Endpoint Protection Server Configuration and Installation

Ok, we have planned our installation and now we should have a better understanding of how all these components integrate together. It’s time to put all that we have learned to work, and install and configure Endpoint Protection

**WSUS Server Role Installation **

For this lecture, we will be installing WSUS on the ITFSCCM01 server. Open Server Manager, click Add Roles and Features , click next , click next again. From Server Selection, verify that the installation server is correct, then click next.
**From the Server Roles screen **scroll down and check the box next to Windows Server Update Services, click add features, click next , then click next again.
From the WSUS screen, click next , then next again
From Content Location Selection screen choose a valid local or remote path for storing updates, in this case I type C:\EndPUpdates, then click next.
From the Confirmation screen , click **Install **
**From the Results screen, confirm a successful installation **
At this point, there is no need for further WSUS configuration. You do not need to Launch Post-Installation tasks, only click close.

Configuration manager will be used to download, synchronize and deploy our updates, so there is no further WSUS configuration necessary.

For verification , the WSUSCtrl.log file provides information about the configuration, database connectivity, and health of the WSUS server for the site. Open this log file using CMtrace.exe. CMtrace.exe is a real time logfile viewer for System Center Configuration Manager. It can be found on the SCCM server installation folder in this case on ITFSCCM

C:\SC_Config_SCEP_1702\SMSsetup\Tools

For this lecture, here is location of the log file – C:\Program Files\Microsoft Configuration Manager\Logs\**WSUSCtrl.log **

**The Software Update Point Installation **

From ITFSCCM01 open the **Configura…