SUS

[Rich]

We are in the process of upgrading to Windows XP
(actually the "pre" process) and are trying to figure out
a way to apply the security patches and updates and have
come across the SUS. Does anyone use this? From what I've
gathered so far, it uses HTTP to push the updates to the
PCs/Workstations. Does the server require a user
license/CAL for each machine that will be updated, or no
because it is using HTTP? Does it have to be a dedicated
server, or can it be any Windows 2000 SP2 server
(possibly one that's being used for something else also)?
Is this setup a difficult process (we have an MCSE on
site, but I'll probably be setting this up and have
limited experience on the Windows Server side of things).
Any responses are appreciated.
Thanks,
Rich

 

[Torgeir Bakken (MVP)]

We are in the process of upgrading to Windows XP
(actually the "pre" process) and are trying to figure out
a way to apply the security patches and updates and have
come across the SUS. Does anyone use this? From what I've
gathered so far, it uses HTTP to push the updates to the
PCs/Workstations. Does the server require a user
license/CAL for each machine that will be updated, or no
because it is using HTTP?
No.


Does it have to be a dedicated
server, or can it be any Windows 2000 SP2 server
(possibly one that's being used for something else also)?

It need to be a Win2k Server (or Win2k3 Server) with IIS installed.

Supports Win2k, WinXP and Win2k3 clients only. SP1 for WinXP and SP3/4 for
Win2k installs the WU/SUS client as default.

Is this setup a difficult process

Not very. If you have other applications that uses the IIS on the server, just
be carefull about the IIS lockdown tool that will be run as part of the SUS
installation.

Take a look at the White Papers here:

Microsoft Software Update Services (SUS)
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Patch Management Using Microsoft Software Update Services - Operations Guide
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp

Note that the current version will only install critical updates and security
rollup packages (SRPs), as well as SP4 for Win2k and SP1 for WinXP.

A new version is in the works:
http://groups.google.com/[email protected]


Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the not so good Web
interface to access the newsgroups:
http://www.microsoft.com/windowsser...t.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm

 

[IBTerry [MSFT]]

SUS is a free download/tool. You will need a server w/ IIS to do the
install.
It is pretty easy to use...especially in a active diretory domain.

Software Update Services Server 1.0 with Service Pack 1
http://www.microsoft.com/downloads/details.aspx?FamilyId=A7AA96E4-6E41-4F54-
972C-AE66A4E4BF6C&displaylang=en

Software Update Services Deployment White Paper
http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx

You may also need the following updated SUS client...It can be deployed via
AD group policy if necessary.
http://www.microsoft.com/windows2000/downloads/recommended/susclient/default
.asp

Hope this helps,

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

I use SUS deployed through AD GPO. It was a simple setup and you do not have to be an MCSE to configure it. The white paper is easy to follow. I would recommend it.