Timakonza makasitomala a WSUS

Makasitomala a WSUS sakufuna kusintha atasintha ma seva?
Ndiye ife timapita kwa inu. (NDI)

Tonse takhalapo pamene china chake chasiya kugwira ntchito. Nkhaniyi ifotokoza za WSUS (zambiri za WSUS zitha kupezeka kuchokera apa и apa). Kapenanso ndendende, za momwe mungakakamize makasitomala a WSUS (ndiko kuti, makompyuta athu) kuti alandire zosintha pambuyo posamutsa kapena kubwezeretsanso seva yomwe ilipo.

Choncho zinthu zili motere

Seva ya WSUS inafa. Ndendende, wowongolera RAID adapangidwa mu 2000. Koma zimenezi sizinawonjezere chisangalalo. Pambuyo pa kukangana kochepa (ndi kuyesa kubwezeretsa RAID yomwe inawonongeka ndi wolamulira wakufa), adaganiza zotumiza chirichonse kuti atumize seva yatsopano ya WSUS.

Chotsatira chake, tinalandira WSUS yogwira ntchito, yomwe pazifukwa zina makasitomala sanagwirizane.
Mfundo: WSUS ikugwirizana ndi FQDN kudzera mu seva yamkati ya DNS, seva ya WSUS imalembetsedwa mu ndondomeko zamagulu ndipo imagawidwa kwa makasitomala kudzera pa AD, zoikidwiratu za seva, musanayambe zochita zonse, sinthani WSUS palokha ndikugwirizanitsa zosintha.

Pambuyo popenda mkhalidwewo, mfundo zazikulu zingapo zinazindikiridwa

1. Client Client (tikulankhula za wuauclt) poyesa kulumikizana ndi SID ya seva yakale ya WSUS.
2. Vuto ndi zosintha zosatulutsidwa zomwe zidatsitsidwa kuchokera pa seva yakale ya WSUS.
3. Kuyimitsa ntchito zomwe zimakhudza kugwira ntchito kwa wuauclt (tikukamba za wuauserv, bits ndi cryptsvc). Kuyimitsa magalimoto kunachitika pazifukwa zosiyanasiyana, zomwe sizinafufuzidwe mwatsatanetsatane.

Chotsatira chake, yankho lonselo linayambitsa kalembedwe kakang'ono, komwe kumagawidwa ndi ndondomeko zamagulu kudzera pa AD kapena ndi manja anu (ndi mapazi). Cholembacho chimagwiritsa ntchito njira yokonzekera bwino kwambiri ndipo sichinabweretse zotsatira zoyipa kwa miyezi isanu ndi umodzi yogwiritsidwa ntchito.

Ndifotokoza zomwe zikuchitika (kwa iwo omwe ali ndi chidwi kwambiri)

Timayimitsa seva yosinthira, yeretsani zofotokozera zachitetezo cha ntchito yolumikizirana ya WSUS, chotsani zosintha zomwe zilipo pa WSUS yapitayi, yeretsani zolembera za WSUS yapitayi, yambitsani ntchito yosinthira yokha (wuauserv), ntchito yosinthira mwanzeru yakumbuyo ( bits) ndi ntchito ya cryptography (cryptsvc), pamapeto pake timagogoda mwamphamvu pa WSUS kuti tikhazikitsenso chilolezo, kuzindikira WSUS yatsopano ndikupanga lipoti kwa seva.

Ndipo monga nthawi zonse: mumachita zonse zomwe zafotokozedwa pamwambapa ndi pansipa mwangozi komanso pachiwopsezo chanu. Chonde onetsetsani kuti zonse zofunika zasungidwa musanalembe script.

Zolemba

net stop wuauserv
sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
del /f /s /q %windir%SoftwareDistributiondownload*.*
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v PingID /f
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v SusClientId /f 
net start wuauserv && net start bits && net start cryptsvc
wuauclt /resetauthorization /detectnow /reportnow

Source: www.habr.com