Windows Update Services (WUS) is the successor to Microsoft Software Update Services (SUS) and the application Microsoft previously referred to as SUS 2.0. Essentially a free Windows Server add-on that lets small and midsized businesses easily handle patch management for servers and clients, WUS is one of the most exciting out-of-band (OOB) Windows Server upgrades Microsoft has shipped since Windows Server 2003 debuted in April 2003. The product's functionality sits between that of Windows Update and Microsoft Update (a new service that the company will soon introduce), which are designed for individual users, and Microsoft Systems Management Server (SMS) 2003, which is aimed at high-end enterprises. The company also offers a fourth patch-management product, Microsoft Baseline Security Analyzer (MBSA), which can help individuals but is designed to let third-party developers create their own patch-management systems. Here's what you need to know about WUS.
A New Back End
Microsoft's patch-management strategy has been evolving steadily since early last year, when the company finally acknowledged that it was doing a poor job of helping customers keep their products up-to-date easily and seamlessly. However, before Microsoft could ship any new patch-management products, the company had to fix the infrastructure. Its existing products—Windows Update, SMS, MBSA, and SUS 1.x—all use different database back ends. As a result, these products often deliver varying results, even when run on the same systems. Microsoft says that work on a common patch-management back end started in 2003 and will continue through summer 2004, culminating in the releases of MBSA 2.0 and WUS in third quarter 2004. By that time, all Microsoft's patch-management tools will point to the same back end and provide consistent results.
Also helping WUS is the move from several patch-installer routines to just two, both of which will be based on the new Windows Installer (MSI) 3.0 technology, which provides for patches with far fewer reboots, new uninstallation capabilities, and massive patch-size reductions. And a new delta compression scheme will eventually make MSI 3.0—based patches as much as 90 percent smaller than equivalent patches released today, according to Microsoft.
New Features
In addition to a new name, WUS sports a wide range of desirable new features. Like earlier SUS versions, WUS provides businesses with a centralized patch-management infrastructure, which lets administrators approve then roll out patches to desktops and servers. WUS adds new content download types—including patches for Microsoft Office, SQL Server, and Exchange Server—to the previously supported Windows updates and service packs. WUS includes improved targeting capabilities that let administrators take advantage of organizational units (OUs) in Active Directory (AD) environments or manually created groups in workgroups to roll out patches to the most crucial systems first. The new service also includes bandwidth-management capabilities that let you control patch delivery during peak business hours so that you can ensure your networks won't be overloaded during crucial periods.
Thanks to a new topology scheme that supports parent and child WUS servers, WUS scales out more effectively than SUS, opening up this patching solution to distributed environments for the first time. If you're wondering how well WUS scales out, consider this: WUS is based on the same technology that Microsoft uses to run Windows Update, so it's proven to be both scalable and reliable. And now WUS can generate simple reports detailing key patch-management tasks (e.g., notifying you whether all your target groups received and installed the updates) and status reports. Unlike the more powerful SMS, however, WUS doesn't support ad hoc queries, which Microsoft describes as a more complex feature.
One feature that won't be changing is the price—none. Contrary to rumors, and despite all the powerful new features, WUS continues to be a free component of Windows Server.
Previous
Register
Eliseo April 01, 2004