Category: WSUS

These posts revolve around Windows Server Update Services (WSUS); its setup, its maintenance, guides, and best practices.

15

Nov2018
Microsoft's official system requirements are a good starting point, however, they don't give you the full picture. Let's look at this one by one. Processor: 1.4 gigahertz (GHz) x64 processor (2 Ghz or faster is recommended) So, 1.4-2.0 GHz is already in play by pretty much every single processor out there for ... Read More
November 15, 2018Adam J. Marshall

22

Oct2018

Externally Facing WSUS Servers

0    
Take the following questions into consideration: How can we solve the problem with controlling updates and reporting both internally and externally using WSUS? How do we make sure that all of our client systems receive updates whether they are inside or outside the office using only WSUS and not SCCM ... Read More
October 22, 2018Adam J. Marshall

23

Sep2018

How to Migrate or Upgrade WSUS

0    
There are 3 different types of ways to upgrade WSUS. Install the new Server OS, install the WSUS role synchronizing with Microsoft Update, creating your groups, adjusting your settings, and then changing your GPOs over to the new server. An In-place upgrade of the server OS, where you just upgrade ... Read More
September 23, 2018Adam J. Marshall

21

Sep2018
Oops! Doh! Huh? %#@*!!! These are all the words you think of in your head when you're investigating what is happening with your WSUS server and realize that WSUS just ate all of your disk space and there is 0 bytes free. What do you do next? If WSUS was downloading content ... Read More
September 21, 2018Adam J. Marshall

19

Jun2018
The steps to remove WSUS and reinstall WSUS are pretty standard but they do have some variances on how WSUS was installed in the first place. To remove WSUS completely, you need to: Remove WSUS Role Remove the Database WSUS was using (SUSDB.mdf and SUSDB_log.ldf). If you were using the Windows ... Read More
June 19, 2018Adam J. Marshall

01

Jun2018
WSUS Server Maintenance It should come to you as no surprise that the WSUS server itself requires maintenance. It has a SQL database (by default using the Windows Internal Database - WID), it manages files on the file system for its updates, it has updates that are released and then sometimes ... Read More
June 1, 2018Adam J. Marshall

01

Jun2018
I can go on explaining why you should switch over your WSUS Server to SSL so that you can mitigate Man-In-The-Middle (MITM) attacks, but sometimes it's better to show you. The following video is worth the watch as they explain exactly how relatively easy it is to take over a network ... Read More
June 1, 2018Adam J. Marshall

01

Jun2018
Selecting Your Test Systems Selecting your test systems is a question of what you have in your environment at your disposal. If you have a true test environment, those would be where you'd want to test the updates. If you don't have a test environment like most small to medium sized ... Read More
June 1, 2018Adam J. Marshall

01

Jun2018
Now, depending on how you have your network, you may want to apply the other GPOs to OUs or create Security Groups and make computers members of them instead. Either way works, or a combination of both. I will explain a combination of both. Location GPOs Link the "WSUS - Location" GPO ... Read More
June 1, 2018Adam J. Marshall

01

Jun2018
Create a base GPO - "WSUS - Location" Create a GPO named "WSUS - Location" to JUST point to the FQDN of the WSUS Server on port 8530/8531 (or 80/443 for Server 2008) for all 3 locations (intranet update service, intranet statistics server, and the alternate download server). Under: Computer Configuration > ... Read More
June 1, 2018Adam J. Marshall