Microsoft Windows Server Update Services

learn more… | top users | synonyms

14
votes
9answers
2k views

'Windows Update' Best Practices

I'm finding that most users ignore the "There are updates ready to be installed, click here to install" message that WSUS pushes out. Until now we haven't forced the install but I'm thinking about ...
13
votes
4answers
8k views

Building a WSUS server: where to start?

Rather than having all of my computers go out to the internet and download their Automatic Updates, I am seriously considering building a WSUS server. That is, a Windows Update server. I have read ...
13
votes
4answers
4k views

How can I make WSUS less invasive for our users?

We have WSUS pushing updates out to our user's workstations, and things are going relatively well with one annoying caveat: there seems to be an issue with a pop-up being displayed in front of some ...
9
votes
2answers
2k views

WSUS report approvals for a group

I'm trying to find a way to create a WSUS report of updates that have been approved for computer group A that have not been approved for one or more other groups. Alternatively, a tabular report that ...
8
votes
3answers
1k views

Use WSUS when local, MU when remote? (But still report to WSUS)

We currently have our single internal WSUS server configured for all computers, both desktops and laptops. The WSUS server is available internally only (either VPN or LAN). We have some remote users ...
8
votes
5answers
3k views

Suggestions for free/cheap asset/patch management software (Adobe, Java, etc)

I am using WSUS for Microsoft patching but would like something that will inventory and patch Adobe, Java, Firefox, Quicktime, etc. I have used Lumension in the past and it was OK but it is too ...
8
votes
4answers
7k views

Deploy .net 4 via Active Directory group policy or WSUS

Is there a way to automatically deploy .net 4 using Active Directory group policy or WSUS? I want to push it out to lots of machines without having to go around to each one. Background: I have a ...
7
votes
3answers
296 views

Sane patch schedule for Windows 2003 cluster

We've got a cluster of 75 Win2k3 nodes at work in a coarse grained compute cluster. The cluster is behind a mountain of firewalls and resides in its own VLAN. Jobs of all sizes and types run on the ...
7
votes
6answers
11k views

WSUS not making available all updates

I have recently installed WSUS (v3.2.7600.226) on a Windows 2008 Std server, and configured 4 test PCs to connect to it through group policy. They are detected by WSUS, and the PCs are downloading ...
7
votes
1answer
852 views

WSUS - Auto-approve only “Needed” updates

I'v looked through all the settings in the Automatic Approval menu, but it could not find anything about automatically approve only the needed updates. Because if I check, for instance, to ...
6
votes
8answers
2k views

Should I back up my WSUS server?

My question is simple, and I think I know my answer - I'm really after a confirmation from others. Obviously, if my WSUS server dies I will have some hefty downloads to do once it is back up, and ...
6
votes
1answer
171 views

How to prevent Server rebooting upon log off when a restart is pending?

This issue is related to Windows Update forcing a restart when the last session logs off Server 2003. Updates have been installed and a restart is pending. Obviously this is problematic if the last ...
6
votes
1answer
70 views

WSUS and Pulled Patches

When Microsoft pulls bad patches, does WSUS automatically pull the patches as well or do we need to do it manually? If we have to do it manually, how do we keep on top of bad patches?
6
votes
1answer
629 views

WSUS downloading unwanted updates from MS which are not selected in Options

In WSUS (3.2.7600.226), I've specified which updates we wish to download onto the WSUS server from Microsoft. We don't use Microsoft Exchange, so it is not selected in Options > Products & ...
5
votes
2answers
251 views

Centrally Managed WSUS, but Updates come from Internet

When looking at the common WSUS deployment options, I don't see an option where the updates are centrally managed for multiple WSUS servers, but both servers download the updates from Microsoft. Is ...
5
votes
4answers
4k views

Remotely Trigger WSUS Downloaded update Installation

This has been bugging me for a while. We have our Servers set to download only windows updates to stage them to be installed during one of our bi-monthly patch windows. I have looked high and low for ...
5
votes
4answers
3k views

Using WSUS to update machines not on the domain

I have a WSUS server providing updates for for the computers on my domain. We also bring allot of machines back to our office and run windows update on them as build image, this means that we end up ...
5
votes
1answer
36 views

What is the difference between Approve or Approve for Optional Install In WSUS

I have been diving into Powershell for methods to deal with my WSUS better. I have noticed that an update gives the option of Approve or ApproveForOptionalInstall. Whilte I can find many articles ...
5
votes
1answer
299 views

WSUS and cloned drives

When I add new machines built with cloned drives to the network the fact that they have the same SID doesn't present any problems, except for WSUS, which shows only one instance of the clones, ...
5
votes
2answers
44 views

BITS policies to limit bandwitdth usage is not taking effect

We have a fleet of roughly 1300 Windows 7 SP1 clients who use a centralized WSUS server to download updates from. We've implemented the following BITS policy to limit the bandwidth during working ...
4
votes
3answers
635 views

With regards to Windows Updates, just how screwed are we?

We have a small "secured network" in our office. And by small I mean it's a Windows 7 PC connected to a firewall which connects to an internet connection. It's for processing card transactions in ...
4
votes
7answers
643 views

Automated Windows Updates Software?

I have heard of WSUS, but is that the best solution? I have techs interrupting our clients to do Windows Updates during business hours. I need a solution that will reduce customer interruptions and ...
4
votes
2answers
113 views

Can a non domain server obtain it's updates from a domain WSUS

Anyone know if it is possible to get a non-domain Server to pick-up it's updates from a domain included WSUS server? Just thinking about Hyper-V host Servers, in a single server environment clearly ...
4
votes
2answers
272 views

How to reduce WSUS disk usage?

My WSUS installation is now using 100 Gb of disk. Is there a way to reduce this usage? How can I, say, delete updates included in Service Packs?
4
votes
5answers
7k views

Force install updates on WSUS server

The WSUS administration console shows computers with not installed (critical) updates. To be clear: The computers report their status every day. These updates do have a deadline that has already ...
4
votes
5answers
2k views

How do I find the WSUS server that my computers are connecting to for Windows Updates?

I have multiple WSUS servers setup on our domain; one is handling Windows Updates, while another is setup to only do Endpoint Protection updates (via SCCM 2012). Endpoint Updates are working properly ...
4
votes
2answers
10k views

How to completely wipe WSUS and start again

Anyone know of a way to completely wipe WSUS of updates and start again? It seems as if I have loads of language packs and assorted rubbish in the list which we do not need. Having now removed all ...
4
votes
1answer
765 views

Decline an already pushed update,

I approved .net framework update on my WSUS server. Those updates have been pushed to the domain machines but have not been installed yet. They are waiting in the system tray waiting to installed. ...
4
votes
1answer
179 views

WSUS Clients Updating from Microsoft Update

We have a Windows domain and run WSUS for managing client updates. This is all working fine, except when laptop users take their laptops home. When these machines are on their own private network, ...
4
votes
1answer
2k views

Windows Server 2008 R2 SP1 using WSUS does not apply patch

server based on Windows Server 2008 R2 Service pack 1 (x64) with installed .NET Framework 4.0 does not apply patch KB2416472 which is approved in WSUS. Looking at the report in WSUS for this server I ...
4
votes
1answer
289 views

WSUS Updates - Best Practice

We have an isolated enviornment of a few hundred servers in which we use WSUS to push updates too. We have thousands of updates which to manage and push to devices testing along the way to ensure the ...
4
votes
1answer
22k views

Why is Windows Update suddenly failing with error 0x80244019?

Since installing updates yesterday, one of our 2008 R2 servers refuses to connect to our WSUS again and, instead, reports the unknown error 0x80244019. Connecting to the official Windows Update ...
4
votes
2answers
591 views

Windows XP Mode confusing WSUS

I have a need to use Windows XP Mode in Windows 7 to run a legacy application, so I downloaded, installed and configured it on my machine as a test without any issues. The problem I am now having is I ...
4
votes
1answer
146 views

WSUS configuration for Windows 8.1 clients

I have set up WSUS 2.0 (on 2008 R2). All client side machines are running Windows 8.1. At the request of the users, i have been running with the below GP configuration so WSUS is less intrusive, and ...
4
votes
1answer
34 views

Should I use the WSUS “deadline” feature on production servers?

I use WSUS to patch a number of Windows Server 2008 R2 x64. It usually works great, until today. Last week Microsoft shipped a critical patch KB2992611 to fix critical problems in the crypto ...
4
votes
1answer
519 views

Declining superseded updates in WSUS

When you click on an update that has been superseded in WSUS, you get a warning that says you should verify the update is no longer needed before declining it. According to Microsoft, you're supposed ...
4
votes
1answer
323 views

How to handle updates that aren't appropriate for Server Core editions?

It seems that WSUS isn't smart enough to know which updates are actually appropriate for Windows Server Core installs. For example, WSUS wants to install Server 2012 R2 Update (KB2919355) but it fails ...
4
votes
2answers
86 views

Updating Win2008R2 SP1 with Windows Updates often fails when installing multiple updates but same failed update work when installed one a time

I am updating a whole bunch of server which are running Windows 2008R2 SP1. There are about 120 updates to install. I found that if I run all of the updates, it takes hours and hours, then fails and ...
4
votes
2answers
375 views

Offline WSUS delta updates

I have a secure (not connected to the internet) system that needs to be kept up to date via WSUS. We have installed a WSUS server on it and have copied over 20+GB of update content and imported the ...
4
votes
3answers
3k views

WSUS Shows Incorrect Version & WSUS (isolated) fails to download updates

One of the issues we are having is the clients will not download the updates from our WSUS server. They check-in as they are suppose too and find applicable updates but they are unable to actually ...
4
votes
1answer
904 views

Needed Counts in WSUS show Declined Updates

We are a couple months into using WSUS for rolling out updates for our company computers. So far it's gone wonderfully - clients are auto-updating daily, and servers are waiting for our permission ...
4
votes
1answer
209 views

SCCM 2012 and WSUS…missing Schema folder

A few months ago I installed SCCM 2012 R2 on a brand new 2012 R2 box. Everything went smoothly...or so it seems. I attempted to install WSUS to make it work with SCCM. A few hours of struggling later, ...
3
votes
5answers
11k views

How to verify if Windows Update location is properly configured from WSUS?

I was recently configuring a WSUS server. However I am not sure if I've set up correctly (WSUS isn't an everyday tool at the place where I work). I've been wondering, Is there a command (or a tool) ...
3
votes
4answers
1k views

Stop WSUS from rebooting a server

Our IT department is rolling out a set of patches via WSUS this weekend and will reboot all of our Win2k3 servers on Sunday. Due to production work which must continue uninhibited, we cannot allow ...
3
votes
3answers
761 views

Do I really need WSUS?

When I set up our 2003 SBS server a friend who has been working sysadmin for quite a while told me WSUS was "a must for any size of organization". So I installed it, and have been using it since. ...
3
votes
7answers
9k views

Is there an alternative to WSUS for Windows 7 updates?

I have a small computer lab to set up. At this point there are 6 machines. Another 14 will be added later. We don't have any servers in the building; the whole business network is a workgroup. Each ...
3
votes
2answers
703 views

College network - can I point non-domain student computers to our SUS server?

Since I started here 3 months ago, one of the things that's really bothered me about the way this network is setup is something that shows up on the daily bandwidth consumption report. I get a list ...
3
votes
4answers
14k views

How to disable WSUS on our domain?

Our Network Admin, who toughed it out for 3 months here, setup a virtual WSUS server and added Group Policy to enforce a WSUS policy on about 1/3 of our workstations. The virtual WSUS server has since ...
3
votes
6answers
6k views

IIS 7 on SBS 2008 - logging is going haywire

The C: drive on our SBS 2008 server just ran out of space. The culprit appears to be IIS, which is logging an incredible amount of activity in one particular log folder. Most of the IIS log folders ...
3
votes
3answers
6k views

How can I block IE 9 using WSUS?

We use WSUS on our LAN. We have to complete some testing before I can let users upgrade to IE 9. I would like to block it prevent it from being auto-installed until testing is complete. The ...