click the graphic for assessment. exam objective 6.1: configure and manage updates configure update...

Week 12 - Lesson 19: Configuring and Managing

Updates

Click the graphic for assessment

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0CAQQjRw&url=http://www.clker.com/clipart-8525.html&ei=l7ViVMXzF8XloASt3oC4CQ&psig=AFQjCNGQsbfrooMWTcMpHgbW_4dKFDXkOw&ust=1415841559436705

CIT 211 Chapter19: Updates 2

OverviewExam Objective 6.1: Configure and manage

updates Configure update settings Configure Windows Update policies Manage update history Roll back updates Update Windows Store apps


Configuring Update Settings

Lesson 19: Configuring and Managing Updates


Checking for UpdatesTo protect a Windows 8.1 operating system,

Microsoft Updates can be downloaded and installed from the Control Panel by the end users.

There are several categories of updates provided by Microsoft; each category prioritizes the updates based on importance and recommended use by the end user. Important updates Recommended updates Optional updates Security updates Service Packs Critical updates


Checking for Updates Important updates can be configured to be installed

automatically and typically included updates that fix or improve security, privacy, and reliability within the OS or application.

Recommended updates can be configured to install automatically and typically take care of non-critical problems that might enhance end-user usability with the software.

Optional updates must be installed manually and might include updates, drivers, and software not typically installed with the operating systems.

Security updates, rated as critical, important, moderate or low, are released to fix product-specific security-related vulnerabilities that might affect end-user or enterprise systems.

Critical updates fix critical, non-security related “bugs.” Service Packs are a cumulative package of updates and patches

released for a system or application over a period of time.

Checking for UpdatesThe Choose how updates get installed

screen



Changing Update Settings

For users that require different download and installation options, update settings are configurable based on the end-user requirements.

Important updates can be downloaded and applied by selecting one of the following selections. Install updates automatically (recommended) Download updates but let me choose whether to install

them Check for updates but let me choose whether to download

and install them Never check for updates (not recommended)

Using the Windows Update Control Panel

The Choose your Windows Update settings page



Hiding and Restoring Updates

Occasionally, there are updates that are available that you do not want to be reminded of, or installed, until you are ready to install them. Hiding them from view eliminates the need to manually remove the update when you are installing updates in Windows Update.

If an update was hidden from view, it can be easily restored from its hidden view status, allowing it to be installed.


Configuring Windows Update

Policies



Configuring Policies to Manage Updates

Since Windows 2000, administrators have been able to configure Windows Update using Group Policy.

You can configure Local Policy on a local system by using the Local Group Policy Editor on that computer.

In an enterprise environment, you can create Group Policy Objects (GPOs) and apply them to a site, a domain, or an organizational unit. By linking a GPO to an AD DS object, you deploy all of the policy settings in the GPO to the computers and users contained in the object.


Configuring Policies to Manage Updates

Group policies are configured to force update settings and administration to be identical, or to meet the technical requirements of domain members throughout a Windows domain.

To view the configurable Windows Update policy settings, run the Local Group Policy editor on a computer and navigate to the following location Computer Configuration > Administrative Templates > Windows Components > Windows Update.

Configuring Local Computer Policies and Microsoft Domain Group Policies to Manage Updates

Navigating to Windows Update policies



Install Updates and Shut Down Dialog Box Policy

The Do not display Install Updates and Shut Down option in Shut Down Windows dialog box policy removes, or keeps in place the Install Updates and Shut Down option when shutting down the system.


Default Option to Install Updates and Shut Down Dialog Box PolicyThe Do not adjust default option to Install

Updates and Shut Down in Shut Down Windows dialog box policy allows the end users to maintain their default shut down selection when shutting down from the Shut Down Windows dialog box.


Wake Up to Install Scheduled Updates Policy

Windows machines that are in hibernation can be configured to wake from hibernation, install updates, and return to hibernation once the update installations have completed.

The Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates policy can wake the system up to perform scheduled updates.


Automatic Updates Policy

One of the required policies for system wide control of Automatic Updates, the Configure Automatic Updates policy sets the method of downloading and installing Automatic Updates.


Intranet Microsoft Update Service Location Policy

The Specify intranet Microsoft update service location policy allows the system administrator to configure devices meeting the scope of the policy to receive updates from the intranet WSUS or SCCM server.


Automatic Updates Detection Frequency Policy

The Automatic Updates detection frequency policy controls how often the system will check for new updates to download and install.


Non-Administrator Update Notification Policy

Enabled by default on Windows 8.0/8.1 devices, the Allow non-administrators to receive update notifications policy allows non-administrators on non-Windows 8/8.1 devices to receive update notifications.


Software Notifications Policy

The Turn on Software Notifications policy notifies the end user of pending optional or featured updates are waiting for download or installation.


Immediate Installation of Automatic Updates Policy

The Allow Automatic Updates immediate installation policy triggers the system to install updates once they have been downloaded and prepared for installation.


Recommended Updates through Automatic Updates Policy

The Turn on recommended updates via Automatic Updates policy allows automatic installation of both important and recommended updates.


No Auto-Restart with Logged On Users Policy

Configuring the No auto-restart with logged on users for scheduled automatic updates installations policy prevents a system from rebooting immediately after an update has installed if a user is logged in.


Re-Prompt for Restart with Scheduled Updates Policy

The Re-prompt for restart with scheduled installations policy, re-prompts users to restart at a specified interval.

If the end user postpones a restart after automatic updates have been installed, the re-prompt for restart policy will notify the end user at the time specified.


Delay Restart for Scheduled Installations Policy

An administrator may modify the Delay Restart for scheduled installations policy to allow additional time for the user to finish work before the restart is initiated.


Reschedule Automatic Updates Scheduled Installations Policy

If a scheduled Automatic Update was not performed, the amount of time to wait for the next attempt at installation can be rescheduled to happen at next startup.

This is configured through the Reschedule Automatic Updates scheduled installations policy.


Enable Client-Side Targeting Policy

By configuring multiple group policies, multiple group names can be sent to the intranet Microsoft update servers. These groups are configured in the “Enable client-side targeting” policy.

Allowing the intranet Windows update server administrator the ability to deploy, choose selected updates, and/or delay updates based on specified target group.


Allow Signed Updates from an Intranet Microsoft Update Service

Location Policy

Microsoft, by default, allows only the installation of updates that are signed by Microsoft.

By configuring the Allowed signed updates from an intranet Microsoft update service location policy, an administrator can permit trusted updates from being installed that are not signed by Microsoft.


Managing Update History



Viewing Update History

All updates that are installed on the Windows 8.1 system can be viewed, sorted by Name, Status, Importance, and Date installed from within the Control Panel.

All installed updates are listed within the View update history windows within Windows Update.

The View update history window also provides detailed information about what the installed update fixes, or what security risks are patched with a specific update.


Rolling Back Updates



Rolling Back UpdatesYou can perform any of the following tasks to roll back an update to get a system back to its original state before an update caused an issue:Performing a system restore of the system to a time

before the problem update was installed.Manually uninstalling an update to remove roll back

the newest version of an update to the prior version of the update.

If a system was working properly before updates were installed, it is beneficial to review the latest installed updates and begin troubleshooting update problems by uninstalling the most recently installed updates as listed.


Updating Windows Store

Applications



Updating Windows Store Apps

Windows Store Apps are downloaded and installed by using the Windows Store. Any apps that have been purchased, downloaded, and installed in the Windows Store can be updated only through the Microsoft Store.

Viewing the settings within the Microsoft Store, there is an option to Automatically download updates for my apps

Leaving this set to the default option of Yes allows the Microsoft Store to download updates.



Managing update options


Turning off app updates on Windows 8.1


Understanding WSUS Architecture

38CIT 211 Chapter19: Updates

Deploying WSUS 3.xHas been part of Windows server products

since server 2003.WSUS software is a free download from

MicrosoftWeb-based product, therefore the Web

Server (IIS) role must be added to the server

Requires a database – Windows Internal Database, or SQL Server for larger networks


Deploying WSUSWSUS management consists of

synchronization and approval of updates. WSUS is configured to regularly synchronize with either Microsoft Update or another WSUS server. The console can be used to approve updates for deployment to the client computers. Usually updates are approved after they have been tested.


Configuring WSUS Clients

Cannot be done in Windows Update program

Configured through Group Policy


Configuring WSUS Clients via gpedit.msc



Lesson Summary You perform updates on a Windows 8.1 system to enhance,

improve, secure, and protect end users from threats. It is important to keep a system up-to-date with the latest

patches, service packs, and updates. You can configure automatic updates to require minimal user interaction during downloading and installation.

You can configure the download, installation, timing, and user interaction of updates using local or domain Group Policy settings.


Lesson SummaryThe update history lists recently installed

updates, along with their statuses, dates of installation, and other more detailed information .

If an updated is causing problems, you can easily roll back an installed Windows update to a previous version.

Windows Store apps must be updated through the Windows Store.


Lesson Summary Windows updates can be scheduled for installation to meet

the needs of the end user, small business, or enterprise. Recently installed updates are listed along with a status,

date of installation, and more detailed information of the updated and what it has affected.

Windows Updates can be easily uninstalled or rolled back to a previous state if a recently installed update is causing problems. This can also be beneficial when troubleshooting a system instability after updates were recently installed.

Windows Store Apps can be updated through the Windows Store.

Errata page 450Page 450 1. build a list makes no sense.

Some of the links listed do not exist. Here is what it should be

___Give me updates for other Microsoft products when I update windows___Open System and Security___Click OK___Open Windows Update___Click Change settings___Open Control Panel


Errata page 451Page 451 3. build a list makes no sense.

Some of the links listed do not exist. Here is what it should be

___Open view installed updates___Open Programs___Open Programs & features___Open Control Panel___Select the update for uninstallation___Right-click and select Uninstall.


Assessment Week 12

When is Patch Tuesday?

a. The second Tuesday of every monthb. The third Tuesday of every monthc. The first Tuesday of every quarterd. The second Tuesday of every quarter


Answer

• a• Explanation: The second Tuesday of

every month, sometimes known as “Patch Tuesday,” is typically the release day for all tested and signed patches from Microsoft.


By default, when will Windows install software updates?

a. Daily at 1:00 AMb. Daily at 3:00 AMc. Sundays at 3:00 AMd. Saturdays at 1:00 AM


Answer

• b• Explanation: If no schedule is

selected, updates will automatically be installed every day at 3:00 AM.


What Group Policy setting removes or keeps in place the Install Updates and Shut Down option when shutting down the system?

a. Do not display Install Updates and Shut Down option in Shut Down Windows dialog boxb. Do not adjust default option to Install Updates and Shut Down in Shut Down Windows dialog boxc. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updatesd. Configure Automatic Updates


Answer

• a• Explanation: The Do not display

Install Updates and Shut Down option in Shut Down Windows dialog box policy removes, or keeps in place the Install Updates and Shut Down option when shutting down the system. Enabling this setting removes the dialog box.


What Group Policy setting configures the day of the week to install updates?

a. Automatic Updates detection frequencyb. Do not adjust default option to Install Updates and Shut Down in Shut Down Windows dialog boxc. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updatesd. Configure Automatic Updates


Answer

• d• Explanation: The Configure

Automatic Updates policy sets the method of downloading and installing Automatic Updates. You have the option to select the installation day of the week and the time of day.


When the Automatic Updates detection frequency policy is left undefined, what is the default interval at which Windows checks for new updates from the configured update server?

a. 22 daysb. 22 weeksc. 22 minutesd. 22 hours


Answer

• d• Explanation: When not configured, Windows

will use the default interval of 22 hours.


How do you update Window Store apps?

a. Use the Control Panel Programs appletb. Use Windows Updatesc. Use the Windows Stored. Use the Gpupdate command


Answer

• c• Explanation: The Windows Store is

used to manage your apps, including updating the apps.


How do you enable automatic updates for Windows Store apps?

a. In the Store, tap Settingsb. In the Store, tap Windows Updatesc. In the Store, tap Scan settingsd. In the Store, Update Now


Answer• a• Explanation: App publishers sometimes update their

apps to add new features and fix problems. The Windows Store can automatically install app updates when they become available. To make sure your apps get updated automatically, follow these steps:• On the Start screen, tap or click Store to open the Windows

Store.• Swipe in from the right edge of the screen and then tap

Settings.• (If you're using a mouse, point to the lower-right corner of

the screen, move the mouse pointer up, and then click Settings.)

• Tap or click App updates. • Make sure Automatically update my apps is set to Yes.


WSUS 3.x comes with Windows 8

True or False


Answer

• False• Explanation: WSUS is a server

product and it supported in Windows 2003 server with SP1 and above.


Homework Week#12

Read Chapter 19Get our labs caught up 1-21Next quiz Nov 26 and it will cover

chapters 17 - 21Do the knowledge assessment on

page 448-451


click the graphic for assessment. exam objective 6.1: configure and manage updates configure update...

Documents