in
Home Tips Reviews CES 2008 Forums

Enter Now

Jeff's Connected Corner

Windows Server System news and real-world info

WSUS 3.0 RC 1 Released! (Update 3)

The WSUS Product Team just released RC1 on Microsoft Connect.  Current Beta 2 participants should already have access.  If you are new to the program, head on over to the main WSUS page for instructions on how to join.  Here's a quick overview of what's new since Beta 2.

Note: Don't forget to check out my two previous WSUS 3.0 reviews (First Impressions: WSUS 3.0 & Upgrading to WSUS 3.0).  They are still relevant even though they're based on Beta 2.

Performance Improvements

After spending a little time with RC1 it's obvious that Microsoft focused on improving performance.  The UI seems very responsive and reports generate more quickly.  Although the Deployment Guide lists 1GB as the minimum RAM requirement, you can easily get away with 512MB in a very small test lab (<25 machines).  In fact, if you don't have an extra server lying around for testing you can use Virtual PC, Virtual Server, or VMware Server to take 3.0 RC1 for a spin.  If you take this approach I recommend against storing updates locally to save disk space and improve guest performance.

Customizable To-Do List

A frequent complaint about WSUS 2.0 is the lack of UI customization - specifically on the Home page To-Do List.  For example, even if you had no intention of using SSL, the server would continually display a warning that SSL was not configured.  Crafty WSUS gurus came up with a way to hack the Home page to remove this warning... but we all know the caveats and potential issues with such back-door solutions.  Fortunately, WSUS 3.0 offers a fully-supported method for controlling all To-Do List content.  The screen shot below will give you an idea of all the possible To-Do List tweaks:

UI Improvement - Last Status Report

Let's face it... the 3.0 Beta 2 UI was light years ahead of the web-based 2.0 interface.  However, Beta 2 left out one important feature that garnered quite a bit of negative feedback - detailed 'Last Status Report' information.  Instead of giving us the date and time like we're used to, Beta 2 only offered the date, which made troubleshooting more difficult.  Thankfully this feature has been added back in RC1.  See the screen shot below if you aren't familiar with this little gem.

UI Improvement - New Superseded Icons

One of the most confusing aspects of WSUS (and patch management in general) is the concept of update supersedence.  For example, when Microsoft releases a new update for IE, it usually replaces a previous one.  The old update is said to have been superseded by the new update.  Pretty simple, right?  Well, not always.  Sometimes an update supersedes an old update AND is superseded by a newer one.  The WSUS 3.0 UI offers a new icon to represent such a scenario.

 This icon represents an update that supersedes an older one

 This icon represents an update that is superseded by a new one

 This *new* icon represents an update that supersedes an older one, AND is superseded by a newer one

 

Part 2: UI Walk-Thru

I used Camtasia to produce the screen recordings in this section.  These videos should give you a better idea of the new UI and functionality in WSUS 3.0.  I'll update this section with more walk-thru videos as time permits.

  • Installing WSUS 3.0 RC1:  This quick video highlights the install process of a single WSUS server, including the post-setup configuration wizard.  The video runs 3 minutes and is approximately 3MB (no audio).
  • Working with the February, 2007 Updates:  What better way to show off the new UI than to approve some February updates.  Includes footage of the new reporting engine - including export functionality to Excel and Acrobat.  Runtime is 6m:22s and the download is approximately 5.2MB (no audio).
  • Additional Videos with Commentary: Coming soon!
Published Feb 12 2007, 12:23 PM by Jeff
Filed under: ,

Comments

 

MidMoMan said:

Great information - looking forward to the next 'installment'.

I have one follow up question...

is there an upgrade path from WSUS 2.0.0.2620 to WSUS 3.0?

Thanks again,

MidMOMan

February 13, 2007 10:01 AM
 

Jeff said:

MidMoMan:

Thanks for stopping by.  Yes, you can upgrade from WSUS 2.0 SP1 (build 2620) to WSUS 3.0 RC1.  You will also be able to upgrade from 3.0 RC1 to the RTM version whenever it ships.  More details on that as we get closer to RTM.

Jeff

February 13, 2007 11:30 PM
 

Bill Bacoyiannis said:

hi, geat stuff, what benefit would I have to put RC1 on my production box? Should we wait for the final release. Also for the multiple targetcomputers, is this enable by a new GPO?

Thanks

February 14, 2007 9:43 AM
 

Josh Phillips said:

The video helps alot...will have to do more of these..

February 14, 2007 2:05 PM
 

Jeff said:

Bill - if you only have 1 production WSUS box today I can't comfortably recommend upgrading it to RC1.  However, this doesn't mean the product isn't worth limited production testing (virtual machine maybe?).  But unless you are in the official WSUS TAP program you won't have access to hotfixes or PSS support... and if something goes wrong you could be stuck without updates.  That would be a bad thing :(

Your question about multiple computer groups is an excellent one.  Honestly, in my testing of 3.0 I've only done limited client-side targeting via GPO.  Mostly I use server-side targeting (manually moving machines into groups)... but that's because I'm working with around 10 test machines.  I'll do some digging into how multiple target groups will be configurable via GPO.  Thanks for posting!

Jeff

February 14, 2007 11:27 PM
 

some guy said:

Is there any kind of estimated date for WSUS 3 RTM?

February 16, 2007 9:34 AM
 

Joe said:

How do you configure your desktop to show information about hostname, ipadress etc?

Sincerly

Joe

February 17, 2007 3:40 AM
 

Jeff said:

First, a follow-up to Bill.  Here's the way you specify multiple target groups via GPO (copied from Vista's Group Policy Editor Snap-In):

If the intranet Microsoft update service supports multiple target groups this policy can specify multiple group names separated by semicolons. Otherwise, a single group must be specified.

Note... I double-checked and this capability also exists back on XP, and I'm guessing 2000 as well (although I don't have any 2000 boxes with which to verify)

Some guy: I believe the official release date has been set for the '1st half' of 2007.  So I'd guess sometime between now and June ;)

Joe: I see you watched the screen video - thanks.  I use the Sysinternals 'BGInfo' utility to show the hostname, IP address, and other info on all my VMs and servers to remind me which one I'm working on.  Head on over to http://www.microsoft.com/technet/sysinternals and look for BGInfo in the Misc. Utilities section.  Check the help file for instructions on creating a .bgi file and launching it at startup.  Enjoy!

February 17, 2007 7:19 AM
 

Davy said:

Is it possible to upgrade from the Beta 2 Release to the RC? I have tried a few times now and I'm still having trouble. When I run the RC install, it first uninstalls the Beta 2 Release. Then when I re-run the RC install, it says that I cannot upgrade the existing database (I did not check any boxes to delete database, logs, etc.). Here is the error:

"The existing database is not compatible with this version of Microsoft Windows Server Update Services 3.0. Select another database instance or create a new database."

If I re-install the Beta 2, it reads the existing database fine and runs through the install perfectly. Thanks for any help.

February 21, 2007 10:07 AM
 

Jeff said:

Davy - technically there isn't support for Beta 2 to RC.  However, there will be support from RC to RTM.  I'd suggest you uninstall Beta 2, and make sure you get rid of the DB (uninstall wYukon).  Then you can clean install RC and you should be good to go.

February 21, 2007 1:27 PM
 

Davy said:

Jeff - I was afraid of that. Thank  you for the assistance.

February 21, 2007 1:59 PM
 

David Andrews said:

One of the things I always wanted on WSUS 2 was tha ability to add a column on the computer listing showing the OS service pack to make it more immediately visible and also sortable in the list.

Could you tell me if this is possible in WSUS 3.0 RC1?

February 25, 2007 8:43 AM
 

Jeff said:

David - Good suggestion.  Only 'major' OS info is exposed as a column in the current build.  It would be nice if we could expose the SP number as a column... especially since the info is already in the database.  File a suggestion bug on Connect and then post back w/ your feedback ID.  I'll add my rating and comments to your bug.  Thanks.

February 25, 2007 12:30 PM
 

David Andrews said:

Thanks Jeff.  My thoughts exactly, the information is in the DB so it shouldn't be that hard to add the information to the Computers listing.

I have tried to add a Suggestion feedback on Connect but can't see how to classify it as a Suggestion, it only seems to let me detail a bug with occurance conditions etc.

Am I missing something obvious?!

February 25, 2007 2:24 PM
 

Jeff said:

Unlike other beta programs, there isn't a separate bug type for 'suggestion'.  Just type out your feedback and put N/A in the non-relevant fields.

February 25, 2007 3:33 PM
 

David Andrews said:

Jeff.  Thanks, just wanted to check I wasn't missing something!

I have added the suggestion/bug, number 260184.

Thanks for your help and support.

David

February 26, 2007 10:04 AM
 

Robert Gray said:

Has there been any mention of Hotfixes being able to be deployed with V3?

February 28, 2007 3:25 PM
 

Jeff said:

Robert - Yes, in fact, there have been 'rumors' to this effect - but nothing has appeared in RC1 for us to confirm them.  Stay tuned to this blog, and the WSUS Team Blog (http://blogs.technet.com/wsus) for updates on this topic. ;)

February 28, 2007 8:07 PM
 

Dave said:

I'm currently still running SUS. I'm debating waiting until WUS 3.0 is released before I upgrade.

Any idea when 3.0 will be RTM?

Thank you.

March 4, 2007 11:54 AM
 

Jeff said:

Dave - I'd highly recommend going to WSUS 2.0 as an interim solution.  The in-place upgrade from SUS is a no brainer - plus, support for SUS ends on July 10, 2007.

Additionally, I'd recommend you begin testing WSUS 3.0 RC1 w/ a small group of pilot users.  I don't know the exact release date for 3.0 - but it'll probably be in the next 3-6 months depending on beta tester/TAP feedback.  Testing 3.0 will allow you to give feedback to the product team and familiarize yourself with the new interface prior to release.  Good luck.

March 4, 2007 4:56 PM
 

Jason said:

Will there be any added reporting capabilities?  Primarily the ability to sync or share data (status, updates failed, etc.) between WSUS servers?  For example can all my downstream servers dump or sync to the one central upstream server in regards of statistics for reporting?  We have nine (yes nine) WSUS servers total since we have many offices state wide and when I was asked to query all the machines in the company to ensure the DST patch was installed I had to do so on each and every server (which I found very cumbersome).  Am I missing something or is this functionality just not yet implemented?  Thanks!!!

March 8, 2007 8:22 AM
 

Jeff said:

Jason - in a word 'yes'.  And technically this functionality is available in WSUS 2.0 via an add-on component.

ReadMe: http://snipurl.com/1chtl

Download: http://snipurl.com/1chtv

Hope this gets you pointed in the right direction.

March 8, 2007 9:13 PM
 

Chris Kratsch said:

I'm running WSUS 3 RC1 in a test lab right now.  So far so good, but there's a couple of things I don't see referenced anywhere.

1: I can see how to add a computer to multiple groups using server-side targeting; how would that be done with client-side targeting (for both GPO and registry)?

2: When a computer is in multiple groups, how does WSUS 3 handle conflicting approvals?  Example - Computer A is in Group 1, where Patch P is approved for installation, *and* Computer A is also in Group 2, where Patch P is declined.  I would expect the decline (or remove) to take precedence over the install (or not approved), but I don't see this spelled out anywhere.

March 23, 2007 7:25 AM
 

Jeff said:

Chris - RE: question 1... Check the 'Explain Text' in your GPO settings for 'Enable Client Side Targeting'.   The answer is to separate target groups w/ a semicolon.

RE question 2:  Based on my testing it breaks down like this.  If your example computer groups were peers (i.e. not nested) then a Not-Approved would take precedence.  However, if Group 2 were nested under Group 1... and you set a Not Approved at the parent and an Approved at the child... the end result is 'Approved'.  But keep in mind that the default is to inherit from the parent group... so the only way you'd end up in the later situation is by manually changing the child approval settings (IOW-this should happen on accident).  Hope that helps.

March 26, 2007 8:13 AM
 

Ketan said:

which are the upgraded features in WSUS 3.0 with comparision with 2.0

April 12, 2007 2:10 AM
 

Jeff said:

Ketan - There are quite a few improvements... however, here are my favorites:

* New MMC User Interface (web UI is removed)

* Improved reporting capabilities through use of Visual Studio 2005 reporting engine

* Ability to integrate with MU Catalog site (import individual MS hotfixes)

* Improved performance & scalability (via 64-bit and new UI)

* 'Report viewers' role - users can run reports but not tinker w/ patches or settings

April 16, 2007 9:39 AM
 

Sid said:

Hi Jeff,

Nice site on WSUS. I'm running WSUS 3.0 Beta 2 version. Can you tell from where I can get WSUS 3.0 RC/RTM ?

Microsoft connect site is closed for downloads.

Thanks,

Sid

April 17, 2007 1:16 AM
 

Footprint said:

I missed the download for WSUS 3.0 RC and I'm using WSUS 3.0 Beta 2.  Is htere a way that I can obtain a copy now?

April 18, 2007 3:44 PM
 

Jeff said:

Sid and Footprint:

RC1 has been pulled by the product team.  Your next drop will be RTM :)

And no, I can't give you a date.  However, it should be released in the first half of 2007 as previously stated by the product group.

April 18, 2007 4:05 PM
 

Footprint said:

Can I get a copy of WSUS 3.0 RC from you?

April 18, 2007 5:51 PM
 

Jeff said:

Footprint:  Sorry - can't help you there.

April 19, 2007 8:53 AM
 

kevin said:

My version of WSUS 3.0 is 3.0.6000.318.  Is this the Beta version?  

If so, I believe I have to do a complete un-install before installing the RC.  Correct?

Thanks.

April 25, 2007 2:10 PM
 

Jeff said:

Kevin - Build 318 is actually RC1.  You can do an in-place upgrade to RTM when it releases.  However, if your 318 install doesn't contain critical data I'd highly recommend a clean install.

April 25, 2007 3:41 PM
 

Mario said:

Any idea when WSUS 3.0 final version will be released?

April 27, 2007 6:54 AM
 

Jeff said:

Mario... of course I have an idea, but I'm not about to tell.  Confidentiality is a lost art these days.  All I'll say is soon... :)  Subscribe to our RSS feed and be the first to know.

April 27, 2007 7:31 AM
 

Jeff said:

Mario... here's an update for you:

http://blogs.technet.com/wsus/archive/2007/04/28/update-on.aspx

The product team spilled the beans :)  You'll have WSUS 3.0 next week.

April 28, 2007 11:10 AM

Leave a Comment

(required)  
(optional)
(required)  
Add

About Jeff

Jeff Centimano is a Windows Server MVP based in Fairway, KS (USA). In addition to blogging and freelance technical writing for Microsoft, Jeff leads the KC-MEC User Group (kcmec.org) and assists with various site duties here at WindowsConnected.com. Jeff has been in the IT industry since 1994 and is currently a Solutions Architect at EMC Global Services.
.
Windows is a registered trademark of Microsoft Corporation.
Listed on the Offical CS Listings Powered by Community Server, by Telligent Systems Themed By nb development