Windows Server Update Services Overview
Published: February 29, 2012
Updated: July 20, 2012
Applies To: Windows Server 2012
Tip |
|---|
| Windows Server Update Services is enhanced in Windows Server 2012. Explore the Evaluation Guide and download the Windows Server 2012 Trial. |
Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates. By using WSUS, administrators can fully manage the distribution of updates that are released through Microsoft Update to computers in their network. In Windows Server 2012, this feature is integrated with the operating system as a server role. This topic provides an overview of this server role and more information about how to deploy and maintain WSUS.
Did you mean…
The WSUS server provides the features that administrators need to manage and distribute updates through a management console. In addition, a WSUS server can be the update source for other WSUS servers within the organization. The WSUS server that acts as an update source is called an upstream server. In a WSUS implementation, at least one WSUS server in the network must connect to Microsoft Update to get available update information. The administrator can determine, based on network security and configuration, how many other servers connect directly to Microsoft Update.
Update management is the process of controlling the deployment and maintenance of interim software releases into production environments. It helps you maintain operational efficiency, overcome security vulnerabilities, and maintain the stability of your production environment. If your organization cannot determine and maintain a known level of trust within its operating systems and application software, it might have a number of security vulnerabilities that, if exploited, could lead to a loss of revenue and intellectual property. Minimizing this threat requires you to have properly configured systems, use the latest software, and install the recommended software updates.
The core scenarios where WSUS adds value to your business are:
-
Centralized update management
-
Update management automation
In Windows Server 2012 the Windows Server Update Services is a built-in server role that includes the following enhancements:
-
Can be added and removed by using the Server Manager
-
Includes Windows PowerShell cmdlets to manage the ten most important administrative tasks in WSUS
-
Adds SHA256 hash capability for additional security
-
Provides client and server separation: Versions of the Windows Update Agent (WUA) can ship independently of WSUS
| Feature and functionality | Windows Server 2008 R2 | Windows Server 2012 |
|---|---|---|
|
Inclusion of Windows PowerShell cmdlets to manage the ten most important administrative tasks in WSUS |
X |
|
|
Security enhancements with SHA256 hash capability |
|
X |
|
Client and server separation: Versions of the Windows Update Agent (WUA) can ship independently of WSUS |
|
X |
For system administrators to automate their operations, they need coverage through command-line automation. The main goal is to facilitate WSUS administration by allowing system administrators to automate their day-to-day operations.
What value does this change add?
By exposing core WSUS operations through Windows PowerShell, system administrators can increase productivity, reduce the learning curve for new tools, and reduce errors due to failed expectations resulting from a lack of consistency across similar operations.
What works differently?
In earlier versions of the Windows Server operating system, there were no Windows PowerShell cmdlets, and update management automation was challenging. The Windows PowerShell cmdlets for WSUS operations add flexibility and agility for the system administrator.
In this release of WSUS, the API is updated to the .NET Framework 4.5.
The minimum hardware configuration for WSUS is:
-
Processor: 1.4 gigahertz (GHz) x64 processor (2 Ghz or faster is recommended)
-
Memory: 2 gigabytes (GB) of RAM or greater
-
Available disk space: 10 GB (40 GB or greater is recommended)
-
Network adapter: 100 megabits per second (Mbps) or greater
The following table lists references for more information about WSUS:
| Content type | References |
|---|---|
|
Product evaluation |
|
|
Planning and Deployment |
|
|
Migration |
Migrate Windows Server Update Services to Windows Server 2012 |
|
Community resources |

Tip