Win2008 Lab Basic

Smith Nguyen Studio.
TRUNG TM O T O M NG MY TNH NH T NGH

105 B Huy n Thanh Quan 205 V Th Su , Q3, TP. HCM
Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com
1. Xy d ng Domain Controller tch h p DNS server (th c hi n trn Server)

C TIU: Xy d ng Domain Controller tch h p DNS server & B sung d li u DNS
TH C HI N:
Log on user Administrator
B1. C u hnh thng s IP:
Start > Settings > Network Connections
a s Network Connections: Click ph i

card CROSS > Properties
01-1
http://www.facebook.com/SmithNguyenStudio

p tho i CROSS Properties:

- Xa d u check Internet Protocol
Version 6
- Ch n Internet Protocol Version 4
> Properties
p tho i Internet Protocol Version 4

Properties: Nh p cc thng s IP nh hnh
i > OK
01-2

p tho i CROSS Properties: Close

a s Network Connections: Click ph i
card LAN > Properties
p tho i LAN Properties:

Version 6
Ch n Internet Protocol Version 4 >
Properties
01-3


Properties: Nh p cc thng s IP
Ch :
- IP address
: 192.168.P.L
- Subnet Mask
: 255.255.255.0
- Default Gateway
: 192.168.P.200
Trong P: s phng lab, L: s trn
monitor PC
V d : phng 15 my s 23 s ph i nh p cc
thng s :
- IP address
: 192.168.15.23
- Subnet Mask
: 255.255.255.0
- Default Gateway
: 192.168.15.200
Ch n OK sau khi nh p cc thng s
p tho i LAN Properties: Close

ng c a s Network Connections.
B2. Ki m tra thng s IP:
Start > Run
01-4

p tho i Run: Nh p l nh cmd > OK
a s Administrator...cmd.exe: Nh p cu l nh ipconfig /all > nh n phm Enter
Quan st thng tin IP
ng c a s Administrator...cmd.exe
B3. Ci t Active Directory Domain services v DNS service:
Start > Run
p tho i Run: Nh p l nh DCPROMO > OK
01-5

Ch giy lt khi h th ng th c hi n cc b
c kh i t o
p tho i Welcome to the Active

Directory
Domain
Services
Installation Wizard: nh d u ch n
Use advanced mode installation >
Next
p tho i Choose a Deployment

Configuration:
nh d u ch n
Create a new domain in a new
forest > Next
01-6

p tho i Name the Forest Root

Domain:
Nh p
tn
NhatNgheIT.edu > Next
Ch giy lt khi h th ng th c hi n b
c ki m tra
p tho i Domain NetBIOS Name:

Next
01-7

p tho i Set Forest Functional

Level: ch n Windows Server 2008
> Next
p tho i Additional Domain

Controller Options: Gi nguyn
u check DNS server > Next
p tho i Active Directory Domain

Services Installation Wizard: Yes
01-8

p tho i Location for Database,

Log Files, and SYSVOL: Next
p tho i Directory Services

Restore
Mode
Administrator
Password: L n l t nh p vo 02
khung: P@ssword > Next
01-9

p tho i Summary: Quan st &

ki m tra cc thng tin khai bo >
Next
Ch giy lt
ci t
h th ng th c hi n
p tho i Completing the Active

Directory
Domain
Services
Installation Wizard : Finish
01-10

p tho i Active Directory Domain Services

Installation Wizard: Restart Now
Khi server kh i
ng xong: Qu trnh ci
t Active Directory Domain Services hon t t
B4. B sung d li u DNS service:

Start > Programs > Administrative Tools > Server Manager
a s Server Manager: Ch n Roles> Ch giy lt
h th ng c p nh t thng tin
01-11

Theo
ng d n nh hnh d
i > click ph i Reverse Lookup Zone > New Zone
p tho i Welcome to the New

Zone Wizard: Next
p tho i Zone Type: Gi nguyn

a ch n Primary zone & Store
the zone in Active Directory >
Next
01-12

p tho i Active Directory

Replication Scope: Next
p tho i Reverse Lookup Zone

Name: Ch ch n IPv4 Reverse
Lookup Zone > Next
p tho i Reverse Lookup Zone

Name:
Nh p
Network
ID:
192.168.1 > Next
01-13

p tho i Dynamic Update: gi

nguyn l a ch n Allow only
secure dynamic update > Next
p tho i Completing: Finish
Start > Run

a s Administrator...cmd.exe: Nh p cu l nh ipconfig /registerdns > nh n phm Enter
ng c a s Administrator...cmd.exe
01-14

a s Server Manager: Theo
ng d n > click ph i zone s 1.168.192.in-addr.arpa > Refresh
Hon t t qu trnh b sung d li u DNS.
01-15

2. Ci
t v c u hnh DHCP Server (th c hi n trn Server)
C TIU: Ci
t DHCP Server role; c u hnh DHCP scope & cc option
TH C HI N:
B1. Ci t DHCP service:
a s Server Manager: Click ph i Roles > Add Roles
p tho i Before You Begin: Next
02-1

p tho i Select Server Roles: ch n DHCP Server > Next
p tho i DHCP Server: Next
02-2

p tho i Select Network Connection Bindings: Ch
nh d u ch n 192.168.1.1 > Next
p tho i Specify IPv4 DNS Server Settings: Nh p Preferred DNS: 192.168.1.1 > Verify
02-3

p tho i Specify IPv4 DNS Server Settings: Gi tr Preferred DNS:

(Valid) > Next
c xc nh n h p l
p tho i Specify IPv4 WINS Server Settings: Ch n WINS is not required >Next
02-4

p tho i Add or Edit DHCP Scopes: Next
p tho i Configure DHCPv6 Stateless Mode: Ch n Disable DHCPv6 stateless mode >
Next
02-5

p tho i Authorize DHCP Server: Gi l a ch n m c
nh Use current credentials > Next
p tho i Confirm Installation Selections: Install
02-6

Qu trnh ci
p tho i Installation Results: Close
02-7

B2. C u hnh DHCP scopes:

a s Server Manager: theo
ng d n > Click ph i pc
th y c l nh Unauthorize th b qua b c ny)
.NhatNgheIT.edu > Authorize (N u
ng d n > Click ph i Ipv4 > New Scope
02-8

p tho i Welcome to the New

Scope Wizard: Next
p tho i Scope Name: Nh p tn

LAN 1 > Next
p tho i IP Address Range: Nh p

dy IP nh hnh d i > Next
02-9

p tho i Add Exclusion: Next
p tho i Lease Duration: Next
p tho i Configure DHCP

Options: Gi nguyn l a ch n
Yes, I want to > Next
02-10

p
tho i
Router
(Default
Gateway:
Nh p
thng
s
192.168.1.1 > Add > Next
p tho i Domain Name and DNS

Server:
-
Nh p
Parent
NhatNgheIT.edu
domain:
Nh p
IP
address:
192.168.1.1 > Add > Next
02-11

p tho i WINS Servers: Next
p tho i Activate Scope: Gi

nguyn l a ch n Yes, I want >
Next
02-12

p tho i Completing: Finish
t qu
02-13

3. C u hnh WS thnh Domain Member (Join domain - th c hi n trn WS)

C TIU: C u hnh Client Windows Vista: Chuy n giao di n thnh Classic, c u hnh IP
& join domain
ng
TH C HI N:
Chuy n giao di n thnh Classic
Click ph i Start > Properties
p tho i Taskbar and Start Menu Properties:

Ch n Classic Start Menu > OK
03-1

t qu
B1. C u hnh WS xin IP t DHCP server:

Start > Settings > Network Connections
03-2

a s
Network Connections:
Click ph i card LAN > Disable
a s
Network Connections:
Click ph i card CROSSS >
Properties
03-3

p tho i CROSS Properties:

Version 6
- Ch n Internet Protocol Version 4 >
Properties

Properties:
nh d u ch n Obtain an IP
address automatically
nh d u ch n Obtain DNS server
address automatically > OK
p tho i CROSS Properties: Close
03-4

B2. Quan st k t qu :
Start > Run
a s Administrator...cmd.exe: Nh p cu l nh ipconfig /all > nh n phm Enter
B3. Khai bo Domain:

Trn Desktop: Click ph i icon Computer > Properties
03-5

p tho i System: Ch n Change settings
p tho i System Properties: tab Computer Name > Change
03-6

p tho i Computer Name / Domain

Changes: Ch n Domain > nh p domain
name: NhatNgheIT.edu > OK
p tho i Windows Security: Nh p user

name KT1 & password P@ssword > OK

Changes: OK

Changes: OK
03-7

p tho i System Properties: Close
p tho i Microsoft Windows: Restart

Now
Sau khi WS kh i ng xong, qu trnh gia
nh p domain hon t t.
03-8

4. T o cc domain object (th c hi n trn Server)

C TIU:
o Organizational Unit (OU), User, Group
- Add user vo group
- Qu n l OU
TH C HI N:
B1. T o Organizational Unit User Group
Unit.
ng d n > click ph i NhatNgheIT.edu > New > Organizational
p tho i New Object - Organizational Unit: Nh p tn Lab > OK
04-1

a s Server Manager: click ph i Lab > New > User
p tho i New Oiect - User: Nh p cc

thng tin nh hnh d i > Next
04-2

p tho i New Oiect - User: Nh p

password v confirm password: P@ssword
> B d u check User must change
password at next logon > Next
p tho i New Oiect - User: Quan st

thng tin nh hnh d i > Finish
04-3

o thm 01 user v i cc thng tin:

- First name: Ti
- Last name: Tran Van
- User logon name: NS1
- Password: P@ssword (Ch : B d u check User must change password at next logon)
a s Server Manager: click ph i Lab > New > Group.
p tho i New Object - Group: Nh p Group Name: KT > OK
ng t , t o group v i group name: NS
04-4

B2. C u hnh user thnh member c a Group

ng d n > click ph i Teo Nguyen Van > Add to a group.
p tho i Select Groups: Nh p KT >

Check Names > OK > OK
04-5

ng t , C u hnh user Ti Tran Van thnh member c a Group NS

Start > Run > H p tho i Run: DSA.MSC > OK
a s Active Directory Users and Computers: theo
to a group.
ng d n > click ph i Bom Le Van > Add
p tho i Select Group: nh p print >

Check Names
04-6

t qu > OK
ng t , cho user KT1 (Teo Nguyen Van) thnh member c a group Print Operators
a s Active Directory Users and Computers: theo
Properties
ng d n > click ph i Print Operators >
04-7

p tho i Print Operators Properties > Tab Members > Quan st k t qu
B3. T o c u trc OU l ng trong OU.

o OU KeToan trong OU Lab: Click ph i OU Lab > New > Organizational Unit.
04-8

p tho i New Object - Organizational Unit: Nh p tn KeToan > OK
ng t , t o OU NhanSu trong OU Lab

o 01 user v i cc thng tin:
- First name: Bom
- Last name: Le Van
- User logon name: Bom
- Password: P@ssword (Ch : B d u check User must change password at next logon)
04-9

5. Thi t l p quy n truy c p ti nguyn c a user trn h th m c: (th c hi n trn Server)

C TIU: HoSo: K ton & Nhn s : quy n c
HoSoChung : K ton & Nhn s : ton quy n
HoSoKeToan : K ton: ton quy n
HoSoNhanSu : Nhn s : ton quy n
TH C HI N:
B1. Xy d ng ti nguyn
My Computer > Click ph i > New > Folder > Nh p Hoso
Folder HoSo > Click ph i > New > Text Document > Nh p Dulieu.txt
05-1

o folder HoSoChung trong folder HoSo

Click ph i Dulieu.txt > Copy
05-2

Click ph i Folder HoSoChung > Paste
Click ph i HoSoChung > Copy
05-3

Click ph i vo vng tr ng > Paste (th c hi n 2 l n)
Click ph i HoSoChung Copy (2) > Rename > Nh p HoSoKeToan
05-4

Lm t
ng t
c k t qu nh hnh
B2. Thi t l p quy n truy c p trn th m c HoSo

Yu c u c a cng ty trn h th m c:
HoSo: K ton & Nhn s : quy n c
HoSoChung : K ton & Nhn s : ton quy n
HoSoKeToan : K ton: ton quy n
HoSoNhanSu : Nhn s : ton quy n
B2.1. H y quy n th a
:
Click ph i HoSo >
Properties
05-5

p tho i HoSo Properties: Advanced
p tho i Advanced Security Settings for HoSo > Edit
05-6

ch n Include inheritable permission from this objects parent > Copy
Ki m tra k t qu nh hnh > OK
05-7

> OK
B2.2. Phn quy n cho K ton & Nhn s trn

folder HoSo
p tho i HoSo Properties: Edit
05-8

p tho i Permissions for HoSo: Ch n Users >

Remove
p tho i Permissions for HoSo:Add
p tho i Select Users, Computers,

or Groups: Object Types
05-9

p tho i Object Types: Ch gi l i

u ch n Groups > OK
p tho i Select Users, Computers, or

Groups: Nh p KT;NS > Check Names
> OK
p tho i Permissions for HoSo: Click KT > Ki m

tra cc Permission c p cho KT
05-10

p tho i Permissions for HoSo: Click NS > Ki m

tra cc Permission c p cho NS > OK > OK
t qu trn h p tho i HoSo Properties
05-11

B3. Thi t l p quy n truy c p trn th m c HoSoChung

B3.1. H y quy n th a k : Th c hi n trn folder HoSoChung t ng t b
a s Windows Explorer: Click ph i HoSoChung > Properties
p tho i HoSoChung Properties: tab Security > Advanced
p tho i Advanced Security Settings for HoSoChung > Edit
05-12
c 2.1

ch n Include inheritable permission from this objects parent > Copy > OK >OK
B3.2. Phn quy n cho K ton & Nhn s trn folder HoSoChung
p tho i HoSoChung Properties: Tab Security > Edit
05-13

p tho i Permission for HoSoChung:

- Ch n group KT > Click Modify
c t Allow
Ch n group NS > Click Modify c t Allow > OK
05-14

Ki m tra k t qu : H p tho i HoSoChung Properties: Xem l i cc Permission c p cho Group

KT v NS > OK
B4. Thi t l p quy n truy c p trn th m c HoSoKeToan

B4.1. H y quy n th a k : Th c hi n trn
folder HoSoKeToan t ng t b c 3.1
B4.2. Phn quy n cho K ton v remove
Nhn s trn folder HoSoKeToan
p tho i HoSoKeToan Properties: Tab
Security > Edit
p tho i Permission for HoSoKeToan:
- Ch n group KT > Click Modify c t
Allow
Ch n group NS > Remove > OK > OK
B5. Thi t l p quy n truy c p trn th m c HoSoNhanSu

B5.1. H y quy n th a k : Th c hi n trn folder HoSoNhanSu t ng t b c 3.1
B5.2. Phn quy n cho Nhn s v remove K ton trn folder HoSoNhanSu
p tho i HoSoNS Properties: Tab Security > Edit
p tho i Permission for HoSoNS:
- Ch n group NS > Click Modify c t Allow
- Ch n group KT > Remove > OK > OK
05-15

B6. Share folde HoSo

Click ph i folder
Hoso > Properties
p tho i Hoso Properties > Tab Sharing >

Advanced Sharing
05-16

p tho i Advanced Sharing: Ch n Share this

folder > Permissions
p tho i Permission for HoSo: Ch n Everyone

> Click Full Control c t Allow > OK > OK >
OK
Ki m tra folder Hoso
c Share
05-17

6. T o Home Folder cho 01 user (th c hi n trn Server)

C TIU:
u hnh HomeFolder (t
ng gn
a m ng cho user khi logon)
TH C HI N:
B1. T o folder HomeFolder & share (shared name HF)
a s Windows Explorer:
a C > Click ph i vng tr ng > New > Folder > Nh p tn
HomeFolder
06-1

Click ph i HomeFolder > Properties
p tho i HomeFolder Properties: Advanced

Sharing
06-2

p tho i Advanced Sharing Nh p Share

Name HF > Permissions
p tho i Permission for HF: Ch n Everyone

> Check Allow - Full Control > OK > OK >
OK
06-3

B2. T o HomeFolder cho user Teo Nguyen Van

a s Server Management: Theo
ng d n > Click ph i User Teo Nguyen Van > Properties
p tho i Teo Nguyen Van Properties > Tab

Profile > Khung Home Folder: Ch n Connect
> Ch n Z: > Dng To: Nh p thng s
\\192.168.1.1\HF\%username% > Apply
06-4

Ki m tra: %username% chuy n thnh KT1
Lm t ng t cho User NS1

a s Windows Explorer: Trong HomeFolder > Xu t hi n 2 folder KT1 v NS1
Ki m tra k t qu :
Trn WS: Log on KT1 > M My Computer > Vo
aZ
o folder HoSo-KT1
o file text BaoCaoKeToan.txt
- Log off KT1
Trn Server: Log on KT1 > M My Computer > Vo
a Z: T n t i folder HoSo-KT1
v file text BaoCaoKeToan.txt
06-5

7. User Template:
C TIU: Copy user account m u
TH C HI N:
t o m i 01 user account
ng d n > Click ph i User Teo Nguyen Van > Copy
Nh p thng s nh hnh > Next > Nh p Password: P@ssword > Finish
t qu : Click ph i User At Le Van > Properties > Tab Profile
06-6

Ki m tra xu t hi n thng s trong khung To
Tab Member Of: Ki m tra c Group KT
06-7

8. Roaming Profile:
C TIU: o roaming profile cho user
TH C HI N: Trn my server
B1. T o folder & share
Trn
a C: T o foler RoamingProfile. Share folder v a t o v i Shared Name l RP
Ch : Thi t l p Permission: Everyone Allow - Full Control (tham kh o b c 1 ph n 6)
B2. C u hnh roaming profile cho user

ng d n > Click ph i User Bom Le Van > Properties
06-8

p tho i Bom Le Van Properties: Khung Profile path: Khai bo thng s

\\192.168.1.1\RP\%username% > Apply
Profile Path:
Ki m tra: %username% chuy n thnh GD

Ki m tra k t qu :
Trn WS: Log on GD > trn Desktop c folder Bom Le Van > Vo folder Bom Le Van
o folder HoSo-GD
o file text HopDong.txt
- Log off GD
Trn Server: Log on GD > trn Desktop c ng c folder Bom Le Van > Vo folder Bom
Le Van: T n t i folder HoSo-GD v file HopDong.txt
06-9

9. Group Policy Objects

9.17. Thi t l p GPO tri n khai ph n m m MS Office t
ng ty theo ng
C TIU:
ng ci t ph n m m MS Office cho ng
TH C HI N:
B1. Share folder Office:
a s Windows Explorer: Click ph i folder
Office > Properties > Tab Sharing > Advanced
Sharing > Check vo Share this folder > OK
i dng
i dung
Quan st k t qu
07-1

B2. Thi t l p GPO

a s Server Manager > Click ph i Group Policy Objects > New
p tho i New GPO > nh p Deploy MS Office

per User > OK
a s Server Manager > Click ph i Deploy MS Office per User > Edit
07-2

a s Group Policy
Management Editor: Theo
ng d n > Click ph i
Software installation > New
> Package
p tho i Open >

Nh p
ng d n
\\192.168.1.1\OFFICE
> Enter > Ch n file
PRO11 > Open
p tho i Deploy Software > Ch n Assigned

> OK
07-3

Quan st k t qu
B3. Link OU v i GPO

ng d n > Click ph i NhanSu > Ch n Link an Existing GPO
07-4

p tho i Select GPO: Ch n Deploy MS

Office per User > OK
Quan st k t qu
Start > Run > Nh p GPUPDATE /FORCE >

OK
07-5

B4.
a cc object vo OU.
a s Server Manager > Click ph i cc user & group nh hnh > Move
p tho i Move > Ch n NhanSu > OK
07-6

Quan st OU NhanSu
ng t , move cc user Teo Nguyen Van, At Le Van v group KT vo OU KeToan

Quan st OU KeToan
07-7

Quan st OU Lab
Ki m tra: Trn WS
- Log on user NS1 > user NS1 c Office
- Log on user KT1 > user KT1 khng c Office
07-8

9.28. Thi
t l p GPO gim st ho t
C TIU: Gim st s ki n
ng
ng nh p
ng nh p c a User
TH C HI N: trn server
B1.
u ch nh GPO Default Domain Controller Policy
ng d n > Click ph i Default Domain Controllers Policy > Edit
08-1

a s Group Policy Management Editor: theo

Account Logon Events > Properties
ng d n > Ch n Audit Policy > Click ph i
p tho i Audit object access > Ch n Success v Failure > OK
08-2

t qu
Start > Run > Nh p GPUPDATE /FORCE > OK
08-3

B2. L u log file v xa s ki n hi n th

Start > Programs > Administrative Tools >Event Viewer
08-4

p tho i Event Viewer: theo
ng d n > Click ph i Security > Clear log
a s Event Viewer > Save and Clear
08-5

u l i file SecEvt071128.evtx
Th nghi m trn WS: Trn mn hnh Logon: UserName: KT1, Password: BAYBA (c tnh nh p
sai gi l p tr ng h p d password).
Ki m tra: Trn Server
ng d n > Click ph i Security > Refresh
08-6

Th y trong Log ghi nh n qu trnh
ng nh p v ch ng th c c a user KT1: Failed
08-7

9.39. Thi
t l p GPO gim st ho t
ng truy c p ti nguyn
C TIU: Gim st vi c truy c p thnh cng, tri php v xa ti nguyn

TH C HI N: trn Server
B1.
u ch nh GPO Default Domain Controllers Policy
ng d n > Click ph i Default Domain Controllers Policy > Edit
09-1

a s Group Policy Management Editor: theo

Audit object access > Properties
ng d n > Ch n Audit Policy > Click ph i
p tho i Audit object access > Ch n Success v Failure > OK
09-2

t qu
09-3

B2. Khai bo i t ng v hnh ng c n gim st trn ti nguyn

a s Windows Explorer: Click ph i th m c HoSo > Properties
p tho i HoSo properties > Tab Security > Advanced
09-4

p tho i Advanced Security > Tab Auditing > Edit
p tho i Advanced Security > Add
09-5

p tho i Select user > Nh p Ever > Check Names > OK
p tho i Auditing Entry > nh d u check

Delete subfolders and files v Delete: Successful
List Folder / Read data: Failed
OK
09-6

p tho i Advanced Security > Check Replace all exiting > OK > OK > OK
B3. Th nghi m xa d li u:
Event Properties
ng d n > Security > Click ph i ln dng c Event ID l 4656 >
09-7

Quan st k t qu
th y NS1 Delete
file Dulieu.txt
09-8

p th ai Event Viewer: theo
ng d n > Security > Click ph i Refesh
09-9

p th ai Event Viewer: theo

Event Properties
ng d n > Security > Click ph i ln dng c Event ID l 4656 >
Quan st k t qu
th y NS1 truy c p
khng
c folder
HoSoKeToan
09-10

09-11

10. C
9.4
u hnh m t user khng ch u tc
ng c a GPO (th c hi n trn Server)
C CH:
c nhin, m i object thu c Organizational Unit (OU) u ch u tc ng c a cc
GPO link v i OU. C n c u hnh sao cho m t (ho c m t s ) user thu c OU khng ch u tc ng.
TH C HI N:
ng d n > Ch n Deploy MS Office per User > Avanced
p tho i Deploy MS Office per User Security Settings > Add
10-1

p tho i Select Users, Computers, or Groups > Nh p NS2 > Check Names > OK
p tho i Deploy MS Office per User Security Settings > Check vo Read t i c t Deny > OK
p tho i Windows Security > Yes
10-2

Quan st k t qu
Ki m tra: Trn WS: Log on user NS2 > user NS2 khng c Office
10-3

11. Ci
t printer & thi t l p permission
C CH: Ci
t, phn quy n v chia s my in
TH C HI N: trn Server
Start > Settings > Printers
B1. Ci
t & share printer
a s Printers: Double Click

vo bi u t ng Add Printer
11-1

p tho i Choose a local or

network printer: Add a local
Printer
p tho i Choose a printer

port: Ch n Use an existing
port > ch n LPT1 > Next
p tho i Install a printer

driver:
Khung Manufacturer:
Ch n HP
Khung Printers: HP
2500C Series Printer > Next
11-2

p tho i Type a printer name:

gi nguyn thng s m c nh
> Next
p tho i Printer Sharing:

Ch n Share this printer >
Nh p Shared name: HP2500C
> Next
11-3

p tho i
Youve
successfully ..
> Finish
11-4

B2. Phn quy n trn printer

a s Printers: Click ph i vo bi u
ng Printer > Properties
p tho i HP 2500C Series Printer

Properties: Tab Security > Ch n
Everyone > Remove > Add
11-5

Nh p KT;NS > Check Name > OK >

OK
11-6

B3. Khai bo thm 03 port IP cho 03 print device HP2500C

p tho i HP 2500C Series Printer
Properties: Tab Ports > Add Port
p tho i Printer ports: ch n

Standard TCP/IP port > New Port
p tho i Welcome : Next
11-7

p tho i Add Port: Nh p thng s

nh hnh
p tho i Additional Port

Information Required: Ch n
Standard > Generic Netword Card
> Next > Finish
11-8

ng t , khai bo thm 02 port v i thng s :

- Printer Name or IP Address : 192.168.1.253
- Port Name
: IP-253
- Printer Name or IP Address : 192.168.1.252
- Port Name
: IP-252
B4. Dng printer HP2500C
u khi n 04 print device t i 04 port
p tho i HP 2500C Series Printer Properties: Tab Ports > Check Enable Printer Pooling >
check thm cc port IP-254, IP-253 v IP-252
11-9

Apply > Quan st k t qu > OK
11-10

12. C u hnh RRAS role
cc my tr m c th truy c p internet (th c hi n trn Server)
C CH: Ci t Routing and Remote Access Servive role & c u hnh NAT
th truy c p internet.
cc WS c
TH C HI N:
B1. Ci t Routing and Remote Access Servive role
a s Server Manager: Click ph i Roles > Add Roles
p tho i Before You Begin: Next

p tho i Select Server Roles: ch n Network Policy and Access Services
10-1

p tho i Network Policy and Access Services: Next

p tho i Select Role Services: ch n Routing and Remote Access Services
p tho i Confirm Installation Selections: Next
10-2

p tho i Installation Result: Close
10-3


Remote Access
ng d n> Click ph i > Configure and Enable Routing and
p tho i Welcome: Next
p tho i Configuration: ch n
Custom configuration > Next
10-4

p tho i Custom Configuration:

ch n NAT & LAN routing > Next
p tho i Copleting: Finish
p tho i Routing and Remote Access: Start service
10-5

B2. C u hnh NAT (Network Address Translation)

ng d n> Click ph i NAT> New Interface
p tho i New Interface for IP NAT: ch n

CROSS > OK
H p tho i Network Address Translation

Properties - CROSS Properties: Ch n Private
interface > OK
10-6

ng d n> Click ph i NAT> New Interface
p tho i New Interface for IP NAT: ch n

LAN > OK
t qu : Sau b
H p tho i Network Address Translation

Properties LAN Properties: Ch n Public
interface &
nh d u ch n Enable
NAT > OK
c ny WS c th truy c p internet.
10-7

TS
TNH N NG V
T TR I TRN WINDOWS VISTA
*************
1. Windows Firewall with Advanced Security Snap-in
Start > Settings > Control Panel
a s Control panel, Click System and Maintenance
12-1

a s System and Maintenance, Click Administrative Tools
a s Aministrative Tools, Click Windows Firewal with Advanced Security
12-2

a s Windows Firewal with Advanced Security, Click ph i Outbound Rules ch n New

Rule
p tho i Rule Type, ch n Custom > Next
12-3

p tho i Program,ch n This program path > Browse > duy t theo
C:\Program Files\Internet Explorer > Double click file iexplore.exe.
t qu
trong khung This program
Explorer\iexplore.exe > click Next
path:
p tho i Protocol and Ports:

-
Ch n Protocol type: TCP
12-4
%Program
ng d n:
Files%\Internet

Ch n Remote port: Specific Ports
- Bn d
i Remote port nh p gi tr 80
12-5

p tho i Scope:
- Ph n Which local Ip address does this rule match > ch n Any Ip Address
- Ph n Which Remote Ip address does this rule match >ch n These IP address > Click Add
p tho i IP Address, ch n This IP address or subnet > nh p : 210.245.22.171 > OK
12-6

p tho i Scope: Next
p tho i Action, ch n Block the connection > Next
12-7

p tho i Profile: gi nguyn cc l a ch n m c
nh > Next
p tho i Name: Nh p vo khung Name: Block Website http://nhatnghe.com > Finish
12-8

Tr v c a s Windows Firewal with Advanced Security
m b o l Rule
c t o.
trnh duy t Internet Explorer,nh p: http://nhatnghe.com > Trang web ny khng hi n th
12-9

Tr v h p tho i Windows Firewal with Advanced Security: Click ph i Rule Block Website
http://nhatnghe.com, ch n Disable Rule
Tr l i trnh duy t Internet Explorer, truy c p l i trang web: http://nhatnghe.com. > K t qu : M t

trang web honh trng hi n th .
12-10

2. Windows Defender
Logon Administrator
Start > Settings > Control Panel
a s Control Panel > Click Security
a s Security > Click Windows Defender
12-11

a s Windows Defender > Ch n Tools
a s Tool and Settings >Click Options

12-12

a s Options:
-
Ch n checkbox Automatically scan my computer (recommended)
Ch n Frequency: Monday
12-13

Ch n Approximate time: 8:00 AM
Ch n Type: Full system scan
12-14

Ch n checkbox: Check for updated definitions before scaning
Ph n Real-time protection options: Ch n checkbox Changes made to your computer

by software that is permitted to run > Click Save
12-15

- Tr v c a s Tool and Settings > ch n Scan
12-16
RIGHT MANAGEMENT SERVICES
Ci RMS
M Server Manager => Roles => Add Roles
Chn Active Directory Rights Manament Services
Click Add Require Role Serices
NEXT
NEXT
NEXT
Chn Create a new AD RMS Cluster
NEXT
Chn Use Windows Internal Database on th Server
NEXT
Click vo Specify, nhp User Administrator v password ==> OK ==> NEXT
Chn Use AD RMS centrally
NEXT
Nhp Password AD RMS Cluster
NEXT
Chn Default Web Site ==> NEXT

Nhp dc.technet.com.vn => click vo Validate
NEXT
Chon Create a Self-signed certificate for SSL Encryption
NEXT
NEXT
NEXT
NEXT
NEXT
INSTALL
1.
Cu hnh RMS
M RMS => Vo RUN g AdRmsAdmin.msc
Chn View Certificate
Chn Install Certificace
NEXT
Chn Place all Certificate in the following store
Chn Trusted Root Certificatetion Authorities
NEXT
FINISH
YES => OK
2.
Phn Quyn
To th mc Data trn C:
To file Sale1.doc vi ni dung ty
Vo File => Permission => Restrict Permission As..
Trn Office 2007, Click vo
==> Chn Restrict Permission

Mc Read: Nhp Sale1@technet.com.vn
Mc Change..: Sale2@technet.com.vn
OK
Kim Tra:
Logon bng user Sale1
M file Sale
Nhp user name v password ca user Sale1
Clich vo View Premission
ICT VIETNAM COMMUNITY
TM HIU WINDOWS
SERVER UPDATE
SERVICE TRONG
WINDOWS SERVER
2008
Managing Software Update
ICT24H TEAM
2010
ICT24H.NET

Cng ngh cng ngy cng pht trin dn n my tnh cng ngy cng d dng qun l hn. Phn cng
cng nh phn mm ng tin cy hn, cc h iu hnh d dng s dng hn v xut hin nhiu cc
cng c qun tr t ng ha hn (chng hn t ng chng phn mnh cng). Tuy nhin, cc cng
c v ng dng ngy mt pht trin v thay i, sa li , cp nht.iu ny ko theo s duy tr, cp
nht thng xuyn cc ng dng.
Hu qu xy ra l kh ln nu nh khng cp nht cc chng trnh, cc phn mm. Nu my tnh
khng c cp nht, k tn cng c th khai thc cc l hng v xm nhp.
gip bn c th cp nht tp trung ha, gim thiu thi gian qun l, Microsoft cung cp cng ngh
Windows Server Update Services (WSUS). WSUS cho php bn download, ph chun (sau khi bn
kim nghim bn cp nht) v phn phi cc bn cp nht ny cho ton b my tnh client trong h
thng
Nhng bi hc trong chng ny s cho bn ci nhn tng qut v WSUS cng nh ln k hoch trin
khai cp nht cho h thng.
Ch chnh
Cu hnh Windows Server Update Services (WSUS).
Nhng bi hc
Bi hc 1: Tm hiu v Windows Server Update Services.

Bi hc 2: S dng Windows Server Update Services.
Trc khi bt u
hon thnh cc bi hc, bn nn thc hin cc cng vic sau:
Ci t Windows Server 2008.

Nng cp ln domain controller v join cc my tnh vo domain.
Tn server l SERVER v c domain l ict24h.net
ICT24H.NET
Page 1

BI HC 1: TM HIU V WINDOWS SERVER

UPDATE SERVICES
Trc khi trin khai Windows Server Update Services (WSUS), bn phi hiu c cc thnh phn ca
client v server c cu hnh nh th no trong cc mi trng khc nhau. Nu khng c mt k hoch
c th, vic cp nht s khin bn tt nhiu thi gian, bng thng hoc c th tht bi trong vic ci t.
Bi hc ny cung cp cho bn ci nhn tng qut v cc thng tin v WSUS.
Nu bn quen thuc vi nhng phin bn WSUS trc, WSUS 3.0 Service Pack 1 cung cp cho bn
kh nhiu chc nng. Hu ht qun l trn giao din, bn khng cn phi qun l trn trnh duyt Web.
Thm vo , WSUS cho php bn linh hat trong vic trin khai cc bn cp nht n cc my tnh.
Sau bi hc ny, bn s:
Hiu c mc ch ca WSUS.
Cu hnh WSUS client.
Thit k cu trc WSUS p ng nhu cu cho c doanh nghip nh cng nh quy m ln.
Lit k cc client v server cn thit cho WSUS.
Tm hiu cc cng c xc nh trng thi cp nht ca cc my tnh client trong mng.
Thi lng cho bi hc: 15 pht.
Tng quan v WSUS

Windows Server Update Services (WSUS) c pht trin t dch v Microsoft Update mt dch v
trong Windows cho php t ng download cc bn cp nht. Bn c th chy WSUS trn mng ni b
v s dng n phn phi cc bn cp nht cho cc my tnh, bn c th s dng bng thng hiu qu
v kim sot cc bn cp nht trn cc my tnh client.
Khi chy WSUS, n kt ni n website Microsoft Update, download cc thng tin v cc bn cp nht
mi nht, sau thm chng vo danh sch cp nht qun tr vin ph chun. Sau khi qun tr vin
chp nhn v thit lp u tin cho cc bn cp nht ny, WSUS s t ng ci t chng trn cc my
tnh chy Windows. Dch v Windows Update trong my tnh clien s kim tra WSUS server v t ng
download cc bn cp nht t server v, cui cng l ci t cc bn cp nht ny. Bn c th thit lp
WSUS cho ng thi nhiu server v c th m rng t doanh nghip nh cho n doanh nghip ln.
Windows Update trn client

Windows Update l mt thnh phn thuc WSUS trn client c chc nng nhn cc phn mm, cc bn
ci t t WSUS server, xc nhn bng ch k tin t hoc thut ton Secure Hash Algorithm (SHA1),
thng bo n ngi dng v cc bn cp nht v ci t n (nu c cu hnh). Windows Update ci
t cc bn cp nht thi gian m bn thit lp v c th t ng khi ng li my tnh nu cn thit.
Nu thi im hin ti my tnh tt, cc bn cp nht c th ci t khi my tnh c bt.
Ch : WSUS client cc phin bn Windows trc
Trong Windows XP v Windows 2000, thnh phn ca WSUS trn client c tn gi l Automatic
Updates.
ICT24H.NET
Page 2

V cc thit lp Windows Update c p dng cho tt c cc my tnh trong doanh nghip nn s dng
Group Policy thit lp l phng php tt nht. Thit lp Windows Update ti Computer
Configuration > Administrative Templates > Windows Components > Windows Update. Cc
thit lp Windows Update trong Group Policy gm :
Do not display Install Update and Shut Down option in Shut Down Windows dialog
box: cho php bn qun l ty chn Install Updates v Shut Down hin th hp thoi Shut
Down ca Windows.
Do not adjust option to Install Updates and Shut Down in Shut Down Windows
dialog box: thay i ty chn shut down mc nh Install Updates and Shut Down khi Windows
Update chun b ci t mt bn cp nht.
Enabling Windows Update Power Management to automatically wake up the system
to install scheduled updates : nu nhn vin trong cng ty ca bn thng c thi quen shut
down my tnh ca h khi ri khi vn phng. Bt thit lp ny cu hnh cc my tnh h tr
t ng khi ng v ci t cc bn cp nht mt thi gian c ln lch. Cc my tnh s
khng c bt nu khng c bn cp nht no ci t. Nu my tnh chy vi nng lng
ca pin, my tnh s t ng tr v trng thi sleep sau 2 pht.
Configure Automatic Updates: xc nh nhng my tnh client s c nhn cc bn cp
nht bo mt v cc bn download quan trng khc t dch v Windows Update. Bn cng c
th s dng thit lp ny cu hnh nhc nh ngi dng ci t cc bn cp nht hoc t
ng ci t thng qua Windows Update.
Specify intranet Microsoft update service location: xc nh WSUS server.
Automatic Updates detection frequency: thit lp thi gian Windows Update kim tra
nhng bn cp nht mi. Thi gian mc nh l t 17 n 22 gi.
Allow non-administrators to receive update notifications: thit lp cho tt c ngi dng
hoc ch c qun tr vin nhn c thng bo cp nht.
ICT24H.NET
Page 3

Turn on Software Notification: thit lp cho php bn kim sot ngi dng c th nhn
c thng bo v cc tnh nng ca phn mm t Microsoft Update.
Allow Automatic Updates immediate installation: thit lp Automatic Update t ng ci
t cc bn cp nhp m khng cn phi khi ng li my tnh.
Turn on recommended updates via Automatic Updates: xc nh cc my tnh client ci
t c nhng bn cp nht cn thit v bn v li, bao gm c cp nht cc driver.
No auto-restart with logged on users or scheduled automatic updates installations:
thit lp lch ci t, Windows Update ch ngi dng khi ng my tnh khi h ng nhp vo,
k c t ng khi ng.
Re-prompt for restart with scheduled installations: thit lp nhc nh ngi dng khi
ng li my tnh trong khong thi gian no . Ty thuc vo mt s thit lp, thit lp ny c
th khin ngi dng ngng vic t khi ng. Tuy nhin, Windows Update s t ng yu cu
h khi ng da trn thit lp ny.
Delay Restart for scheduled installations: thit lp thi gian Windows Update ch trc khi
t ng khi ng li.
Reschedule Automatic Updates scheduled installations: thit lp s ln ch ca Windows
Update trc khi tip tc theo lch ci t.
Enable client-side targeting: thit lp cc nhm hoc tn my tnh s c nhn cc bn cp
nht t dch v Microsoft Update.
Allow signed updates from an intranet Microsoft update service location: thit lp cho
php ci t cc bn cp nht s dng chng thc.
Cu trc WSUS
WSUS c th m rng t doanh nghip nh cho n doanh nghip ln a quc gia. Trn thc t, bn
cn s dng mi WSUS cho mt chi nhnh vn phng vi hn 10 my tnh v mt WSUS c lp cho mi
phng IT kim sot cp nht.
Bn cng khng cn thit phi c nhng WSUS server d phng, tuy nhin bn cng cn sao lu c s
d liu WSUS c th khi phc khi gp ri ro.
Doanh nghip vi mt vn phng duy nht

Nu doanh nghip ch c mt vn phng, bn c th s dng mt WSUS server duy nht m khng cn
quan tm n s my tnh client trong doanh nghip l bao nhiu.
Doanh nghip vi nhiu vn phng

Nu bn s dng mt WSUS server duy nht h tr cho tt c client cc vn phng, mi client s
cn phi download cc bn cp nht thng qua kt ni WAN. Vic download c th tn khong vi trm
MB. V kt ni WAN s lm ng truyn chm hn so vi kt ni mng LAN, download cc bn cp nht
ln thng qua WAN s nh hng khng nh n thi gian v ng truyn. Nu bng thng ca bn
thp, cc client c th s khng nhn c cc bn cp nht.
cho php cc client nhn cc bn cp nht trong mng LAN, cu hnh mt WSUS server cho mi chi
nhnh vn phng v cu hnh WSUS server nhn cc bn cp nht theo mt cu trc phn cp t
ICT24H.NET
Page 4

nhng server chnh. V vi cch lm theo cu trc phn cp s em li cho bn s hiu qu trong vic
kt ni thng qua WAN.
H thng WSUS server ton cu.
ICT24H.NET
Page 5

Cu trc phn cp WSUS server

Trong cu trc trn, ch c server WSUS ti Boston c th nhn cc bn cp nht t Microsoft. Tt c
cng vic cp nht c vn hnh bi server WSUS Boston. Cc server pha di s nhn thng tin
cp nht t nhng server trn n, chng hn vi s trn, server Los Angeles (downstream server)
s nhn cc bn cp nht t server Boston (upstream server). Tng t, server Argentina
(downstream server) s nhn cc bn cp nht t server Costa Rica (upstream server).
cung cp cc bn cp nht cho vn phng nh khng c WSUS server, bn cn phi cu hnh cc
my tnh client download bn cp nht t WSUS server gn nht. Nu vn phng ca bn c ng
truyn Internet nhanh, bn c th cn nhc vic c hay khng nn trin khai bn sao v WSUS ni b
lu tr cc bn cp nht, bn c th cho cc client nhn cc bn cp nht trc tip t Microsoft.
Cc iu kin cn thit trin khai WSUS

Khi ln k hoch trin khai WSUS, bn cn c cc iu kin sau:
WSUS server phi c k ni Internet (truy cp vo website Microsoft Update).

Cc downstream server phi thit lp kt ni vi cc upstream server v s dng giao thc
HTTP (TCP port 80) hoc s dng SSL (TCP port 443).
Cc my tnh client phi kt ni mng cc b (HTTP hoc HTTPS)
Cc my tnh client phi l mt trong cc h iu hnh sau:
o Windows 2000 Service Pack 3 hoc Service Pack 4
o Windows XP Professional
o Windows Vista
ICT24H.NET
Page 6

o Windows Server 2003

o Windows Server 2008
Nu my tnh client t kt ni trong mng trong khong thi gian no (v d nu mt
chuyn gia no ngh php hoc mt nhn vin lm vic ti nh trong mt thng v khng kt
ni n mng VPN), client cng s khng th download cc bn cp nht. Bn cn cu hnh cc
my tnh t ng ci t cc bn cp nht t website Microsoft hoc s dng NAP v yu cu
cc my tnh phi cp nht trc khi kt ni n mng cc b.
Ln k hoch ci t WSUS
Trong sut qu trnh ci t WSUS, bn cn lu mt s vn sau:
Cp nht source: WSUS c th nhn cc bn cp nht trc tip t trang web Microsoft Update
hoc t mt WSUS server khc. Bn nn cn nhc v chn phng php gim bng thng.
Nu 2 WSUS server kt ni trong LAN, c 1 trong 2 server nhn bn cp nht t Microsoft
Update v server cn li c th nhn bn cp nht t server th nht. Nu bn s dng WSUS
cho 3 chi nhnh vn phng v kt ni VPN thng qua Internet, y l cch hiu qu chi mi vn
phng khi download cc bn cp nht trc tip t Microsoft v download cc bn cp nht cn
phi c kt ni Internet. Cu trc WSUS ca bn phi c s sp xp hp l, cc downstream
server s nhn cc bn cp nht t cc upstream server.
Ph chun v cu hnh nhn bn: nu bn s dng nhiu WSUS server v cu hnh cc

server nhn cc bn cp nht t mt WSUS server no , bn c th chn vic ng b cc
ph chun, thit lp, my tnh v cc nhm trong cu trc phn cp WSUS server. Nu bn cu
hnh mt server ng vai tr l mt bn sao, bn khng cn ph chun cc bn cp nht t trn
WSUS server.
Cp nht lu tr: WSUS c th sao chp bn cp nht t Microsoft v lu tr chng vo

server hoc lu tr vo chnh cc my tnh client download cc bn cp nht t Microsoft. Nu
bn chn lu tr cc bn cp nht trong server, WSUS server cn ti thiu 6 GB dung lng
trng trong cng (mc d con s thc t c th ln hn, ty thuc vo cc bn cp nht t
Microsoft cng nh cc gi ngn ng cn thit). Vic lu tr cc bn cp nht trong server c
th c xem l mt cch gim thiu bng thng Internet v cc client nhn bn cp nht thng
qua LAN.
C s d liu: mc nh WSUS lu tr danh sch cc bn cp nht trong Windows Internal

Database. Bn cn ti thiu 3 GB dung lng trng trong cng lu tr Windows Internal
Database mc d thc t khong 1 GB. Bn c th s dng server lu tr c s d liu
(chng hn nh Microsoft SQL Server).
Ch : Mc nh, ng dn c s d liu trong WSUS

C:\WSUS\UpdateServicesDbFiles\SUSDB.mdf
Website: trin khai WSUS cn phi c IIS v cc my tnh client nhn cc bn cp nht bng
cch s dng giao thc HTTP hoc HTTPS. Nu bn khng s dng IIS trn WSUS server to
ra website mi v mt mc ch no , bn c th s dng website mc nh trong IIS.
ICT24H.NET
Page 7

Ngn ng: Cc bn cp nht c th c nhng gi ngn ng ring i km. gim thiu dung
lng cng s dng, bn nn chn download ch mt gi ngn ng cn thit cc my tnh
client c th truy cp n WSUS server d dng. Bn khng nn chn tt c cc ngn ng v
tng dung lng v bng thng cn thit s rt cao.
Sn phm: Microsoft Update cung cp cho bn mt th vin sn phm a dng khng ch l cc

h iu hnh Windows. Chng hn l cc bn cp nht Exchange Server, ISA Server, SQL Server
v Office. Bn ch nn chn nhng ng dng v h iu hnh cn s dng trong doanh nghip
gim thiu dung lng cng.
Kim nghim vic cp nht

Sau khi trin khai WSUS, mt s my tnh client c th s khng th cp nht c v vic ci t cc
bn cp nht tht bi, nguyn nhn c th do cc my tnh client ny cha c cu hnh, khng thuc
Active Directory hoc t kt ni trong mt thi gian di. Bn c th s dng mt s k thut xc nh
cc trng hp trn:
Giao din Windows Update: bn c th s dng Computer and Report trong giao din ny
xc nh cc my tnh client cha c ci t cc bn cp nht.
Microsoft System Center Configuration Manager 2007 (SCCM 2007): SCCM 2007 l
phin bn mi nht ca Microsoft trong h thng cc sn phm qun tr h thng tp trung.
SCCM 2007 cung cp cho bn thng tin chi tit v cc bn cp nht v cc ng dng trn cc
my tnh. SCCM 2007 l sn phm tt nht cho doanh nghip. Bn c th xem thm v SCCM
ti:http://www.microsoft.com/systemcenter/configurationmanager/en/us/sms.aspx
Microsoft Baseline Security Analyzer (MBSA): MBSA t ng kim tra v xc nh cc vn

li v cp nht v cc l hng bo mt trong cu hnh. MBSA s qut ton mng v cho php
bn c th xem c nhng my tnh no cha nm trong vng kim sot. Bn c th download
MBSA ti : http://www.microsoft.com/mbsa/.
Network Access Protection (NAP): bn c th s dng NAP v kt hp vi cng c xc thc

trng thi ca my tnh (Windows System Health Validator, cng c ny c th xc nhn cc my
tnh no va ci t cc bn cp nht.
Tng quan bi hc
WSUS cho php bn lu tr v phn phi cc bn cp nht t Microsoft thng qua mng, gip
bn gim thiu c bng thng Internet. Thm vo , WSUS cn cho bn kim sot mi khi
cp nht v trin khai trn cc my tnh client.
Dch v Windows Update trn client nhn cc bn cp nht t WSUS server. Tuy thuc vo cch
cu hnh Windows Update m bn c th thng bo n ngi dng nhng bn cp nht no
c ci t hoc t ng ci t m khng cn tng tc bi ngi dng. Bn c th cu hnh
Windows Update vi Group Policy.
ICT24H.NET
Page 8

Bn c th s dng ch mt WSUS server duy nht. Ngoi ra, trin khai mt WSUS server c lp
cho mi vn phng gip bn gim thiu c bng thng Internet. Thm vo , WSUS server
c cu hnh nhn bn hoc c th t ng. Vi cc trng hp ny, bn cn thit k cu trc
downstream v upstream nh gii thiu phn Cu trc WSUS.
Mt s nguyn nhn c th khin cc my tnh client khng th ci t cc bn cp nht.

kim tra, xc nh cc client , bn c th s dng giao din WSUS, SCCM 2007, MBSA hoc
NAP.
Trc nghim
1. Bn l k s h thng cho doanh nghip cung cp cc sn phm video. Doanh nghip ca bn c
6 vn phng v mt phng IT qun l tt c 1200 my tnh client. Mi vn phng c 200 my
tnh. M hnh WAN ca bn s dng cu trc hub-and-spoke, vi mi vn phng c kt ni
trc tip n tr s chnh. Bn c th thit k cu trc WSUS nh th no?
A. Trin khai mt WSUS server cho mi vn phng. Cu hnh cc WSUS server ny c
qun l bi mi vn phng v c h tr t phng IT.
B. Trin khai mt WSUS server tr s chnh. Cu hnh tt c cc my tnh client nhn cc
bn cp nht trc tip t Microsoft.
C. Trin khai mt WSUS server tr s chnh. Cu hnh tt c cc my tnh client nhn cc
bn cp nht trc tip t WSUS server.
D. Trin khai mt WSUS server cho mi vn phng. Cu hnh mt WSUS server l bn sao
ca WSUS server tr s chnh.
2. Bn l k s h thng v cng vic ca bn l cu hnh v qun l cp nht cho doanh nghip.
Bn cn s dng Group Policy cu hnh cc client download cc bn cp nht v ci t chng
t ng m khng cn nhc nh ngi dng. Thit lp no trong Group Policy gip bn lm iu
ny?
A. Allow automatic update immediate installation.
B. Configure Automatic Updates.
C. No auto-restart for scheduled automatic updates.
D. Enable client-side targeting.
3. Phin bn no m bn c th s dng trin khai cc my tnh client download cc bn cp
nht t WSUS.
A. Windows 95
B. Windows 98
C. Windows 2000 Professional
D. Windows XP Professional
ICT24H.NET
Page 9

BI HC 2: S DNG WINDOWS SERVER

UPDATE SERVICES
Vi Windows Server 2008, bn c th ci t WSUS bng cch s dng Server Manager v qun l n
trong giao din Update Services. Phin bn mi WSUS chy trn Windows Server 2008 cung cp cho bn
nhiu tnh nng cng nh giao din ngi dng thn thin.
Sau bi hc, bn s:
Ci t WSUS trn Windows Server 2008.
Cu hnh cc nhm my tnh, ph chun bn cp nht v xem cc bo co WSUS.
X l s c khi cho c client v server khi gp vn v ci t cc bn cp nht.
Thi lng bi hc: 40 pht
Ci t Windows Server Update Servers

Bn c th download WSUS min ph ti http://www.microsoft.com/wsus.
Sau khi ci t bn cn ng b cp nht t Microsoft Update. Thc hin cc bc sau:
1. Click Start > Administrative Tools > Microsoft Windows Server Update Services.
2. Chn server v click vo lin kt Synchronize Now.
Qu trnh ng b din ra vi pht (cng c th nhiu hn 1 gi). Sau khi ng b, bn c th bt u
qun l WSUS.
Cu hnh Windows Server Update Services

Sau khi ci t WSUS v thc hin ng b ha, bn bt u thc hin cu hnh WSUS:
1.
2.
3.
4.
5.
M bng cu hnh WSUS.

Cu hnh cc nhm my tnh c phn phi cc bn cp nht nhng thi im khc nhau.
Cu hnh cc my tnh client nhn cc bn cp nht t WSUS server.
Sau khi kim tra cp nht, ph chun hoc hy b cc cp nht.
Xem cc bng bo co xc nhn cc bn cp nht c phn phi thnh cng v xc nh
cc vn li.
ICT24H.NET
Page 10

Cu hnh WSUS Option
Bn c th cu hnh cc ty chn theo tng mc sau:
Update Source and Proxy Server: cu hnh cc upstream server hoc cu hnh WSUS server
nhn cc bn cp nht t Microsoft. Ti y, bn c th thay i cc thit lp nu khng cn sa
li cu trc WSUS.
Products and Classifications: chn cc bn cp nht Microsoft m bn mun WSUS

download. Bn nn chn thit lp ny khi bt u h tr cho mt sn phm mi t Microsoft
hoc ngng h tr i vi mt sn phm no (chng hn l mt phin bn Microsoft Office
c)
Update Files and Languages: chn ni lu tr cc bn cp nht v gi ngn ng ca bn cp

nht.
Synchronization Schedule: cu hnh t ng ng b cc bn cp nht t nhng upstream

server.
ICT24H.NET
Page 11

Automatic Approval: cu hnh t ng ph chun cc bn cp nht. V d, bn c th cu hnh

nhng bn cp nht v li bo mt c t ng ph chun v ci t. Bn ch nn chn thit
lp ny nu nh bn quyt nh b qua bc kim nghim cp nht.
Computer: chn nhng my tnh t nhm no thng qua giao din Update Services hoc
Group Policy.
Server Cleanup Wizard: WSUS s tch ly cc bn cp nht khng cn cn thit v cc my

tnh khng cn hot ng trong thi gian ngoi gi lm vic. Trong thit lp ny, bn c th xa
b nhng bn cp nht qu hn hoc khng cn thit vi mc ch dn dp cng cng nh
gim dung lng c s d liu WSUS.
Reporting Rollup: mc nh, downstream server s gi cc bn bo co thng tin ln upstream

server. Bn c th s dng thit lp ny cu hnh cho tng server c th qun l c cc
bn bo co d liu.
E-mail Notifications: WSUS c th gi e-mail mi khi nhng bn cp nht mi c ng b

ha, nhng thng tin qun tr ph chun, kim nghim cc bn cp nht ny. Thm vo ,
s dng thit lp ny gi cc bn bo co trng thi cp nht hng ngy hoc hng tun.
Microsoft Update Improvement Program: mc nh b v hiu ha, bn c th bt thit lp

ny ln gi cho Microsoft nhng thng tin chi tit v qu trnh cp nht trong doanh nghip
ca bn, bao gm s lng my tnh hon thnh v cha hon thnh cu t i vi mi bn
cp nht. Microsoft s s dng nhng thng tin ny nng cao v ci thin quy trnh cp nht.
Personalization: trn trang ny bn c th cu hin cho php hin th cc d liu t

downstream server. Bn c th chn cc thnh phn no c hin th trong danh sch To do
lisy that appears khi bn click chn vo WSUS server trn giao din Update Services.
WSUS Server Configuration Wizard: cho php bn cu hnh li WSUS.
Cu hnh cc nhm my tnh

Trong a s cc mi trng, bn s khng th trin khai tt c cc bn cp nht n tt c cc client
trong mt ln. cho bn kim sot c kh nng nhn cc bn cp nht ca my tnh, WSUS 3.0 cho
php bn cu hnh cc nhm my tnh v trin khai cp nht n mt hoc nhiu nhm. Bn c th to
thm cc nhm phn loi theo nhn hiu my tnh hoc cc phng ban trong doanh nghip. Bn c th
to cc nhm theo cc v p dng cc quy trnh cp nht, c th nh sau:
Kim tra th nghim: trin khai cp nht trn m hnh lab th nghim. Vic ny cho php
bn xc nh c kh nng lm vic n nh hay khng. Sau bn c th kim nghim trn
mt my tnh sau khi ci t cc bn cp nht.
Th im: sau khi kim nghim, bn s trin khai cp nht n mt nhm th im no .
Nhm ny c th l phng ban IT hoc mt nhm phng ban khc c am hiu v my tnh. Vic
ny gip bn th nghim trn mt nhm my tnh v xem xt kh nng lm vic.
ICT24H.NET
Page 12

Trin khai tht: nu trin khai th im sun s, khng gp bt c vn no sau 1 tun th

bn c th trin khai n tt c cc my tnh lm vic trong cng ty. iu ny gip bn gim
thiu ri ro.
Bn c th cu hnh cc nhm my tnh theo 1 trong 2 hng sau:
Server-side targeting: thch hp i vi doanh nghip nh, bn c th thm cc my tnh vo

nhm bng cch cu hnh trn giao din Update Services.
Client-side targeting: thch hp i vi doanh nghip ln, bn s dng Group Policy cu
hnh cc my tnh no thuc nhm cc my tnh. Cc my tnh c t ng a vo ng
nhm khi chng kt ni n WSUS server.
Cho d bn trin khai bng cch no i chng na th vic u tin bn cn lm l to nhm my tnh.
Mc nh c mt nhm my tnh duy nht l: All Computer. Nhm ny bao gm tt c cc my tnh.
to thm nhm, thc hin cc bc sau:
1.
2.
3.
4.
Click Start > Administrative Tools > Microsoft Windows Server Update Services.
Click Computer. R-click vo All Computers v chn Add computer group.
Nhp tn nhm v click Add.
Thc hin li bc 2 v 3 nu bn mun thm cc nhm khc.
Server-side targeting: thm cc my tnh vo mt nhm. Thc hin cc bc sau:

1. Trn giao din Update Services, click Computer > All Computer v chn Unassigned
computers. Sau , r-click vo my tnh bn mun a vo nhm (bn c th chn nhiu my
tnh bng cch click v gi phm Ctrl) v chn Change Membership.
2. Ti hp thoi Set computer group membership, nh du chn vo nhm m bn mun a
my tnh vo. Click OK.
Client-side targeting: bn c th s dng Group Policy object (GPO) thm cc my tnh vo cc
nhm khi. Trc tin, bn cn thit lp cho php s dng client-side targeting. Thc hin cc bc sau:
1. Click Start > Administrative Tools > Microsoft Windows Server Updates Services.
2. Click Options > Computers.
3. Ti hp thoi Computer, chn Use Group Policy or Registry Settings on Computers. Sau
click OK.
Tip theo, cu hnh GPO di chuyn cc my tnh n cc nhm. Bn cn to mt GPO c lp cho mi
nhm my tnh. Sau cu hnh cho php p dng i vi nhng my tnh thch hp.
1. Ti Group Policy Management Editor, m GPO.
2. Click Computer Configuration > Administrative Templates > Windows Components >
Windows Update.
3. Double-click vo chnh sch Enable Client-side targeting.
4. Hp thoi hin th, chn Enabled. Sau nhp tn nhm my tnh m bn mun p dng v
click OK. Sau khi cc client c p dng Group Policy, khi ng li Windows Update Services.
ICT24H.NET
Page 13

Kim tra nhanh
1. Giao thc no cho php dch v Windows Update ca client c th nhn c cc bn cp nht
t server WSUS?
2. Bn nn s dng cch trin khai client-side targeting hay server-site targeting cho doanh nghip
ln
Tr li nhanh
1. HTTP.
2. Doanh ngip ln th nn s dng client-side targeting
Cu hnh cc my tnh client

bi hc trc, bn c tm hiu v s khc nhau ca cc chnh sch Group Policy trong vic cu
hnh cc my tnh client nhn cc bn cp nht. Vic c nhiu thao tc cu hnh s khin bn tn thi
gian, phn ny bn s c hng dn cu hnh gim thiu cc bc cu hnh khng cn thit nhm
mc ch cc client c th download cc bn cp nht t WSUS server.
1. M GPO m bn mun s dng thc hin cu hnh. Trong Group Policy Management
Editor, click Computer Configuration > Administrative Templates > Windows
Components > Windows Update.
2. Double-click vo Specify intranet Microsoft Update service location.
3. Chn Enabled. Trn c trng Set the intranet update services for detecting updates v
Set the intranet statistics server, nhp tn ca WSUS server, chng hn http://SERVER. Click
OK.
ICT24H.NET
Page 14

4. Double-click vo chnh sch Configure Automatic Updates.

5. Chn Enabled. Cu hnh thit lp t ng cp nht. Ti Scheduled install day bn c th
chn tt c cc ngy trong tun hoc mt ngy c th trong tun p dng cc chnh sch. Thit
lp thi gian thc hin chnh sch ti danh sch Scheduled install time.
Notify for download and notify for install: thng bo download v ci t n ngi
dng.
Auto download and notify for install: t ng download v thng bo ci t n
ngi dng.
Auto download and schedule the install: t ng download v thit lp thi gian ci
t.
Allow local admin to choose setting: cho php ngi dng c th t chn nhng
thit lp ny.
Vi nhng thit lp trn, cc my tnh client s nhn c cc bn cp nht t WSUS server v t ng
ci t.
ICT24H.NET
Page 15

Ph chun cc bn cp nht
Mc nh, tt c cc bn cp nht u cha c ph chun. Bn cn phi cu hnh ph chun cc bn
cp nht, thc hin cc bc sau:
2. Click vo WSUS server. Sau click Update, la chn cc ty chn sau:
All updates: hin th tt c bn cp nht. Vic lm ny thun li cho vic ph chun
cc bn cp nht.
Critical updates: ch hin th nhng bn cp nht v li nghim trng, nhng bn v li
ny cn c u tin hng u trong vic cp nht m bo an ton h thng cng
nh my tnh ngi dng.
Security updates: ch hin th nhng cp nht lin quan n bo mt.
WSUS updates: hin th nhng bn cp nht lin quan n quy trnh x l cp nht.
3. Ti danh sch Appoval, chn Unapproved. Bn c th s dng danh sch xem cc bn cp
nht c ph chun.
4. T danh sch Status, chn Any. Click Refresh lm mi hin th cc bn cp nht.
sp xp cc bn cp nht theo th t u tin v ngy thng, r-click vo mt ct v chn Release
Date. Sau , click v ct Release Date sp xp li.
5. Chn nhng bn cp nht bn mun ph chun, Bn c th chn nhiu bn cp nht bng cch
click v gi phm Ctrl. Ngoi ra bn c th chn nhiu bn cp nht mt lc bng cch click
chut v gi phm shift. Nhn Ctrl +A chn tt c cc bn cp nht. R-click vo bn cp nht
chn v chn Approve (vi mc ch phn phi cc bn cp nht ny n client vo thi
im cc client kim tra cp nht) hoc chn Decline (khng cho phn phi bn cp nht ny).
6. Nu hin th hp thoi Approve Updates, chn nhm my tnh bn mun p dng cp nht v
chn Approved for install. Click OK nu bn hon tt qu trnh ph chun
7. thit lp thi hn cp nht, bn c th r-click vo nhm my tnh v chn Deadline, sau
chn thi hn cp nht.
8. Click OK.
T chi cc bn cp nht
Sau khi ph chun cc bn cp nht cn thit, bn c th t chi ph chun nu bn khng mun ci t
cc bn cp nht ny trn my tnh. Vic t chi cc bn cp nht khng nh hng g n cc my tnh
client.
1. Ti giao din Update Services, r-click vo bn cp nht bn mun t chi v chn Decline.
2. Ti hp thoi Decline update, click Yes.
xem li cc bn cp nht b t chi, ti danh sch Approval, chn Declined. Sau click
Refresh.
ICT24H.NET
Page 16

Xem cc bng bo co
Bn c th xem chi tit cc bn cp nht, my tnh hoc s ng b. Click Report trn giao din
Update Services.
WSUS cung cp cho bn cc thng tin sau:
Update Status Summary: hin th cc thng tin v mi bn cp nht m bn chn, bao gm

m t y v bn cp nht (c cung cp bi Microsoft), cc bn cp nht c ph chun
trn nhm my tnh, s lng my tnh ci t cc bn cp nht.
Update Detailed Status: ngoi nhng thng tin hin th Update Status Summary, mc
ny hin th trng thi ca tt c my tnh cho mi cp nht theo tng trang, cho php bn xc
nh chnh sch my tnh ny ci t cp nht. y l nhng thng tin hu ch gip bn c
th xc nh nhng l hng bo mt cng nh cc my tnh dnh l hng bo mt .
Update Tabular Status: hin th nhng d liu ca c bng Update Status Summary v
Update Detailed Status v xut ra bo co dng bng tnh.
Computer Status Summary: hin th nhng thng tin cp nht cho mi my tnh.
Computer Detailed Status: ngoi nhng thng tin Computer Status Summary, mc ny
hin th nhng my tnh no ci t nhng bng cp nht no.
Computer Tabular Status: cung cp cho bn thng tin ca c bng Computer Status
Summary v Computer Detailed Status v xut ra bo co dng bng tnh.
Syncronization Results: hin th kt qu qu trnh ng b ha mi nht.
Khi bn m mt bng co co, bn c th cu hnh lc cc thng tin hin th trong bng bo co .

Chng hn nh nhng bng bo co m bn mun hin th theo tn sn phm
ICT24H.NET
Page 17

Qun l ng b ha
Ti mc Synchronizations s hin th danh sch thi gian WSUS nhn danh sch cc bn cp nht t
upstream server. Bn c th r-click vo mt ng b bt k v chn Synchronization xem thng tin
chi tit.
Khc phc s c trong qu trnh cp nht

Thnh thong, bn s c thm kinh nghim trong vic khc phc s c ci t nu nh gp phi li trong
vic cp nht. Bn c th s dng WSUS xc nh cc client no c ci t cc bn cp nht
hoc cha ci t.
Khc phc s c WSUS

WSUS to ra 3 bn ghi:
Application event log: bn hi ny lu tr cc s kin lin quan n vn ng b ha, li

trong Update Services, li c s d liu WSUS lin quan n source ci t WSUS. Hu ht cc
s kin u cung cp thng tin chi tit v nguyn nhn cng nh hng dn khc phc s c.
Thm vo , bn c th tm kim li ti trang http://support.microsoft.com.
C:\Program Files\Update Services\LogFiles\Change.txt: mt tp tin c nh dng *.txt

lu tr cc thng tin v ci t cc bn cp nht, ng b v s thay i cu hnh WSUS. Cc
thng tin ny khng chi tit nhng cng c th cho bn bit nhng thng tin quan trng chng
hn nu qun tr vin thay i mt thit lp no , tp tin s ghi li dng ch WSUS
confoguration has been changed.
C:\Program Files\Update Services\LogFiles\SoftwareDistribution.txt: hin th thng tin

chi tit v c h tr t Microsoft.
Khc phc s c Windows Update trn client

xc nh cc vn l nguyn nhn khi cp nht tht bi, thc hin cc bc sau:
1. M tp tin %Systemroot%\WindowsUpdate.log cc thng bo li. Bn c th xem hng dn
c WindowsUpdate.log ti a ch http://support.microsoft.com/kb/902093/
2. Xc nhn client no kt ni n WSUS server bng cch m trnh duyt Web v g a ch
http://<tn_WSUS_server>/iuident.cab. Nu khung nhc nh hin ra thng bo bn cn
download tp tin, c ngha l client kt ni n WSUS server.
3. Nu bn s dng Group Policy cu hnh Windows Update, bn c th s dng cng c
Resultant set of Policy (RSOP) xc nhn cc cu hnh. Bn vo Run vo g Rsop.msc m
RSOP. Trong RSOP, click Computer Configuraion > Administrative Templates > Windows
Components > Windows Update xem v xc nhn cc thit lp.
Nu bn pht hin ra mt vn v sau cu hnh li khc phc s c, bn cn khi ng li
dch v Windows Update trn my tnh client thay i c hiu lc. Bn c th s dng cng c
Services (services.msc) hoc s dng lnh sau khi ng li dch v Windows Update.
ICT24H.NET
Page 18

net stop wuauserv
net start wuauserv
Trong khong 6 10 pht, Windows Update s gi thng tin ln server.
Windows Update bt u truy vn n WSUS server, s dng lnh sau:
wuauclt /a
Xa b cc bn cp nht
Thnh thong bn vn gp li cp nht, chng hn sau khi bn cp nht ln phin bn mi th ng dng
khng cn tng thch, bn c th xa b cp nht , thc hin cc bc sau:
1.
2.
3.
4.
5.
Click Start > Control Panel.

Di Programs, click Uninstall a program.
Di Tasks, click View installed updates.
Chn bn cp nht bn mun xa b. Click Uninstall.
Khi ng li nu cn thit.
ICT24H.NET
Page 19

THC HNH: TRIN KHAI WSUS

Trong bi thc hnh, bn cu hnh WSUS trn server, s dng Group Policy cu hnh cc my tnh
client, sau ph chun v phn phi cc bn cp nht.
Bi thc hnh 1: ci t WSUS v thc hin ng b ha

Trong bi thc hnh ny, bn s ci t WSUS. gim thiu dung lng lu tr, bn s cu hnh WSUS
server kt ni trc tip n client nhn cc bn cp nht trc tip t Micrsoft.
1. Download WSUS ti a ch http://www.microsoft.com/wsus/
2. Ti trang License Agreement, click I accept the terms of the License agreement chp
nhn cc iu khon ci t v s dng. Click Next.
3. Ti trang Required Component to use administration UI, thng bo cho bn cn ci t
ng dng Microsoft Report Viewer 2008 Redistributable xem cc bng bo co trc
quan. Click Next.
4. Ti trang Select Update Source, nh du chn Store updates locally lu tr cc bn
cp nht trn server. Click Browse v chn ng dn cho WSUS. Click Next.
5. Trn trang Database Options, nh du chn vo Install Windows Internal Database on

this computer. Click Next.
ICT24H.NET
Page 20

6. Ti trang Web Site Selection nh du chn vo Create a Windows Server Update
Services 3.0 SP2 Web site s dng mt website khc website mc nh trong IIS. Click
Next.
7. Ti trang Ready to Install Windows Server Update Services xem li cc thng tin cui cng
trc khi ci t. Click Next tin hnh ci t.
8. Click Finish hon tt.

9. i khong 2 pht, trang Before You Begin hin th, click Next tin hnh cu hnh WSUS
server.
10. Ti trang Join the Microsoft Update Improvement Program, nh du chn Yes, I would
like to join the Microsoft Update Improvement Program c h tr t Microsoft trong
qu trnh cp nht. Click Next.
11. Ti trang Choose Upstream Server, nh du chn vo Synchronize from Microsoft
Update nu bn mun ng b n Microsoft Update. Nu bn mun ng b n mt WSUS
khc nh du chn Synchronize from another Windows Server Update Services server,
sau nhp tn server mun ng b v port. Ngoi ra, click vo Use SSL when
synchronizing update information nu bn mun s dng chng thc SSL trong qu trnh
ng b. nh du chn This is a replica of the upstream server nu bn mun server hin
ti ng vai tr upstream server. Click Next.
12. Ti trang Specify Proxy Server, nu bn mun s dng proxy server nh du chn Use a
proxy server when synchronizing. Click Next.
ICT24H.NET
Page 21

13. Ti trang Connect to Upstream Server, click Start Connecting bt u kt ni theo s
la chn m bn chn trang Choose Upstream Server. i qu trnh kt ni hon tt v
click Next.
14. Ti trang Choose Languages, nh du chn vo Download updates only in these
languages v chn gi ngn ng. Vic ty chn gi ngn ng s gip bn gim c bng
thng. Click Next.
15. Ti trang Choose Products, chn sn phm m bn mun cp nht. Click Next.
16. Ti trang Choose Classifications, nh du chn nhng i tng bn mun cp nht. Click
Next.
17. Ti trang Set Sync Schedule, nh du chn Synchronize automatically v thit lp thi
gian ng b ha. Click Next.
18. i qu trnh ng b ha hon tt.
Bn cng c th thc hin cch sau ng b ha.
2. Giao din Update Services hin th.
3. Chn server l SERVER (tn server bn mun ci t WSUS). Ti khung Details, click
Synchronize Now thc hin ng b ha vi website Microsoft Update
Qu trnh ng b din ra trong vi pht (c th l hn mt gi ty ng truyn ca bn)
Bi thc hnh 2: Cu hnh cc my tnh client nhn cc bn cp

nht
Trong bi thc hnh, bn s s dng Group Policy cu hnh cc my tnh client nhn cc bn cp nht
t WSUS server thay v trc tip t Microsoft.
1. M GPO bn mun p dng cu hnh. Ti Group Policy Management Editor, click chn
Computer Configuration > Administrative Templates > Windows Components >
Windows Update.
2. Double-click vo Specify intranet Microsoft Update services location.
3. Chn Enabled. Trn c hai trng l Set the intranet update service for detecting
updates v Set the intranet statistics server, g http://server. Click OK.
4. Double-click vo Configure Automatic Updates.
5. Chn Enabled. Cu hnh cc thit lp t ng cp nht. Click OK.
ng nhp vo my tnh client bng quyn Administrator. Vo Run v g lnh gpupdate /force p
dng cc chnh sch va cu hnh trn.
Bi thc hnh 3: Ph chun cc bn cp nht

Trong bi thc hnh ny, bn s ph chun mt bn cp nht trin khai n my tnh client.
1. Trn WSUS server, ti giao din Update Services, click Updates. Chn All Updates.
2. Ti danh sch Approval, chn Unapproved.
3. Ti danh sch Status, chn Any. Click Refresh hin th cc bn cp nht.
ICT24H.NET
Page 22

4. Chn nhng bn cp nht gn y nht p dng cho my tnh client. R-click vo bn cp nht
chn v click Approve.
5. Trn hp thoi Approve updates, chn All Computers v chn Approved for install. Click
OK.
6. Nu hin th cc vn v bn quyn, click I accept.
7. Xem cc li hin th trong hp thoi Approval progress xc nhn cc bn cp nht c
ci t n client. Sau click Close.
8. Ti giao din Update Services, chn Computers > All Computers. Ti danh sch Status,
chn Any v click Refresh. My tnh client lc ny s hin th trn danh sch
Trn my tnh client, khi ng li dch v Windows Update.
Tng quan bi hc
Bn c th download WSUS t Microsoft.com.

Sau khi ci t WSUS v ng b nhng bn cp nht t upstream server, bn nn cu hnh cc
nhm my tnh cho php chng nhn c cc bn cp nht. Tip theo, ph chun hoc t
chi cc bn cp nht v i cho chng c phn phi xung cc client. S dng bng bo co
xc nhn qu trnh cp nht hon tt v xc nh nhng my client no hoc cha ci t
cc bn cp nht.
Bn c th xem bn ghi log v qu trnh cp nht khc phc s c v WSUS hoc trn client.
Mc d bn c th xa mt s bn cp nht bng cch s dng WSUS, tuy nhin bn nn xa
cc bn cp nht t nhng my tnh client.
Trc nghim
1. Bn l k s h thng mng ca mt doanh nghip chuyn v thit b m thanh nh sng. Mi
y, bn s dng MBSA kim tra cc vn cp nht bo mt ca my tnh client. Bn nhn
thy c mt s my tnh khng th ci t c cc bn cp nht. Bn c th xem thng tin cc
my tnh ny u? (chn tt c cc p n ng)
A. Xem System log trn my tnh client.
B. Xem Application and Services logs \Microsoft\Windows\Windows
UpdateClient\Operational trn my tnh client.
C. Xem System log trn WSUS server.
D. Xem %SystemRoot%\WindowsUpdate.log.
2. Bn l k s h thng ca mt cng ty kin trc. Bn va mi trin khai WSUS v bn cn xc
nhn cc bn cp nht phn phi thnh cng. Thng tin no sau y m bn nhn c t
bo co Update Status Summary?
A. Cc nhm my tnh c ph chun cc bn cp nht.
B. Cc my tnh hon tt ci t cc bn cp nht.
C. Bn cp nht b xa b.
D. S lng my tnh khng th ci t mt bn cp nht.
ICT24H.NET
Page 23

3. Bn ang trin khai WSUS cho doanh nghip ln. Hin ti, bn cu hnh cc my tnh client thuc
cc nhm khc nhau bn c th trin khai cp nht. Bn c th cu hnh a my tnh vo
nhm bng cch no? (chn tt c cc p n ng)
A. Bt chnh sch Configure Automatic Updates.
B. Thit lp Client-side targeting trong Group Policy.
C. Ti Update Services, r-click vo my tnh v chn Change Membership.
D. Ti Update Services, a my tnh vo nhm thch hp.
Tm tt chng
WSUS cho php bn kim sot v phn phi cc bn cp nht t Microsoft n my tnh client.
Mt WSUS server c th sao chp cc bn cp nht t Microsoft v lu tr chng ti server .
Sau cc my tnh client s download cc bn cp nht t WSUS server thay v download
chng t Microsoft thng qua Internet. h tr doanh nghip vi nhiu vn phng,
downstream WSUS server c th ng b ha cc bn cp nht, ph chun v cu hnh thit lp
t upstream WSUS server, cho php bn c th thit k cu trc phn cp c th m rng
quy m.
Ci t WSUS cn phi ci t IIS v WSUS c th s dng site mc nh c sn khi mi ci t

IIS l Default Web Site. Sau khi ci t WSUS, bn c th qun l WSUS vi giao din Update
Services. Trc tin, bn nn ng b WSUS server vi website Microsoft Update. Sau , to
cc nhm my tnh trin khai. Tip theo, cu hnh cc my tnh client c th download cc
bn cp nht t WSUS server thay v download t Microsoft Update server thng qua Internet.
Thut ng
Downstream server
Upstream server
Windows Server Update Services (WSUS)
ICT24H.NET
Page 24

Ng cnh
Trong nhng ng cnh sau y, bn s c p dng thit k h tng WSUS.
Ng cnh 1: Ln k hoch trin khai h tng WSUS c bn

Bn l mt k s h thng ca ICT24H. Hin ti, bn cu hnh tt c my tnh client download cc bn
cp nht trc tip t Microsoft v t ng ci t cc bn cp nht ny. Tuy nhin, sau khi mt phin
bn mi c tung ra, bn nhn thy ha n dch v bng thng Internet tng t bin sau khi
Microsoft tung ra phin bn mi trn website Windows Update.
V th, bn s dng WSUS gim bng thng s dng cho tr s chnh cha khong 250 my tnh.
Thm ch, bn bt u kim tra th nghim cp nht trc khi trin khai tht. Tuy nhin bn khng c
nhn vin no vn hnh vic kim nghim , v th bn chn cch t ng ph chun v ci t cc
bn cp nht.
Bn ti phng gim c tho lun v ha n ph thu bao t ISP. Gim c yu cu bn tr li mt
s cu hi sau:
1. Lm th no gim bng thng t WSUS?
2. Cn bao nhiu WSUS server?
3. Lm th no cu hnh WSUS t ng ph chun cc bn cp nht?
Ng cnh 2: Ln k hoch trin khai mt h tng WSUS phc tp

Bn l k s h thng ca ICT24H, mt tp on a quc gia vi nhiu chi nhnh vn phng khp nm
chu. Tr s chnh t ti London v bn c cc chi nhnh vn phng t ti New York, Mexico, Tokyo
v France. Tt c cc vn phng u c trang b ng truyn Internet tc cao v chng c kt
ni VPN theo cu trc full-mesh (mng li khp kn). Hay ni mt cch khc l mi vn phng kt ni
trc tip n 4 vn phng cn li.
Hin ti, phng IT London qun l c vn phng London v New York. Cc vn phng Mexico, Tokyo
v France c cc phng IT ca ring h. Bn bt u trin khai WSUS trn Windows Server 2008 v to
ra mt cu trc p ng kt ni cho 5 vn phng.
Sau l cuc tr chuyn gia trng phng IT vn phng Mexico v gim c ca bn. Ni dung nh
sau:
Trng phng IT vn phng Mexico: Ti ni chuyn vi cc trng phng IT Tokyo v

France, v h c nhng yu cu k thut , ngn ng, h iu hnh v kim nghim ring bit. V
th, chng ti cn qun l vic ph chun cp nht. Tuy nhin, chng ti ch ng b ha cp
nht t server trung tm
Gim c ca bn: Khng thnh vn cho d bn c ng b cp nht gia cc vn phng
hoc t Internet. V chng ta s dng VPN v tt c thng qua Internet.
ICT24H.NET
Page 25

Cu hi:
1. Bn cn bao nhiu WSUS server v cu trc nh th no?
2. WSUS server no s c nhn bn v c qun l c lp?
--- Ht ---
ICT24H.NET
Page 26

Win2008 Lab Basic

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Win2008 Lab Basic

Uploaded by

Copyright:

Available Formats

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

1. Xy d ng Domain Controller tch h p DNS server (th c hi n trn Server)

a s Network Connections: Click ph i

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i CROSS Properties:

p tho i Internet Protocol Version 4

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i CROSS Properties: Close

p tho i LAN Properties:

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Internet Protocol Version 4

p tho i LAN Properties: Close

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Run: Nh p l nh cmd > OK

a s Administrator...cmd.exe: Nh p cu l nh ipconfig /all > nh n phm Enter

Quan st thng tin IP

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Welcome to the Active

p tho i Choose a Deployment

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Name the Forest Root

p tho i Domain NetBIOS Name:

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Set Forest Functional

p tho i Additional Domain

p tho i Active Directory Domain

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Location for Database,

p tho i Directory Services

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Summary: Quan st &

p tho i Completing the Active

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Active Directory Domain Services

t Active Directory Domain Services hon t t

B4. B sung d li u DNS service:

a s Server Manager: Ch n Roles> Ch giy lt

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

i > click ph i Reverse Lookup Zone > New Zone

p tho i Welcome to the New

p tho i Zone Type: Gi nguyn

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Active Directory

p tho i Reverse Lookup Zone

p tho i Reverse Lookup Zone

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH

p tho i Dynamic Update: gi

p tho i Completing: Finish

Start > Run

Smith Nguyen Studio.

TRUNG TM O T O M NG MY TNH NH T NGH