TABLE OF CONTENTS Deploying Windows Server Update Services(WSUS) on anything but a one-server network introduces a layer of complexity that requires furtherresearch and reading. This chapter walks through the many features, enhancements, and gotchas that you will confront and take advantage of as you create an enterprise patch managementinfrastructure based on WSUS.
You may find that the size of your network and the number of clients you have requires thatyou install and deploy more than one WSUS server to support your network. Fortunately, Microsoftbuilt into WSUS the ability to synchronize one WSUS server with another, instead of having to grabthe same downloads from Microsoft Update every time. By chaining these servers together, you createa hierarchy in which one machine, known as an upstream Software UpdateServices (SUS) server, host updates and metadata for all subordinate servers known as downstream servers. It s important to note that when youconfigure such a chain of servers, the upstream server shares only updates and metadata with itsdownstream servers during synchronization, so that other configuration information such as computergroup information or update approval remain machine-specific. If you want to set up WSUS todistribute information about which updates are approved, research it using replica mode.
To chain a group of servers together, use the following procedure (see Figure5.1):
On the WSUS console toolbar, click Options, and then click Synchronization Options.
In the Update Source box, click Synchronize from an upstream WindowsServer Update Services server.
Enter the server name and port number in...
