WSUS Automated Maintenance (WAM) © is a software solution that takes the maintenance required for WSUS and automates it. It was created by Adam J. Marshall and is licensed on a yearly subscription basis through AJ Tek.
There are a number of different areas that require maintenance for WSUS. Some of them are:
- Backing up the database.
- If using the Drivers category, removing the current listed drivers to clean up the bulk of the drivers that are old and not used. New drivers will sync normally.
- Declining multiple types of updates including superseded, beta, preview, expired and Itanium by default.
- Compressing update revisions.
- Cleaning up computer objects.
- Renaming OS descriptions to make it easier to identify systems.
- Cleaning up the synchronization logs with Microsoft.
- Removing declined updates from the database.
- Running the database maintenance routine.
Running the Server Cleanup Wizard (SCW)
WAM allows you to take back control of your WSUS instance (or SUP/DP instances in an SCCM environment) and frees up time for other priorities. If WSUS is not maintained properly, it will become slow, bloated, and cause errors that will take away valuable time from an IT Administrator to troubleshoot and resolve.
WSUS is a necessary tool for basic Windows patch management, and fortunately it is free. After having spent WAY TOO MUCH time managing WSUS trying to keep it healthy and reliable, I realized it’s “less free” than I thought – after all, time is money! What is your time worth?
Spend much time with the inevitable troubleshooting and repairing of WSUS, and you’ll soon discover mentioned in many forums a seemingly cure-all for WSUS’ woes, WSUS Automated Maintenance by AJ Tek. Though it once was free, it is now an extremely affordable subscription-based offering.
The install couldn’t have been easier, and it is very impressive the scope in which it keeps WSUS healthy. True to it’s name, it truly is an excellent Automated Maintenance solution for WSUS. Also impressive is the prompt reply to a question I had that I received from the author, which hints at the responsive support I can expect to receive as a new, paying, and very satisfied customer!
Thumbs UP ! Keep up the good work.
I have been using this software for over 3 years now, like many, many customers when it was free. It is simply the best possible maintenance software that exists and is a must for a every WSUS system. Totally worth the price. This software should be bundled with WSUS by default. No other WSUS script on the market even comes close to what this software can do and is still getting better, year after year.
Thumbs UP ! Keep up the good work.
Super Easy Installation
Guided installer for a simple installation experience. It also comes with an unattended installation procedure for easy deployment to multiple systems, or for server core installs.
Support is included for active subscriptions on the latest version of the software.
Simple Configuration Experience
The installer handles the configuration experience. You take the standard installation (blue USB), all defaults are selected. You take the advanced configuration (red USB), you stay in WSUS-land and we show you just how far the WSUS hole goes. Remember: all we’re offering are plentiful options.
Backup the WSUS Database
Backs up the WSUS database (WID or Local SQL Server). Remote SQL Servers should have an alternative method like an enterprise backup solution already so WAM will not back them up.
Indexes the WSUS Database
Add WSUS Index Optimization to the database to increase the speed of many database operations in WSUS by approximately 1000-1500 times faster.
Remove all existing drivers from the WSUS Database trimming down the number of updates in the database. If the Drivers classification is checked, new driver updates will sync and will be kept under control (Default; Optional).
Remove Obsolete Updates
This stream will use SQL code to execute Microsoft’s stored procedures that will return the update id of each obsolete update in the database and then remove it.
Compress Update Revisions
This stream will use SQL code to execute Microsoft’s stored procedures that will return the update id of each update revision that needs compressing and then compress it.
Remove Declined Updates
Remove declined updates from the WSUS Database.
Decline Multiple Types of Updates
Shrink your WSUSContent folder’s size by declining multiple types of updates. There are over 80 types of updates possible for declining for full customization. The default selected ones are superseded updates, expired updates, preview updates, Itanium updates, and Beta updates.
List of Update Types
- Microsoft Edge (Stable)
- Microsoft Edge (Beta)
- Microsoft Edge (Dev)
- Windows 7
Microsoft Office Types
Selectable Versions with individually selectable architecture [x86, x64, or Both]
- Office 2002/XP
- Office 2003
- Office 2003, Office 2007 (Some updates are released for both products)
- Office 2007
- Office 2010
- Office 2013
- Office 2016
- Office 2019
- Office 365 Client
Specific Language Types
- Arabic (Saudi Arabia) (ar-SA)
- Bulgarian (Bulgaria) (bg-BG)
- Czech (Czech Republic) (cs-CZ)
- Danish (Denmark) (da-DK)
- German (Germany) (de-DE)
- Greek (Greece) (el-GR)
- Spanish (Spain) (es-ES)
- Spanish (Mexico) (es-MX)
- Estonian (Estonia) (et-EE)
- Finnish (Finland) (fi-FI)
- French (Canada) (fr-CA)
- French (France) (fr-FR)
- Hebrew (Israel) (he-IL)
- Croatian (Croatia) (hr-HR)
- Hungarian (Hungary) (hu-HU)
- Italian (Italy) (it-IT)
- Japanese (Japan) (ja-JP)
- Korean (Korea) (ko-KR)
- Lithuanian (Lithuania) (lt-LT)
- Latvian (Latvia) (lv-LV)
- Norwegian (Bokmal) (Norway) (nb-NO)
- Dutch (Netherlands) (nl-NL)
- Polish (Poland) (pl-PL)
- Portuguese (Brazil) (pt-BR)
- Portuguese (Portugal) (pt-PT)
- Romanian (Romania) (ro-RO)
- Russian (Russia) (ru-RU)
- Slovak (Slovakia) (sk-SK)
- Slovenian (Slovenia) (sl-SI)
- Serbian (Latin, Serbia) (sr-latn-rs)
- Swedish (Sweden) (sv-SE)
- Thai (Thailand) (th-TH)
- Turkish (Turkey) (tr-TR)
- Ukrainian (Ukraine) (uk-UA)
- Chinese (Simplified) (zh-CN)
- Chinese (Hong Kong) (zh-HK)
- Chinese (Traditional) (zh-TW)
Rename OS Descriptions
This stream will rename the operating system descriptions of client systems in the WSUS MMC console. You can then use the GUI Console to sort by the OSDescription to easily gain valuable insights into what operating systems are installed in your organization.
- Windows 10 Home
- Windows 10 Pro
- Windows 10 Pro N
- Windows 10 Pro for Workstations
- Windows 10 Pro N for Workstations
- Windows 10 Enterprise
- Windows 10 Enterprise N
- Windows 10 Enterprise LTSB/LTSC
- Windows 10 Education
- Windows 10 Education N
- Windows 10 Pro Education
- Windows 10 Pro N Education
- Windows 11 Home
- Windows 11 Pro
- Windows 11 Pro N
- Windows 11 Pro for Workstations
- Windows 11 Pro N for Workstations
- Windows 11 Enterprise
- Windows 11 Enterprise N
- Windows 11 Enterprise LTSB/LTSC
- Windows 11 Education
- Windows 11 Education N
- Windows 11 Pro Education
- Windows 11 Pro N Education
- Windows Server 2008 R2 Standard
- Windows Server 2008 R2 Datacenter
- Windows Server 2012 Standard
- Windows Server 2012 Datacenter
- Windows Server 2012 R2 Standard
- Windows Server 2012 R2 Datacenter
- Windows Server 2016 Essentials
- Windows Server 2016 Standard
- Windows Server 2016 Datacenter
- Windows Server 2019 Essentials
- Windows Server 2019 Standard
- Windows Server 2019 Standard Evaluation
- Windows Server 2019 Datacenter
- Windows Server 2022 Standard
- Windows Server 2022 Standard Evaluation
- Windows Server 2022 Datacenter
- Microsoft Hyper-V Server 2016
- Microsoft Hyper-V Server 2019
Clean Synchronization Logs
Clean out all the synchronization logs that have built up over time (configurable, with the default keeping the last 14 days of logs).
Computer Object Cleanup
Computer Object Cleanup (configurable, with the default of deleting computer objects that have not synced within 30 days).
Prune IIS Logs
The Prune IIS Logs Stream will delete all log files (that is, files ending with .log) found in the logging folder for the WSUS IIS site. By default, the stream will remove log files older than 2 weeks. Files are checked not based on the date they were created, but when they were last modified.
Server Cleanup Wizard
Runs the built-in Server Cleanup Wizard (SCW) to actually carry out the removal of files on the file system.
Display Newly Added Products & Classifications
If you are interested in keeping track of what new products and/or classifications have been added to WSUS, we have included a stream that will include this information in the WAM report. The default will display new products and classifications that have been added to WSUS in the last 31 days.
Run the Recommended SQL database Maintenance script on the actual SQL database.
Save the Report
You can set it up to always save the report. Options for either TXT (default) or HTML.
Email the Report
You can set it up to always email the report. Options for either TXT or HTML (default). You can also have it as a PDF Attachment to the email. If the report fails, WAM will fall back to saving the report storing a TXT log file. The TXT log that it creates will be prepended with the notification that the email failed to send and will give the full error message for troubleshooting.
WAM Utilities & The WAM Shell
To aid administrators we have developed a few utilities for adjusting certain WSUS settings, which are especially convenient for WSUS installs on servers that lack a graphical user interface. We have redesigned the WAM Shell to expose the utility Cmdlets that we have written to adjust your WSUS environment.
If you’re running into performance issues with your WSUS server, your first step should be to investigate the WSUS database to see if it’s the cause of the errors. If you’re lax with maintenance, the database could be filled with unneeded and unnecessary updates, which can significantly slow down performance.
Removing unnecessary updates will free up a significant amount of space on servers. While WSUS knows when older updates become obsolete and are no longer needed, they remain on the server—taking up space—until *you* remove them.
You can manually remove unnecessary updates by running the Server Cleanup Wizard (SCW) and selecting …
A basic WSUS deployment is composed of a single server within a corporate firewall which connects directly to Microsoft Update. In this simple configuration, updates are downloaded directly to the server. If your configuration includes multiple servers, you’ll have a hierarchy that will include an upstream server and downstream or …
Many IT administrators are lax with WSUS maintenance. While Microsoft recommends monthly maintenance, and outlines the steps required in 17 pages of detailed instructions, the truth is, many IT specialists just don’t have the time.
Instead of proactively maintaining their server environments, many people put off the task until something goes …
If you do not need—or do not want to deploy—certain updates to your network ever, you need to manually select and decline updates. Declining updates for the sake of managing what you see in the update views is NOT the way to manage WSUS. You should scope your views instead …
If you Google WSUS Permissions, you may end up getting a boatload of links to support help on TechNet, Spiceworks, ExpertsExchange, Microsoft Docs, or other blogs around the Internet. Most of the links are only for specific parts – maybe the WsusContent folder, maybe something to do with 1 particular …