The post install configuration wizard is all new in this version. It has been streamlined to help create a nearly seamless install right out of the box. This was done so that WSUS could be deployed cheaply (free) and easily in any IT environment. Microsoft is continuing their dedication to security by making patching their software as easy as possible, even in an enterprise. The fist screen presents you with the requirements you need to meet before you begin the configuration itself.

© CNET Networks / TechRepublic
Josh Hoskins

The first configurable option you will be presented with is choosing your upstream server. If this is your first (or only) WSUS server, then you will want to synchronize with Microsoft Update. If you have a hierarchy of servers, then you will need to select the server you want to synchronize with. If you are unsure of this, then you will need to speak with the person responsible for patch management in your environment. For lab purposes (as this should be the case as this product is still beta) synchronizing with Microsoft Update will be appropriate.

© CNET Networks / TechRepublic
Josh Hoskins

Next you will need to connect to the upstream server you chose in the previous step. This step will take some time to complete. The amount of time it takes will vary based on the speed on your upstream computer. If you are having trouble connecting, you may need to double check the requirements on the first screen of the configuration wizard. If that doesn’t correct the issue, you may need to investigate your upstream server to make sure it is functioning correctly.

© CNET Networks / TechRepublic
Josh Hoskins

Next you will set your synchronization schedule. You can set your schedule to run anytime you wish and as often as you wish, even if that is only when you manually initiate it. With this version of WSUS you can sync at a rate of every hour if you wish. You do want to make sure you set your synchronization schedule so that it has time to complete before your clients scan for updates.

© CNET Networks / TechRepublic
Josh Hoskins

The new home page of the WSUS console displays information regarding your server. As you begin to use WSUS this page will fill the statuses of your updates, along with any system event that require your attention.

© CNET Networks / TechRepublic
Josh Hoskins

The Options tab of the new WSUS console gives you all the tools you need to fully configure your WSUS installation. This will allow you not only change the choices you made during the installation, but even completely rerun the configuration wizard at any time.

© CNET Networks / TechRepublic
Josh Hoskins

The Automatic Approvals option has been changed. As you can see, the new system has been changed to closely resemble the Rules tool from Outlook. This is very useful as you can use it along with the newly added nested groups feature in WSUS Version 3 to give yourself great control over not only which updates are automatically approved, but who they are approved for and who they are applied for.

© CNET Networks / TechRepublic
Josh Hoskins

On the advanced tab of the Automatic Approvals option you have the ability to default approval for updates to WSUS itself. You can also automatically approve updates you have already approved a pervious version of, and decline updates if they are expired.

© CNET Networks / TechRepublic
Josh Hoskins

From the Options menu you can then access the Computer group configuration. Previously, you had to manage groups from your GPO’s. Only viewing which groups computers belonged to on WSUS. Now you can fully manage your groups on WSUS. If you have a previously configured group scheme already in place though, you can still use group policy targeting.

© CNET Networks / TechRepublic
Josh Hoskins

The Server Cleanup wizard gives you a quick and easy way to keep your server clear of older data that’s no longer needed. This can be run manually at any time, and will only affect the options selected.

© CNET Networks / TechRepublic
Josh Hoskins

The reporting feature of WSUS Version 3 has been completely overhauled. From this new interface you can easily select any of the default reports, and then customize the report from within the report itself. You will need to download the free Visual Studio Report Viewer to use the reporting features of WSUS.

© CNET Networks / TechRepublic
Josh Hoskins

From within the report definition you will have many different configuration options. These options will vary by report. If you are familiar with SQL Server Reporting Services then this interface will be already be familiar to you, though it is very intuitive if you have never used it.

© CNET Networks / TechRepublic
Josh Hoskins

Once your report is generated you it will be presented to you within the same window. From within the report window you can not only view the report, but also export the report as a PDF or XLS file. This inclusion greatly increases the power of the reporting tool, as now you can easily give reports to management regarding WSUS, instead of having them run them from a Web console. Also, there is now a report users group, which allows users in that group to only run reports, and limits them from editing any settings.

© CNET Networks / TechRepublic
Josh Hoskins

The Synchronization Results tab gives you the current status of your latest synchronizations. From here you can see not only if your synchronizations completed, but also can create a baseline of how long it takes to run.

© CNET Networks / TechRepublic
Josh Hoskins

The Updates tab presents data in a very familiar way from previous versions of WSUS, with one major exception. Now you can add, remove, rearrange, and sort by any column. The ability to customize your view of updates is very powerful, and greatly improves the overall manageability of WSUS.

© CNET Networks / TechRepublic
Josh Hoskins