Endpoint Protection Server Configuration and Installation
Server Academy Members Only
Sorry, this lesson is only available to Server Academy Full Access members. Upgrade your plan to get instant access to this and many more premium courses. Click the Upgrade Plan button below to get started.
Saving Progress...
Ok, we have planned our installation and now we should have a better understanding of how all these components integrate together. It’s time to put all that we have learned to work, and install and configure Endpoint Protection
WSUS Server Role Installation
- For this lecture, we will be installing WSUS on the ITFSCCM01 server. Open Server Manager, click Add Roles and Features, click next, click next again. From Server Selection, verify that the installation server is correct, then click next.
- From the Server Roles screen scroll down and check the box next to Windows Server Update Services, click add features, click next, then click next again.
- From the WSUS screen, click next, then next again
- From Content Location Selection screen choose a valid local or remote path for storing updates, in this case I type C:\EndPUpdates, then click next.
- From the Confirmation screen, click Install
- From the Results screen, confirm a successful installation
- At this point, there is no need for further WSUS configuration. You do not need to Launch Post-Installation tasks, only click close.
Configuration manager will be used to download, synchronize and deploy our updates, so there is no further WSUS configuration necessary.
For verification, the WSUSCtrl.log file provides information about the configuration, database connectivity, and health of the WSUS server for the site. Open this log file using CMtrace.exe. CMtrace.exe is a real time logfile viewer for System Center Configuration Manager. It can be found on the SCCM server installation folder in this case on ITFSCCM
C:\SC_Config_SCEP_1702\SMSsetup\Tools
For this lecture, here is location of the log file – C:\Program Files\Microsoft Configuration Manager\Logs\WSUSCtrl.log
The Software Update Point Installation
- From ITFSCCM01 open the Configuration Manager Console
- From the Workspace, open Administration, from the Navigation Pane click Site Configuration, then click Server and Site System Roles.
- From the List View Right click the ITFSCCM01 Primary Site, then click Add Site System Roles, On the General tab, click next.
- On the Proxy tab click next
- From System Role Selection, click Software Update Point, then click next
- From the Software Update Point Select WSUS is configured to use ports 8530 and 8531, then click next.
- On the Proxy and Account Settings page, if necessary, type in your credentials to connect to the WSUS server.
- From the Synchronization Source tab, select Synchronize from Microsoft Update, click next.
- On the Synchronization Schedule tab, check enable synchronization on a schedule,
Change the Run every to 1 day, click next.
- From the Supersedence Rules tab, Supersedence Behavior, select Immediately expire a superseded update, click next.
- From the Updates Files tab, click next.
- From Classifications, in this case I selected Definition Updates. This selection is for security updates. You may choose additional selections, click next.
- From Products, then All Products, click the +, from Microsoft click the +. Scroll down and click the + next to windows, then click the box next to Windows Defender. You may choose additional options, then click next.
- From the Languages tab, click English, Uncheck, the languages you don’t need, then click next.
- From the Summary tab review your settings then click next. After the installation completes click close.
Server Academy Members Only
Want to access this lesson? Just sign up for a free Server Academy account and you'll be on your way. Already have an account? Click the Sign Up Free button to get started..
