Ôñüðïò åãêáôÜóôáóçò ôïõ ISA Server åðåßãïõóåò åðéäéïñèþóåéò êáé åíçìåñùìÝíåò åêäüóåéò

Ç äéáäéêáóßá äéá÷åßñéóçò åíçìåñùìÝíçò Ýêäïóçò ëïãéóìéêïý åðéôñÝðåé ïñãáíéóìïýò åëÝã÷ïõ ðþò äéáôçñïýí êáé áíÜðôõîç ëïãéóìéêïý åêäüóåéò ãéá ôá ðåñéâÜëëïíôá ðáñáãùãÞò. Äéá÷åßñéóç åíçìåñùìÝíùí åêäüóåùí ëïãéóìéêïý âåëôéþíåé ôç ëåéôïõñãéêÞ áðïôåëåóìáôéêüôçôá êáé áðïôåëåóìáôéêüôçôá, óáò âïçèÜ íá îåðåñáóôïýí ôá èÝìáôá åõðÜèåéáò áóöáëåßáò êáé âïçèÜ óôç äéáôÞñçóç ôç óôáèåñüôçôá ôïõ ðåñéâÜëëïíôïò ðáñáãùãÞò. Ãéá ãåíéêÝò ðëçñïöïñßåò ó÷åôéêÜ ìå ôï ëïãéóìéêü Microsoft óôñáôçãéêÝò ãéá ôçí åíçìåñùìÝíç Ýêäïóç, åðéóêåöèåßôå ôçí áêüëïõèç ôïðïèåóßá ôçò Microsoft óôï Web:¼ôáí ó÷åäéÜæåôå ìéá óôñáôçãéêÞ äéá÷åßñéóçò ôçò åíçìåñùìÝíçò Ýêäïóçò ëïãéóìéêïý ãéá õðïëïãéóôÝò ðïõ åêôåëïýí ôïí Microsoft Internet Security and Acceleration Server (ISA Server), ëÜâåôå õðüøç óáò ôéò ðáñáêÜôù óõóôÜóåéò:

• Âåâáéùèåßôå üôé ïé õðïëïãéóôÝò ðïõ åêôåëïýí ISA Server Ý÷åé ôéò ôåëåõôáßåò åíçìåñùìÝíåò åêäüóåéò ôùí Windows.
• ÅãêáôÜóôáóç êñßóéìùí åíçìåñþóåùí êáé åíçìåñùìÝíùí åêäüóåùí áóöáëåßáò ãéá ôïí ISA Server ìüëéò áõôÝò åßíáé äéáèÝóéìåò. ÅðéðëÝïí, åãêáôáóôÞóôå ôéò åíçìåñùìÝíåò åêäüóåéò ãéá ôá óôïé÷åßá ðïõ åãêáèßóôáíôáé áðü ôïí ISA Server, üðùò ôçí ìç÷áíéóìïý äéá÷åßñéóçò âÜóåùí äåäïìÝíùí ôçò Microsoft (MSDE), üôáí èá åßíáé äéáèÝóéìåò.
• Ìðïñåßôå íá åãêáôáóôÞóåôå ôéò åðåßãïõóåò åðéäéïñèþóåéò ðïõ åßíáé äéáèÝóéìåò áðü ôéò õðçñåóßåò õðïóôÞñéîçò ðñïúüíôùí ôçò Microsoft ãéá ôçí áíôéìåôþðéóç óõãêåêñéìÝíùí æçôçìÜôùí ðïõ áíôéìåôùðßæåôå. Ùóôüóï, åðåéäÞ áõôü ôï åßäïò ôçò åðåßãïõóáò åðéäéüñèùóçò åßíáé óõíÞèùò ðåñéëáìâÜíïíôáé óôï åðüìåíï service pack ôïõ ISA Server, óõíéóôÜôáé íá ðåñéìÝíåôå Ýùò ôï service pack ðïõ ðåñéëáìâÜíåé ôçí åðåßãïõóá åðéäéüñèùóç, åêôüò åÜí áõôü ôï æÞôçìá åðçñåÜæåé ðïõ óáò åðçñåÜæåé.
• Åíçìåñþóåéò ôïõ ISA Server êáé service pack åßíáé áèñïéóôéêÜ. ¸íá service pack ãéá ìéá óõãêåêñéìÝíç Ýêäïóç ôïõ ISA Server ðåñéÝ÷åé üëåò ôéò åíçìåñùìÝíåò åêäüóåéò ðïõ êõêëïöüñçóáí ðáëáéüôåñá êáé åíçìåñþóåéò êþäéêá ãéá áõôÞí ôçí Ýêäïóç. ¸íá service pack Þ áèñïéóôéêÞ åíçìåñùìÝíç Ýêäïóç ìðïñåß íá åãêáôáóôáèåß óå õðïëïãéóôÝò ðïõ åêôåëïýí ôçí Ýêäïóç ãéá ôçí êáôáóêåõÞ ôïõ ISA Server Ýêäïóç (RTM) Þ óå õðïëïãéóôÝò ðïõ åêôåëïýí ISA Server ìáæß ìå ôéò åðåßãïõóåò åðéäéïñèþóåéò Þ åíçìåñùìÝíåò åêäüóåéò ðïõ Ý÷ïõí åêäïèåß áðü ôçí Ýêäïóç RTM.

ÐÑÏÛÐÏÈÅÓÅÉÓ

Èá ðñÝðåé íá åãêáôáóôÞóåôå ôéò åðåßãïõóåò åðéäéïñèþóåéò êáé åíçìåñùìÝíåò åêäüóåéò ìüíï óå õðïëïãéóôÝò ðïõ åêôåëïýí ôçí Ýêäïóç ôïõ ISA Server ðïõ êáèïñßæåôáé áðü ôçí åðåßãïõóá åðéäéüñèùóç Þ ôçí åíçìåñùìÝíç Ýêäïóç. Ãéá ðáñÜäåéãìá, èá ðñÝðåé íá åãêáôáóôÞóåôå ôéò åðåßãïõóåò åðéäéïñèþóåéò êáé åíçìåñùìÝíåò åêäüóåéò ãéá ôïí ISA Server 2004, Standard Edition ìüíï óå õðïëïãéóôÝò ðïõ åêôåëïýí ISA Server 2004, Standard Edition. Ìðïñåßôå íá åãêáôáóôÞóåôå ôéò åðåßãïõóåò åðéäéïñèþóåéò ôïõ ISA Server 2006 ìüíï óå õðïëïãéóôÝò ðïõ åêôåëïýí ISA Server 2006.

ËÞøç êáé åãêáôÜóôáóç åðåéãïõóþí åðéäéïñèþóåùí

ÊÜíôå ëÞøç êáé åãêáôáóôÞóôå ôçí åðåßãïõóá åðéäéüñèùóç, üðùò ðåñéãñÜöåôáé áðü ôéò õðçñåóßåò õðïóôÞñéîçò ðñïúüíôùí ôçò Microsoft, üðùò ðåñéãñÜöåôáé óôï Üñèñï ôçò ÃíùóéáêÞò ÂÜóçò ôçò Microsoft ãéá ôçí åðåßãïõóá åðéäéüñèùóç Þ üðùò ðåñéãñÜöåôáé áðü ôï ÊÝíôñï ëÞøçò ôçò Microsoft.

ÊáôÜ ôçí åãêáôÜóôáóç ôçò åðåßãïõóáò åðéäéüñèùóçò, ìðïñåß íá óôáìáôÞóåé ôï ðñüãñáììá ïäÞãçóçò êáé õðçñåóßåò óôïí õðïëïãéóôÞ ðïõ åêôåëåß ISA Server. Óå ïñéóìÝíåò ðåñéðôþóåéò, ßóùò ÷ñåéáóôåß íá áðïóõíäÝóôå ôïí õðïëïãéóôÞ ôïõ ISA Server áðü ìç áîéüðéóôç äßêôõá, üðùò åîùôåñéêÜ äßêôõá, ðñéí íá åãêáôáóôÞóåôå ôçí åðåßãïõóá åðéäéüñèùóç. Ìðïñåßôå íá ìÜèåôå áí áðáéôåßôáé áõôÞ ç áðïóýíäåóç, äéáâÜæïíôáò ôï Üñèñï ôçò ÃíùóéáêÞò ÂÜóçò ôçò Microsoft ðïõ óõíïäåýåé ôçí åðåßãïõóá åðéäéüñèùóç Þ ôçí ôïðïèåóßá ëÞøçò ïäçãßåò.

ÓÇÌÅÉÙÓÇÅÜí Ý÷ïõí åãêáôáóôáèåß ïé õðçñåóßåò ôïõ ISA Server, ôïõ ISA Server åéóÝñ÷åôáé êëåéäþìáôïò êáôÜ ôçí åãêáôÜóôáóç. ÌåôÜ ôçí åãêáôÜóôáóç, ï ISA Server õðïëïãéóôÝò Þ ôá ìÝëç ðßíáêá ðñÝðåé íá åðáíåêêéíçèåß.

Äéá÷åéñéóôéêÞ åãêáôÜóôáóç

×ñçóéìïðïéþíôáò ôç äéá÷åéñéóôéêÞ åãêáôÜóôáóç, ìðïñåßôå íá åíóùìáôþóåôå ìéá åíçìåñùìÝíç Ýêäïóç óå óçìåßï äéá÷åéñéóôéêÞò åãêáôÜóôáóçò ôïõ ISA Server ðñéí íá åêôåëÝóåôå ôï ðñüãñáììá åãêáôÜóôáóçò ôïõ ISA Server. Ãéá ðåñéóóüôåñåò ðëçñïöïñßåò ó÷åôéêÜ ìå ôç äéá÷åéñéóôéêÞ åãêáôÜóôáóç, åðéóêåöèåßôå ôçí áêüëïõèç ôïðïèåóßá ôçò Microsoft óôï Web:

Ôñüðïò åãêáôÜóôáóçò ôùí åíçìåñùìÝíùí åêäüóåùí ãéá ôéò åêäüóåéò Enterprise ôïõ ISA Server

• ISA Server updates and service packs should be installed on all array members and Configuration Storage servers.
• Before you install the updates on ISA Server 2004 Enterprise Edition, you must log on to the Configuration Storage server by using the same credentials that were used to install the Configuration Storage server during the initial ISA Server Setup. If you install the update by using a different administrator account, the installation may fail. In this case, you will receive a "Setup cannot initialize ISA Server settings" error message.
• ISA Server services may not start after you install or remove ISA Server updates. This problem may occur if the computer that is running the services is not synchronized with the Configuration Storage server. In this case, use the Monitoring node of the ISA Server Management console to manually restart the services.
• In an ISA Server Enterprise deployment in which ISA Server array members are installed in workgroup mode and the Configuration Storage server is part of a domain, ISA Server updates that are installed by using the Microsoft Update mechanism will fail. This problem occurs because there are no credentials available to access the Configuration Storage server. Rollback is successful after the update fails. The following workarounds are available for this issue:
  • For ISA Server 2004 Enterprise Edition, obtain the relevant update from the following Microsoft Download Center Web site:
    http://www.microsoft.com/downloads/Browse.aspx?displaylang=en&productID=23E0C7B9-FEAA-4E02-9662-31B9BD4CDF8B

    (http://www.microsoft.com/downloads/Browse.aspx?displaylang=en&productID=23E0C7B9-FEAA-4E02-9662-31B9BD4CDF8B)
    Then, install the update at a command prompt, and specify credentials.
  • For ISA Server 2006 Enterprise Edition, the following conditions are true:
    • ISA Server 2006 Enterprise Edition updates that were released before the ISA Server 2006 Supportability update (http://go.microsoft.com/fwlink/?LinkID=94689
      (http://go.microsoft.com/fwlink/?LinkID=94689)
      ) that was issued on September 11, 2007 cannot be installed by using an alternative method. There is no workaround.
    • For ISA Server 2006 Enterprise Edition updates that were issued after the ISA Server 2006 Supportability Update, including the supportability update, obtain the relevant update from the Microsoft Download Center. When you run the update, a dialog box appears during Setup to let you to specify credentials to be used. Or, you can install the update at the command prompt.
  To install an update at the command prompt and to specify credentials, type the following at a command prompt:
  msiexec /p <msp> REINSTALL=all REINSTALLMODE=omus STORAGESERVER_CONNECT_ACCOUNT=mydomain\mydomainpermitteduser STORAGESERVER_CONNECT_PWD=mypwd /qb /l*v msilogfilename.log </msp>
  ÓÇÌÅÉÙÓÇIf you use this method to install the update, the update cannot be removed. To uninstall this update, you must use the following workaround:
  1. Export the array configuration.
  2. Uninstall ISA Server.
  3. Reinstall ISA Server.
  4. Import the array configuration.

Staged updates

In large enterprises, you may be unable to install updates concurrently on all ISA Server computers. In this case, we recommend that you install updates in the following order:

1. On each computer that is running the ISA Server Management console (for remote management).
2. On each Configuration Storage server.
3. As required, run the upgrade separately on each server in an array and repeat for all arrays. To maintain availability, do the following on each ISA Server computer:
   1. If the server is load-balanced by using NLB or any other load-balancing mechanism, remove the server from the load-balancing configuration.
   2. Drain existing connections that are served by the server.
   3. Set nlb to "suspended" to prevent auto-rejoin when you restart.
   4. Install the update.
   5. Perform additional steps as required by the update package.
   6. Restart the server if it is required.
   7. Start NLB on the updated server.

ÓçìáíôéêüAfter you install an update on the remote management console or on Configuration Storage server, the following states apply:

• The update does not affect remotely managed ISA Server computers or array members that do not yet have the update installed.
• Features that are provided by the update may be only partially functional, as follows:
  • Features that do not require a change on the ISA Server computer will work as expected. For example, policy changes that are made on the remote management computer will affect all members of the array.
  • Features that require a change on the ISA Server computer will not be functional. For example, ISA Server 2006 SP1 provides a test button feature to verify Web publishing settings. This feature will not be available on array members that are not running SP1.

If an update is not installed on all array members, only servers that are running the update can provide the update features. As client requests are balanced between array members, clients cannot benefit from changed behavior if a request is served by an array member that does not have the update installed.

Other issues

When you run a monitoring application, such as the Microsoft Operations Manager (MOM) Management Pack for ISA Server, you use ISA Server files. Using these files may interfere with ISA Server Setup. To avoid this problem, stop the monitoring application before you do any of the following:

• Repair, modify, install, or update ISA Server
• Install or uninstall a service pack
• ÁíáâÜèìéóç ôïõ ISA Server

Áíôéìåôþðéóç ðñïâëçìÜôùí åãêáôÜóôáóçò

Áðü ðñïåðéëïãÞ, Ýíá áñ÷åßï êáôáãñáöÞò äåí äçìéïõñãåßôáé êáôÜ ôçí åãêáôÜóôáóç ìéáò åðåßãïõóáò åðéäéüñèùóçò. Ìðïñåßôå íá êáèïñßóåôå üôé Ýíá áñ÷åßï êáôáãñáöÞò åßíáé íá äçìéïõñãçèåß êáôÜ ôçí åãêáôÜóôáóç. Ìðïñåßôå íá ÷ñçóéìïðïéÞóåôå áõôü ôï áñ÷åßï êáôáãñáöÞò ìáæß ìå ôéò õðçñåóßåò õðïóôÞñéîçò ðñïúüíôùí ôçò Microsoft ãéá ôçí áíôéìåôþðéóç ðñïâëçìÜôùí åãêáôÜóôáóçò. ÊáôáãñáöÞ ìüíï åßíáé ÷ñÞóéìç, åÜí áðïôý÷åé ç åãêáôÜóôáóç. ÅÜí åãêáôáóôÞóåôå îáíÜ ìåôÜ áðü ìéá åðéôõ÷çìÝíç åãêáôÜóôáóç, êáôáãñÜöåôáé õðÜñ÷ïõí ÷ñÞóéìåò ðëçñïöïñßåò. Ãéá íá êáèïñßóåôå üôé Ýíá áñ÷åßï êáôáãñáöÞò åßíáé íá äçìéïõñãçèåß êáôÜ ôçí åãêáôÜóôáóç ìéáò åðåßãïõóáò åðéäéüñèùóçò, ðëçêôñïëïãÞóôå ôá áêüëïõèá óå ìéá ãñáììÞ åíôïëþí:ÁõôÞ ç äÞëùóç åñìçíåýåôáé ùò åîÞò:

• /påöáñìüæåé ìéá åíçìåñùìÝíç Ýêäïóç.
• Hotfix_Name.mspåßíáé ôï üíïìá ôïõ áñ÷åßïõ åðåßãïõóáò åðéäéüñèùóçò êáé ôç èÝóç üðïõ êÜíáôå ëÞøç ôïõ áñ÷åßïõ.
• ÅÐÁÍÅÃÊÁÔÁÓÔ¹ÓÔÅ ¼ËÁ =ÅðáíáëáìâÜíåé ôéò äõíáôüôçôåò ðïõ åßíáé Þäç åãêáôåóôçìÝíá. ×ñçóéìïðïéÞóôå áõôÞí ôçí åíôïëÞ ìáæß ìåREINSTALLMODEÕðïäåéêíýåé ôïí ôýðï ôçò åðáíåãêáôÜóôáóçò.ÅðáíåãêáôÜóôáóç÷ñçóéìïðïéåß ìüíï êåöáëáßá ãñÜììáôá.
• REINSTALLMODE = omus÷ñçóéìïðïéåßôáé ìåÅðáíåãêáôÜóôáóçÃéá íá êáèïñßóåôå ôï åßäïò ôçò åðáíåãêáôÜóôáóçò.REINSTALLMODE÷ñçóéìïðïéåß ìüíï êåöáëáßá ãñÜììáôá. Ãéá íáomusç åðéëïãÞ äçëþíåé ôá åîÞò:
  • oåêôåëåß åðáíåãêáôÜóôáóç åíüò áñ÷åßïõ åÜí ëåßðåé Þ åßíáé ðáëáéüôåñçò Ýêäïóçò.
  • mrewrites registry entries in the HKEY_LOCAL_MACHINE registry hive or in the HKEY_CLASSES_ROOT registry hive.
  • urewrites registry entries in the HKEY_CURRENT_USER registry hive or in the HKEY_USERS registry hive.
  • sreinstalls all shortcuts and re-caches all icons.
• /Lturns on logging.
• *vxindicates a wildcard character that logs all information by using verbose output.
• Logfile_Name.logis the name of the log file.

By default, the log file is created in the same folder where you run themsiexecÅíôïëÞ.

You can also examine the event viewer for relevant information. After the installation is complete, an event indicates whether the hotfix installation was successful.

Verifying installed hotfixes and updates

You can use the Add or Remove Programs item in Control Panel to find ISA Server hotfixes and updates that you have installed. Hotfixes are labeled with the name of the product. The name of the hotfix also includes the Microsoft Knowledge Base article number that is associated with the hotfix.

Uninstalling hotfixes

During the uninstallation process, installation source files may be required, such as the CD-ROM or the network location of the ISA Server Standard Edition installation files. If the files are inaccessible, the Microsoft Firewall service may not start. If this happens, uninstall the service pack again to make sure that you can access the installation source files, rerun the installation, or run ISA Server Setup in the Repair mode.

If you cancel the uninstallation of a service pack when you are not connected to the installation source files, ISA Server services may not start. If this happens, let the uninstallation process finish. To do this, run the service pack installation again, run Repair, or uninstall the service pack again.

You can use the Add or Remove Programs item in Control Panel to uninstall hotfixes and updates. To uninstall an ISA Server 2004 hotfix or update, you must first install Windows Installer 3.0. For more information about Windows Installer 3.0, visit the following Microsoft Web site:

Installing hotfixes and updates on Firewall Client computers

Follow the instructions for installing ISA Server 2004 hotfixes and ISA Server 2006 hotfixes to install Firewall Client hotfixes and updates on client computers that are running Firewall Client software. ISA Server 2004 includes the option to install a Firewall Client Share during Setup. Each fix that affects Firewall Client software includes a hotfix or update that you can apply directly to client computers. Each fix also includes a second hotfix that you can apply to the ISA Server 2004 Firewall Client Share. Hotfixes that are applied to the Firewall Client Share can then be distributed to client computers. To update a Firewall Client Share with a hotfix or update, use one of the following methods:

• Run the Update.bat script in the Firewall Client Share. Typically, the path of this script is \\ISA\Mspclnt\Webinst\Update.bat.
• ÅêôÝëåóç ôçòmsiexeccommand in the Firewall Client Share. To do this, type the following command at a command prompt:
  msiexec /feumsv \\ISA\Mspclnt\MS_FWC.msi