How To Setup Windows Server Update Services

WSUS is needed to download updates from Microsoft and store them locally on the WSUS server. This reduces the corporeality of data that gets transferred over the WAN link for a lot of other servers and avoid installing necessary windows updates. It can be used to approve or decline updates (i.e., command how updates are installed). For more articles I take written, run across the following hyperlinks: Configuring WSUS Electronic mail Notification to Work With Office365, Of import Areas to Master on WSUS (Installed and not applicable, Install 1/4, and Installed / Not applicative 100), Targeting WSUS Client with the Registry keys: How to configure WSUS Clients to get Updates from the WSUS server using Registry settings, How to use Windows Updates from WSUS to the server using AWS RunCommand, How to Configure SSL betwixt WSUS servers (Upstream and Downstream Servers), Handy WSUS Commands – Windows Server Update Services Commands, WAUACLT, PowerShell and USOClient, How to Start, Cease and Restart Windows Server Update Services (WSUS) via PowerShell and CMD, Windows Server Update Services: Windows 2016 Servers does not show up on WSUS console, and WSUS clients announced and disappear from the WSUS Update Services console.

              Note: We do not have a domain controller and these servers are not joined to the domain

Here are the prerequisites:

.Net framework 4.5
Windows Server 2012R2 (using window internal database [WID])
IIS half dozen.0 or greater (with components such as ASP.internet, windows hallmark, dynamic content pinch etc.)

Hardware requirements:

Organization partition and WSUS partition must exist NTFS
Deceit be installed on compressed drive
Requires 1Gb free on Organisation partition
2 GB free for WID (WSUS database)
At to the lowest degree 20Gb gratis for updates (30 GB recommended by Microsoft).

Setting up a WSUS: Below are the steps to have WSUS installed and configured for Windows Update via GPO

Step one:

Click on Server Director
Click on Add roles and features (Add together Roles and Features Sorcerer Opens Up)

Click adjacent and select the Installation Type

– Click on next (select Webserver IIS) and Windows Server Update Services, click on add together features

Click on side by side till yous become to the roles service option as shown beneath
The kickoff 2 are selected by default (Since I volition be using Windows internal Database for WSUS) I am fine with this.

On the content part service option, enter the path you wish WSUS to download updates to (if you accept an external drive yous can utilise that)

– On the confirmation role page, click on install as shown below

When this completes, you tin can open Windows Server Updates Services in so many ways

Navigate to Tools and select Windows Server Updates Services
Click on Windows , and then Administrative Tools and and so on Windows Server Updates Services.
Lastly, click on WSUS server on the Server Manager every bit shown below, right click on the server name and select Windows Server Updates Services

Update Service folio volition open up as shown below.
– Kindly configure the Options settings according to your need. (work through each option, read and configure). I will driblet any import information as the task progresses

Besides on the synchronisation service option window, ensure you synchronise your WSUS server to get updates from Microsoft past selectingSynchronise Now

Later this has been completed, it should similar this beneath.

The updates department of updates services will be populates as well (note: Takes long when run the first time).

Note: To exist able to view the reports, y'all will need to install the Microsoft report view, https://www.microsoft.com/en-united states/download/details.aspx?id=3841
Note: When the WSUS console is not closed, despite having the installation succeeded, you lot volition not be able to view any report generated.. Therefore, close the wsus windows and uninstall and reinstall

https://community.spiceworks.com/topic/365279-wsus-in-non-domain-enviroment
https://mizitechinfo.wordpress.com/2013/08/xix/step-by-step-installing-configuring-wsus-in-server-2012-r2/

Steps ii: You can either user the local group policy or setting the registry key to point clients to get windows updates from the WSUS server

Using the local group policy: Setup the group policy object to let clients contact the WSUS for updates
– From the MMC, open the local computer policy from there
– Run gpedit.msc
Open Computer Configuration
Administrative Template
Windows Component and
Click on Windows Update

We have to configure these options
1. The Specify the Microsoft Update Service Location (Double click to open this upwards) past inbound the IP address followed past the port or specify the FQDN.

2: Enable Configure Automatic Updates and select the third choice to Auto download and notify for Install

After completed this run gpupdate /force to effect the group policy immediately

Configuring Update Service
Note: Ensure you create a group for administrative purposes to ensure (allow) updates to be tested to some groups before deploying (rolling) them to production servers