WorkSheet

LP03: Software Administration

When you shut down your school laptop, sometimes you receive the message
that Windows is currently installing updates like what is shown below. Why is it
important for Windows to update these updates?

Q1.

Answer:  

Do you have the option to stop the installation of these updates on your school
Q2.
laptop? Why?

Answer:

What about your home PC/laptop that are not joined to your school domain?
Q3.
How do you obtain the updates for your Windows system?

Answer:

Windows Server Update Service

The Windows Server Update Service (WSUS) enables information technology

administrators to deploy the latest Microsoft product updates. By using WSUS,
administrators can fully manage the distribution of updates that are released through
Microsoft Update to computers in their network.

WSUS Deployment Scenarios

WSUS is flexible enough to meet the update management needs of a wide range of
organizations — from small businesses with dial-up connectivity to the largest businesses
with thousands of users distributed across multiple sites. Depending on the size of the
organization, its location, and its connectivity infrastructure, administrators can determine
the most efficient way to scale out their WSUS servers — this might be one or many WSUS
servers.

Source: https://technet.microsoft.com/en-us/library/cc708628(v=ws.10).aspx

Single WSUS Server (Small-Sized or Simple

Network)

Multiple WSUS Servers (Medium-Sized or More Complex Network)

Multiple Independent WSUS
Servers
Administrators can deploy
multiple servers that are
configured so that each server is
managed independently and so
that each server synchronizes its
content from Microsoft Update
Multiple Internally Synchronized
WSUS Servers
Administrators can deploy
multiple servers running WSUS
that synchronize all content
within their organization’s
intranet.
Disconnected WSUS Servers
(Limited or Restricted Internet
Connectivity)
If corporate policy or other
conditions limit computer access
to the Internet, administrators
can set up an internal server
running WSUS, as illustrated in
the following figure.

Q4. Which ONE of the above deployment scenarios is appropriate in cases where one
 server running WSUS is configured to deploy updates only to client computers
running a certain operating system (such as Windows 10), while another server is
configured to deploy updates only to client computers running another operating
system (such as Windows 7)?

Answer:

Using Computer Groups

Computer groups permit you to test and target updates to specific computers. There are
two default computer groups: All Computers and Unassigned Computers. By default, when
each client computer first contacts the WSUS server, the server adds that client computer to
both groups.

You can create as many custom computer groups as you need to manage updates in your
organization. As a best practice, create at least one computer group to test updates before
you deploy them to other computers in your organization.

Source: https://msdn.microsoft.com/en-us/library/hh328559(v=ws.10).aspx