Implementing Update Management Flashcards
What does the following PowerShell CmdLet Do?
Add-WsusComputer
Adds a client computer to a target group.
What does the following PowerShell CmdLet Do?
Add-WsusDynamicCategory
Adds a dynamic category to a WSUS server.
What does the following PowerShell CmdLet Do?
Approve-WsusUpdate
Approves an update to be applied to clients.
What does the following PowerShell CmdLet Do?
Deny-WsusUpdate
Declines the update for deployment.
What does the following PowerShell CmdLet Do?
Get-WsusClassification
Gets the list of all WSUS classifications currently available in the system.
What does the following PowerShell CmdLet Do?
Get-WsusComputer
Gets the WSUS computer object that represents the client computer.
What does the following PowerShell CmdLet Do?
Get-WsusDynamicCategory
Gets dynamic categories on a WSUS server.
What does the following PowerShell CmdLet Do?
Get-WsusProduct
Gets the list of all products currently available on WSUS.
What does the following PowerShell CmdLet Do?
Get-WsusServer
Gets the WSUS update server object.
What does the following PowerShell CmdLet Do?
Get-WsusUpdate
Gets the WSUS update object with details about the update.
What does the following PowerShell CmdLet Do?
Invoke-WsusServerCleanup
Performs the process of cleanup on a WSUS server.
What does the following PowerShell CmdLet Do?
Remove-WsusDynamicCategory
Removes a dynamic category from a WSUS server.
What does the following PowerShell CmdLet Do?
Set-WsusClassification
Sets whether the classifications of updates that WSUS synchronizes are enabled.
What does the following PowerShell CmdLet Do?
Set-WsusDynamicCategory
Sets the synchronization status of a dynamic category.
What does the following PowerShell CmdLet Do?
Set-WsusProduct
Sets whether the product (application or Operating System) has updates synced to the WSUS server
What does the following PowerShell CmdLet Do?
Set-WsusServerSynchronization
Sets whether the WSUS server synchronizes from Microsoft Update or an upstream server.
How do you install WSUS using PowerShell?
What does it install by default?
Install-WindowsFeature -Name UpdateServices -IncludeManagementTools
It installs WSUS, a WID Database, and WSUS Services
How do you configure WSUS once the feature has been installed?
- Set which upstream server the WSUS server synchonizes from
- Either Microsoft
- From another WSUS
- From another WSUS server as a replica
- Provide any proxy info
- Select the languages you want to download
- Select Products
- Anything you would like updates for
- Classifications
- Types of updates
- Sync Schedule
- Either Manual
- At a specified time
- What is a Product in WSUS?
- What is a Classification in WSUS?
- The application updates to be downloaded to your server
- The type of udpates you want. (i.e. do you only want critical updates or do you want update roll ups or both )
What are the two ways you can manage computers in WSUS?
- Group Policy
- WSUS Console
Are WSUS Groups AD Groups?
No
Where would you go to change settings of your WSUS Server?
- Select Update Services
- Expand the Server in Question (I.E the HOSTNAME)
- You would change settings in the Options tab
What do you need to have installed in order to view reports?
The Microsoft report viewer 2008 redistributable
- What group policy would you set to auto assign a computer to a WSUS group?
- What is the path?
- Client Side Targeting
- Computer Policies -> Administrative Templates -> Windows Componets -> Windows Update
- What group policy would you set to specify updates behavior?
- What settings can you configure?
- What is the path?
- Configure Automatic Updates
- Settings:
- The download and install behavior
- If you select schedule install you will also need to:
- Select a time and date for window
- Install during automatic maintenance window
- If you select schedule install you will also need to:
- The download and install behavior
- Computer Policies -> Administrative Templates -> Windows Componets -> Windows Update
- What group policy would you set to specify that computers use your internal WSUS server?
- What settings can you configure?
- What is the path?
- Specify intranet Microsoft Update Service Location
- The intranet Update Service Address and the statistics server
- Computer Policies -> Administrative Templates -> Windows Componets -> Windows Update
How would you get a computer to check in to WSUS?
wuauclt.exe /detectnow /reportnow