<

[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x

8 Tips to a better WSUS

Published on
11,923 Points
5,723 Views
2 Endorsements
Last Modified:
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.  

However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have not installed. Here is a quick checklist for you to prepare to make your updates go smooth and seamless.  

First, have updates set on the WSUS server to download automatically.  What this provides is a minimal amount of administration.  

Second, set a group policy for computers on a domain to install and restart in off peak hours daily.  

Third, disable the group policy setting “shutdown and install updates” on the shutdown menu, and do not set it to as the default options.  You will have a ton of helpdesk calls if you do not do this especially if your users are used to have their PCs on when they come in to work.

Fourth, build a test group and move your computer into that group.  Build an automatic approval rule for updates for test group, and verify you have no issues for a week before you approve for the rest of the company.  

Fifth, I would set the poll rate for minimum of three hours.  

Sixth, stay on top of the updates.  Do not go more than a month without checking them.

Seventh, do not set servers to automatically install the updates, just have them download the updates.  Then manually install them during your maintenance cycle.  This should get you moving in the right direction.  

Eighth, Some great unknown tips about WSUS, to have updates install immediately set a custom deadline in the past (that is next time you have the client computers to contact WSUS.)   Beware if you do this to a large network, users will complain that their systems are running slow.  

Materials referenced for this article are listed below.

TechNet - Best practice for WSUS - http://technet.microsoft.com/en-us/library/cc708536(WS.10).aspx 
TechNet - Client Behavior with Update Deadlines - http://technet.microsoft.com/en-us/library/cc708585(WS.10).aspx 
TechNet - Approving updates - http://technet.microsoft.com/en-us/library/cc708458(WS.10).aspx
2
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 5

Author Comment

by:Michael Christly
Sorry about that Mark,  I will pay more attention next time.  Thank you for the feedback.
0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Join & Write a Comment

Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Other articles by this author
Suggested Courses

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month