• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 206
  • Last Modified:

Does anyone have a link to a good and easy to understand guide to Software Update Service?

Hi there,
Does anyone have a link to a good and easy to understand guide to Software Update Service? I'm struggling with the MSoft white paper. I've got access to http://servername/susadmin but am stuck when it comes to where the clients look to for updates and how to configure them in general.
Cheers
Chris
0
chris_wren
Asked:
chris_wren
1 Solution
 
JammyPakCommented:
I don't have a link to give you, but if you're using SUS, then I assume you're in the 'Set Options' page, since that's where the config is done.

Here are the settings from the top down:
1) select a proxy server configuration - does your SUS server need to use a proxy server to get to the internet? If so, enter the info here. If not, then leave this section.
2) Specify the name your clients use to locate this update server: plug in the fqdn (hostname.domainname) of your SUS server
3) Select which server to sync content from - choose MS servers, OR another SUS server if you have one (I assume not, so choose MS)
4) Select how you want to handle new versions of previously approved updates - if you approve update x, and two months later there is a change made to that update, do you want to have to reapprove it?
5) Select where you want to store updates: choose local folder
6) Select whichever languages you are running
Done!
Now use the 'Synchronize server' page to set a schedule for downloading the updates, and use the 'approve updates' page to approve the updates for deployment

Lastly, use GPO to push the client settings out...
0
 
BravestarCommented:
Hi,
please use the official side,
it provide you through all what sus can do
http://www.microsoft.com/windowsserversystem/updateservices/evaluation/previous/default.mspx
0
 
LRI41Commented:
BIGFIX, INC. - SECURITY CONFIGURATION MANAGEMENT - VULNERABILITY MANAGEMENT - ENDPOINT SECURITY - PATCH MANAGEMENT

http://www.bigfix.com/
0
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

 
chris_wrenAuthor Commented:
Quote Jammypack
" don't have a link to give you, but if you're using SUS, then I assume you're in the 'Set Options' page, since that's where the config is done.

Here are the settings from the top down:
1) select a proxy server configuration - does your SUS server need to use a proxy server to get to the internet? If so, enter the info here. If not, then leave this section.
2) Specify the name your clients use to locate this update server: plug in the fqdn (hostname.domainname) of your SUS server
3) Select which server to sync content from - choose MS servers, OR another SUS server if you have one (I assume not, so choose MS)
4) Select how you want to handle new versions of previously approved updates - if you approve update x, and two months later there is a change made to that update, do you want to have to reapprove it?
5) Select where you want to store updates: choose local folder
6) Select whichever languages you are running
Done!
Now use the 'Synchronize server' page to set a schedule for downloading the updates, and use the 'approve updates' page to approve the updates for deployment

Lastly, use GPO to push the client settings out... "

Cheers for that. Where on the server are the clients actually picking the updates from? is servername.domain all that's reqd?
What about shares, or IIS? Are the clients using http to get the updates from the SUS server?
0
 
JammyPakCommented:
you don't need to create a share or do anything special in IIS - as long as the clients pickup the correct server in GPO, then they'll get served up the updates from that server.
0
 
chris_wrenAuthor Commented:
Jammypak, the GPO asks for the intranet address for the SUS server. What do I put here?
If I use http://servername in a web browser it just comes back with an error page.
Cheers
Chris
0
 
JammyPakCommented:
that's normal...

you still just need to put the server name in

the client doesn't need to load up the sus server in a browser, the updates are pulled by the client on the schedule set in the GPO. only the admin needs to load the \susadmin site to approve and manage things.
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now