WEBVTT

00:00:00.000 --> 00:00:01.050
What's up, guys?

00:00:01.050 --> 00:00:03.770
This is Sohan and you are
watching Technical Spark.

00:00:03.770 --> 00:00:06.240
In our WSUS series,
in this episode,

00:00:06.240 --> 00:00:09.230
we are going to see how
to approve and deploy

00:00:09.230 --> 00:00:12.720
patches on your Windows
Client Machines step by step.

00:00:12.720 --> 00:00:15.230
This is one of the very
important and crucial part

00:00:15.230 --> 00:00:18.870
of the WSUS because when we
install and configure WSUS,

00:00:18.870 --> 00:00:23.160
our main purpose is to serve the
updates to all manager machines.

00:00:23.160 --> 00:00:24.590
And in earlier
videos, we already

00:00:24.590 --> 00:00:27.410
saw how to install
and configure WSUS,

00:00:27.410 --> 00:00:31.220
as well as we already saw how to
configure the GPO so that when

00:00:31.220 --> 00:00:33.120
any new machine
joins your domain,

00:00:33.120 --> 00:00:36.090
it will automatically
report to your WSUS server.

00:00:36.090 --> 00:00:37.880
So similar way, what
I have done here

00:00:37.880 --> 00:00:40.980
is I have approved some
patches in my WSUS.

00:00:40.980 --> 00:00:44.030
For example, let me
go to the Updates

00:00:44.030 --> 00:00:46.980
and then expand
this, All Updates.

00:00:46.980 --> 00:00:49.310
If you see, right now, these
are the unapproved updates

00:00:49.310 --> 00:00:50.460
which is showing here.

00:00:50.460 --> 00:00:53.040
So which means this will not
install to any of the machines.

00:00:53.040 --> 00:00:55.460
But however, if any system
requires any patches,

00:00:55.460 --> 00:00:58.470
then it will show you
in here, Needed Count.

00:00:58.470 --> 00:01:00.090
If you don't know
how to get that,

00:01:00.090 --> 00:01:02.300
simply right click
here and choose

00:01:02.300 --> 00:01:04.800
what are the desired field
you would like to add

00:01:04.800 --> 00:01:07.540
into this particular dashboard.

00:01:07.540 --> 00:01:09.970
If you want to deploy
any of the software,

00:01:09.970 --> 00:01:13.680
then you can simply right click
and then go to the Approve.

00:01:13.680 --> 00:01:15.450
Choose the group
where you would like

00:01:15.450 --> 00:01:18.400
to add [INAUDIBLE] app
updates to be deployed.

00:01:18.400 --> 00:01:20.260
Right now, I'm not
going to approve this.

00:01:20.260 --> 00:01:22.410
But if I go to the
top, then you will

00:01:22.410 --> 00:01:26.080
observe that some of the updates
have already been approved.

00:01:26.080 --> 00:01:27.810
So let me show you that.

00:01:27.810 --> 00:01:30.900
Simply click on here,
Approve Updates.

00:01:30.900 --> 00:01:32.190
Refresh.

00:01:32.190 --> 00:01:35.040
So these are the updates
which I have already

00:01:35.040 --> 00:01:39.660
approved in my WSUS, like
Microsoft Defender Antivirus,

00:01:39.660 --> 00:01:40.870
Software Removal Tool.

00:01:40.870 --> 00:01:43.320
So these are very crucial
and very important

00:01:43.320 --> 00:01:45.850
updates which should be
served on a day-to-day basis.

00:01:45.850 --> 00:01:47.350
And if I go to the Computers.

00:01:47.350 --> 00:01:49.350
So guys, in Computers,
what I'm going to do here

00:01:49.350 --> 00:01:52.510
is since both the
machines are 100% patched

00:01:52.510 --> 00:01:57.220
so we'll add one more machine
into our this particular WSUS.

00:01:57.220 --> 00:02:00.580
We have already configured
the policy in GPO.

00:02:00.580 --> 00:02:04.290
So if we join any machine in
[INAUDIBLE] Active Directory,

00:02:04.290 --> 00:02:06.000
then that machine
will automatically

00:02:06.000 --> 00:02:07.900
report to our WSUS server.

00:02:07.900 --> 00:02:10.130
We don't have to do any
manual configuration.

00:02:10.130 --> 00:02:13.210
So next what we will do, I
have another machine which

00:02:13.210 --> 00:02:14.600
I have joined into the domain.

00:02:14.600 --> 00:02:16.780
But after joining
domain, I haven't

00:02:16.780 --> 00:02:19.420
started that machine, which
means the first reboot

00:02:19.420 --> 00:02:20.800
is not completed yet.

00:02:20.800 --> 00:02:22.670
For that, let me
turn on that machine.

00:02:22.670 --> 00:02:26.650
Here we go, the
machine is powered on.

00:02:26.650 --> 00:02:28.780
Let me enter the credentials.

00:02:28.780 --> 00:02:32.240
OK, guys, now we'll log in
with our domain administrator.

00:02:32.240 --> 00:02:37.990
So Technical Spark is my domain,
backslash, administrator.

00:02:37.990 --> 00:02:40.640
So this is the first time
I'm logging into the domain.

00:02:40.640 --> 00:02:42.400
So machine has started now.

00:02:42.400 --> 00:02:44.260
Technicalspark.com is my domain.

00:02:44.260 --> 00:02:45.830
And the host name is Patching.

00:02:45.830 --> 00:02:50.360
Now let's go to the Windows,
then Settings, Updates.

00:02:50.360 --> 00:02:53.200
Great, friends, it looks like
my this particular machine

00:02:53.200 --> 00:02:55.390
has already detected
and has downloaded

00:02:55.390 --> 00:03:00.440
one update from our WSUS server
and it's asking us to install.

00:03:00.440 --> 00:03:02.150
It didn't get installed
automatically.

00:03:02.150 --> 00:03:02.650
Why?

00:03:02.650 --> 00:03:06.250
Because in our GPO policy, we
have configured these settings

00:03:06.250 --> 00:03:09.970
that download updates
automatically and ask

00:03:09.970 --> 00:03:11.650
for install.

00:03:11.650 --> 00:03:14.850
So it's completely working
as per our group policy.

00:03:14.850 --> 00:03:17.060
And as you can see in
the top, some settings

00:03:17.060 --> 00:03:19.640
are managed by
your organization.

00:03:19.640 --> 00:03:23.340
Click on Install Now and
it will start installing.

00:03:23.340 --> 00:03:25.790
Meanwhile, let's
check out in our WSUS

00:03:25.790 --> 00:03:29.090
server whether this machine
is showing in our WSUS or not.

00:03:29.090 --> 00:03:32.000
For that, let me jump
to the WSUS server.

00:03:32.000 --> 00:03:34.790
OK, let's refresh the screen.

00:03:34.790 --> 00:03:36.420
Yeah, perfect guys.

00:03:36.420 --> 00:03:40.350
It just got updated here,
Patching.technicalspark.com.

00:03:40.350 --> 00:03:42.930
And patch level is 96%.

00:03:42.930 --> 00:03:48.560
And there are almost 67 patches
which are needed by this server.

00:03:48.560 --> 00:03:50.730
Right now, only one software
is getting installed.

00:03:50.730 --> 00:03:53.100
But yeah, there are
almost 67 softwares

00:03:53.100 --> 00:03:54.270
which we need to approve.

00:03:54.270 --> 00:03:55.800
So how we can do that?

00:03:55.800 --> 00:03:58.190
Let's go to the
All Updates again.

00:03:58.190 --> 00:04:00.510
Or you can also go to the WSUS.

00:04:00.510 --> 00:04:03.650
And if you observe here,
Update Status, it says,

00:04:03.650 --> 00:04:06.090
updates needed by computer.

00:04:06.090 --> 00:04:06.775
Click on that.

00:04:06.775 --> 00:04:10.068
[AUDIO LOGO]

00:04:10.068 --> 00:04:15.560


00:04:15.560 --> 00:04:18.470
So these are basically
updates which need

00:04:18.470 --> 00:04:20.519
to be approved for our server.

00:04:20.519 --> 00:04:22.190
So how we can do that?

00:04:22.190 --> 00:04:24.930
Just review all the updates
which are available here.

00:04:24.930 --> 00:04:25.770
Scroll down.

00:04:25.770 --> 00:04:28.680
If you think that one of
the updates is not required,

00:04:28.680 --> 00:04:32.930
you can unselect that
particular update like this.

00:04:32.930 --> 00:04:35.780
But right now, I'm going to
select all the updates just

00:04:35.780 --> 00:04:40.140
for your demonstration and
then right click, Approve.

00:04:40.140 --> 00:04:43.250
So where exactly my this
particular machine is present?

00:04:43.250 --> 00:04:45.380
Then it's in unassigned group.

00:04:45.380 --> 00:04:49.820
So we have to select that and
click on Approve or Install.

00:04:49.820 --> 00:04:50.520
OK.

00:04:50.520 --> 00:04:52.850
Now it's approving
all the updates.

00:04:52.850 --> 00:04:54.830
Click on Close.

00:04:54.830 --> 00:04:56.790
My updates have been approved.

00:04:56.790 --> 00:04:58.670
Now if I go to
the WSUS, then you

00:04:58.670 --> 00:05:01.640
can see there are almost
7 GB of updates which

00:05:01.640 --> 00:05:03.530
are getting downloaded now.

00:05:03.530 --> 00:05:05.150
Where exactly all
the updates will

00:05:05.150 --> 00:05:07.280
download in your WSUS server?

00:05:07.280 --> 00:05:10.130
So as I said earlier
in this PC, I

00:05:10.130 --> 00:05:15.110
have created one
directory that is D drive.

00:05:15.110 --> 00:05:19.800
In D drive under WSUS Directory,
here your all the patch updates

00:05:19.800 --> 00:05:21.600
will get stored.

00:05:21.600 --> 00:05:24.510
Now let's go back
to All Updates.

00:05:24.510 --> 00:05:26.430
Now, guys, let's go
to our client machine

00:05:26.430 --> 00:05:30.480
to see whether updates
got installed or not.

00:05:30.480 --> 00:05:33.600
Perfect, the update
is installed.

00:05:33.600 --> 00:05:35.520
Click on Check for updates.

00:05:35.520 --> 00:05:37.330
Right now it's not
showing any updates.

00:05:37.330 --> 00:05:40.890
It's just because our WSUS
server is yet to be updated.

00:05:40.890 --> 00:05:44.490
Now let me check out
the Update History.

00:05:44.490 --> 00:05:47.370
Driver update is
installed on 19/01.

00:05:47.370 --> 00:05:50.610
Other updates is
installed today.

00:05:50.610 --> 00:05:54.810
So, guys, now let's go
back to our WSUS server.

00:05:54.810 --> 00:05:59.220
All Computers, perfect, WSUS.

00:05:59.220 --> 00:06:01.570
As of now, [INAUDIBLE]
has been downloaded.

00:06:01.570 --> 00:06:04.870
So I'm not going to cover
the other things here

00:06:04.870 --> 00:06:07.480
but I'll let you know
what exactly will happen.

00:06:07.480 --> 00:06:10.110
It will download
all the 7 GB of data

00:06:10.110 --> 00:06:13.320
in our server, which means all
the updates will be downloaded

00:06:13.320 --> 00:06:15.160
in our WSUS server.

00:06:15.160 --> 00:06:18.660
And then it will start
distributing this update

00:06:18.660 --> 00:06:21.600
to the PC to which
these updates are

00:06:21.600 --> 00:06:25.120
required, like my recently
domain joined machine,

00:06:25.120 --> 00:06:26.670
Patching server.

00:06:26.670 --> 00:06:29.110
So all these updates
will be deployed

00:06:29.110 --> 00:06:31.250
on that particular machine.

00:06:31.250 --> 00:06:33.550
And once the machine
is updated, then you

00:06:33.550 --> 00:06:36.500
will be able to see
100% status here,

00:06:36.500 --> 00:06:39.590
which is right now showing 96%.

00:06:39.590 --> 00:06:42.340
And the exclamation
mark you are seeing here

00:06:42.340 --> 00:06:44.240
will be gone automatically.

00:06:44.240 --> 00:06:47.410
So hopefully, friends, now you
are very much or pretty much

00:06:47.410 --> 00:06:50.540
clear that how
these things works.

00:06:50.540 --> 00:06:52.330
Friends, I hope you
have learned something

00:06:52.330 --> 00:06:54.685
in this video about
WSUS patching.

00:06:54.685 --> 00:06:56.560
Friends, if you have
found this video useful,

00:06:56.560 --> 00:06:58.060
then please click
on the Like button

00:06:58.060 --> 00:06:59.930
and don't forget to
share and subscribe.

00:06:59.930 --> 00:07:01.972
Additionally, if you think
that the content which

00:07:01.972 --> 00:07:04.070
I upload on this
channel is meaningful,

00:07:04.070 --> 00:07:07.750
then don't forget to share this
channel link with your friends

00:07:07.750 --> 00:07:11.510
and colleagues so that we can
grow our community very faster.

00:07:11.510 --> 00:07:14.890
And based on your response,
I will start uploading videos

00:07:14.890 --> 00:07:16.120
more frequently.

00:07:16.120 --> 00:07:18.518
If in case if you still
have any question, queries,

00:07:18.518 --> 00:07:20.060
then feel free to
comment down below.

00:07:20.060 --> 00:07:22.790
I will definitely try to
answer all of your queries.

00:07:22.790 --> 00:07:24.350
This is Sohan signing out.

00:07:24.350 --> 00:07:26.870
I'll catch you in the
next amazing WSUS video.

00:07:26.870 --> 00:07:28.710
Till then, bye-bye.