Appendix E: Configuring Windows Server Update Services

WSUS can automatically distribute updates to new or existing computers. To configure WSUS, complete these high-level steps:

  1. Create a WSUS architecture.

    For information about doing so, read “Design the WSUS Deployment” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  2. Install the primary WSUS server, and then harden it to reduce security risks.

    For information about doing so, read “Install the WSUS Server” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  3. Configure the primary WSUS server, and deploy any secondary WSUS servers.

    For information about doing so, read “Configure the WSUS Server” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  4. Perform further hardening on the WSUS servers.

    For information about doing so, read “Secure Your WSUS Deployment” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  5. Configure existing client computers to retrieve approved updates from the WSUS server.

    For information about doing so, read “Update and Configure the Automatic Updates Client Component” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  6. Configure a secondary WSUS server for the deployment network.

    For information about doing so, read “Set Up a Disconnected Network (Import and Export Updates)” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

If the organization has an existing SUS implementation, read Step-by-Step Guide to Migrating from Software Update Services to Windows Server Update Services at https://www.microsoft.com/downloads/details.aspx?FamilyId=150E795E-AE32-4D47-A6B8-E01F918AAE93&displaylang=en and “Migrate from a SUS Server to a WSUS Server” in Deploying Microsoft Windows Server Update Services at https://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

Download

Get the Microsoft Solution Accelerator for Business Desktop Deployment 2007

Update Notifications

Sign up to learn about updates and new releases

Feedback

Send us your comments or suggestions