Giáo trình ACNA - Chap05 potx

1 MAINTAINING THE OPERATING SYSTEM Chapter 5 Chapter 5: MAINTAINING THE OPERATING SYSTEM 2 CHAPTER OVERVIEW • Understand the difference between service packs and hot-fixes and the process of applying both using Windows Update, Automatic Updates, and group policies. • Use Microsoft Baseline Security Analyzer. • Install and configure a Microsoft Software Update Services server. • Understand Per Server and Per Device or Per User licensing. • Configure licenses using the Choose Licensing Mode tool in Control Panel and using the Licensing tool. Chapter 5: MAINTAINING THE OPERATING SYSTEM 3 WINDOWS OPERATING SYSTEM UPDATES • Update • A minor revision to a software product, usually intended to address specific performance issues rather than add new features • Upgrade • A major revision to a product that might include new features as well as all of the existing patches for the previous version of the product Chapter 5: MAINTAINING THE OPERATING SYSTEM 4 SERVICE PACK • A collection of patches and other updates that are tested and packaged as a single unit. • Service packs are cumulative: SP3 contains all updates from SP1 and SP2. • Service pack releases are not on a schedule. Chapter 5: MAINTAINING THE OPERATING SYSTEM 5 SERVICE PACK RELEASES • CD-ROM • Entire service pack on CD • Cost • Express download • Analyzes system and downloads only required components • Requires Internet connection • Network download • Entire service pack in a single .exe file • For network administrator Chapter 5: MAINTAINING THE OPERATING SYSTEM 6 HOTFIXES • Designed to address a specific issue • Downloadable as a single executable • Normally directly associated with a Knowledge Base article Chapter 5: MAINTAINING THE OPERATING SYSTEM 7 WHEN SHOULD YOU UPDATE? Chapter 5: MAINTAINING THE OPERATING SYSTEM 8 WHEN SHOULD YOU UPDATE? • Remain aware of new update releases • Determine which computers need to be updated • Test update releases on multiple system configurations • Deploy update releases on large fleets • Test and apply security patches Chapter 5: MAINTAINING THE OPERATING SYSTEM 9 UNINSTALLING SERVICE PACKS • Requires considerable disk space • Service packs can be uninstalled through Add/Remove Programs in Control Panel • Should be done only if the service pack installation is causing new issues • Stored in folder $ntservicepackuninstall$ Chapter 5: MAINTAINING THE OPERATING SYSTEM 10 USING MICROSOFT BASELINE SECURITY ANALYZER [...]... HOTFIXES MANUALLY • Hotfix filenames are formatted as: • OperatingSystem-KnowledgeBase#-PlatformLanguage.exe • Example: • WindowsServer2003-KB823980-x86-ENU.exe • Backup folder $NtUninstallKB823980$ Chapter 5: MAINTAINING THE OPERATING SYSTEM 15 CHAINING HOTFIXES • Use Qchain.exe to install multiple hotfixes at a single time • All hot-fix includes Qchain.exe • Use /Z switch to prevent restarts • Qchain.exe... ensures that the system uses the correct version of that file when the installation is complete • Can also use Update.exe /Z /U batch option • Update.exe /Z /U • WIndowsServer2003-KB123456-x86-ENU /Z /U • WIndowsServer2003-KB124686-x86-ENU /U Chapter 5: MAINTAINING THE OPERATING SYSTEM 16 SLIPSTREAMING • Slipstreaming a service pack • Slipstreaming hotfixes • Example: • Update.exe /s:DistributionFolder •... Install • Specify where clients obtain updates • Automatic update scheduling • Time 1 to 60 minutes • Next schedule if client is offline • No Auto-Restart for scheduled automatic updates Chapter 5: MAINTAINING THE OPERATING SYSTEM 26 BUILDING SUS TOPOLOGY • Multiple-server topology • Each SUS server synchronize with WUS • Strict parent/child topology • SUS servers synchronize with bridge head • Loose parent/child... be viewed through: • • • • Monitor Server page Synchronization Log Approval Log IIS statistic file “wutrack.bin” • On the client, SUS-related information can be viewed through: • Windows Update Log Chapter 5: MAINTAINING THE OPERATING SYSTEM 28 SUS SYSTEM EVENTS • SUS-generated events are written to System log of Event Viewer: • Each time a synchronization is performed • • • • • • • Unable to connect... cache • No new update • Restarting the synchronization service • Possible restart due to problem • Restarting IIS Chapter 5: MAINTAINING THE OPERATING SYSTEM 30 ADMINISTERING SOFTWARE LICENSES • The End-User License Agreement (EULA) is a binding contract that gives you the legal right to use a piece of software • In an enterprise environment, managing software licenses is critically important Chapter... Licensing in Control Panel • Manages licensing for a single computer running Windows Server 2003 • Licensing in Administrative Tools • Centralized control of licensing and license replication in a site-based model Chapter 5: MAINTAINING THE OPERATING SYSTEM 35 ADMINISTERING SITE LICENSING • License Logging service assigns and tracks licenses • Licensing information is replicated to a centralized licensing . MANUALLY • Hotfix filenames are formatted as: • OperatingSystem-KnowledgeBase#-Platform- Language.exe • Example: • WindowsServer2003-KB823980-x86-ENU.exe • Backup folder $NtUninstallKB823980$ Chapter. Update.exe /Z /U batch option • Update.exe /Z /U • WIndowsServer2003-KB123456-x86-ENU /Z /U • WIndowsServer2003-KB124686-x86-ENU /U Chapter 5: MAINTAINING THE OPERATING SYSTEM 16 SLIPSTREAMING • Slipstreaming. THE OPERATING SYSTEM 2 CHAPTER OVERVIEW • Understand the difference between service packs and hot-fixes and the process of applying both using Windows Update, Automatic Updates, and group policies. • Use