Windows Server 2016: WSUS (Windows Server Update Service)

Windows Server 2016: WSUS (Windows Server Update Service)

Schema:

WSUS server (IP Address): 192.168.0.39

// -------------------

// Install WSUS

Step 1: Server Manager > Add Roles and Features > Windows Server Update Services > (x) Store updates in the following location (choose a valid path ....) - C:\Update (as an example - recommended to choose a new hdd/drive as the updates can be very big) > (x) Restart the destination server automatically if required > Install > Launch Post-Installation tasks .


// -------------------

// Synchronize WSUS with Microsoft Update

Step 2:  Server Manager > WSUS > (Right-Click) Server Name (choose your selected server) > Windows Server Update Services > (x) Synchronize from Microsoft Update > if your server require a proxy service to access the Internet, fill in the details else > Start Connecting > specify the product in which you want updates (i.e. never choose all as the updates will be huge & slow ! ) > specify the Classifications (i.e. try not to choose all Classifications) > Synchronize manually or automatically (at a certain time) > (x) Begin initial synchronization > Finish.

Step 3: After Step 2 is completed, Update Service will automatically pop-up, you can choose any of the settings/options to modify etc > Computers > Update > Approve > Approved for install (e.g. for All Computers > Unassigned / Client Side or Updates > All Updates / Critical Updates / Security Updates / WSUS Updates ).

// -------------------

// Configuring the Workstation to get Updates from WSUS instead

Step 4:  (Windows 10) run: gpedit.msc > Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Updates > Configure Automatic Updates :- State Enabled > Specify Intranet Microsoft update service location: State Enabled >  Set the intranet update service for detecting updates:- http://192.168.0.39:8530 > Set the intranet statistics server:- http://192.168.0.39:8530 > Do not connect to any Windows Update internet locations:- State Enabled > Restart PC / Logout / cmd.exe (input:- gpupdate ).

// The workstation will check for updates from WSUS

Step 5:  (Windows 10) (Start Menu -) Settings > Update & Security > Check for updates .

// -------------------


Comments