1
00:00:00,000 --> 00:00:01,050
What's up, guys?

2
00:00:01,050 --> 00:00:03,770
This is Sohan and you are
watching Technical Spark.

3
00:00:03,770 --> 00:00:06,240
In our WSUS series,
in this episode,

4
00:00:06,240 --> 00:00:09,230
we are going to see how
to approve and deploy

5
00:00:09,230 --> 00:00:12,720
patches on your Windows
Client Machines step by step.

6
00:00:12,720 --> 00:00:15,230
This is one of the very
important and crucial part

7
00:00:15,230 --> 00:00:18,870
of the WSUS because when we
install and configure WSUS,

8
00:00:18,870 --> 00:00:23,160
our main purpose is to serve the
updates to all manager machines.

9
00:00:23,160 --> 00:00:24,590
And in earlier
videos, we already

10
00:00:24,590 --> 00:00:27,410
saw how to install
and configure WSUS,

11
00:00:27,410 --> 00:00:31,220
as well as we already saw how to
configure the GPO so that when

12
00:00:31,220 --> 00:00:33,120
any new machine
joins your domain,

13
00:00:33,120 --> 00:00:36,090
it will automatically
report to your WSUS server.

14
00:00:36,090 --> 00:00:37,880
So similar way, what
I have done here

15
00:00:37,880 --> 00:00:40,980
is I have approved some
patches in my WSUS.

16
00:00:40,980 --> 00:00:44,030
For example, let me
go to the Updates

17
00:00:44,030 --> 00:00:46,980
and then expand
this, All Updates.

18
00:00:46,980 --> 00:00:49,310
If you see, right now, these
are the unapproved updates

19
00:00:49,310 --> 00:00:50,460
which is showing here.

20
00:00:50,460 --> 00:00:53,040
So which means this will not
install to any of the machines.

21
00:00:53,040 --> 00:00:55,460
But however, if any system
requires any patches,

22
00:00:55,460 --> 00:00:58,470
then it will show you
in here, Needed Count.

23
00:00:58,470 --> 00:01:00,090
If you don't know
how to get that,

24
00:01:00,090 --> 00:01:02,300
simply right click
here and choose

25
00:01:02,300 --> 00:01:04,800
what are the desired field
you would like to add

26
00:01:04,800 --> 00:01:07,540
into this particular dashboard.

27
00:01:07,540 --> 00:01:09,970
If you want to deploy
any of the software,

28
00:01:09,970 --> 00:01:13,680
then you can simply right click
and then go to the Approve.

29
00:01:13,680 --> 00:01:15,450
Choose the group
where you would like

30
00:01:15,450 --> 00:01:18,400
to add [INAUDIBLE] app
updates to be deployed.

31
00:01:18,400 --> 00:01:20,260
Right now, I'm not
going to approve this.

32
00:01:20,260 --> 00:01:22,410
But if I go to the
top, then you will

33
00:01:22,410 --> 00:01:26,080
observe that some of the updates
have already been approved.

34
00:01:26,080 --> 00:01:27,810
So let me show you that.

35
00:01:27,810 --> 00:01:30,900
Simply click on here,
Approve Updates.

36
00:01:30,900 --> 00:01:32,190
Refresh.

37
00:01:32,190 --> 00:01:35,040
So these are the updates
which I have already

38
00:01:35,040 --> 00:01:39,660
approved in my WSUS, like
Microsoft Defender Antivirus,

39
00:01:39,660 --> 00:01:40,870
Software Removal Tool.

40
00:01:40,870 --> 00:01:43,320
So these are very crucial
and very important

41
00:01:43,320 --> 00:01:45,850
updates which should be
served on a day-to-day basis.

42
00:01:45,850 --> 00:01:47,350
And if I go to the Computers.

43
00:01:47,350 --> 00:01:49,350
So guys, in Computers,
what I'm going to do here

44
00:01:49,350 --> 00:01:52,510
is since both the
machines are 100% patched

45
00:01:52,510 --> 00:01:57,220
so we'll add one more machine
into our this particular WSUS.

46
00:01:57,220 --> 00:02:00,580
We have already configured
the policy in GPO.

47
00:02:00,580 --> 00:02:04,290
So if we join any machine in
[INAUDIBLE] Active Directory,

48
00:02:04,290 --> 00:02:06,000
then that machine
will automatically

49
00:02:06,000 --> 00:02:07,900
report to our WSUS server.

50
00:02:07,900 --> 00:02:10,130
We don't have to do any
manual configuration.

51
00:02:10,130 --> 00:02:13,210
So next what we will do, I
have another machine which

52
00:02:13,210 --> 00:02:14,600
I have joined into the domain.

53
00:02:14,600 --> 00:02:16,780
But after joining
domain, I haven't

54
00:02:16,780 --> 00:02:19,420
started that machine, which
means the first reboot

55
00:02:19,420 --> 00:02:20,800
is not completed yet.

56
00:02:20,800 --> 00:02:22,670
For that, let me
turn on that machine.

57
00:02:22,670 --> 00:02:26,650
Here we go, the
machine is powered on.

58
00:02:26,650 --> 00:02:28,780
Let me enter the credentials.

59
00:02:28,780 --> 00:02:32,240
OK, guys, now we'll log in
with our domain administrator.

60
00:02:32,240 --> 00:02:37,990
So Technical Spark is my domain,
backslash, administrator.

61
00:02:37,990 --> 00:02:40,640
So this is the first time
I'm logging into the domain.

62
00:02:40,640 --> 00:02:42,400
So machine has started now.

63
00:02:42,400 --> 00:02:44,260
Technicalspark.com is my domain.

64
00:02:44,260 --> 00:02:45,830
And the host name is Patching.

65
00:02:45,830 --> 00:02:50,360
Now let's go to the Windows,
then Settings, Updates.

66
00:02:50,360 --> 00:02:53,200
Great, friends, it looks like
my this particular machine

67
00:02:53,200 --> 00:02:55,390
has already detected
and has downloaded

68
00:02:55,390 --> 00:03:00,440
one update from our WSUS server
and it's asking us to install.

69
00:03:00,440 --> 00:03:02,150
It didn't get installed
automatically.

70
00:03:02,150 --> 00:03:02,650
Why?

71
00:03:02,650 --> 00:03:06,250
Because in our GPO policy, we
have configured these settings

72
00:03:06,250 --> 00:03:09,970
that download updates
automatically and ask

73
00:03:09,970 --> 00:03:11,650
for install.

74
00:03:11,650 --> 00:03:14,850
So it's completely working
as per our group policy.

75
00:03:14,850 --> 00:03:17,060
And as you can see in
the top, some settings

76
00:03:17,060 --> 00:03:19,640
are managed by
your organization.

77
00:03:19,640 --> 00:03:23,340
Click on Install Now and
it will start installing.

78
00:03:23,340 --> 00:03:25,790
Meanwhile, let's
check out in our WSUS

79
00:03:25,790 --> 00:03:29,090
server whether this machine
is showing in our WSUS or not.

80
00:03:29,090 --> 00:03:32,000
For that, let me jump
to the WSUS server.

81
00:03:32,000 --> 00:03:34,790
OK, let's refresh the screen.

82
00:03:34,790 --> 00:03:36,420
Yeah, perfect guys.

83
00:03:36,420 --> 00:03:40,350
It just got updated here,
Patching.technicalspark.com.

84
00:03:40,350 --> 00:03:42,930
And patch level is 96%.

85
00:03:42,930 --> 00:03:48,560
And there are almost 67 patches
which are needed by this server.

86
00:03:48,560 --> 00:03:50,730
Right now, only one software
is getting installed.

87
00:03:50,730 --> 00:03:53,100
But yeah, there are
almost 67 softwares

88
00:03:53,100 --> 00:03:54,270
which we need to approve.

89
00:03:54,270 --> 00:03:55,800
So how we can do that?

90
00:03:55,800 --> 00:03:58,190
Let's go to the
All Updates again.

91
00:03:58,190 --> 00:04:00,510
Or you can also go to the WSUS.

92
00:04:00,510 --> 00:04:03,650
And if you observe here,
Update Status, it says,

93
00:04:03,650 --> 00:04:06,090
updates needed by computer.

94
00:04:06,090 --> 00:04:06,775
Click on that.

95
00:04:06,775 --> 00:04:10,068
[AUDIO LOGO]

96
00:04:10,068 --> 00:04:15,560


97
00:04:15,560 --> 00:04:18,470
So these are basically
updates which need

98
00:04:18,470 --> 00:04:20,519
to be approved for our server.

99
00:04:20,519 --> 00:04:22,190
So how we can do that?

100
00:04:22,190 --> 00:04:24,930
Just review all the updates
which are available here.

101
00:04:24,930 --> 00:04:25,770
Scroll down.

102
00:04:25,770 --> 00:04:28,680
If you think that one of
the updates is not required,

103
00:04:28,680 --> 00:04:32,930
you can unselect that
particular update like this.

104
00:04:32,930 --> 00:04:35,780
But right now, I'm going to
select all the updates just

105
00:04:35,780 --> 00:04:40,140
for your demonstration and
then right click, Approve.

106
00:04:40,140 --> 00:04:43,250
So where exactly my this
particular machine is present?

107
00:04:43,250 --> 00:04:45,380
Then it's in unassigned group.

108
00:04:45,380 --> 00:04:49,820
So we have to select that and
click on Approve or Install.

109
00:04:49,820 --> 00:04:50,520
OK.

110
00:04:50,520 --> 00:04:52,850
Now it's approving
all the updates.

111
00:04:52,850 --> 00:04:54,830
Click on Close.

112
00:04:54,830 --> 00:04:56,790
My updates have been approved.

113
00:04:56,790 --> 00:04:58,670
Now if I go to
the WSUS, then you

114
00:04:58,670 --> 00:05:01,640
can see there are almost
7 GB of updates which

115
00:05:01,640 --> 00:05:03,530
are getting downloaded now.

116
00:05:03,530 --> 00:05:05,150
Where exactly all
the updates will

117
00:05:05,150 --> 00:05:07,280
download in your WSUS server?

118
00:05:07,280 --> 00:05:10,130
So as I said earlier
in this PC, I

119
00:05:10,130 --> 00:05:15,110
have created one
directory that is D drive.

120
00:05:15,110 --> 00:05:19,800
In D drive under WSUS Directory,
here your all the patch updates

121
00:05:19,800 --> 00:05:21,600
will get stored.

122
00:05:21,600 --> 00:05:24,510
Now let's go back
to All Updates.

123
00:05:24,510 --> 00:05:26,430
Now, guys, let's go
to our client machine

124
00:05:26,430 --> 00:05:30,480
to see whether updates
got installed or not.

125
00:05:30,480 --> 00:05:33,600
Perfect, the update
is installed.

126
00:05:33,600 --> 00:05:35,520
Click on Check for updates.

127
00:05:35,520 --> 00:05:37,330
Right now it's not
showing any updates.

128
00:05:37,330 --> 00:05:40,890
It's just because our WSUS
server is yet to be updated.

129
00:05:40,890 --> 00:05:44,490
Now let me check out
the Update History.

130
00:05:44,490 --> 00:05:47,370
Driver update is
installed on 19/01.

131
00:05:47,370 --> 00:05:50,610
Other updates is
installed today.

132
00:05:50,610 --> 00:05:54,810
So, guys, now let's go
back to our WSUS server.

133
00:05:54,810 --> 00:05:59,220
All Computers, perfect, WSUS.

134
00:05:59,220 --> 00:06:01,570
As of now, [INAUDIBLE]
has been downloaded.

135
00:06:01,570 --> 00:06:04,870
So I'm not going to cover
the other things here

136
00:06:04,870 --> 00:06:07,480
but I'll let you know
what exactly will happen.

137
00:06:07,480 --> 00:06:10,110
It will download
all the 7 GB of data

138
00:06:10,110 --> 00:06:13,320
in our server, which means all
the updates will be downloaded

139
00:06:13,320 --> 00:06:15,160
in our WSUS server.

140
00:06:15,160 --> 00:06:18,660
And then it will start
distributing this update

141
00:06:18,660 --> 00:06:21,600
to the PC to which
these updates are

142
00:06:21,600 --> 00:06:25,120
required, like my recently
domain joined machine,

143
00:06:25,120 --> 00:06:26,670
Patching server.

144
00:06:26,670 --> 00:06:29,110
So all these updates
will be deployed

145
00:06:29,110 --> 00:06:31,250
on that particular machine.

146
00:06:31,250 --> 00:06:33,550
And once the machine
is updated, then you

147
00:06:33,550 --> 00:06:36,500
will be able to see
100% status here,

148
00:06:36,500 --> 00:06:39,590
which is right now showing 96%.

149
00:06:39,590 --> 00:06:42,340
And the exclamation
mark you are seeing here

150
00:06:42,340 --> 00:06:44,240
will be gone automatically.

151
00:06:44,240 --> 00:06:47,410
So hopefully, friends, now you
are very much or pretty much

152
00:06:47,410 --> 00:06:50,540
clear that how
these things works.

153
00:06:50,540 --> 00:06:52,330
Friends, I hope you
have learned something

154
00:06:52,330 --> 00:06:54,685
in this video about
WSUS patching.

155
00:06:54,685 --> 00:06:56,560
Friends, if you have
found this video useful,

156
00:06:56,560 --> 00:06:58,060
then please click
on the Like button

157
00:06:58,060 --> 00:06:59,930
and don't forget to
share and subscribe.

158
00:06:59,930 --> 00:07:01,972
Additionally, if you think
that the content which

159
00:07:01,972 --> 00:07:04,070
I upload on this
channel is meaningful,

160
00:07:04,070 --> 00:07:07,750
then don't forget to share this
channel link with your friends

161
00:07:07,750 --> 00:07:11,510
and colleagues so that we can
grow our community very faster.

162
00:07:11,510 --> 00:07:14,890
And based on your response,
I will start uploading videos

163
00:07:14,890 --> 00:07:16,120
more frequently.

164
00:07:16,120 --> 00:07:18,518
If in case if you still
have any question, queries,

165
00:07:18,518 --> 00:07:20,060
then feel free to
comment down below.

166
00:07:20,060 --> 00:07:22,790
I will definitely try to
answer all of your queries.

167
00:07:22,790 --> 00:07:24,350
This is Sohan signing out.

168
00:07:24,350 --> 00:07:26,870
I'll catch you in the
next amazing WSUS video.

169
00:07:26,870 --> 00:07:28,710
Till then, bye-bye.