No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FusionAccess V100R006C20 Cloud Classroom Solution Product Documentation 10 (Single-Classroom Scenarios)

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Installing the Patch Service Software

Installing the Patch Service Software

Scenarios

Install the WSUS patch service software on the VM where the antiVirus is deployed.

Prerequisites

  • The antiVirus and the TCM servers have been added to the user domain.
  • The connection between the infrastructure VM and the Internet or upper-layer patch server is normal. Otherwise, the patch service software cannot be installed.
NOTE:

If the system does not support deployment of the patch server software, visit the Microsoft website to download and manually install operating system patches periodically according to the security patch bulletin published by Microsoft.

To view the patch release bulletin, visit http://support.huawei.com/enterprise and choose Support > Bulletins > Service Bulletins > Software Bulletin.

To download patches, visit http://www.microsoft.com/en-us and choose Downloads > Download Center.

Data

Table 5-15 lists the data to be obtained before this operation.

Table 5-15 Data required for installing the patch server

Parameter

Description

Example Value

Server name and port number

  • If an upper-layer patch server is used to update patches for the site, enter the IP address and port number of the upper-layer patch server. The patch server communicates with the upper-layer patch server to download patches.
  • If no upper-layer patch server is used, leave this parameter unspecified.

192.168.10.13:80

Proxy server name and port number

  • If a proxy server is used to access the Internet or upper-layer patch server, enter the IP address and port number of the proxy server. The patch server communicates with the Internet or upper-layer patch server to download patches through the proxy server.
  • If no proxy server is used, leave this parameter unspecified.

192.168.10.100:80

Username and password

Specifies the username and password for accessing the proxy server.

-

Domain

Specifies the domain to which the proxy server user belongs.

vdesktop.huawei.com

Domain account and password of each server of FusionAccess

Specifies the domain account and password for logging in to each server of FusionAccess.

-

Procedure

Install Windows Server update services.

  1. Log in to the antiVirus server using the domain account.
  2. Click on the taskbar.

    The Server Manager window is displayed, as shown in Figure 5-4.

    Figure 5-4 Server Manager

  3. In the middle of the page, click Add roles and features.

    The Add Roles and Features Wizard dialog box is displayed.

  4. Click Next three times.
  5. In the Roles dialog box, select Windows Server Update Services, In the displayed dialog box, click Add Features, and click Next, as shown in Figure 5-5 and Figure 5-6.

    Figure 5-5 Select server roles
    Figure 5-6 Add Roles and Features Wizard

  6. In the Features dialog box, use the default settings, and click Next.
  7. On the Web Server Roles (IIS) page, click Next.
  8. On the Select roles services page, use the default settings, and click Next, as shown in Figure 5-7.

    Figure 5-7 Select roles services

  9. On the Windows Server Update Services page, click Next, as shown in Figure 5-8.

    Figure 5-8 Windows Server Update Services

  10. On the Select role services page, use the default settings and click Next, as shown in Figure 5-9.

    Figure 5-9 Select role services

  11. On the Content location selection page, select Store updates in the following location, enter the path to the update source, and click Next, as shown in Figure 5-10.

    NOTE:

    The disk space of the update source must be at least 6 GB.

    Figure 5-10 Select content location

  12. On the Confirm installation selections page, click Install, as shown in Figure 5-11.

    Figure 5-11 Confirm installation selections

  13. The installation progress is displayed. When Installation succeeded is displayed, click Close.

Configure network connections.

  1. In the navigation tree of the Server Manager window, choose WSUS.
  2. In the SERVERS area in the middle of the page, right-click server name, and choose Windows Server Update Services from the shortcut menu.

    The Complete WSUS Installation dialog box is displayed, as shown in Figure 5-12.

    Figure 5-12 Complete WSUS Installation

  3. Click Run.

    The system configures tasks after installation.

  4. After the installation is complete, click Close.

    The Windows Server Update Services Configuration Wizard window is displayed.

  5. Click Next.

    The Join the Microsoft Update Improvement Program window is displayed.

  6. Click Next.

    The Choose Upstream Server window is displayed.

  7. Select the upper-layer server.

    • To update patches from the Internet, select Synchronize from Microsoft Update.
    • To update patches from an upper-layer patch server, select Synchronize from another Windows Server Update Services server and set parameters as shown in Figure 5-13.

      Set the following parameters:

      • Server name: Enter the IP address of the upper-layer patch server.
      • Port number: Retain the default value 8530.
      • Deselect other parameters.
    Figure 5-13 Choose Upstream Server

  8. Click Next.

    The Specify Proxy Server window is displayed.

  9. Check whether a proxy server is used to access the Internet.

  10. Select Use a proxy server when synchronizing and set the following parameters:

    • Proxy server name: Enter the proxy server IP address.
    • Port number: Retain the default value 80.

  11. Select Use user credentials to connect to the proxy server and set the following parameters:

    • User name: Enter the username for logging in to the proxy server.
    • Domain: Enter the domain to which the user belongs.
    • Password: Enter the password for logging in to the proxy server.

  12. Click Next.

    The Connect to Upstream Server window is displayed.

  13. Click Start Connecting.

    It takes about 3 minutes to connect to the proxy server.

  14. Click Next.

    The Choose Languages window is displayed.

  15. Select English and click Next.

    The Choose Products window is displayed.

  16. Select Windows server 2012 R2 and click Next.

    The Choose classifications window is displayed.

  17. Click Next.

    The Configure Sync schedule window is displayed.

  18. Select Synchronize automatically and set the following parameters:

    • First synchronization: Set the first update time.
    • Synchronizations per day: Set the number of update times each day.

  19. Click Next.

    The Finished window is displayed.

  20. Click Finished.

    The configuration is complete.

    NOTE:

    The modification cannot be saved during the patch updating process.

Set Windows components patch update policies.

  1. Log in to the standby AD server using the domain administrator account.
  2. On the taskbar in the lower left corner, right-click , and enter gpedit.msc in the Run text box, and press Enter.

    The Local Group Policy Editor page is displayed.

  3. In the navigation tree, choose Computer Configuration > Administrative Templates > Windows components > Windows Update.

    The Window Update pane is displayed on the right.

  4. In the right pane, double-click Configure Automatic Updates.

    The Configure Automatic Updates dialog box is displayed, as shown in Figure 5-14.

    Figure 5-14 Configure Automatic Updates

  5. Select Enabled in Configure Automatic Updates, and set the following parameters:

    • Configure automatic updating
    • Scheduled install day
    • Scheduled install time
    NOTE:

    Do not set the same update time for the components. A one-day interval is recommended for one patch update.

  6. Click OK.

    The Configure Automatic Updates dialog box is closed.

  7. In the right pane, double-click Specify intranet Microsoft updates service location.

    The Specify intranet Microsoft updates service location dialog box is displayed.

  8. Select Enabled in the Specify intranet Microsoft updates service location area and set the following parameters:

    • Set the intranet update service for detecting updates: Enter the service IP address of the patch server.
    • Set the intranet statistics server: Enter the service IP address of the patch server.

  9. Click OK.

    The Specify intranet Microsoft updates service location dialog box is closed.

  10. Close the Group Policy Management Editor window.
  11. Repeat Step 33 to Step 43 to set patch update policies for the following servers.

    • Active AD\DNS\DHCP server
    • TCM server

Approve patches.

  1. Log in to the patch server using the domain account.
  2. Choose > Administrative Tools > Windows Server Update Services.

    The Update Services window is displayed.

  3. Choose Patch server name > Updates > All Updates, as shown in Figure 5-15.

    Figure 5-15 All Updates

  4. In the middle pane, select Unapproved from the Approval drop-down list, select Any from the Status drop-down list, and click Refresh.

    Information about the required and unapproved patches is displayed.

  5. Right-click a patch and choose approve from the shortcut menu.

    The Approve Updates dialog box is displayed.

  6. Right-click All Computers and choose Approved for Install from the shortcut menu.
  7. Repeat Step 49 to Step 50 to approve all patches.

Check whether patches can be automatically updated from the patch server.

  1. Log in to the standby AD server using the domain administrator account.
  2. On the taskbar in the lower left corner, right-click , and enter cmd in the Run text box, and press Enter.

    The CLI is displayed.

  3. Run the following command to update the system:

    wuauclt.exe /detectnow
    NOTE:

    After the command is executed, a message is displayed in the lower right corner of the desktop, reminding you of updating patches.

Check the patch update status.

  1. In the Update Services window, choose Reports in the navigation tree.

    The Reports window is displayed.

  2. Click Update Status Summary in the middle pane.

    The Updates Report window is displayed.

  3. Specify the filter criteria, for example, select Include updates in these classifications, and click Run Report on the toolbar.
  4. Check the status of each patch in the Patch server name Update Report pane.

    The update status information is displayed.

Translation
Download
Updated: 2019-04-25

Document ID: EDOC1100010651

Views: 27291

Downloads: 168

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next