banner



How To Install Wsus Console On Windows 7

You can utilise the Windows Server Update Services (WSUS) update server to deploy Microsoft production updates (Windows, Office, SQL Server, Exchange, etc.) to computers and servers in the company's local network. In this article, nosotros'll walk you through how to install and configure the WSUS update server on Windows Server 2022/2019/2016, or 2012 R2.

Contents:

  • How to Install WSUS Role on Windows Server 2016/2016/2012R2?
  • Initial WSUS Configuration on Windows Server
  • How to Install WSUS Management Console on Windows 10 and 11?
  • Optimizing WSUS Performance

How does WSUS work?

The WSUS server is implemented as a separate Windows Server role. In general terms, the WSUS service tin be described as follows:

  • After installation, the WSUS server is scheduled to synchronize with Microsoft Update servers on the Internet and download new updates for selected products;
  • The WSUS administrator selects which updates to install on visitor workstations and servers and approves their installation;
  • WSUS clients (computers) on the local network download and install updates from your update server according to configured update policies.

How to Install WSUS Function on Windows Server 2016/2016/2012R2?

Starting with Windows Server 2008, WSUS is a split office that can be installed through the Server Management console or using PowerShell.

If you are deploying a new WSUS server, nosotros recommend that you lot install information technology on the latest release of Windows Server 2022 (installation on Windows Server Core is possible).

To install WSUS, open the Server Manager console and check the Windows Server Update Services office (the organisation volition automatically select and offering to install the necessary IIS web server components).

install wsus role on windows 2012 server

In the next window, choose which WSUS role services you want to install. Be sure to cheque the WSUS Services option. The side by side two options depend on which SQL database you lot programme to utilise for WSUS.

Server settings, update metadata, and WSUS client information are stored in a SQL Server database. Every bit a WSUS database you tin use:

  • Windows Internal Database (WID) – congenital-in Windows database (WID Connectivity option). This is the recommended and workable option even for large infrastructures;
  • A divide Microsoft SQL Server database is deployed on a local or remote server. You can utilize MS SQL Enterprise, Standard (licensing required), or the free Express edition. This is the SQL Server Connectivity option.

The Windows Internal Database) is recommended if:

  • You don't have unused MS SQL Server licenses;
  • You are non planning to employ WSUS load balancing (NLB WSUS)
  • When deploying a downstream (child) WSUS server (for example, in branch offices). In this instance, information technology is recommended to apply the congenital-in WSUS database on secondary servers.

In the free SQL Server Limited Edition, the maximum database size is limited to x GB. The Windows Internal Database is limited to 524 GB. For instance, in my infrastructure, the size of the WSUS database for 3000 clients was about 7GB.

If yous install the WSUS part and the MS SQL database on different servers, there are some limitations:

  • SQL Server with WSUS database cannot be an Active Directory domain controller;
  • The WSUS server cannot be deployed on a host with the Remote Desktop Services role.

The default WID database is called SUSDB.mdf and is stored in the folder %windir%\wid\information. This database supports but Windows authentication (not SQL). The internal (WID) database instance for WSUS is called server_name\Microsoft##WID.

The WSUS WID database can be administered through SQL Server Management Studio (SSMS) if you specify the following connection string: \\.\pipe\MICROSOFT##WID\tsql\query.

If you do not have enough disk space to store update files, disable this selection. In this case, WSUS clients will receive approved update files from the Net (a viable selection for small networks).

wsus role services in windows server manager

If you desire to store update files locally on the WSUS server, enable the pick Store updates in the post-obit locations and specify the directory path. This tin be a folder on a local disk (a separate physical or logical volume is recommended), or a network location (UNC path). Updates are downloaded to the specified directory only afterwards they accept been canonical by the WSUS administrator.

The size of the WSUS database is highly dependent on the number of Microsoft products and the Windows versions you lot program to update. In a large arrangement, the size of update files on a WSUS server tin can reach hundreds of GB.

If y'all practice not accept enough disk infinite to store update files, disable this option. In this example, WSUS clients will receive canonical update files from the Internet (a viable option for pocket-sized networks).

folder for windows updates store

You can besides install a WSUS server with an internal database (WID) using the following PowerShell command:

Install-WindowsFeature -Name UpdateServices, UpdateServices-WidDB, UpdateServices-Services, UpdateServices-RSAT, UpdateServices-API, UpdateServices-UI -IncludeManagementTools

Initial WSUS Configuration on Windows Server

After you lot finish installing the WSUS role, y'all need to complete its initial configuration. Open Server Manager and select Mail service-Deployment Configuration -> Launch Post-Installation tasks.

wsus post install tasks

You lot can utilize the WsusUtil.exe panel tool to manage WSUS from the command prompt. For instance, to change the path to the WSUS update files directory, run:

CD "C:\Program Files\Update Services\Tools"
WsusUtil.exe PostInstall CONTENT_DIR=D:\WSUS

Or, for example, you lot can switch your WSUS to an external SQL Server database:

wsusutil.exe postinstall SQL_INSTANCE_NAME="MUN-SQL1\WSUSDB" CONTENT_DIR=D:\WSUS_Content

So open the Windows Server Update Services console. The WSUS Update Server Initial Configuration Sorcerer starts.

Specify whether the WSUS server volition download updates from the Microsoft Update site directly (Synchronize from Microsoft Update) or if it should receive them from an upstream WSUS server (Synchronize from another Windows Update Services server). Downstream WSUS servers are usually deployed at remote sites with a big number of clients (300+) to reduce the load on the WAN link.

On Windows 10 and 11, you lot can employ Delivery Optimization to reduce the bandwidth usage of update traffic on your communication channels.

wsus upstream server

If your access the Net through a proxy server, y'all need to specify the accost and port of the proxy server, too as authentication credentials.

proxy server settings for upstream connection

Next, check the connexion to the upstream update server (or Windows Update). Click Start Connecting.

Start Connecting upstream wsus server

Then you lot need to select the product languages for which WSUS will download updates. We select English (the list of the languages can farther be changed from the WSUS console).

select wsus languages

Then specify the list of products for which the WSUS should download updates. Select just those Microsoft products that are used in your surroundings. For example, if you lot are sure that there are no Windows 7 or Windows 8 computers left on your network, don't select these options. This volition significantly relieve space on the WSUS server bulldoze.

Exist sure to include the following general sections in the WSUS classification:

  • Developer Tools, Runtimes, and Redistributable — used to update Visual C++ Runtime libraries;
  • Windows Dictionary Updates in the Windows category;
  • Windows Server Managing director – Windows Server Update Services (WSUS) Dynamic Installer.

Specify products which you want update

On the Classification Page, you demand to specify the types of updates to be deployed via WSUS. Information technology is recommended to select: Critical Updates, Definition Updates, Security Packs, Service Packs, Update Rollups, and Updates.

wsus update classifications

The Windows 10 build upgrades (21H2, 20H2, 1909, etc.) in the WSUS panel are included in the Upgrades class.

Configure your update synchronization schedule. It is recommended to employ the automated daily synchronization of the WSUS server with Microsoft Update servers. The WSUS synchronization should be performed at night, in guild not to impact the Internet aqueduct during business hours.

wsus synchronization schedule

The initial synchronization of the WSUS server with the upstream update server may have upwardly to several days, depending on the number of products you chose earlier and your ISP.

Later the wizard is done, the WSUS panel will beginning.

Update Service console

At that place are several sections in the WSUS panel tree:

  • Updates – available updates on the WSUS server (here you can manage the update approvals and assign them for installation);
  • Computers – here you can manage WSUS client groups (computers, servers, exam, and production groups, etc.);
  • Downstream Servers – allows you lot to configure whether you receive from Windows Update or an upstream WSUS server;
  • Synchronizations – update synchronization schedule;
  • Reports –dissimilar WSUS reports;
  • Options –WSUS configuration settings.

Clients can now receive updates by connecting to the WSUS server on port 8530 (in Windows Server 2003 and 2008, port 80 is used by default). Check that this port is open on the WSUShost:

Exam-NetConnection -ComputerName yourwsushost1 -Port 8530

You lot can use a secure SSL connexion on port 8531. To do this, you need to demark a certificate to the WSUS Administration website in IIS.

If the port is closed, create an allow rule in Windows Defender Firewall.

How to Install WSUS Management Console on Windows 10 and 11?

You use the Windows Server Update Services panel (wsus.msc) to manage WSUS. You can manage WSUS hosts either using the local panel or over the network from a remote calculator.

The WSUS Administration Console for Windows 10 or 11 is installed from the Remote Server Administration Tools (RSAT). To install the Rsat.WSUS.Tool component, run the following PowerShell command:

Add-WindowsCapability -Online -Name Rsat.WSUS.Tools~~~~0.0.1.0

If you want to install the WSUS panel on Windows Server, utilise the command:

Install-WindowsFeature -Name UpdateServices-Ui

wsus management console

When you install WSUS on Windows Server, two additional local groups are created. Y'all can use them to grant users admission to the WSUS direction console.

  • WSUS Administrators
  • WSUS Reporters

To view reports virtually updates and clients on WSUS, you must install:

  • Microsoft System CLR Types for SQL Server 2012 (SQLSysClrTypes.msi);
  • Microsoft Study Viewer 2012 Runtime (ReportViewer.msi).

To view different update reports in the WSUS console, you must install the optional Microsoft Written report Viewer 2008 SP1 Redistributable (or higher) components on your server.

If these components are non installed, then when generating whatever WSUS report, an error will announced:

The Microsoft Study Viewer 2012 Redistributable is required for this feature. Please close the console before installing this bundle.

install ms wsus report viewer

Optimizing WSUS Performance

This section describes a few tips for optimizing the performance of the WSUS Update Server in a real-earth environment.

  • For WSUS to work properly, the update host must have at least four GB of RAM and 2CPU free;
  • With a large number of WSUS clients (more than 1500), you may experience significant functioning degradation of the IIS WsusPoll pool that distributes updates to clients. Error 0x80244022 may announced on clients, or when starting the WSUS console, information technology may crash with an error Error: Unexpected Fault + Upshot ID 7053 in the Upshot Viewer (The WSUS administration console has encountered an unexpected mistake. This may be a transient error; effort restarting the administration console. If this error persists). wsus console unexpected errorTo resolve this upshot, you demand to add together more RAM to your WSUS host and optimize your IIS pool settings as recommended in the commodity. Utilize these PowerShell commands:
    Import-Module WebAdministration
    Set-ItemProperty -Path IIS:\AppPools\WsusPool -Proper name queueLength -Value 2500
    Set-ItemProperty -Path IIS:\AppPools\WsusPool -Name cpu.resetInterval -Value "00.00:fifteen:00"
    Fix-ItemProperty -Path IIS:\AppPools\WsusPool -Name recycling.periodicRestart.privateMemory -Value 0
    Set-ItemProperty -Path IIS:\AppPools\WsusPool -Name failure.loadBalancerCapabilities -Value "TcpLevel"
  • Enable automatic blessing for Microsoft antivirus signature/definition updates. Otherwise, WSUS tin slow down significantly and swallow all available RAM.

Antivirus checks can negatively affect WSUS performance. In the built-in Microsoft Defender Antivirus in Windows Server, it is recommended to exclude the following folders from the Real-fourth dimension protection scope:

  • \WSUS\WSUSContent;
  • %windir%\wid\information;
  • \SoftwareDistribution\Download.

Stay tuned!

Source: http://woshub.com/installing-configuring-wsus-on-windows-server-2012/

Posted by: thomasreackagots.blogspot.com

0 Response to "How To Install Wsus Console On Windows 7"

Post a Comment

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel