Link to home
Start Free TrialLog in
Avatar of New_Matrix
New_Matrix

asked on

help with SUS clients

hi everyone

im doing a work experience in a high school as an IT person.... im planning to setup a SUS server in there.. so just to be sure i tried to setup the SUS server at home and try before doing it in the school and get something wrong
the installation of the server went smooth with no problems and i was able to access the server using the URL http://server_name/susadmin locally and through the network . i have two clients at home running windows xp sp1..after some search i found that the SUS client is already included with sp1 ...
my problem now is how to configure the clients to take their updates from the SUS server.. i found some info on the web talking about registry tweaks but i couldnt find the registry keys in there
and found something about domain group policy but it took me nowhere
i appreciate any help because this will really give me bouns points in my work experience

cheers
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

Hi New_Matrix,
SUS (Software Update Services)

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Microsoft Software Update Services (SUS) enables administrators to quickly and reliably deploy the latest critical updates and security updates to Windows® 2000 and Windows Server™ 2003-based servers, as well as to desktop computers running Windows 2000 Professional or Windows XP Professional.

SUS now provides Windows service packs (SPs), in addition to critical and security updates. SUS will deliver Windows XP SP1, Windows 2000 SP4, and all future service packs for Windows 2000, Windows XP, and the Windows Server 2003 family of products.

Download SUS Software here
http://www.microsoft.com/downloads/details.aspx?FamilyId=A7AA96E4-6E41-4F54-972C-AE66A4E4BF6C&displaylang=en

Download the deployment guide here
http://www.microsoft.com/windows2000/docs/SUS_Deployguide_sp1.doc

Installation Notes
SUS Server 1.0 with SP1 automatically installs under the Web site that is currently running. It will not interfere with this or any other Web sites. If no other Web site is currently running, SUS Server 1.0 with SP1 will create a new Web
site.

Requirements

Computer operating systems where Software Update Services (SUS) can be installed:
Windows 2000, Service Pack 2 or above.
Windows Server 2003.
 
Computers where Automatic Update is already included in the operating system:
Windows 2000, Service Pack 3 or above.
Windows XP, Service Pack 1 or above.
Windows Server 2003.
 
Computers where a separate Automatic Update client installation is required:
Windows 2000, Service Pack 2.
Windows XP, no Service Pack.
 


For more information about where Setup places SUS Server 1.0 with SP1 components, refer to Appendix A in the Software Update Services
Deployment White Paper.

You can start the default site using the following steps:

Click Start, click Administrative Tools, then open Internet Information Services (IIS).
Click Web Sites, and then right-click Default Website.
Click Start.


Preparation your web site
In the basic installation, the SUS Server will install in the default port 80 website.
Visit the URL in your web browser to ensure IIS is running and operational. If there are no pages, Right-Click here and save this file in the website home directory as a location holder.

The Installation
For the basic installation, follow these instructions:
Run the Installation package.
When the Installation wizard starts, click "Next".
Read the License Agreement, select "I accept...", click "Next".
Click "Typical" for default settings.
Click "Install".
Installation will proceed.
Click "Finish" to end.
 
Connecting to the SUS Server administration console
All SUS Server administration is done through the web-based management console.
To access the console, visit:
http://localhost/susadmin/ if you are logged into the SUS Server.
http://SUS-Server-URL/susadmin/ if you are connecting to the SUS Server over the network.
 
Setting your SUS Server options
In the SUS Server Administration Console, down the left-hand navigation menu, select "Set options".
In this area, you can configure the following options:
Select a proxy server configuration. This proxy setting is used when the SUS Server performs a synchronization, either to Microsoft or a parent SUS Server.
Specify the name your clients use to locate this update server. This can be the short servername or the fully qualified DNS name of the server. This name is used for the clients to download updates.
Select which server to synchronize content from. Generally you will be synchronizing from Microsoft Windows Update, but you can specify another internal SUS Server. Also, the synchronize list of approved items allows this SUS Server to copy the update approval from the specified parent SUS Server, this option is useful for branch office situations.
Select how you want to handle new versions of previously approved. Select the option which suits your operational and quality assurance processes.
Select where you want to store updates. Generally, you will be saving the updates locally. Click on the "Clear All" button, then select the languages that will be supported by this SUS Server.
Click the "Apply" button.
 
Setting up synchronization
In the SUS Server Administration Console, down the left-hand navigation menu, select "Synchronize server". In this area, you can configure the update synchronization and perform it manually.
Click on "Synchronization Schedule" and configure the schedule to suit your requirements. Click "OK" to complete.
Click "Synchronize Now" to perform the initial synchronization. This will download all updates for the languages you have selected. You may wish to left this task and let the SUS Server do it during the scheduled synchronization.

Approving the updates for release
In the SUS Server Administration Console, down the left-hand navigation menu, select "Approve Update". In this area, you will be approving Microsoft Updates for release to clients.
Click the check box next to each update that you wish to release to the clients, when finished click the "Approve" button and follow the prompt to accept the licensing terms.

Where to now
You now have a functional SUS Server with approved updates. It is ready to distribute updates to clients.

*****Links*****


Troubleshooting Auto Update Client Error Codes
http://www.susserver.com/FAQs/FAQ-TroubleshootingAutoUpdateClientErrorCodes.asp
Troubleshooting the Auto Update Client Downloads
http://www.susserver.com/FAQs/FAQ-TroubleshootingAutoUpdateClientDownloads.asp


*****References*****

http://www.susserver.com/
http://www.susserver.com/Articles/SUS-InstallingSUS-Basic.asp

Cheers!
Install wuau.adm (the lastest version, no the original included on windows XP nor 2000.

Download it from: http://microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-42E6-8025-8C667B4C94E9&displaylang=en

This new adm file adds to your Group Policy Console what you are looking for.

I had the same problem with SUS and that was the solution.

Note: The MS link doesn't works at the moment so try to download the template file from another site.

Juanma Merino
BARCELONA
ASKER CERTIFIED SOLUTION
Avatar of koquito
koquito

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of foad
foad

ok, now the registry tweaks are ONLY if you have an NT doamain.... if that's the case, let me know, i'll give you the registry changes that WILL make it work...

AL
Avatar of New_Matrix

ASKER

hi again
thanks everyone for your help
the links gave me a good help to know that the wuau.adm tamplate is already included with windows 2003 server. i configured the group policy for the group and enabled all the avialable options (4 options).. the thing is the client still going to microsoft update site instead of the SUS server even tho i specified the SUS server in the group policy....im not sure where the problem is
-the tamplate file wuau.adm  is already there in windows 2003 server
-the SUS  client is already there in windows xp sp1 as well
-the group policy is defined but i think its not implemented
- the client still going to microsoft's web site NOT the SUS server

any suggestions please?

thanks foad .. im using windows 2003 server

bye :)
after some testing i discovered that none of my group policies are implemented correctly!
any idea why is that ?
When that happened to me it was only a matter of changing the computers DNs settings to use the IP of the DNS server on your LAN (explicit). Also remember that policies requiere a certain time unless you use secedit /refreshpolicy or gpupdate.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Go to the link. Open it up with notepad and edit to fit your needs. Run it and reboot.

http://www.bris.ac.uk/is/services/computers/operatingsystems/sus/config-reg.html