Overview

Introduction

Welcome to the Manage Updates with Windows Server Update Services Practice Lab. In this module you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercises:

  • Exercise 1 - Configure Windows Server Update Services
  • Exercise 2 - Create Computer Groups and Approve Updates
  • Exercise 3 - Configure Group Policy Object for WSUS Clients

After completing this lab, you will be able to:

  • Install Windows Update Services
  • Configure system settings of Windows Update Services
  • Perform manual synchronization of Windows Update Services
  • Create computer groups
  • Approve an update
  • Create Group Policy Objects to control distribution of updates to Windows clients
  • Verify the application of Group Policy on a Windows client

Exam Objectives

The following exam objectives are covered in this lab:

  • Understand updates - Windows Update, Windows Server Update Service

Lab Duration

It will take approximately 60 minutes to complete this lab.

Exercise 1 - Configure Windows Server Update Services

Windows Server Update Services (WSUS) provides a cost-effective patch management solution to rollout updates to computers in a corporate network. WSUS is an installable feature in Windows Server 2016 and can be further customized based on the system requirements of an organization to efficiently deploy updates to Windows clients. When Update services server is synchronized and the updates from Microsoft are downloaded, the distribution of software updates targeted to Windows domain workstation is streamlined with the use of Group Policy Objects.

In this exercise, you will install and configure Windows Server Update Services on a domain member server.

Exercise 2 - Create Computer Groups and Approve Updates

The computers node in WSUS administration tool provides an overview of the status of Windows devices when it comes to managing updates. There are two groups namely All Computers and Unassigned Computers. By default, Windows clients are members of the All Computers group. Computer groups enable you to target updates to specific computers for updates. Although not a requirement, you can create custom groups and assign computers to them for management purposes. In this exercise you will go through the steps to create a group and approve an update for a Windows device.

Exercise 3 - Configure Group Policy Object for WSUS Clients

Group Policy Object (GPO) is a change and configuration management built into the Windows operating system. GPO is used for enforcing rules in the computer configuration and user environment. For example, restrictions on the program types that can execute on a Windows computer is enforceable via Software Restriction Policy or AppLocker. Likewise, a Windows user can be prevented from accessing particular Control Panel settings such as display as a matter of corporate desktop policy.

In a similar way, GPO can be used to control the distribution of updates to Windows devices in an Active Directory domain. In this exercise, you will implement policies to deploy updates to domain workstations.

Comprehensive Learning

See the full benefits of our immersive learning experience with interactive courses and guided career paths.