{"id":1507,"date":"2014-11-10T21:07:05","date_gmt":"2014-11-10T21:07:05","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=1507"},"modified":"2018-09-06T23:15:59","modified_gmt":"2018-09-06T23:15:59","slug":"how-to-set-up-wsus-on-windows-server-2008-r2","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=1507","title":{"rendered":"How to set up WSUS on Windows Server 2008 R2"},"content":{"rendered":"

Good morning my fellow readers. Today I am going to show you how to set up\u00a0WSUS\u00a0on\u00a0Windows Server 2008 R2. \u00a0WSUS is fantastic for centralising management of Windows Updates throughout your network. \u00a0Installing a WSUS server makes deploying patches and security fixes much easier and so by default makes your life easier too!!<\/p>\n

For the purpose of this tutorial I will be using Windows Server 2008 R2 SP1 with 1.5 Gb of RAM (you would use much more than this in a production environment).<\/p>\n

Open up\u00a0Server Manager<\/strong>. \u00a0Right click on\u00a0Roles<\/strong>\u00a0and then click\u00a0Add Roles<\/strong>.<\/p>\n

\"\"<\/p>\n

When asked to select which roles you want to install click\u00a0Windows Server Update Services<\/strong>\u00a0and when prompted\u00a0Add the additional roles that are required<\/strong>\u00a0(eg Web Server IIS)<\/p>\n

\"\"<\/p>\n

During installation you will be prompted to accept the license agreement and then you will be asked where do you want to store all the updates. \u00a0Either choose a new folder or accept the defaultC:\\\\WSUS<\/strong>\u00a0location.<\/p>\n

\"\"<\/p>\n

You will now be asked to choose whether you want to install the Windows Internal Database or use an existing one instead. \u00a0I tend to just install the database on the C drive in C:\\\\WSUS but the choice is yours.<\/p>\n

\"\"<\/p>\n

Next you will be asked for your web site preference. \u00a0You can use the default IIS web site to access WSUS over the network or you can specify your own one. \u00a0Again I quite happily choose the default for this.<\/p>\n

\"\"<\/p>\n

On the last page page review your options and then click next.<\/p>\n

The installation itself takes a long time but once installed the first thing we need to do is synchronize the WSUS server with Microsoft Update (or another WSUS server on the network) so expandServer Manager \u2013 Windows Server Update Services \u2013 Update Services \u2013 Options \u2013 Update Source and Proxy Server<\/strong>.<\/p>\n

\"\"<\/p>\n

\"\"<\/p>\n

For the purpose of this tutorial I will synchronise with Microsoft Update.<\/p>\n

Next we have to choose which products to download updates for so click on\u00a0Products and Classifications<\/strong>.<\/p>\n

\"\"<\/p>\n

Choose all the products which you require updates for and click OK.<\/p>\n

Next we have to decide what languages to download the updates in (if you select all available languages your downloads will take a long time and take up a loads of disk space). \u00a0Click onUpdate Files and Languages<\/strong>\u00a0and then the\u00a0Update Languages<\/strong>\u00a0tab. Choose your language and then click Apply.<\/p>\n

\"\"<\/p>\n

We now need to decide when to check for new updates and when to download them. \u00a0To accomplish this we need to click on\u00a0Synchronization Schedule<\/strong>\u00a0(shown below).<\/p>\n

\"\"<\/p>\n

You can synchronize manually but it is better to synchronize automatically on a daily schedule. \u00a0Once you have set your daily schedule click Apply.<\/p>\n

With all the housekeeping done all that is left to do is to perfrom the initial synchronization so expand\u00a0Server Manager \u2013 Windows Server Update Services \u2013 Update Services \u2013 Synchronize\u00a0<\/strong>and then right click and go to\u00a0Synchronize Now<\/strong>. This will start the synchronize process.<\/p>\n

That is the configuration for the WSUS server complete.<\/p>\n

Distributing Updates across the network<\/strong><\/p>\n

To accomplish this we need to set up a Windows Update Group Policy and then distribute it to all computers in the domain.<\/p>\n

To do this expand\u00a0Start \u2013 Administrative Programs \u2013 Group Policy Management<\/strong>. Once the Group Policy Management Console is open expand\u00a0Group Policy Management –<\/strong>\u00a0Forest \u2013 Domains \u2013 \u201cyour domain\u201d \u2013 Group Policy Objects<\/strong>. Right click on Group Policy Objects and go toNew<\/strong>.<\/p>\n

\"\"<\/p>\n

When the New GPO box appears eneter a name for the new GPO and then click OK. \u00a0Your new GPO should be visible on the screen (as shown below). \u00a0Right click on it and go to\u00a0Edit<\/strong>.<\/p>\n

\"\"<\/p>\n

Now in the left panel expand\u00a0Computer Configuration \u2013 Policies \u2013 Administrative Templates \u2013 Windows Components \u2013 Windows Update<\/strong>\u00a0to get the screenshot below.<\/p>\n

\"\"<\/p>\n

The first setting to configure is\u00a0Specify intranet Microsoft update service location<\/strong>. Right click and go to\u00a0Edit<\/strong>.<\/p>\n

\"\"<\/p>\n

As shown above set this to enabled. Enter the location of your WSUS Server where required and then click Apply.<\/p>\n

The next setting to configure is\u00a0Configure Automatic Updates<\/strong>. \u00a0Set this to enabled and specify how the downloads should be installed and at what time. \u00a0Once configured click Apply.<\/p>\n

\"\"<\/p>\n

Next we have to configure the\u00a0Automatic Updates Detection Frequency<\/strong>\u00a0policy.<\/p>\n

\"\"<\/p>\n

Enable the policy and set to 1 hr. \u00a0Click Apply.<\/p>\n

Last thing we need to do on the GPO front is link it to the domain.<\/p>\n

The next time the computers on your domain restart their group policy settings will be updated and they will be pointed to the new WSUS server (screenshot of client computer shown below).<\/p>\n

\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

Good morning my fellow readers. Today I am going to show you how to set up\u00a0WSUS\u00a0on\u00a0Windows Server 2008 R2. \u00a0WSUS is fantastic for centralising management of Windows Updates throughout your network. \u00a0Installing a WSUS server makes deploying patches and security fixes much easier and so by default makes your life easier too!! For the purpose […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-1507","post","type-post","status-publish","format-standard","hentry","category-general-2008"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1507"}],"version-history":[{"count":3,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1507\/revisions"}],"predecessor-version":[{"id":2634,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1507\/revisions\/2634"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}