Module 17: Identify and Resolve Software Update Issues Table of Contents Overview snnnnanniennannnnnannnnnnnennne TA Lesson 1: Types of Windows Updates ronnonn seinen ER Lesson 2: Using Windows Update ..cunnsnonn 17-3 Lesson 3: Using Microsoft Update: 178 Resolve Software Update Issues. 114 Review — Module 17: Identity & Resolve Software Update Issues 17-13 Labs — Module 17: Identify and Resolve Software Update ‘ssues 17-15Sep 8 2011 2:37PM Jed Lawrence JedLawrence@hotmail.com ‘This is Jed Lawrence's unique copy and is for product evaluation only- not for distribution or commercial use, Please report any unauthorized use of this content to piracy@microsoft.com or by calling +1 800-785-3448.Module 17: Identify and Resolve Software Update Issues __ 17-1 Overview (Operating System and Application updates are fixes or upgrades that improve the security or performance of the ‘computer system. They are often used to fix known securiy problems as well. These patches can fix problems with ‘the Windows 7 operating system or Microsoft applications installed on the computer. ‘Automatic updates allow these changes to be installed on the computer as scon as they are available. Network applications and servicas like Active Directory and Windous Server Update Services (WSUS) can be used to implement further controls to manage when changes are aoplied and for which systems. WSUS will only work for Microsoft software however. Ifa comprehensive tool is needed for managing updates from any software vendor, then ‘System Center Configuration Manager (SCCM) can be used. Centrally managing the updates on client computers is the preferred way of configuring these resources. Allowing individual users to decide what updates to apply and when will often result in problems, Knowing that all systems have certain fixes applied to them will help to make the network safer and speed up the troubleshooting process. In this section we will learn about the different types of updates that can be applied to computer systems. We wrll til wri Ue options available when coniguring aulormalic uprales, The steps lv lake wher handliny application ‘and operating system update problems will also be examined.4 Module 17: Identify and Resolve Software Update Issues Lesson 1: Types of Windows Updates ‘All Windows Updates are classified before they are deployed so administrators wil know hovr to deal with them and their level of importance. All updates are designed to provide some kind of fix or improvement to the system, but not all computer systems will benefit from them. Knowing the classification of an update is one way to help an ‘administrator make this determination. Updates can be classified as Important, Recommended, Optional or Featured. Important: After testing them, these updates should be quickly installed on all applicable computer systems. They are often used to apply fixes that improve the security or reliability ofthe system Recommended: Although these fixes are not critical tothe functioning ofthe computer, they normally apply changes ‘that enhance its performance or improve the computing axoerience. They are often automaticaly installed along with important updates, ‘Optional: This classification of updates is the least important ofthe four categories. Unike Important or Recommended updates, their installation cannot be automated using the local computer Windows Update settings. ‘They are often used to install updated drivers or software for print devices. Featured: Featured updates are a special catagory of upgrades that often fall into the category of Important. They are installed to meet a particular need and are divided in tree areas: + Security Updates: These are released to meet ¢ particular security issue. The security problem vill always be classified in a Microsoft secunty bulletin as critcal, important, moderate or low. * Critical Updates: These are fixes that are not drecty related to a security problem. The problem usually affects many systems, + Service Packs: These releases include a cumulative set of fixes and updates. Once applied, they will include all the Important and Recommencled updetes for an operating system since its initial release.Module 17: Identify and Resolve Software Update Issues 17-3 Lesson 2: Using Windows Update ‘The windows update feature is installed automatically on al Windows 7 systems. Itallows the manual or autornatic fixing or upgrading of operating system components. Updates can be installed directly from the Microsoft web-site or by using servers configured on the local network. Regardless of which method is chosen, updates should normally be tested before system-wide deployment.4 Module 17: Identify and Resolve Software Update Issues Manual Configuration To check for new Windows Updates, 2 user can use the Windows Update icon in the Start Menu. A manual check will goto the Microsoft web-site to find updates. Ifa WWSUS server is setup on the local network, client computers can be redirected there to look for updates approved by network administrators. Use group policy settings to configure client computers to look for updates on the local WSUS servers (‘Specify intranet Microsoft update service location” setting in Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update). This configuration allows updates to be tested before they are approved for installation on local computers.Module 17: Identify and Resolve Software Update Issues 17-5 Automatic Configuration Cle 5 Sistem and Secrty » WindowsUpdate » Change etings Js] Ble Est Yew Too Hep Choose how Windows can install updates hen you computer olng Windows can aril check for impetan update anita them ng tee stig hen new tse orl yuan seal ember hating own he How does somatic updating ep me potent updates 9 hector opera chore wits one nn recom No hecto spate et recrmende) Aol oe esta wate chs compat cose Upste Uv me updates fr Micros padi and heck or new oponal Mie sft hen Setar netctone Box] Gana) ‘The Windows Update window also allows administrators te change the default settings for the application. Updates ccan be automaticaly downloaded and installed or downloaiied with the user deciding the time of installation. ‘Automatic updates should be done outside of normal business hours to prevent problems with active applications. ‘Security options that allow users without administrative privileges to install updates can be assigned. Recommended Updatas can be installed with the same sattings as important updates. Microsoft application updates can be configured with the sama installation settings as Windows Updates in the settings window. The detailed notification Cf new updates that are available can also be enabled or dsabled from this window. If there are concems about previous updates on the system, a history of these changes is logged and stored for later ‘examination. The date and time of the installation, its level of importance and whether or not its installation vas successful can be viewed. A number of methods are available for troubleshooting unsuccessful updates. The Windows Update Troubleshooter is one of the easiest ways to find what the problem was. Ifitfinds a solution, you can automatically apply the fix wth the troublochootor.4 Module 17: Identify and Resolve Software Update Issues Network Installation Methods When 2 policy decision is made to prevent the installation of certain updates, this can be better controlied if the network uses System Canter Configuration Manager (SCOM) or Windows Server Update Servicas (WSUS). SCCM is a comprehensive tool for deploying Windows operating cystoms, applications and updates. The deployment process supports applications from different vendors, WSUS is used as a method of deploying updates and fixes for operating systems and applications developed by Microsoft. This allows the deployment process for these updates to be managed by local administrators instead of ‘rom the Windows or Microsoft Update web-sitesModule 17: Identify and Resolve Software Update Issues __ 17: Testing Updates ‘Some updates might cause problems on the system. Devizes might stop working or their performance might decrease. Some applications might have compatibiliy problems with new drivers as well. To prevent such problems, all updates should be thoroughly tested before deployment. If problems do arise, Device Manager can be used to roll back driver configurations to a previous version. Some preblems might require you to boot to use the Last Known Good configuration or Safe Mode to fix the issue. Windows Updates can make significant changes to the computer system and should therefore be handled as if an installation is being done. Closing all applications, browsei windows and temporarily stopping scheduled tasks can improve the update process. When an upgrade fails, tying again after closing down all running applications might fx the problem. Verifying network connectivity and that the system is free of malware might also solve some problems. When nothing else works, a restart ofthe system might be necessary before manually trying to do the update again, If an important update cannot be installed on a computer using the usual methods, the knowledge base article (KB) that was created for that update should be read thoroughly to make sure that all the necessary components are in place to allow it to work.47. Module 17: Identify and Resolve Software Update Issues Lesson 3: Using Microsoft Update Windows Update provides updates for the Windows operating system. Microsoft Update can be used to provide ‘operating system and application updates. The options and features available for Windows Updates are also available for Microsoft Updates. e otmail,com rence's unique Cop for product evaluation only- distribution or commercial J use of stent to piracy@microsoft.com or by calling +Module 17: Identify and Resolve Software Update Issues __ 17: Updating Microsoft Applications Deploying updates and fixes for Microsoft applications regulars one way to improve the stability of desktops on the network. Updates can be installed fr server applications Ike Microsoft Exchange and SQL Sorver. Desktops that se Microsoft Office, Windows Defender, Visual Studio, Misrosoft Expression or Windows Live can be maintained as well, New fixes, patches and services packs can be downlbaded and installed for Microsoft applications along with cther Windows Updates. This is done by enabling the Microsoft Update option in the Windows Update settings. ‘The recommendations for troubleshooting problems with Microsoft Updates are the same as for Windows Updates. In addition to the recommendations provided earlier for Windows Updates, keep in mind that third-party browsers ‘may not be fully compatible with the Microsoft Update servce. You might also need to free up enough space for the Update on the hard-drive, delete the Internet Explorer cache and clean up the system's temporary folder. Depending fon the Security settings configured in IE, you might also nead to add the Microsoft Updste sit tothe list of Trusted sites in the browser.17-10 __ Module 17: Identify and Resolve Software Update Issues Upgrade Issues ‘Some upgrade and update problems might be unique however, bacause of having multiple versions of the same product on the same computer. A system on which Microsoft Office 2007 has been upgraded to 2010 might stil receive updates for both versions of the product. Removing the older version completaly by using Programs ancl Features & manually deleting related registry settings will rormally solve this problem. In addition to fixes and security patches, application components can be installed through Microsoft Update. Microsoft Office in particular can download and install spam and junk mail filters. These can improve the security and ‘functionality ofthe Outlook client. Compatibility components might also be made available to improve the interaction between older and newer versions of a product.Module 17: Identify and Resolve Software Update Issues 17-11 Resolve Software Update Issues RESOLVE SOFTWARE UPDATE ISSUES Review the scenarios and problems presented along with their solutions Software updates are necessary to maintain the security and functionality of computer systems. Whether they are for the operating system or client applications, they should be applied in a timely manner. Speed should not be used to ‘compromise safety however, and updates need to be tested before deployment to client computers. Compatibility with applications and hardware devices might cause problems on some computers. Not all updates willbe necessary. The purpose ofthe update along with important details about troubleshooting installation problems can often be found in knowledge base articles. Updates that are not critical can be postponed if they cause problems, Problems with critical updates must be looked into quickiy so they can be deployed in a timely In this section, we will look at some problems that might arise when performing software updates. The solutions provided will work although there can be other possible fixes not presented. Your IT manager wants all client computers to have thelr Windows and Microsoft Updates tested before they are installed. What is the best way to do this and have it affect all domain computers? Use group policy settings to direct all computers to gst their updates from local Windows Server Update Services (WSUS) computers. lest all updates cownloaded trom the Microsoft web-site to ine WSUS server Defore iney are ‘approved for installation. After trying unsuccessfully to install a Windows Update, you have decided to get more detalls about why it was created and who should install it. Where Is the best place to check for this information? Most Windows Updates have a knowledge base article writen for them. This isthe best source of information as to ‘why itwas created. When viewing the history of windows updates on a system, you find that one of them was not installed successfully. What Is the easiest method to find the cause of the problem and to possibly fix it automatically?17-12 Module 17: Identify and Resolve Software Update Issues Windows Update has its own troubleshooter that can be run to find the cause of unsuccessful updates. The ‘advanced settings of the troubleshooter allow you to apply repairs automatically if they are found. After some configuration changes on a computer, the user is unable to install any Windows Updates. The administrator is able to do so when he logs into the computer. How can this problem be solved? Change the Windows Update settings to “Allow all users to install updates on this computer’. The new updates for a printer driver need to be installed on a few computers after they are made available through Windows Update. They will not be available as automatic updates however. Why Is this so? ‘These are classified as optional updates which must be installed manually since automatic installation is not available for Ue,Module 17: Identify and Resolve Software Update Issues 17-13 Review - Module 17: Identify & Resolve Software Update Issues 1. What server application can be used to apply updates to Microsoft and third-party applications? 2. How can you prevent Windows Update from trying to install an unapproved patch on a computer? 3. True or False. It is best to schedule updates to happen while users are working on the system, 4, What tool can be used to undo driver updates on a device? 5. How are the Windows Update and Microsoft Update services different? 8. What are software notifications? 7. True or False. Window's Updates apply to all users regardless of who is logged in when they are installed. 8. What classification of updates cannot be installed automatically on a computer? 8. What feature can be used to configure automatic updates for Microsoft Office on a computer?4 Module 17: Identify and Resolve Software Update Issues 10. How are service packs different from other forms af updates? 111. What too! is designed to automatically detect and'ix problems with Windows Updates? 12, What are the four levels of classifcation availabe for secutity problems solved by security updates? Sep 8 2011 2:37PM Jed Lawrence JedLawrence@hotmail.com Jed Lawrence's unique copy and is for product evaluation only- not for distribution or commercial @microsoft.com or by calling +Module 17: Identify and Resolve Software Update Issues 17-15 Labs - Module 17: Identify and Resolve Software Update Issues Overview: Configure Windows Update settings using Desktop tools and group policy settings. Unless stated otherwise, startup the Windows 7 client and the domain controller images. Login with the Contoso\Admint user account with a password of Pa$$wOrd. Estimated time to complete this lab is 15 minutes. Exercise 1: Configure Windows Updates on the Desktop 1 2 (Open the “Action Canter’ and click the link for Windows Update. Click “Updates: frequently asked questions” and read the sections for ‘How do | lt all users on my computer install updates?” and “What do the different types of updates mean’ Close the "Help and Support” window. Click “Change Settings” Under the section for “Important Updates", choose the option for “Install updates automatically”. Change the time of updates to 8:00AM, ‘Check the option for “Give me recommended updates the same way | receive important updates” ‘Check the option for “Allow al users to install updates on this computer’ Click OK. End any attempt to dounload and install updates, Close the “Action Centar’17-16 __ Module 17: Identify and Resolve Software Update Issues Exercise 2: Configure Windows Updates Using Group Policy 1. Open the Group Policy Management console usirg the Contoso\Administrator credentials. Edit the “Default Domain Policy’ 2. Navigate to Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update 3. Edit the setting for “Enable client-side targeting” and read the Help section. 4. Enable this setting and assign a target group name of ‘IT”. Click OK. Edit the setting for “No auto-restart with logged or users for scheduled automatic updates installations” and ‘ead the Help section. Enable this seting and click OK. Enable the setting for "Allow non-administrators to receive update notifications Edit the setting for “Configure Automatic Updates’ and read the Help section. Enable this setting and in the Options under "Conigure automatic updating’, choose “Allow local admin to choose setting” 10, Schedule the updates for 6:00AM every moming. Click OK. 114, Edit the setting for “Specify intranet Microsoft update service location’ and read the Help section. 12. Enable this setting and configure the intranet update and statistics server to use the httpi/NYC-DC1 URL. 13. Click OK and close the Group Palicy.