using vNext in a LAB - Part 9. Configuring SUP

[anyweb]

In Part 1. of this series we Installed vNext.

In Part 2., we then Configured vNext to use the New AD Site as a boundary and Configured Discovery Methods in vNext.

In Part 3, we installed the Reporting Point Role along with some additional roles and configured them.

In Part 4 we configured the client Agents and deployed the vNext Client.

In Part 5 we deployed an Application to All Users.

In Part 6 we added Windows Deployment Services, added the PSP role, added the Windows 7 Enterprise image, and updated our boot image for Deploying Windows 7.

In Part 7 we created our Build and Capture Task Sequence, enabled the Network Access Account, Advertised (Deployed) the Task Sequence, and created a new hyper-v virtual machine for capturing the wim on.

In Part 8 we installed WSUS and then the SUP and SLP roles.

 

Now we will configure add some products to get sync info about, and target some updates to collections.

 

Step 1. Select some Products.

 

In the Wunderbar click on Administration. Select Site Operations, Sites and then Right click our Site Server and click Properties.

 

 

When the properties appear, select the Component Configuration Tab, Select Software Update Point and click on Edit.

 

 

Click on the Products tab and scroll down, select the following products.

 

 

• Windows 7
  
• Windows Server 2008 R2
  
• Windows Server 2008
  

 

Click Apply when done.

 

 

Then click Ok and Ok again.

[anyweb]

Step 2. Run a Synchronisation

 

In the Wunderbar, click on Software Library, Select Software Updates, All Updates, note that 0 items appear, Click on Run Synchronization in the Tasks pane.

 

 

You will be prompted to review the sms_wsus_sync_manager log to get confirmation, answer Yes.

 

 

In the Wunderbar, click on Monitoring, system Status, Component Status, Select our SMS_WSUS_SYNC_MANAGER component, right click and choose Show Messages, All. Click Ok to the 1 day prompt.

 

 

Look for the Message ID 6702 Sync Done message,press F5 to refresh while waiting...

 

 

Once the Sync is done, and you've verified it in the logs, in the Wunderbar click on Software Library, Software Updates, All Updates. You should see hundreds of updates listed like so

 

[anyweb]

Step 3. Create a new Search Folder

 

Right click on All Updates, choose Search Folder

 

 

click on New

 

 

select the following options

 

Bulletin ID

Expired

Superseded

Product

 

click Add Selected when done

 

 

Click on Bulletin ID, when the window appears, type in the value MS and change Equals to Starts With

 

 

for Expired and Superseded, select No as the value, and for Product select Windows 7, give your search folder the name Windows 7 Security Updates

 

 

click ok and ok again.

 

Notice the number of updates changes to much less than above, as we have filtered them to only show Windows 7 Security Updates that are not expired or superseded. Now we have 85 updates (Windows 7 security Updates)

 

[anyweb]

Step 4. Deploy our Windows 7 Updates

 

We want our Windows 7 computers that are being deployed to get these new updates. So let's target both the Unknown Computers collection and All Windows 7 computers collection with these updates.

 

Select the first update in the list, scroll down and select the last so that all are selected (you can press CTRL and A to select All). Notice that all items are now selected

 

 

right click and choose Deploy

 

 

on the General screen, select browse and browse to the All Unknown computers collection

 

 

set the Intent to Required (this makes the deployment mandatory)

 

 

set the Schedule, and make sure to choose Set A Deadline

 

 

set your User Experience options

 

 

set your Alert options, I entered 95%

 

 

review your download settings (leave as default)

 

 

for Specify the Package to use, enter the following details (it's a new deployment package)

 

 

select our VNEXT dp by click on browse, Change to Distribution Points, vnext

 

 

select the download from internet option

 

 

select English as the language, click next at the summary, and review the confirmation

 

done !

 

[anyweb]

Step 5. Create All Windows 7 collection

 

In the wunderbar click on Assets and compliance and select Device Collections, click on Create Collection in the Tasks Pane

 

 

give the collection a name, All Windows 7

 

 

fill in the query with this

 

select *  from  SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%"

 

 

success !

 

[anyweb]

Step 6. Deploy the Windows 7 updates to our new collection

 

repeat step 4 using the All Windows 7 collection we created above, except name the deployment Windows 7 2010 Baseline. Any Windows 7 client that you have running will now receive these new policies and the All Windows 7 targetted deployment will mean that these updates are deployed, you can review them being installed in the Installation Status tab of Software Center.

 

 

To Summarise, we created Two Software Update deployments, one to the All Unknown Computers (this targets Windows 7 updates to computers getting deployed via OSD) and the other to All Windows 7 Computers.

 

 

Step 7. Review our Deployment Settings.

 

You can review these two Deployments (advertisements or Deployment Management Tasks if you are thinking the same way as before with SCCM 2007) by Selecting Update Groups

 

 

if you select one Deployment (1.)and then click on the Deployment Tab (2.), Right click on Microsoft Updates below, and select Properties (3.).

 

 

now you can review/change settings of the original Deployment by selecting the various tabs.

 

 

click Cancel to exit.

 

 

Step 8. Rename our Update Group

 

Right click on our original Update Group Deployment called Update Group.... Choose Properties

 

 

when the properties appear, Mark the Name, right click, choose Cut,

 

 

Paste the information that you Cut above into the Description Field (so that you know when the Deployment was made) and give it a new, meaningful name like All Windows 7 Updates for Unknown Computers, click apply then ok.

 

 

Notice how our Software Updates Deployments look now...