Outcome 3: Implement secure network administration procedures

Table of Contents

1. Windows Server 2003 Security Features
2. NTFS File and Folder Permissions
3. Software Update Infrastructure
   1. Software Update Services
   2. Configuring Software Update Services
   3. SUS Options
   4. Handling Updated Content
   5. Automatic Client Update Settings
   6. Installing the SUS Client
   7. Windows Server Update Services (WSUS)
   8. WSUS Improvements
   9. WSUS Features
4. Network Protocol Security
5. Self Assessment Questions (SAQs)
6. Summary: Implementing secure network administration procedures
7. Summary: Software Update infrastructure

Handling Updated Content

An administrator can also modify how the SUS server handles updated content. This enables you to specify what the SUS server should do when updates are made to software packages that have previously been approved. You can select from two options:

• Automatically Approve New Versions of Previously Approved Updates.

• Do Not Automatically Approve New Versions of Previously Approved Updates. I Will Manually Approve These Later.

If you want to test an update before it is downloaded and installed by clients, you should choose the second option. This means that any software packages that you previously approved but that have been updated by Microsoft require approval again by the administrator before clients can install them.

When an SUS server connects to the Microsoft Windows Update site, it downloads two types of content:

• a file that describes the list of packages (Aucatalog1.cab)
• the actual software packages.

An administrator can choose whether the SUS server should download the packages or just the catalog file. If only the catalog file is downloaded, any clients that are configured for Automatic Updates first check the list of approved packages from the local SUS server and then connect to the Windows Update servers to download them.

You can also choose to download the packages and store them locally on the SUS server. In this case, any clients configured for Automatic Updates will download the approved software packages from the local SUS server. You can also specify the locales that will be downloaded by selecting each language that you need to support.

Next: Automatic Client Update Services