How to Install & Configure WSUS Server Windows Server 2019 - Video 11 Windows Server 2019 Training.

hey guys welcome back to another video with infosec pat this is video 11 this is how to install windows update services which is wsus on windows server 2019 so if you're ready for the video let's get into it [Music] all right guys welcome back so this is video 11 how to install and configure wsus services which is windows server update services on windows server 2019 all right so let's go to the next page so in this video what we're going to be doing is everything is you know on our windows server uh on our dc you know houses ads dns dhcp and we're going to be installing and configuring this windows update server and actually i'm going to be utilizing a core server to get the updates and do all that stuff but let's go to the next page so step number one is going to be configuring the ip address and renaming the server and joining it to the domain so let's let's start out with that okay so we're gonna do step one right now let's go ahead and minimize this page this is our bare metal uh machine like and we have our windows core right here we'll log into that in a bit okay we can log in right now okay and this is remember core resist this so if you do ipconfig you know all that cool stuff so if we do um yeah it doesn't matter right now um but we're going to be utilizing this to um duty updates so on our dc we have an ou with um wsus servers we have the core ou and we have to create a group policy in a bit um so we don't in group policy objects we don't have a ws us1 up yet so let's go ahead and do a pre you know some some configuration actually i'm going to move this on this screen so i remember what ip i used and all that stuff so let's go ahead and start this um initial configuration step one let's go ahead and disable ipv4 ipv6 um and we're going to be utilizing 192.168.50.209. yep 192 168.50.1 192.168.50.201. 192.168.50.50.1 for our router all right so that's cool let's view this in detail make sure i can get to the internet boom that's working now let's refresh this whole deal now you see ip address let's do let's just turn this off real quick okay and now let's go ahead and change the computer name and join it to the domain so the computer name is going to be win2k 19-ws us01 wsus01 holy moly you can't type tonight zero one ws us01 i'm just making sure wsu s01 perfect i'm going to join it to the domain so it's going to be infosec dot local maybe i can't type because my phone is just sitting right here um right by my my wrist all right so we're going to log in as administrator and then my fancy fancy password and just to join into the domain and once this joins we can go on to the server and go ahead and check out some um check out the server that's been joined to domain let's give this a second more than a second come on you can do it you can do it come on sometimes it takes a few minutes remember this is a lab this is running vmware and a nested network and nested networking so there you go join boom hit okay once this is done that's fine because i know exactly what that is restart let that restart so now we can go back to our active directory is because that that's there because in an old lab i had the same server but if we go to computers we see wsus server here we can throw this into the server's ou okay that's fine now we have it in wsus we have a wds windows deployment services we have a svr and then we have our file server so all of our servers sit in the same and then we have our core server sitting in here let's go back let's log into here log into let's do other user all right so let's do infosec pat backslash administrator if i can spell administrator and then my fancy fancy password cool so if the next step would be to install the wsus role from the server manager all right so let's go ahead and go just make sure you can see it on the domain we can see all the settings here correctly and let's go ahead and go to manage manage add roles and features next next next and all the way down here the role is going to be windows server update services right here next next next and right here is pretty important stuff we have the wid which is the windows database connectivity and then we have the wsus service which installs the services used for wsus and all the api remote blah blah the whole shebang all right let's go to next all right so this is pretty important this is where the content for the updates are going to be sitting so what i did in the background i created a new directory so let's go to disk management so we have an unallocated disk this is where the data squares i don't want to put all the updates on the c drive because that's not best practice at least from all the times i've done but um if we just change this we can change this to whatever s drive that's fine then we have the s drive for our cd-rom or dvd-rom so we can bring this initialize we can bring this online then we can initialize the disk that's fine gpt is fine and then we can put a new simple volume next next we can put d drive that's fine and we can put wsus as the label the volume label and finish so this is where and we can explore this and what i want to do in here is i want to make a new directory called wsus data okay and i want to go into here i want to copy this directory and this is where all the cool stuff is going to go all right so let's go ahead and hit there paste it there and go to next next next and install we'll let this do the install and the next thing well that's i want to bring that back over here so that's what we just did step two so step three is configure wsus and group policy for the servers so let's go ahead and do that so we're configuring the the ws us here but let's go ahead and go on to our dc where we have to configure a group policy for our windows update services all right so let's go ahead and hit new group policy we can do wsus that should be fine and we can go ahead and right click on it and edit and we can go to computer policies administrative templates windows components and all the way down all the way down to windows updates what did i do um mine right spot yep cool so let's just hit standard we don't have to do all this extended so in here so again that was under policy maybe i did it's a little too quick administrative templates windows components and all the way down you have windows update right here double click that and you're going to see all the settings here all right there's three main settings that i'm going to be configuring today there's you know in 2019 there's a boatload of them but the ones that we're going to be setting up and configuring a three so the main ones are we're gonna do configure automatic updates and we're gonna do specify inter uh intranet uh microsoft update service location obviously we have to know where we're gonna be pulling these updates from and then automatic updates detection frequency so i'm going to just enable this 22 hours is way too many hours so i'm going to do one hour that should be fine and the most important thing is um specifying where we're going to be pulling these from all right so if we go to just open up a command prompt i know my my my server because i can see it right here but if we if you don't remember your server you can do an ns lookup ns lookup holy moly and then in ns lookup you can type in set space t y p e equals a record right so this is a regular record and you can just put 192 168.50.209 and this is the record that we're going to be looking for in our dns so this is the server i want to copy this okay and then here we're going to do http colon what back to slash slash we're going to paste that colon the port number was very excuse me and very important it's 85 30 okay so let's go ahead and control a control c and we're gonna paste it right here to set it in the statistics server we're going to apply this hit ok and the one last thing we're going to do is configure automatic updates this is pretty critical excuse me so we're going to enable this excuse me let's just go check on this really quick let's do the post installation while launch post installation copy i mean copy we can look at this it's running right now so we'll let that do its thing while we finish up this group policy i just want to try to multitask so the video is not too long oh hiccups so here we have a few different configurations so the automatic download this is what we're going to be choosing but if you want to choose something different you can you have option four if you choose option four if you come down here you can select the installed date say for example every friday because friday you know everyone's away for the weekend you can do it at whatever seven o'clock and do all that good stuff and let it do its thing but we're gonna do option three we're gonna do automatic update automatic download and notify for install okay apply okay all right so our group policy seems to be done now let's go ahead and close out of this we have the group policy but we don't have it linked to the proper ou where that server is residing so let's go ahead and link an existing group policy in the wsus policy here bada bing we're good we can verify here we have this ou with the server win2k19-core so we should be good from here let's go back to ws us server this is complete we can x out of here we can hit close and now we have wsus here now let's go ahead and go to tools w uh windows server update services this is where the fun begins we can hit you know before you begin uh in the windows firewall allow access to the servers pretty much like this is saying okay is the server configured to allow clients pretty much it is but we can double check make sure the server is allowing the clients i think we have it turned off um firewall it's turned off this service i i didn't allocate a lot of um resources but uh can this com can this computer um communicate connect to the update services i'm sure it can let's make sure i can ping for example google make sure why is everything so damn slow um this is really strange all right so i'm going to paint google.com i can get out to the internet and i can probably paint microsoft if i can spell microsoft microsoft.com it probably doesn't they probably have icmp returned off which is probably a good thing but um you can hit next here all right and i don't want to uh join their microsoft update improvement program i'm going to download directly from microsoft hit next i don't have a proxy so i want to hit next here and i want to all right so let's hit start connecting so pretty much what this is going to do is go out to window microsoft update servers and download everything to this machine in the sense of look it says right the information to be downloaded it's going to be all the types of updates the products the languages everything that it's needed to um to be able to fetch and synchronize from microsoft so this process is probably going to take about 10-15 minutes so from here i'm going to pause the video and i'm going to resume once this is done all right guys thank you all right guys welcome back so this has completed so now what we can do is hit next here and this is going to show us what languages we want to the the updates to download so obviously we're going to choose english that's by default and now this is going to give us all the [Music] products so if we go all the way down here we're going to see excuse me we're going to see windows right here we're going to uncheck that because we don't want to install everything we don't want to get all the updates we just want to get windows for windows server 2019 which is right here okay hit next we're going to do definition updates critical updates and service security updates that's fine and i'm going to do a manual synchronization that's fine and we're going to begin the initial synchronization now finished now this is the windows server update services console and if we go to the server we can see it synchronizes it's going to take up several minutes to synchronize and we're going to see i'll walk you through these so we have updates obviously it's going to be loading there's nothing there's no updates yet because it's still synchron synchronizing um all updates if we go to any refresh we'll probably see a few populate while it's synchronizing there you go but it's probably you know it's gonna take some time so we go to critical updates go to any we can we can hit refresh we'll see some critical it says 12 total up here so we'll give it a minute but we'll go to the next one is security updates and the wsus updates so this is pretty much all the updates for wsus you can refresh see if there's anything that's populated yet or not we'll give that a second remember this is a virtual environment so it's a test lab so the next the next section is computers so this will show us a summary of the status of the computers in groups okay by the groups so if we go here we see all computers and unassigned computers so by default if we see this configuration in here if we go to options we go to computers you can specify how computers be assigned to the group you can do it through group policy or you can just leave it as default and it'll go into the unassigned groups and you can create different groups in here and assign it manually and so we cannot save anything because it's the server is still synchronizing as it says right there so that's fine all right so see we have one computer right now we refresh we hit any bada bing we have our first computer here we have our server core all right so that's the server that we have in our domain controller when if you if you remember let me log into it of course timed out so this is the let's go back to active directory we have this group policy i mean this organizational unit with this server and this group policy applied to here go to settings we can go to show all we can see the group policy that's assigned to that server okay to minimize this we can go back to wsus and that's all good in the hood right so now we go to downstream server there's no downstream server at the moment we don't have any downstream servers we only have the single server we go to synchronizations we're going to see the synchronization process uh in a second we can see here it's running it's at 79 so it's almost done okay then we have reports this uh this view shows available reports so you can see update status summary update uh update detailed status etc etc and then you have the options different options you can do you know where we're manually um synchronizing you can do you know what proxies and you know everything you could do products to say if you want to change the products so you're like oh i have windows 10 machines in my environment now you can go in here and click on windows 10 and get windows 10 updates and you can have the synchronization schedule like we have it manually you can set it to automatic you know once a day at i don't know eight o'clock at night so it doesn't you know bog down the network and you know same thing server cleanup so this so like clean up on on necessary servers that no longer you know pretty much right here delete the updates you can just walk through this and this takes a while if you do this i remember the first time i did it i was like this thing took forever i don't remember how long but it took forever and um report roll up we can you know that's if you have a status of a group you know downstream servers email notification you want to send emails when the stuff is done and so on and so forth personalization you can include all block there's a whole bunch of different settings and then this is the the initial wizard when we first installed it all right so let's go back to updates see how this uh back to server okay so it's done so ideal uh ideal idle means it's done so it's not synchronizing so if we go to uh synchronizations we can see that it's done it's eight it's almost 8 30 pm est right now all right so we have this server so what we're gonna have to do first we're gonna see these these updates available right these are all the updates that are available for windows server 2019 all right so we're going to send a you know i'm just going to do two updates i'm going to approve these updates i'm going to prove for all computers and for the computers that are unassigned so for that um windows server 2019 core it'll go through and hit done now if we've refreshed this now if we do status approved we should see only those two bada bing one two and that's pretty much sums it up so now what we'll do is go back to here we'll see that it's 69 69 megs out of 95 megs so it's downloading those updates to the server so where are those updates going you remember where we created that we created on our d drive ws us data and then wsus content and we have the two updates right there uno dos these are all two updates that are being downloaded to our server okay so let's x out of there just give this a few seconds okay perfect so updates needing files zero because those are done and now let's refresh this go to approved needed oh that's weird all right let me just go to yeah i was in the wrong spot my bad so now we can see okay so it's ready for install all right so let's go ahead and see you know it's pretty much done but i want to show you like on the windows server core let's go ahead and hit ctrl delete and control delete and i want to show you just a few little commands in here so just in case those computers don't show up there's a you know you can do a group policy update which is gp update space slash force this will force the group policy that you created for wsus to pull and deploy over to wsus all right and there's another group policy that is pretty i mean another command that's pretty useful it's let me see if i can copy and paste it because i have the i have it right here so i'm a copy and paste kind of guy i guess not of course not so it's w u a u c l t space slash detect now i can spell detect right detect now so that command i usually run it like three or four times so that that command will actually re-register the client to go over to the wsus server to re-register and try to pretty much um what do they call it like um i check back in pretty much all right so one more command so say for example you're on the server and you're like is the group policy being applied to this obviously we know because it's working but if it wasn't working you can run a command called gp result space slash r and this will go out and see what group policies are applied to this computer or server in this case if we go all the way up we can see right here applied group policy objects we have the wsus group policy right there and then we have our firewall policy policy from our video 2 i think when we did active directory or install i don't remember exactly we're like in video 11. so that's pretty much it that's how you let's go back here we can i want to show you let's open up this really quick to sum it up so what we did we configured an ip address we've renamed the server join it to the domain we installed the wsu as a role from the server manager we configured wsus and added the group policy for the server we verified the installation we tested it because we can see that it's there and there's a little bonus slide right here i want to show you guys so you can see it so tips so to re write like what i was just saying to re-register the client you know client server wsus review the following instructions so you can do a gp update slash force to force that group policy for the wsus policy to um pull down from the ad server and then you can run this command w u a u c t l space slash detect now to re-register as well so that pretty much sums up the video so hopefully you guys enjoyed it thank you so much please like subscribe and video 12 is going to be coming out very soon thank you you

Channel: InfoSec Pat

Views: 10,618

Keywords: install and configure wsus, install and configure wsus server 2019, Installing and configuring WSUS, Deploy and Configure WSUS, configure wsus client group policy, WSUS on Server 2019, WSUS Windows Server 2019, Installing a WSUS server, install wsus on windows server 2019, wsus, implement wsus, wsus group policy, wsus gpo configuration, windows 2019 wsus, wsus server configuration 2019, setup wsus server, configure wsus server 2019, how to install wsus server

Id: 0QNRtXFw8v8

Length: 26min 6sec (1566 seconds)

Published: Mon Apr 27 2020