WSUS 2012r2 Implementation in an Enterprise Environment

We are going to install and configure WSUS with server 2012r2 but have questions on best practices for installing it in a good size enterprise network. First, should I use the Windows Internal Database or download SQL Express for use with
the WSUS server?
Will WSUS service all the domains in a forest? Sites with WAN links will have to have a local WSUS to minimize update traffic over the link. What about non child domains? Other domains in other forests that have trusts?
Francisco Mercado Jr.

Hi Dvua,
To choose the WSUS Storage, please refer to the information below:
1. We recommend that you use Windows Internal Database in the following cases:
• The organization has not already purchased and does not require a SQL Server product for any other application.
• The organization does not require an NLB WSUS solution.
• You intend to deploy multiple WSUS servers (for example, in branch offices). In this case, you should consider using Windows Internal Database on the secondary servers, even if you will use SQL Server for the root WSUS server. Because each WSUS server requires
a separate instance of SQL Server, you will quickly experience database performance issues if only one SQL Server handles multiple WSUS servers.
2. We recommend that you use SQL Server with WSUS in the following cases:
• You require an NLB WSUS solution.
• You already have at least one instance of SQL Server installed.
Refer to:
Design a WSUS Storage Strategy
To deploy the WSUS in enterprise, please go through this article depend on your scenario:
WSUS Deployment Scenarios
If there is anything else regarding this issue, please feel free to post back.
Best Regards,
Anna Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

PAM on LDAP on an enterprise environment

Hi,
my customer would like to implement PAM authentication using DS6. The DS is already in place and they want to be able to grant some users access to some servers.
While it is quite easy to find examples on how to configure one server to authenticate to DS it seems impossible to find a good guide explaining how to do that in an enterprise environment. In other words a guide explaining the non trivial configuration parameters. Questions I haven't been able to find the answer to are for example:
how to limit the users having access to a specific server?
how to modify the existing user profiles in an existing DS?
and many others.
Is anybody aware of such a book (either free or not)
Thanks in advance
Sergio

i'm not sure if it's the 'proper' way, but couldn't you achieve this sort of functionality through netgroups?

How can we update or manage the Adobe Product for example Adobe Reader and Flash Player in a enterprise environment. Enterprise lifecicle management

We want to maintenance the adobe products in the enterprise environment. Specially Update for he reader and players.
Thanks

You will need to apply for both Reader and Flash Player Distribution agreements if you intend on enterprise deployments of these products.
Adobe - Adobe Runtimes / Reader Distribution License Agreement
If you are using SCCM and SCUP then use the available catalogs for both products.
11 SCCM-SCUP — Enterprise Administration Guide
Flash Player enterprise deployment | Adobe Developer Connection

How can I turn off IPv6 temporary addresses in a enterprise environment

So in a default configuration Vista and Windows 7 clients will use IPv6 temporary address (per RFC 3041), but I would like to be able to disable this with a GPO.
I know I can do this by using a startup script tied to a GPO using the netsh interface ipv6 set privacy state=disabled store=persistent but I really do not want to run a logon script especially when as you can see in the command it is a persistent
setting.
Any ideas on using a registry based GPO for this?

Hi,
OK, I understand what you want. But after I use the Process Monitor to capture the behavior, I found that a lot of registry keys would be changed. So you can not set it via registry unless the IPv6 is disabled.
Thanks for understanding.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
Thank you again for the answer.
As a follow up question... How does one suggest/request a change in default behavior in a MS product?
While the RFC 3041 addresses might be nice to have for the average consumer they are not ideal in a enterprise environment. I have found that the temporary addresses will register in DNS, but this doesn't completely solve the issue of tracking and accountability,
you would still need a application to query, correlate and store that information.
So it would be nice if the business versions of Windows Vista/7/2K8 and the next client OS would not have this behavior by default.

Log in the Enterprise Environment

Hi everyone, i'd like to know if logging in the enterprise environment i'll have a tool like the log viewer that we have in the studio.
Thanks for help

Hi,
I couldn't find the link where to raise a new topic. I am posting it here.
I have a custom view which I will identify from the URL parameter. When the user logs in to portal, I have to show the custom view according to the parameter I receive in URL.
I see that in applicationsView.jsp, the currentView is obtained from (ApplicationsView)request.getAttribute(ApplicationConstants.REQUESTED_VIEW);
I would like to know if I can set the value for REQUESTED_VIEW so that currentView will pick the customized one.
Can you pls let me know how to and what object I need to set in request.setAttribute(ApplicationConstants.REQUESTED_VIEW, Object); for Object?

How to disable checking for updates on Mac Silverlight for enterprise environment

Hi Guys,
We are trying to create a package for our enterprise environment to push the install of Silverlight for the Mac and have it not automatically check for updates.
What is the best way to do that?
I found the setting in the com.microsoft.silverlight.plist file that was in the user profile/library/preferences folder.
Is there a way to have this UpdateMode key set to the desired setting regardless of which user is logged onto the mac?
Thanks.
Aaron

I have zero experience of macs.
Can't you install Silverlight and the plugin for all users rather than a specific one?
I would guess/hope/expect there'd then be one plist file for everyone?
Please don't forget to upvote posts which you like and mark those which answer your question.
My latest Technet article - Dynamic XAML

Hi, in our Enterprise environment, we have a single mac with Mavericks version 10.9.2 and Office for Mac 14.4.1. When setting up outlook, we are trying to connect to a mailbox on exchange server 2007.

Hi, in our Enterprise environment, we have a single mac with Mavericks version 10.9.2 and Office for Mac 14.4.1. When setting up outlook, we are trying to connect to a mailbox on exchange server 2007. We put in the EWS details in the server field since our autodiscover function is not functioning. But still it doesn't work. There are no errors, no popups. We turned on the logging and in the logs, it says a error of -3259. We are stuck and any help will be really appreciated.

I have a customer experiencing exactly the same issue. Their computer is running Windows 7 Pro with Office 2007 SP3. After seemingly exhausting all troubleshooting options, I backed up their data, formatted the hard drive and performed a clean install of
Windows and all their applications. It didn't solve the problem!
What's strange is the customer also has a laptop computer, running the same version of Outlook, and that doesn't experience any problems connecting to Office 365 on the same network.
My next step is to send the customer a new ADSL modem/router to try.
I have another customer on Office 365, also running Outlook 2007, and they also experience issues with emails sitting in the outbox while Outlook displays the status message “Outlook is trying to retrieve data from the Microsoft exchange server outlook.office365.com.”
In this case Outlook doesn't freeze/stop responding, like it does for the first customer I mentioned.

How to deploy ejb in an Enterprise Environment using the jbuilder plugin

Hello:
I use Oracle9iAS Plug-in Release 2 (9.0.2) for Borland JBuilder 7 to deploy my ejb. But now, i would like to deploy my ejb to oc4j in an Enterprise Environment (not as standalone).
Does anybody know how can i do it? I noted that the plugin use admin.jar to deploy ejb, and I suppose it need to use dcmctl.
Thank you
Sergio

Sergio,
The current release of Borland JBuilder only allows you to deploy to standalone OC4J. If you want to deploy to Oracle9iAS (Enterprise OC4J), please try Oracle9i JDeveloper 9.0.3:
http://otn.oracle.com/software/products/jdev/content.html
JDeveloper 9.0.3 uses DCM to deploy to Oracle9iAS
Regards,
Chen.

Mac OS X Mavericks in an enterprise environment

Has apple released any information on deploying mavericks in an enterprise environment? I'm looking for information on best practices on how to access the installers for deploying the os over several computers without using the store on each upgrade?

I found a section on OS X Server which might be useful:
http://www.apple.com/osx/server/features/

Avoid activation in an enterprise environment

we want to avoid activating each adobe product in an enterprise environment on every single PC as we want to do unattended deployments. Is there a way to avoid that or for a general activation ?
Thanks

Moving this discussion to the Creative Suite Enterprise Deployment forum. Which type of license are you trying to activate? Is it a subscription or perpetual license?

Can anyone tell me how they are handling software distribution for the iPad in an enterprise environment?

Can anyone tell me how they are handling software distribution for the iPad in an enterprise environment?

The new Business Volume Purchase Program is pretty interesting...it can be used to centrally purchase and distribute paid ( not free) items from the AppStore. We are getting setup to use it. You can keep an eye on licenses etc. You can also use a single centralized form of payment.
http://www.apple.com/business/vpp/

Licensing of apps for multiple iPads in an enterprise environment

I have 21 iPads in an enterprise environment, syncing to one iPad. Am I violating licensing terms.? These are 21 iPads used by 21 board members on each Friday. Do I need to purchase this app 21 times? If so how?

Yes, you may be. The applicable terms of sale are these:
(ii) If you are a commercial enterprise or educational institution, you may download and sync an App Store Product for use by either (a) a single individual on one or more iOS Devices you own or control or (b) multiple individuals, on a single shared iOS Device you own or control. For example, a single employee may use the Product on both the employee's iPhone and iPad, or multiple students may serially use the Product on a single iPad located at a resource center or library.
If these iPads are under your own control and you just loan them out for the board meetings, then that might fall under clause (a), though I'm no lawyer and I don't speak for Apple.
If these iPads are kept by the board members for their use, then your company needs to purchase the app twenty-one times, and the only way at present to do that is through twenty-one different iTunes Store accounts. So each board member should probably buy through his or her own iTunes Store account, and get reimbursed by the company if appropriate. I know this is awkward; perhaps Apple will come up with a better mechanism in the future.
Regards.
Message was edited by: Dave Sawyer

Installing and managing firefox in an enterprise environment using a third party desktop managment system (Novell ZEN)

We want to deploy Firefox in our enterprise environment and need to figure out a way to have the install run silently, no user interaction. We use Novell's ZEN to centrally manage our desktops and how we've done this with other installs is to create a response file, but I guess Firefox will not use response files. So, how would we accomplish this?
Any help would be greatly appreciated.
Ken

Novell's ZEN and response files
Fixed certs for Firefox 36 using Novell, not sure how they did this but was fixed for the next version. [https://bugzilla.mozilla.org/show_bug.cgi?id=1042889 1042889]
[https://bugzilla.mozilla.org/show_bug.cgi?id=1042889#c8 comment 8 specifically]
[https://bugzilla.mozilla.org/show_bug.cgi?id=1091778 1091778]
Try it in beta.
Otherwise an alternative to a silent install from the commandline is -ms and check out the recommendations for deploying in an enterprise environment in MDN: [https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment]

How to configure C.C. in a proxy/firewall/enterprise environment?

Looking for some answers: It seems that Adobe Application Manager does not currently work with proxies. Is this correct?
It also seems that the Creative Cloud packager also does not work behind a proxy nor does any automatic updates. What are some options for those in an enterprise environment? From what I've read and have been told via tech support, not much at all.
It seems that if we install Creative Cloud on our machines, we have to download and manually install the updates? That's not very "cloud" like.

I am not sure if this can help but we opened these endpoints and now we have acces to everything:
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/Se rviceAndSiteURL_List.pdf
https://creative.adobe.com/api/assets
https://creative.adobe.com/api/collections
hptts://creative.adobe.com/api/share
https://api.typekit.com
http://use.edgefonts.net
https://www.adobeexchange.com/api
https://lm.licenses.adobe.com
https://ims-na1.adobelogin.com
https://ims-na1-cc1.adobelogin.com
https://adobeid-na1.services.adobe.com
https://na1r.services.adobe.com
https://ams.adobe.com
https://ccmdls.adobe.com
Greetings,
Frederik

Deployment in enterprise environment

Dear Team members,
I would like to post a question to you regarding deployment doubts that we are trying to address.
My company is working on the new version of our primary application previously built as a J2EE application with some reporting functions with Flex, and we want to use AIR in order to leverage its possibilities:
Seamless integration with existing application functionalities (implemented as standard JEE web application pages) thanks to the integrated HTML capabilities
Improved integration of the user interface with the desktop
Native processes to provide additional functionalities
Our application is targeted to pharmaceutical industry, subject to FDA regulations, and it affects more than 5000 users for each customer, so we have some specific requirements affecting the deployment and distribution of the software:
Allow to run multiple versions of the software on the same client machine (to support test and acceptance activities in addition to the production environment)
Minimize the effort of the initial setup on each client
Manage the version upgrades without manual activities on each client
Keep the test/acceptance and production environments strictly aligned to improve effectiveness of formal validation (ideally, an application once validated should be transported in production without any source code modification, recompilation or repackaging)
The current browser-based strategy is perfectly fit to these requirements, and in the shift towards a desktop-based strategy we need to continue satisfying them as much as possible. We evaluated the standard distribution strategy of Adobe AIR applications, and noticed several attention points in this scenario.
The first issue we encountered is the back-end services endpoint discovery problem. Simply hardcoding a server URL in the packaged application could be a viable solution for public internet-accessible applications, but we need to support multiple customers in their intranet, and each one typically requires multiple environments for the application (acceptance, production, etc.). Maintaining dozens of different packages of the AIR application to support all these customer environments clearly is not the solution. Neither we want to force thousands of different users to enter and maintain the correct server location in their local preferences.
So, we thought to use a badge hosted in the back-end application to run the local AIR application: using the underlying API, we could activate the application specifying also the network location of the back-end services. We could also rely on the badge to install the application (and the AIR runtime if necessary)… however, application packaged as native installers cannot be installed, upgraded, or launched by the badge API (and we need to package ours as native to use native processes).
We also noticed that multiple versions of an AIR application cannot be installed side-by-side in a client machine, and that the installation and upgrade of the application can be performed only when the local user has administrative rights on the machine (using standard or native packages), forcing us to rely on external software distribution systems in some customer scenarios (introducing additional complexities in the release cycle)
At this point, in our opinion the standard deployment strategies of Adobe AIR applications are unfit for enterprise environments. In the enterprise world, many of the applications have migrated to a completely browser-based solution, while others enhanced their client layer to comply with the requirements, for example installing only a thin portion of the client code and allowing to connect to multiple server versions/environments with it (e.g. the SAP GUI universal client). Without smarter deployment and distribution tools, AIR applications currently are a step back compared to web applications in terms of manageability.
So, we are trying to develop a solution to address these problems, with some concepts similar to JStart: install on the client machine a launcher application capable of being activated from a web page, dynamically locate, download and run the actual client bytecode, transparently enforce client software updates, and supporting multiple applications (and multiple versions of the same application). However, we are facing many technical problems due to internal architecture of AIR and we already spent a considerable amount of effort trying to find a solution. We are now thinking to return on the choice of AIR, going back to Flex.
What is the position of Adobe on this argument? Is Adobe aware of these issues and are there any plans on this topic? Any advice?
Thank you in advance

For those following along, Oliver Goldman will be answering this post in future articles on his blog.
Many great comments and questions here. I’m working on some follow-up posts to address these; nothing I could cram into this comment field would really do your query justice. - Oliver Goldman
Pursuit of Simplicity
Chris

WSUS 2012r2 Implementation in an Enterprise Environment

Similar Messages

Maybe you are looking for