1 cho phn mm DotNet Framework 1.1 1. Chy file c tn WindowsServer2003-KB867460-x86-ENU.EXE ci t DotNet Framework 1.1 SP1. Ca s Windows Server 2003-KB867460 Setup xut hin, bm Next

2. Ca s License Agreement xut hin, bm chn I Agree, sau bm Next tip tcNguyen Dinh Tien 0904199188-Yahoo: Achinsu 7

3. Qu trnh ci t SP1 tip tc nh hnh sau:

4. Ca s sau xut hin thng bo tm ngng dch v World Wide Web Publishing, bm Continue tip tc

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

8

5. Qu trnh ci t SP1 tip tc nh hnh sau:

6. Sau khi qu trnh ci t hon thnh, ca s sau xut hin. Bm Finish kt thc qu trnh ci t DotNet Framework 1.1 SP1

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

9

V.

Ci t BITS2.0 cho my ch WSUS 1. Ci t BITS 2.0 bng cch bm p file c tn Windows 2003-KB842773-x86ENU, ca s sau xut hin, bm Next:

2. Ca s sau xut hin, chn I Agree v bm Next:

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

10

3. Ca s sau xut hin, bm nt Continue tip tc

4. Qu trnh ci t tip tc, sau khi ci t xong ca s sau xut hin, ta bm Finish v i my khi ng li. Qu trnh ci t BITS v 2.0 hon thnh.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

11

VI.

Ci t MSDE2000 cho my ch WSUS 1. Trn my ch t th mc ci t MSDE vo C vi tn sau: C:\MSDE2000 2. M ca s command chuyn n th mc C:\MSDE2000 v g dng lnh sau ci t MSDE: setup sapwd="password" instancename="WSUS"

3. Ca s ci t MSDE xut hin, chng trnh s t ng thc hin ci t sau khi xong s khi ng li.

4. Bm chut phi vo biu tng My Computer, chn Manager

5. Ca s Computer Manager xut hin, trong khung bn tri bm chn Computer Managerment\Service and Aplications. Trong bn phi nu c Services MSQL$WSUS ang trng thi Started nh hnh minh ho sau y c ngha ci t MSDE thnh cng

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

12

6. Ci t bn sa li cho MSDE2000 c tn SQL2000-KB815495-8.00.0818ENU. Ca s nh sau xut hin,. bm Next:

7. Chn I accept the licensing terms and conditions

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

13

8. Trong Instance chn ti c s d liu ca WUS c dng: TnmychWSUS\WSUS nh hnh sau, sau bm Next.

9. Bm chn Windows Authentication, sau bm Next

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

14

10. Ca s xc nhn ci t xut hin, bm Install

11. Qu trnh ci t tin hnh nh hnh sau

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

15

12. Khi ci t hon thnh ca s Hotfix complete xut hin, bm Finish kt thc

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

16

VII.

Ci t phn mm WSUS trn my ch Windows 2003 server 1. Sau khi ng nhp vo my ch WSUS, tm ti file WSUSSetup.exe bm p chut bt u thc hin ci t:

2. Ca s gii thiu xut hin, bm Next

3. Chn I accept the terms . ng cc iu khon ca Microsoft, sau bm Next.

4. Chn th mc cha cc file cp nht (C:\WSUS) nh hnh minh ho, sau bm Next.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

17

5. Trong Select SQL instance name chn tn ca c s d liu nh sau, ri bm Next

6. Ca s sau hin ra, bm Next tip tc

7. Chn Use the existing nh hnh sau sau bm Next

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

18

8. Ca s Microsoft Update xut hin, m bo khng tch chn This server should inherit the setting from the following server, bm Next tip tc

9. Ca s Ready to Install Microsoft Windows Server Update Service xut hin, bm Next tip tc.

10. Ca s hin th tin trnh ci t nh hnh sau, i cho chng trnh t ng ci tNguyen Dinh Tien 0904199188-Yahoo: Achinsu 19

11. Ca s thng bo hon thnh ci t chng trnh WSUS xut hin, bm Finish kt thc.

VIII. Chn cc thnh phn cp nht s phn phi cho my trong mng LAN 1. ng nhp vo my tnh WSUS vi quyn admin 2. Chn Start ->Programs ->Administrative Tool ->Microsoft Windows Server Update Service. Ghi ch: C th truy cp theo giao din Web vi a ch dng sau: http://tnmych/WSUSAdmin/ vi tnmych l tn my ch ci t WSUS 3. Trn ca s chnh ca chng trnh WSUS chn Option, trong mc Products and Classifications chn n phn Products ri bm nt Change nh hnh minh ho.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

20

4. Ca s Add/Remove Products xut hin, bm vo cc chn sau: Windows 2000, Windows 2003, Exchange 2000 Server, Exchange Server 2003, SQL Server, Windows 2000, Windows Server 2003, Windows XP. Sau bm OK ng ca s li.

5. Tr v ca s chnh ca chng trnh WSUS, trong mc Update classifications bm nt Change

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

21

6. Ca s Add/Remove Classifications xut hin, bm vo cc chn loi cc bn cp nht: Critical Updates, Driver, Feature Pack, Security Updates, Service Pack, Update. Sau khi chn xong, bm nt OK ng ca s li

IX.

Cu hnh my ch WSUS s cp p dng i vi cc n v c ng truyn Internet ADSL 1. ng nhp vo my tnh WSUS vi quyn administrator

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

22

2. Chn Start -> Programs -> Administrative Tool -> Microsoft Windows Server Update Service. 3. Trong bc ny s khai bo Proxy my ch WSUS ca n v kt ni vi my ch WSUS ca Micrsoft trn internet nhn c cc bn cp nht. Thc hin cc bc sau: Trn ca s chnh ca chng trnh WSUS chn Option, chn n phn Proxy Server v nhp cc tham s nh sau: Server name: 10.0.0.69 Tn hoc a ch IP ca my Proxy. Port: 80 S hiu cng Proxy cho php truy cp theo http. Khai bo username, password v domain c quyn truy cp c Internet. Chn Save setting lu cc kt qu thit lp.

3. Trong Task chn Synchronize now

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

23

4. Sau khi cc bn cp nht c ti v my ch thnh cng s c lu li phn phi cho cc my trm. X. Cu hnh my ch WSUS th cp p dng i vi cc n v c kt ni WAN EVN nhng khng c ng truyn Internet ADSL. 1. ng nhp vo my tnh WSUS vi quyn administrator 2. Chn Start ->Programs ->Administrative Tool ->Microsoft Windows Server Update Service. 3. Ko thanh trt xung di, trong mc Update Source chn Synchronize from an upstream Windows Server Update Service server.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

24

Nhp a ch my WSUS s cp vo Server name: 10.1.3.111 Nhp s hiu cng vo Port number: 80.

4. Chn Save setting lu cc kt qu thit lp.

5. Trn ca s ca chng trnh WSUS trong khung Task chn Synchronize now chng trnh ti cc bn cp nht cho cc phn mm ca Microsoft v my ch WSUS .

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

25

6. Khi qu trnh ng b kt thc, trong Synchronize Status hin th tnh trng cp nht cc bn v. Nu l Last Synchronization result: Success nh hnh minh ho sau tc l cc bn cp nht c ti v my ch thnh cng v c lu li phn phi cho cc my trm.

7. Sau khi cc bn cp nht c ti v my ch thnh cng s c lu li phn phi cho cc my trm. XI. To tn nhm cc my tnh trong mng cho phn mm WSUS 1. ng nhp vo my ch WSUS vi quyn qun tr cao nht. Chy chng trnh WSUS bng cch chn Start -> Programs -> Administrative Tool -> Microsoft Windows Server Update Service. Ca s chng trnh xut hin, bm chn mc Computers ti gc trn bn phi mn hnh. Ti mc Task pha tri ca s, chn Creat a Computer Group

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

26

2. Ca s Creat a Computer Group xut hin nh sau, t tn cho nhm cc my tnh, v d Tn_n_v bm OK.

3.

Bm vo mc Computer trn thanh cng c ca chng trnh WSUS, di mc Computer name chn cc my tnh bng cch gia phm Shift v bm chut tri. Cc my c chn s c bi en nh hnh minh ha sau:

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

27

4.

Bm vo Move the selected computer trong phn Task, ca s Move Computer xut hin, chn nhm gn cc my vo, v d Tn_n_v, sau bm OK.

5.

Chng trnh WSUS tr v ca s chnh, trong mc Groups bm vo tn nhm c dng Tn_n_v trong khung bn phi s xut hin cc my tnh c nhp vo nhm ny. Cc my ny sau s t ng ti cc bn cp nht sau khi c gn Policy thng qua my ch Domain controller.

XII.

Ci t chnh sch Auto Update Client trn my ch Domain Controller 1. ng nhp vo my ch Domain Controller vi quyn administrator, chn Start\ Programs\Administrative Tools\Active Directory Users and Computers. Ca s Active Directory Users and Computers xut hin nh hnh sau. Bm chut phi vo tn domain ca n v dng tn_n_v.evn.com.vn v chn Properties.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

28

2. Ca s Properties xut hin c dng tng t nh hnh minh ha sau. Bn chn vo tab Group policy.

3. Trn tab Group policy, to Policy bn bm chn nt New v nhp tn cho n. V d t tn l WSUS-Update. Sau bm chn tn policy WSUS-Update va to v bm nt Propertis.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

29

4. Ca s WSUS-Update Properties xut hin, chn tab Links trong Domain chn ti domain ca n v mnh tn_n_v.evn.com.vn ri bm Find Now. Sau bm nt OK ng li.

5. Ca s sau xut hin, trong tab Group Policy chn tn ca policy WSUSUpdate ri bm nt Edit.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

30

6.

Ca s Group Policy xut hin, chn ti Computer Configuration -> Administrative Templates-> Windows Components -> Windows Update -> Configuration Automatic. Trong ca Policy bn phi chn hin th danh sch cc th loi policy nh hnh minh ho. Bn bm chn Configure Automatic Updates.

7. Ca s Configure Automatic Updates Properties xut hin. Trn ca s Configuration Automatic Updates properties, chn nt chn Enabled, ti Configuration Automatic Updating chn 3-Auto download and notify for install, sau bm nt Next PolicyNguyen Dinh Tien 0904199188-Yahoo: Achinsu 31

8. Ca s Specify intranet xut hin, chn nt chn Enabled, sau nhp ng dn ti my ch WSUS cc my trm c tr ti cp nht, ng dn c dng http://tnmych . Sau bm nt Next Policy.

9. Ca s Enable client side targeting Properties xut hin, chn Enable v trong Target group name for this computer nhp tn nhm Tn_n_v s t ng gn cc my c qun l cp nht vo. Sau bm Next Policy.Nguyen Dinh Tien 0904199188-Yahoo: Achinsu 32

10. Ca s Reschedule Automatic Update Scheduled installation properties, trn tab Policy chn nt chn Enabled, ti Wait after system chn Startup (minustes) l 10. Sau bm nt Next Policy.

11. Bm nt Next Policy trn mi ca s hin ra ti khi ca s Automatic Updates detection xut hin, chn Enabled v nhp khong thi gian cho phn mm t ng d cc bn cp nht. Bm nt Next Policy.Nguyen Dinh Tien 0904199188-Yahoo: Achinsu 33

12. Ca s hin ra ti khi ca s Allow Automatic Updates immediate installation Properties xut hin, chn Enabled. Bm OK kt thc.

. XIII. Phn phi bng tay cc bn cp nht t my ch WSUS cho cc my trong mngNguyen Dinh Tien 0904199188-Yahoo: Achinsu 34

1. Trn ca s chnh chng trnh WSUS, bm chn mc Updates:

2. Chn cc bn cp nht cn phn phi, sau chuyn sang mc Update Task v chn Change approval.

3. Ca s Approval Updates xut hin, trong mc Group Approval settings for the selected updates, chn install trong ct Approval cho nhm ri bm OK.Nguyen Dinh Tien 0904199188-Yahoo: Achinsu 35

4. xem kt qu, chn reports trn mn hnh WSUS chnh, tip tc chn Status of Updates.

Ch : Trong qu trnh cp nht cng bc th ti nguyn ca my ch b chim bi chng trnh WSUS rt ln c bit trong ln cp nht u tin. Theo qui trnh ci t trn, my ch WSUS c cu hnh cc my trm t ng ti cc bn cp nht v v chy cc bn cp nht ny trn my trm do vy gim ti cho my ch. XIV. Ngi dng ci t cc bn cp nht cho myNguyen Dinh Tien 0904199188-Yahoo: Achinsu 36

1. Ti my tnh ca ngi dng, mi khi c mt bn cp nht mi chng trnh s t ng d v ti xung my cc bn cp nht v thng bo ti ngi dng thng qua biu tng Automatic Update. Lc ny ngi dng bm chut vo biu tng Automatic Update trn thanh task ca Windows

2. Xut hin ca s Automatic Update, bn bm chn Custom Install, sau bm Next nh hnh minh ho sau:

2. Trn ca s Choose Update to Install chn cc bn cp nht cn ci t hoc b cc bn cp nht khng cn thit, sau bm Install.

3. Chng trnh s xc nhn khng nhc li cc bn cp nht m bn loi b, bn bm OK.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

37

4. Ca s Choose Update to install xut hin, bm Install ci t.

5. Chng trnh s ci t cc bn cp nht, sau khi ci t xong thng yu cu ngi dng khi ng li my tnh cc bn cp nht c tc dng. Bn bm Restart Now ng khi ng li my.

6. Sau khi my tnh khi ng li, ngi dng s ng nhp li my v tip tc lm vic bnh thng. XV. Kim tra tnh trng hot ng ca chng trnh 1. T mt my tnh bt k m trnh duyt Internet Explorer, trong Address nhp vo ng dn ca chng trnh WSUS c dng38

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

http://a_ch_my_ch_WSUS/wsusadmin/ hoc http://tn_my_ch_WSUS/wsusadmin/ V d http://10.1.3.111/wsusadmin (http://adminserver/wsusadmin)

2. Ca s chng trnh WSUS xut hin nh hnh minh ha sau, trong phn Synchronize Status bm chut vo ng dn Synchronize now

3. Trn dng Curent status hin th tin trnh download cc bn v v my ch WSUS, bn i cho qu trnh ny kt thc.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

39

4. Khi trong phn Synchronize Status hin th cc thng tin sau: + Last synchronization: ly ngy hin ti + Last synchronization result: Success Th c ngha l chng trnh WSUS ang hot ng tt v sn sng cp nht cc bn v an ninh cho cc my trong mng

5. Nu trong phn Synchronize Status hin th cc thng tin sau: + Last synchronization: ly ngy hin ti + Last synchronization result: Unsuccess Th c ngha l chng trnh WSUS c li, li c th do ng kt ni ra my ch WSUS s cp b mt, hoc a b y, Cn lin lc vi qun tr mng n v hoc phng K thut - EVNIT khc phc.

Nguyen Dinh Tien 0904199188-Yahoo: Achinsu

40