Microsoft RIS, SUS, AND SMS
Microsoft has tackled the problems of deployment and management with three different software packages. Remote Installation Services (RIS) for deployment, and Software Update Services (SUS), and Systems Management Server (SMS) for software management. The management packages are aimed at different target markets, with SUS aimed at medium enterprise in one or more locations with up to 500 PCs, and SMS for large enterprise in multiple locations with more than 500 PCs.
Remote Installation Services (RIS) is an optional Windows 2000 service that enables you to set up new client computers remotely, without the need to physically visit each client machine. It is specifically designed to install operating systems on remote boot-enabled client computers simply by connecting the computer to the network, starting the client computer, and logging on to the network.
Installing an RIS server combines diskless booting of the client (fitted with a PXE-compliant network card or using a boot disk with a PXE emulator) with a fully automated, network-based mechanism for deploying Windows (2000 only). When installing using RIS, all files are transferred across the network to the local system, and the standard Windows 2000 setup process runs in unattended mode.
RIS is closely related to the IntelliMirror technology. RIS provides fast workstation OS recovery in the event of a critical system failure. In a tightly managed environment and coupled with the IntelliMirror technologies (which restore applications, user documents, and user settings), a user could immediately and automatically completely recover his or her system, even if the local machine had been irrevocably destroyed.
The RIS server must be a member of an Active Directory domain (either a domain controller or a member server). It can´t be a standalone server. It is also strongly recommended that the RIS directory be on its own partition. If RIS and DHCP reside on the same server, the DHCP service must be authorised in the Active Directory before either service will be permitted to respond to client requests.
The RISSETUP application has a wizard to walk you through the initial configuration, starting with confirmation that you want the system to run on startup when the install is complete. The next screen requests the Windows 2000 Professional installation files, either on a network share or requests the insertion of the Windows 2000 Professional CD.
After selecting the source files, the next screen requests a Windows installation image folder name, and a name and description.
Once the wizard has completed, the files needed to create a basic image are available on the server. This image uses a generic answer file, but a custom remote install answer file can be created through the Setup Manager Wizard and associated with the default CD image.
Software Update Services (SUS) are designed to simplify the process of keeping IT administrators up to date with the latest critical updates. They enable administrators to quickly and reliably deploy updates to their Windows 2000-based desktops and servers. Basically they synchronise with the Windows update site to deliver updates either automatically, or manually by the administrator. Once the updates are downloaded, the administrator can test them and decide which ones to install.SUS consists of two downloadable components:
- Microsoft Software Update Services. This is the server component installed on a computer running Windows 2000 Server inside the corporate firewall. It synchronises with Microsoft´s Windows Update site to provide all critical updates for Windows 2000 and Windows XP. The synchronisation can be automatic or completed manually by the administrator. When the updates are downloaded, the administrator can run a local test to see that the updates run smoothly in their environment before deciding which updates to approve for installation throughout your organisation.
- Automatic Updates.
This is the Windows client software for installation on Windows 2000 SP2 desktops and servers as well as computers running Windows XP Professional. This software connects to a server running SUS and receives any updates. You can control which server each Windows client should connect to as well as schedule when the client should perform all installations of critical updates, either manually or via an Active Directory Group Policy.
You cannot install the SUS service on a server that is functioning as an Active Directory Domain Controller (DC), or Small Business Server (which is a DC), you can however install the client on your DC in order to keep it secure and up-to-date with the latest patches that you have approved.
SUS supports the following update types:
- Windows Critical Updates
- Windows Critical Security Updates
- Windows Security Roll-ups
It is not possible to use SUS to deploy Service Packs, other Microsoft products such as Microsoft Office, SQL Server, or Exchange Server, or integrate your own updates or third-party updates.
Systems Management Server (SMS) is designed to be used by large-scale enterprises to deploy applications, software updates, and operating systems over their networks. Other features of SMS include:
- Discovery and tracking of all distributed Windows-based software and hardware assets: laptops, desktops, and servers alike.
- A suite of tools to help IT administrators troubleshoot and solve common problems with Windows-based systems—all from a central location.
- By combining system inventory and software distribution, SMS can show which computers need critical system and security updates, and then distribute the updates efficiently.
Administrators can confirm their installation using the comprehensive reporting structure of SMS.
Systems Management Server is designed to keep your systems up to date and provide complete software management, including the ability to quickly respond to security and virus issues.
