Oops! Doh! Huh? %#@*!!! These are all the words you think of in your head when you're investigating what is happening with your WSUS server and realize that WSUS just ate all of your disk space and there is 0 bytes free. What do you do next? If WSUS was downloading content ... Read More

The steps to remove WSUS and reinstall WSUS are pretty standard but they do have some variances on how WSUS was installed in the first place. To remove WSUS completely, you need to: Remove WSUS Role Remove the Database WSUS was using (SUSDB.mdf and SUSDB_log.ldf). If you were using the Windows ... Read More

WSUS Server Maintenance It should come to you as no surprise that the WSUS server itself requires maintenance. It has a SQL database (by default using the Windows Internal Database - WID), it manages files on the file system for its updates, it has updates that are released and then sometimes ... Read More

I can go on explaining why you should switch over your WSUS Server to SSL so that you can mitigate Man-In-The-Middle (MITM) attacks, but sometimes it's better to show you. The following video is worth the watch as they explain exactly how relatively easy it is to take over a network ... Read More

Selecting Your Test Systems Selecting your test systems is a question of what you have in your environment at your disposal. If you have a true test environment, those would be where you'd want to test the updates. If you don't have a test environment like most small to medium sized ... Read More

Now, depending on how you have your network, you may want to apply the other GPOs to OUs or create Security Groups and make computers members of them instead. Either way works, or a combination of both. I will explain a combination of both. Location GPOs Link the "WSUS - Location" GPO ... Read More

Create a base GPO - "WSUS - Location" Create a GPO named "WSUS - Location" to JUST point to the FQDN of the WSUS Server on port 8530/8531 (or 80/443 for Server 2008) for all 3 locations (intranet update service, intranet statistics server, and the alternate download server). Under: Computer Configuration > ... Read More

Upgrades from WSUS If you are going to handle upgrades from Windows 10 to Windows 10 latest streams in WSUS (eg, 1511 to 1607 or 1703 or 1709 or 1803) also known as Windows as a Service (WaaS), there are 3 things you need to do on Server 2012 or Server ... Read More

Create Computer Groups Expand Computers and then expand All Computers and you will see "Unassigned Computers" as the only computer container in there. We're going to create 4 new ones. Right click on All Computers and choose "Add Computer Group...". Create the 4 below. Servers Workstations Test - Servers Test - Workstations Now let's turn on ... Read More