Microsoft® Windows® Desktop Deployment Resource Kit

Best Practices

The following are best practices for deploying SUS in your enterprise:

• In enterprises that already use SMS, use Microsoft Systems Management Server (SMS) with the SUS Feature Pack to deploy updates. For more information about SMS, see Chapter 17.

• Deploy the SUS server component on a dedicated server. Other applications might configure IIS in ways that are compatible with SUS.

• On WANs, use multiple synchronized or independent servers for SUS. By using multiple synchronized servers or independent servers, you avoid transferring updates across slow links.

• Use HTTPS and SSL to secure the SUS Administration Web page. Without securing the SUS Administration Web page, the Web browser exchanges all information, including passwords, using plain ...