70-247 Series: Part 23

Configure the Fabric (27%)

Managing Fabric Updates in VMM

Windows Server Update Services (WSUS) 3.0 SP2 can be added to VMM to automate the patching of Hyper-V hosts and clusters. WSUS can be installed on the same server as Virtual Machine Manager (VMM) or on a different server. Installing WSUS on a different server is recommended when VMM is installed in a Highly-Available (HA) configuration. If WSUS is installed on a separate server, the WSUS console must be installed on the VMM server/s and the VMM service must be restarted.

How to Install WSUS for VMM

This process will cover how to install and configure WSUS for dedicated use by VMM.

Install WSUS Pre-requisites:

Import-Module ServerManager

Add-WindowsFeature Web-WebServer,Web-Asp-Net,Web-Windows-Auth,Web-Dyn-Compression,Web-Mgmt-Compat

See below:

clip_image001

Download and install WSUS 3.0 SP2

Download Link: http://www.microsoft.com/en-us/download/details.aspx?id=5216

clip_image002

clip_image003

clip_image004

clip_image005

clip_image006

clip_image007

clip_image008

clip_image009

clip_image010

clip_image011

clip_image012

clip_image013

clip_image014

clip_image015

clip_image016

Select the Products that are applicable to VMM and Hyper-V Hosts

clip_image017

clip_image018

clip_image019

clip_image020

clip_image021

clip_image022

We’re using a remote WSUS Server, so to prepare the VMM Server we need to install the WSUS Console and restart the VMM Service (I just restarted the server instead).

clip_image023

How to Add the WSUS Server to VMM

clip_image024

clip_image025

clip_image026

Updating WSUS Settings

Once a WSUS Server has been added to VMM, you should only manage the WSUS Server from VMM. To view and change settings, right-click the server and select properties.

clip_image027

Configuring an Update Baseline

After you've added a WSUS Server to VMM. Update management is performed by configuring update baselines. An update baseline is a set of updates with a scope e.g. Host, Host Group. Hosts are scanned for compliance and brought into compliance through remediation.

There are two sample baselines, but we won’t be using those, we're going to configure our own (see below for the sample baselines.

clip_image028

Let's create our own.

clip_image029

clip_image030

clip_image031

clip_image032

clip_image033

After clicking finish, you will need to accept the EULAs that apply to any updates. If you have any issues with an update, I suggest you remove it and add it to the baseline at a later stage (for example, once the EULA has been downloaded).

Scan for Compliance

clip_image034

Remediate Compliance Issues

clip_image035

Popular posts from this blog

Get local computer UUID/GUID using Windows Powershell

Use the following syntax to get the local computer's UUID/GUID using Windows Powershell: get-wmiobject Win32_ComputerSystemProduct  | Select-Object -ExpandProperty UUID Add -computername after the WMI class to find a remote computer's UUID, example: get-wmiobject Win32_ComputerSystemProduct -computername RANTPC | Select-Object -ExpandProperty UUID
Read more

gPLink and gPOptions

gPLink is a property for sites, domains and organisational units that contains a prioritised list of GPOs linked to the node. gPOptions is a property that contains all Block Policy Inheritance settings for the node. To manage GPO links on a node, you must have read and write access to the gPLink and gPOptions properties.
Read more

PSLoggedOn Getting Started on Windows Server 2008 R2

Image
PSLoggedOn is a tool I downloaded to allow me to find out which computers a user is currently logged on to. Getting it up and running wasn’t exactly easy. I’m running a Windows Server 2008 R2 test environment. The first error I encountered was: Error browing network: The list of servers for this workgroup is not currently available. Note: I kept the spelling mistake from the error message to make it easier to find via search engines. To get past this error, you have to enable and start the “Computer Browser” service. Then I started getting the error telling me that the Administrator is not logged on. That’s simply not true because I am logged onto another server (Name: ELARA): I turned the firewall OFF OFF OFF (It is a test network after all). I enabled Network Discovery and to do that I went on a service starting frenzy: DNS Client, Function Discovery Resource Publication, SSDP Discovery, and UPnP Device Host, Computer Browser After all that, I ran the script against the se
Read more