how to install WSUS 3.0 sp1

[anyweb]

The guide requires you to download the WSUS package from here and you must also download the Microsoft Report viewer redistributable.

 

This guide also assumes that you have setup and installed IIS in Windows 2008 and that you have configured and installed SQL 2008 or SQL 2005.

 

Please note: Since this guide was originally written, WSUS SP2 has been added as a role within Server 2008 R2 so if you are using Server 2008 R2 you can install WSUS Sp2 by adding the role.

 

 

Overview

 

WSUS 3.0 SP1 delivers important customer-requested management, stability, and performance improvements. Some of the features and improvements include:

 

* Support for Windows Server 2008.

* Support for SQL Server 2008.

* Enhanced bulk approval capability, preserving existing approvals.

* Support for separate proxy servers and ports for SSL and non-SSL traffic.

* Office Excel report export.

 

 

WSUS 3.0 SP1 can be installed alone, or as an upgrade of either WSUS 3.0 RTM or WSUS 2.0 SP1.

 

This package installs both the WSUS 3.0 SP1 Server and WSUS 3.0 SP1 Administration Console components, for all Windows Server 2003 SP1 supported languages. Additionally, the WSUS 3.0 SP1 client is included in all supported client platform languages. You must install the server components on a computer running Windows Server 2008 or Windows Server 2003 SP1 or later. You may install the Administration Console on a remote computer running Windows Server 2008, Windows Vista, Windows Server 2003 SP1, or Windows XP SP2.

 

WSUS 3.0 SP1 Server Installation on Windows Small Business Server 2003

 

If you are installing the WSUS 3.0 SP1 product on Windows Small Business Server 2003, follow the instructions in Installing Windows Server Update Services 3.0 on Windows Small Business Server 2003.

 

 

There are 4 common methods of deploying WSUS:

 

* Single WSUS server

* Multiple independant WSUS servers

* Multiple Internally synchronised WSUS servers

* Disconnected WSUS servers

 

A Single Wsus server would be suitable for a small or simple network. It will synchronise with Microsoft update and then distribute its updates to your servers/clients.

 

Multiple independant WSUS servers could be setup to synchronise with microsoft Update and configured to for example, update only one specific type of client, eg: XP clients or Vista, then another WSUS server in your organisation could be setup just to update your Server 2008 servers.

 

Multiple Internally synchronised WSUS servers is where you have multiple WSUS servers in your organisation but only one connects to Microsoft Update, this is called the Upstream WSUS server and all other WSUS servers (called the Downstream WSUS servers) synchronise via this WSUS server. The synchronisation methods can be either Autonomous or Replica.

 

Disconnected WSUS servers are not connected to the internet at all. You would typically utilise this setup in an organisation that doesn't have or allow internet access. The Microsoft Updates would have to be pulled down from another internet conencted WSUS server and then burned to cd or dvd and copied to the disconnected WSUS server.

 

Installation

 

 

Install the Report Viewer first

 

Double-click on the Report viewer exe, choose next to continue at the welcome screen

 

 

accept the license terms

 

 

click Install to install

 

once done click finish.

 

 

 

 

Install WSUS

 

 

Double click on the WSUS exe, choose next at the welcome screen

 

 

choose the Full Server installation

 

 

accept the license agreement

 

 

Select your update source (local or on windowsupdate)

 

 

now if you havn't installed SQL 2008 yet, then please do so as the next screen will allow us to pick between an internal windows database (first option) or to connect to our MSSQL database (default) second option.

 

Choose use existing database as below in the screenshot

 

 

it will hopefully successfully connect to your database, click next to continue

 

 

when prompted what IIS website to use, choose the default option (use the existing IIS website)

 

 

you'll see a summary click next to continue

 

 

that's it, all done, click Finish.

 

 

Note: if you are going to use SCCM to manage patch management, then do NOT run the WSUS configuration wizard below

 

The WSUS configuration wizard automatically starts after the Setup wizard completes. Because Configuration Manager 2007 SP1 manages the WSUS settings, you should exit the configuration wizard after it opens.

[anyweb]

Note: if you are going to use SCCM to manage patch management, then do NOT run the WSUS configuration wizard below

 

 

Starting WSUS for the first time

 

Click on Start/All Programs/Administrative tools/Microsoft Windows Server Update Services 3.0 SP1

 

this will start a wizard (pictured below) click next

 

 

choose to opt in or opt out (default is opt in)

 

 

Next you can choose your Upstream Server, I stayed with the default option

 

 

enter your proxy settings (if any)

 

 

click next and then start connecting

 

once the Wizard has synchronized information with the Microsoft Update web servers you can click next to continue

 

 

next you get to choose which languages to support

 

 

and which Microsoft Products to support by default all office versions and all windows versions are selected, remove those which you don't need as all of these updates etc will take up storage space

 

 

next you can choose what type of updates to download

 

 

pick a schedule to synchronise

 

 

finished !

 

 

review next steps and then click on Finish to end the wizard.

 

 

At this point you can now use the WSUS UI

 

 

 

 

 

 

Troubleshooting:

 

verify the following LOGS to see how WSUS installation went.

 

MWusSetup.log

WSUSSetup.log

WSUSSetupmsi_100211_2212.log

 

the last LOG will have it's name based upon the installation date/time as you can see. These logs will be found in the users AppData\Local\Temp folder

 

eg: if the user that installed WSUS was SMSadmin then these logs will be found here:

 

C:\Users\smsadmin\AppData\Local\Temp\

 

 

 

 

next steps >> how can I configure WSUS to deploy updates

[bulldozer]

excellent work!!!!

[inds]

WSUS configuration STEP BY STEP 3.0 SP1

WSUS_3.pdf

[ssjacky]

thanks buddy..

[donkey]

Hi

 

Thank you so much for this how to. I have installed WSUS 3 on server 2003 without a problem. My problem is that the administration console works but the website doesn't. It gives the error below.

 

Directory Listing Denied

This Virtual Directory does not allow contents to be listed.

 

Please help