How to Configure WSUS

WSUS Server (Windows Server update services)

1. How does WSUS acquire updates
   • Download updates directly from Microsoft (if network topology have internet connectivity)
   • Download updates from another WSUS server (called upstream server)
   • By manually importing files copied to your server (if network topology have no internet connection)
2. WSUS should NEVER be installed on Domain Controller.
3. How does it work?
   • Add WSUS Server Role.
   • Configure client computers with Group Policy
     1. Either wait for clients to check in with WSUS or force early check-in
   • Organize WSUS client into Computer Groups
     1. Good to setup a “test” group for updates that sometimes break functionality
   • Approve Updates for specific Computer Groups
     1. Patch on selected day (as your company’s SOP)
   • Add server role that allows administrators to control Windows Updates in your domain (Step by Step).
     1. Click Add Roles and Features
     2. Select Role based or Feature based installation and click next
     3. Select a server from server pool and click next
     4. Select windows server update services
     5. Click on add features
     6. Then click next
     7. In WSUS Role Services select both WID Database and WSUS Services
     8. Give path of updates folder in Content option and click next.
     9. Click install
     10. When finalizing Click on launch post installation tasks
     11. After installation finishes, go to Tools from server manager and click on windows server updates services
     12. This windows should show up
     13. Go Microsoft update improvement program and click next
     14. There you have three option as we discussed earlier, select the first and click next in case on internet connectivity
     15. Specify proxy server (in case of proxy server) otherwise leave is default and click next
     16. Click start connecting
     17. Choose your desired language and click next
     18. Choose the product (I selected windows 10 because I want win 10 client side updates)
     19. Choose the classifications and next
     20. Configure sync schedule
     21. Finished
     22. Verify

• Document download link 1
• Document download link 2

Learn More:

• After configuration now implement WSUS
• Training and Solutions