In this article I will demonstrate how to migrate an existing WSUS 3.0 SP1 server from a local SQL Express instance to a remote SQL Server 2005 Database Services instance.
Firstly be aware of these limitations when deploying WSUS with a remote SQL Server instance.
- You cannot use a server configured as a domain controller for either the front end (FE) or the back end (BE) of the remote SQL pair.
- You cannot use a server running as a Terminal Services server for the front end of the remote SQL pair.
- You cannot use Windows Internal Database for database software on the back-end server.
- Both the front-end and the back-end servers must be joined to an Active Directory domain.
1. Download and install the SQLCmd tool on the WSUS server.
2. Install SQL Server 2005 "Client Tools Only" on the WSUS server so that you have access to the SQL Management Studio console.
3. Stop the IISAdmin and Update Services services in Computer Management. Note the other services that IISAdmin will stop, usually the World Wide Web service and the HTTP SSL service.
4. Use SQLCmd to detach the SUSDB.
C:\>sqlcmd -S np:\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query
1> use master
2> alter database SUSDB set single_user with rollback immediate
3> go
Changed database context to 'master'
Nonqualified transactions are being rolled back. Estimated rollback completion
100%
1> sp_detach_db 'SUSDB'
2> go
1> exit
5. Copy the SUSDB.mdf and SUSDB_Log.ldf files from the WSUS server to the remote SQL server. Place them in the default locations for MDF and LDF files on the SQL server.
6. Attach the SUSDB to the remote SQL server.
7. Grant the WSUS server computer account permissions to the SUSDB on the remote SQL server.
8. Configure the WSUS server to use the remote SQL server for SUSDB by modifying the HKLM\Software\Microsoft\Update Services\Server\Setup\SQLServerName registry key.
9. Start the IISAdmin, World Wide Web Publishing Service, HTTP SSL, and Update Services services. Or you can just reboot the server.
10. Launch the WSUS administration console to verify the WSUS server is connecting to the database successfully. If WSUS is not working properly double-check the services in the previous step or try restarting the server. You can also review the Application event log for WSUS errors.
In this article I will outline how to migrate WSUS 3.0 to a new server using a local SQL Express instance and without downloading all of the updates again.
1. Install WSUS on new server with local express database.
2. During configuration wizard choose "Synchronize from another WSUS server…", enter the name of the existing WSUS instance you are migrating from, and then choose the replica option.
3. Complete the configuration wizard (some options will be skipped due to being a replica server)
4. Wait for initial synchronisation to complete. This will synchronise update files, approvals, and computer groups, but not other server settings. This step saves you having to download your approved updates from the internet again.
5. Change the new server from a replica to standalone.
6. Download the WSUS API Samples and Tools from Microsoft and install it on each of the servers.
7. On the old server open a command prompt and navigate to the C:\Program Files\Update Services 3.0 API Samples and Tools\WsusMigrate\WsusMigrationExport folder.
8. Run "wsusmigrationexport.exe settings.xml" to export the settings. This will backup your approvals and target groups to an XML file.
9. Copy the XML file to the new server.
10. On the new server open a command prompt and navigate to C:\Program Files\Update Services 3.0 API Samples and Tools\WsusMigrate\WsusMigrationImport folder. Run "wsusmigrationimport.exe settings.xml All None".
11. Configure your server settings (products and classifications, auto-approvals, email alerts, etc) on the new server to match the old server.
12. Update your GPOs to direct clients to the new WSUS server. If you are using GPOs to assign computers to Computer Groups in WSUS then no further action is required. If you are manually assigning computers to Computer Groups in WSUS then all clients will initially end up in Unassigned Computers when they report in to the new WSUS server and need to be manually assigned to their correct group.
In this post I’ll show you how to install Windows Software Update Services (WSUS) 3.0 with Service Pack 1 on a Windows Server 2008 server.
Install WSUS pre-requisites
First, install the WSUS operating system pre-requisites. These pre-requisites are listed on the WSUS 3.0 release notes and can be installed using the ServerManagerCMD.exe command line tool.
C:\>servermanagercmd -install web-asp-net web-static-content web-windows-auth we
b-mgmt-compat web-metabase
................................................................................
..............
Start Installation...
[Installation] Succeeded: [Web Server (IIS)] Management Tools.
[Installation] Succeeded: [Web Server (IIS)] Web Server.
[Installation] Succeeded: [Web Server (IIS)] IIS 6 Management Compatibility.
[Installation] Succeeded: [Web Server (IIS)] Common HTTP Features.
[Installation] Succeeded: [Web Server (IIS)] Security.
[Installation] Succeeded: [Web Server (IIS)] Application Development.
[Installation] Succeeded: [Windows Process Activation Service] .NET Environment.
[Installation] Succeeded: [Windows Process Activation Service] Process Model.
[Installation] Succeeded: [Web Server (IIS)] IIS 6 WMI Compatibility.
[Installation] Succeeded: [Web Server (IIS)] IIS 6 Metabase Compatibility.
[Installation] Succeeded: [Web Server (IIS)] Windows Authentication.
[Installation] Succeeded: [Web Server (IIS)] ISAPI Extensions.
[Installation] Succeeded: [Web Server (IIS)] ISAPI Filters.
[Installation] Succeeded: [Web Server (IIS)] Static Content.
[Installation] Succeeded: [Web Server (IIS)] Default Document.
[Installation] Succeeded: [Web Server (IIS)] Request Filtering.
[Installation] Succeeded: [Web Server (IIS)] IIS 6 Management Console.
[Installation] Succeeded: [Web Server (IIS)] IIS 6 Scripting Tools.
[Installation] Succeeded: [Web Server (IIS)] .NET Extensibility.
[Installation] Succeeded: [Web Server (IIS)] ASP.NET.
<100/100>
Success: Installation succeeded.
Though it is not a pre-requisite I also find it useful to install the IIS7 Management Console.
C:\>servermanagercmd -i web-mgmt-console
.................................................
Start Installation...
[Installation] Succeeded: .
[Installation] Succeeded: [Windows Process Activation Service] Configuration API
s.
[Installation] Succeeded: [Web Server (IIS)] IIS Management Console.
<100/100>
Success: Installation succeeded.
Next, download and install Microsoft Report Viewer 2005 SP1.
Install WSUS 3.0 SP1
Download the install package for WSUS 3.0 with SP1, choosing the appropriate version for your server architecture. I have downloaded the 32-bit version for this server. Run the install package to install WSUS.
Read the rest of this article…
