Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm in a corporate Windows environment, which has deployed its own WSUS server. The thing is, it seems to hardly ever be updated.

This means I don't get the latest updates for months. It's a worry for security, and inconvenient for other MS products.

I know how to edit the WUServer and WUStatusServer values in the registry, however what should the values be if I want to use the default Microsoft servers?

share|improve this question
add comment

3 Answers

up vote 0 down vote accepted

You should simply delete these registry keys if you want to revert to the default Microsoft update servers.

share|improve this answer
    
I tried this and it does try and connect to the MS servers now. Unfortunately it can't seem to connect. Perhaps the port has been blocked by a clever admin! Oh well. Thanks for your help. –  Joe N Feb 22 '11 at 3:05
add comment

Changing those settings won't do much for you. The group policy which sets those values will overwrite any changes which you make.

Your IT staff probably only pushes out updates once they have been tested to ensure that they do not break any applications which are installed. If your security department has issue which this, then they should bring it up with the IT Admin group. Going around the IT admin group isn't going to to do anything but upset them.

share|improve this answer
    
:) thanks for the info. You are right on all counts. They do test updates before rolling them out, as they should! But this is only done for the main corporate apps (Office, Outlook, etc.) I still need to run updates every so often, as it's especially necessary for the development/database products I use (.NET, SQL Server, etc). I don't mind reapplying this change when necessary (they don't refresh the GP that often) - just a simple .reg patch. Some things are only delivered through WU and are hard to install manually. –  Joe N Feb 22 '11 at 1:56
    
You can always manually check for updates online. Windows XP, Vista, and 7 all have options to check online for updates, aside from the update settings being applied from the WSUS server. This would give you access to the updates that aren't being downloaded and approved on the WSUS server. –  joeqwerty Feb 22 '11 at 2:19
    
Thanks - it's been disabled in the group policy, though. I've overriden this, but the internal WSUS server seems to be inaccessible, so I am not able to manually get any new updates. That's why I want to try and use the MS servers (if possible.) –  Joe N Feb 22 '11 at 3:04
    
I think if you just remove the settings and leave them blank it should default back to the Microsoft servers. –  mrdenny Feb 22 '11 at 8:30
    
Thanks mrdenny - that does indeed cause it to revert to the default servers –  Joe N Feb 23 '11 at 4:47
add comment

My suggestion would be to bring your concerns to the group or individual responsible for the WSUS server. They probably have a policy/procedure for approving updates.

share|improve this answer
    
I agree - I have raised it. Things move a little slowly here. Thanks for your help! –  Joe N Feb 22 '11 at 3:05
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.