windows Server Update Services (WSUS)

I. What is WSUS Used For?

Windows Server Update Services (WSUS) is a Microsoft freeware tool that enables IT administrators
to centrally manage the distribution and installation of security updates, bug fixes, and other
updates for Microsoft products across an organization's network.

▪ Benefits of Using WSUS:

Centralized Management:

• Streamlined updates: Deploy updates to all your Windows devices from a single server,
saving time and effort compared to manual updates.
• Simplified control: Approve, stage, and deploy updates to different groups of devices based
on your needs.
• Reduced complexity: Manage updates for all your Windows devices, including desktops,
laptops, and servers, from one central location.

Security and Control:

• Testing before deployment: Test updates on a small group before deploying them to your
entire network, minimizing the risk of disruption.
• Phased rollouts: Roll out updates gradually to different groups, allowing you to identify and
address any issues before they impact your entire network.
• Improved security: Ensure your devices are always up-to-date with the latest security
patches, reducing the risk of vulnerabilities.

Cost and Efficiency:

• Free to use: WSUS is a free tool included with Windows Server, making it an attractive
option for organizations of all sizes.
• Reduced bandwidth usage: By caching updates locally, you can reduce the amount of
bandwidth used by your devices to download updates.
• Improved productivity: Free up IT staff time by automating update management tasks.
2 Steps to install WSUS:

1) Open Server Manager: Click on the Start menu and search for "Server Manager". Open the
application.

2) Add Roles and Features: In Server Manager, click on "Manage" and then "Add Roles and
Features".
3) Select Server roles: In the "Select server roles" step, choose "Windows Server Update
Services" and click "Next".

4) Select features: On the "Select features" page, keep the default options and click "Next".

5) Configure WSUS features: Here, you can choose options like the update source (e.g.,
Microsoft Update) and content directory location. Click "Next" after configuration.

6) Review and install: Review the selected options and click "Install". The installation process
might take some time.
 7) Post-installation configuration: After installation, the WSUS Configuration Wizard will open.
Follow the wizard steps to configure settings like language, upstream server connection, and
product selection.

Connecting Client Machines to WSUS Server

1) On the client:

Click "Advanced options" -> "Choose how updates are installed."

o Under "Important updates," select "Download and install updates automatically (recommended)."

o Under "Recommended updates," choose the desired setting (download and notify, automatic
download, or disable).

o Click "Choose an update server" and enter the WSUS server's hostname or IP address.

o Optionally, configure authentication if using client-side targeting.

2) Verify Client Connection:

o On the client, run "wuauclt /detectnow" in a command prompt (Start -> cmd).

o This will initiate a manual update check. If successful, the client will connect to the WSUS server for
updates