How to install and configure Windows Server Update Services (WSUS)

Windows Server Update Services (WSUS) are a “must have” feature in business environments. WSUS dramatically improve network bandwidth effiency and allow a granular control of the updates.

Setting up WSUS is not difficult but involves several steps, especially if you are configuring the services for an existing Active Directory Domain.

We have three major steps to complete.

Install Windows Server Update Services

Launch the Server Manager and click Add Roles and Features. Select the Windows Server Update Services role. Default configuration is fine:

How to install and configure Windows Server Update Services (WSUS)

You just have to configure the server folder where the Windows updates will be stored:

How to install and configure Windows Server Update Services (WSUS)

The system will need some minutes to perform a configuration task after the installation. Then a WSUS tab will appear in your Server Manager.

WSUS configuration

Open the Windows Server Update Services configurator from the WSUS tab, like in the screenshot below:

How to install and configure Windows Server Update Services (WSUS)

Go to the Options tab and launch the Wizard:

How to install and configure Windows Server Update Services (WSUS)

Click Next:

How to install and configure Windows Server Update Services (WSUS)

Click Next:

How to install and configure Windows Server Update Services (WSUS)

Synchronize from Microsfot Update if it’s your first WSUS server:

How to install and configure Windows Server Update Services (WSUS)

Configure the proxy settings, if you have one:

How to install and configure Windows Server Update Services (WSUS)

Click Start and wait some minutes:

How to install and configure Windows Server Update Services (WSUS)

How to install and configure Windows Server Update Services (WSUS)

Select only the necessary languages, it will save disk space and time:

How to install and configure Windows Server Update Services (WSUS)

Select the products you need to maintain up-to-date:

How to install and configure Windows Server Update Services (WSUS)

Default settings are fine:

How to install and configure Windows Server Update Services (WSUS)

Schedule the synchronization:

How to install and configure Windows Server Update Services (WSUS)

The WSUS configuration is finished:

How to install and configure Windows Server Update Services (WSUS)

Link the Computers via Group Policy

If you are installing WSUS in an existing Active Directory Domain, the better solution is to configure the client PCs to take advantage of the WSUS via Group Policy.

To do so, open the WSUS Options and click Computers:

How to install and configure Windows Server Update Services (WSUS)

Use Group Policy:

How to install and configure Windows Server Update Services (WSUS)

From the WSUS panel create a new group of Computers (we used the same name of the AD Group):

How to install and configure Windows Server Update Services (WSUS)

Open the Group Policy Editor and create a new Policy:

How to install and configure Windows Server Update Services (WSUS)

How to install and configure Windows Server Update Services (WSUS)

How to install and configure Windows Server Update Services (WSUS)

From the Group Policy Management Editor access the path Computer Configuration/Administrative Templates/Windows Components/Windows Update, then click Configure Automatic Updates:

How to install and configure Windows Server Update Services (WSUS)

Enable Automatic Updates:

How to install and configure Windows Server Update Services (WSUS)

Then open the Specify intranet Microsoft update service location policy:

How to install and configure Windows Server Update Services (WSUS)

Specify the server address and add the 8530 port:

How to install and configure Windows Server Update Services (WSUS)

Then Enable client-side targeting:

How to install and configure Windows Server Update Services (WSUS)

Specify the Group:

How to install and configure Windows Server Update Services (WSUS)

Finalize and enforce the Policy. The members of the Group (Computers inside WSUS_tutorial) will receive the Windows updates from WSUS. You will be able to select which updates to dispatch from the WSUS panel, on the server.

Comments