Windows Server Update Service or WSUS in a nutshell is a local cache / copy of the Windows Update Service that is in the internet. Instead of all of your machines connecting to the internet, they connect to a local WebServer (IIS) where the Update server is installed. Your WSUS server downloads the updates from Microsoft Updates then publishes it to the client machines. Because its located locally and it is built around GPO, you have full control over your PC updates, plus it saves you bandwidth.
And Oh its free! So now join me in my 4 part implementation of WSUS :D. and, if you are reading this and found something wrong, feel free to correct me, pretty please 😀
Part 1: Measure twice cut once (PLAN)
WSUS is all about planning and more planning, so before installing WSUS lets know first what we need and what to do with it.
What we need is a machine running either Windows Server 2003 or 2008.
1. With an isolated but local storage of downloaded updates with 30 GB of free space
2. We need a SQL Server express or a full install instance where the WSUS can save its configurations.
3. IIS 6.0 or above on Server 2003 or 2008. WSUS uses IIS to publish its updates in the client. These clients will connect to a website installed in this IIS rather than connecting directly to the internet or another WSUS server. Note the URL, we will really need it later.
4. We still need a good internet connection, because we are going to do a single server install of WSUS, the WSUS server will connect directly to the internet to Microsoft Updates and download updates.
5. Let us now decide on the schedule when the Sync and download of updates will going to be done. Let us now decide this because I plan to do these updates automatically.
6. We may need to publish a GPO to configure the clients where to connect. Its also possible to configure each client but its very tiring, you want to do it manually I hear? I have an Active Directory, so thank goodness for GPO!
I suggest that you go over these documents before doing anything and if you found that I’m doing something wrong, please do drop me an email at email@example.com