Transcript MOC PowerPoint slide deck template

1
Chapter 5
MAINTAINING THE
OPERATING SYSTEM
Chapter 5: MAINTAINING THE OPERATING SYSTEM
2
CHAPTER OVERVIEW
 Understand the difference between service packs
and hotfixes and the process of applying both using
Windows Update, Automatic Updates, and group
policies.
 Use Microsoft Baseline Security Analyzer.
 Install and configure a Microsoft Software Update
Services server.
 Understand Per Server and Per Device or Per User
licensing.
 Configure licenses using the Choose Licensing Mode
tool in Control Panel and using the Licensing tool.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
WINDOWS OPERATING SYSTEM UPDATES
 Update
 A minor revision to a software product, usually
intended to address specific performance issues
rather than add new features
 Upgrade
 A major revision to a product that might include new
features as well as all of the existing patches for the
previous version of the product
3
Chapter 5: MAINTAINING THE OPERATING SYSTEM
SERVICE PACK
 A collection of patches and other updates that are
tested and packaged as a single unit.
 Service packs are cumulative: SP3 contains all
updates from SP1 and SP2.
 Service pack releases are not on a schedule.
4
Chapter 5: MAINTAINING THE OPERATING SYSTEM
SERVICE PACK RELEASES
 CD-ROM
 Entire service pack on CD
 Express download
 Analyzes system and downloads only required
components
 Network download
 Entire service pack in a single file
5
Chapter 5: MAINTAINING THE OPERATING SYSTEM
HOTFIXES
 Designed to address a specific issue
 Downloadable as a single executable
 Normally directly associated with a Knowledge
Base article
6
Chapter 5: MAINTAINING THE OPERATING SYSTEM
WHEN SHOULD YOU UPDATE?
7
Chapter 5: MAINTAINING THE OPERATING SYSTEM
8
UNINSTALLING SERVICE PACKS
 Requires considerable disk space
 Service packs can be uninstalled through
Add/Remove Programs in Control Panel
 Should be done only if the service pack installation
is causing new issues
Chapter 5: MAINTAINING THE OPERATING SYSTEM
USING MICROSOFT BASELINE SECURITY
ANALYZER
9
Chapter 5: MAINTAINING THE OPERATING SYSTEM
USING WINDOWS UPDATE
10
Chapter 5: MAINTAINING THE OPERATING SYSTEM
11
USING AUTOMATIC UPDATES
 Available in Windows Server 2003, Windows XP
(Service Pack 1), Windows 2000 (Service Pack 3).
 Default is to automatically download updates and
prompt the user to install them.
 Configured via the Automatic Updates tab in System
Properties. In Windows 2000, it is configured via the
Automatic Updates control panel.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
INSTALLING SERVICE PACKS MANUALLY
12
Chapter 5: MAINTAINING THE OPERATING SYSTEM
INSTALLING HOTFIXES MANUALLY
 Hotfix filenames are formatted as:
 OperatingSystem-KnowledgeBase#-Platform-
Language.exe
 Example:
 WindowsServer2003-KB823980-x86-ENU.exe
13
Chapter 5: MAINTAINING THE OPERATING SYSTEM
14
CHAINING HOTFIXES
 Use Qchain.exe to install multiple hotfixes at a
single time.
 Use /Z switch to prevent restarts.
 Qchain.exe ensures that the system uses the correct
version of that file when the installation is complete.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
SLIPSTREAMING
 Slipstreaming a service pack
 Slipstreaming hotfixes
15
Chapter 5: MAINTAINING THE OPERATING SYSTEM
USING GROUP POLICIES
16
Chapter 5: MAINTAINING THE OPERATING SYSTEM
17
USING MICROSOFT SOFTWARE UPDATE
SERVICES
 Allows software updates to be downloaded once for
the entire organization
 Provides administrative control over what updates
are applied to clients
 Reduces Internet usage
Chapter 5: MAINTAINING THE OPERATING SYSTEM
INSTALLING SUS
18
Chapter 5: MAINTAINING THE OPERATING SYSTEM
SYNCHRONIZING SUS
19
Chapter 5: MAINTAINING THE OPERATING SYSTEM
APPROVING UPDATES
20
Chapter 5: MAINTAINING THE OPERATING SYSTEM
CONFIGURING AUTOMATIC UPDATES
21
Chapter 5: MAINTAINING THE OPERATING SYSTEM
BUILDING SUS TOPOLOGY
 Multiple-server topology
 Strict parent/child topology
 Loose parent/child topology
22
Chapter 5: MAINTAINING THE OPERATING SYSTEM
SUS MONITORING
 On the server, SUS monitoring information can be
viewed through:
 Monitor Server page
 Synchronization Log, Approval Log, wutrack.bin file
 On the client, SUS-related information can be
viewed through:
 Windows Update Log
23
Chapter 5: MAINTAINING THE OPERATING SYSTEM
SUS SYSTEM EVENTS
 SUS-generated events are written to System log of
Event Viewer:
 Each time a synchronization is performed
 When updates are approved
24
Chapter 5: MAINTAINING THE OPERATING SYSTEM
TROUBLESHOOTING SUS
 Reloading the memory cache
 Restarting the synchronization service
 Restarting IIS
25
Chapter 5: MAINTAINING THE OPERATING SYSTEM
26
ADMINISTERING SOFTWARE LICENSES
 The End-User License Agreement (EULA) is a binding
contract that gives you the legal right to use a piece
of software.
 In an enterprise environment, managing software
licenses is critically important.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
27
OBTAINING A CLIENT ACCESS LICENSE
 A Client Access License (CAL) is required for each
user or device that will connect to the server.
 CALs are normally obtained in bundles (5, 10, 25,
50, 100).
 CALs are not a physical object, but an entitlement to
connect to a Windows network.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
28
PER SERVER LICENSING
 Each server permits a certain number of concurrent
connections.
 Once the limit is reached, connections are refused.
 Usually only practical in environments with a single
server.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
PER DEVICE OR PER USER LICENSING
 Each user or device requires a license.
 Licensed users or devices can connect to any
number of servers.
 Common in environments with multiple servers.
29
Chapter 5: MAINTAINING THE OPERATING SYSTEM
30
LICENSING TOOLS
 Licensing in Control Panel
 Manages licensing for a single computer running
Windows Server 2003
 Licensing in Administrative Tools
 Centralized control of licensing and license replication
in a site-based model
Chapter 5: MAINTAINING THE OPERATING SYSTEM
31
ADMINISTERING SITE LICENSING
 License Logging service assigns and tracks licenses.
 Licensing information is replicated to a centralized
licensing database.
 Use the Licensing tool in the Administrative Tools
program group to view and manage licensing for an
entire site.
Chapter 5: MAINTAINING THE OPERATING SYSTEM
THE SITE LICENSE SERVER
32
Chapter 5: MAINTAINING THE OPERATING SYSTEM
ADMINISTERING SITE LICENSES
33
Chapter 5: MAINTAINING THE OPERATING SYSTEM
LICENSE GROUPS
 A license group is a collection of users who share
one or more CALs.
 License groups are created when:
 A single user uses more than one device, such as a
computer.
 More than one user uses a single device, such as a
computer.
34
Chapter 5: MAINTAINING THE OPERATING SYSTEM
35
SUMMARY
 A service pack is a collection of updates that have
been tested together and approved for installation on
all computers.
 A hotfix is a patch that addresses a single issue.
Hotfixes are intended only for computers that perform
certain tasks or are experiencing a particular problem.
 Microsoft Software Update Services enables you to
centralize and manage the approval and distribution
of Windows critical updates and Windows security
rollups.
 Tracking and managing licenses and compliance is an
important part of an administrator’s job.