WNUG Menu

Meeting Notes for October 6, 2005

Announcements

• Scott Worthington is the new chair with Dwain Wiltbank serving as co-chair
• November 3 rd meeting will focus on Security

Introduction to Security Patching Using Windows Server Update Services

Tyler Farmer, Senior Technology Specialists, Microsoft Education Solutions, (tylerf@microsoft.com)

• WSUS version 2 is a free download that is fully supported
• Comparison with SMS
• Easier to use
• SMS updates Windows and Office
• WSUS updates Windows, Office plus Exchange and SQL
• General description of process:
• WSUS server setup and WSUS administrator subscribes to update categories
• Server downloads approved updates
• Clients register with server & once registered the admin can create computer groups
• Admin approves update & applies to groups
• Client installs admin approved updates
• WSUS with AD & Group Policies
• Windows Update template; included with XP SP2 (wuau.adm)
• Computer Configuration | Windows update
• Numerous settings available allowing admin to control when updates applied, restart options, WSUS server, etc
• To determine if client updated run the following command: wuauclt /detectnow
• WSUS Admin screen
• Details on updates, computer synchronization status, update errors, updates needed, etc
• Synchronization options
• Select products
• Update classification (critical, important, etc)
• Update source
• Update files = download express installation files
• Auto approved options
• Updates approved for detection or installation
• Revisions to updates
• WSUS updates
• Computer options
• GP or not (AD or not)
• Deployment options
• Server options = single, multiple servers, child, etc

Shared Computer Toolkit

Tyler Farmer, Senior Technology Specialists, Microsoft Education Solutions, (tylerf@microsoft.com)

• Free download that is fully supported. Focus is on any computer intended to be used by more than one person, in particular computers open to the public. Shared Computer Toolkit Handbook
• Number of security settings & user restrictions
• Ability to create public account for shared access & configure the profile
• Windows Disk Protection
• Creates a ‘fake’ drive for copying settings
• Reboot wipes any changes made to settings
• Template for systems in AD
• SCTSetting.adm
• User Configuration, not computer configuration