Windows2008 Patching(打补丁)

我们都知道Windows的服务器都需要打补丁的，要不然漏洞那个叫多啊。Windows的系列服务器打补丁无非就是两种方法：

1. 通过Internet打补丁：

1. Go to control Panel->Windows Update->Hit 'Check for Updates'
2. Go to control Panel->Windows Update->Hit 'Check online for updates from Windows update'
3. After completing the above tasks you receive the availabe 'Install updates for computer'
4. Go to control Panel->Windows Update->Hit 'numbers important update are available'
5. Unselect the package you don't want to update and Hit 'OK'
6. Then Hit 'Install updates' , then it starts downloading the patches and install it automatically.
7. Once installation is completed, instead of install updates you will get the option to restart.

2. 通过WSUS打补丁： (可以和SCCM配合使用)

1. 建立一个域环境，当然你有得安装和配置AD
2. 安装一个WSUS服务器，具体步骤不写了，网上很多
3. 把客户端加入到域环境中
4. Go to control Panel->Windows Update->Change Settings,   (check if you setings block by domain admin, gpupdate /force)
5. Go to control Panel->Windows Update->Hit 'Check for update managed by your system administrator' (from WSUS)
6. Then Hit 'Install updates' , then it starts downloading the patches and install it automatically. (WSUS服务器中已经配置了哪些补丁会被安装)
7. Once installation is completed, instead of install updates you will get the option to restart.

3. 客户端打补丁时用到的目录和日志

　　C:\Windows\WindowsUpdate.txt (日志记录Windows客户端是否打了补丁从哪里打的补丁)

1. 通过Internet打补丁的日志形态

2. --    :::         25cc    PT      + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
   --    :::         25cc    Misc    Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
   --    :::         25cc    Misc     Microsoft signed: Yes
   --    :::         25cc    Agent      * Found  updates and  categories in search; evaluated appl. rules of  out of  deployed entities
   --    :::         25cc    Agent    *********
   --    :::         216c    AU      #  updates detected

3. 通过WSUS打补丁的日志形态

4. --    :::         25cc    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
   --    :::         25cc    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://10.15.1.14/ClientWebService/client.asmx
   --    :::         25cc    Agent      * Found  updates and  categories in search; evaluated appl. rules of  out of  deployed entities
   --    :::         25cc    Agent    *********
   --    :::         216c    AU      #  updates detected

　　C:\Windows\SoftwareDistribution\Download (本目录用于存放下载的补丁)