SUS server

Posted on 2006-04-13
Last Modified: 2010-04-18
I have a server that we have setup as a SUS server. How do we change where the server goes to look up windows updates is this a registry change? Thank you
Question by:zenworksb
    LVL 23

    Accepted Solution

    If you are referring to WSUS, that is done through Group policy:

    That guide ^^ will walk you through the settings and configuration.

    Let us know if you have questions about this, but that's pretty much it.  You just point the clients via group policy to your internal WSUS server.
    LVL 51

    Expert Comment

    Can you clarify what you are looking for?

    Do you mean where WSUS goes for the updates to provide the client or where the actual server will update itself from?

    If it's the latter, then the server acts exactly as the client does.  It can be set onthe Default Domain Controller Policy in the same location as the client policies.


    Author Comment

    we do not haver active directory. what can we do on teh clients to point to our server internally
    LVL 8

    Expert Comment

    You need to go into the registry and change the location for automatic updates on the client computers.

    I beleve you can also do this via the local computer policy on each computer
    LVL 21

    Expert Comment

    You can set the same policies you would in a GPO.  The only difference is you will have to go to each computer to set these up.

    Start Run, gpedit.msc

    If you clients are NOT XP SP1 or better you will have to import the template.  If client is SP1 or better than skip to the next step.
       1. Download from
       2. RC Admin Templates under Computer Config and add wuau.adm to the list...if it's already there just skip

    Setting it up.
       1. On each workstation configure the settings under Computer Config | Admin Templates | Windows Componets | Windows Update

    the service location is the specific one you are asking about.  Just enter the FQN of the WSUS server (e.g. MyServer.domain.local)

    I'm not 100% sure but you may have to setup DNS on your network so you can give this server a FQN since you have no domain.  Install DNS on your WSUS server and create a Forward Lookup zone called CompanyName.local.  Add an "A" or host record to the zone with the WSUS server netbios name and IP.  Setup forwarders on this server to your external DNS to resolve real world names.  Also make sure there is no "." zone...if there is just delete it.

    Go to System Properties on your WSUS server and click the Computer Name tab, Click Change, Click More, Change the primary suffix to "CompanyName.local"

    Set all your clients to look at this server as their primary DNS server.  You can enter an external DNS as a secondary.

    My final suggestion would be to skip everything I listed above and just go to your WSUS server and run dcpromo.  Create a domain, add the workstations to it, setup a group policy and be done with it.  This may not be feasable but if it is, it's definatly the best way to go.
    LVL 51

    Expert Comment

    Just copy this into a file with a .reg extension and double click it (on the client).

    Windows Registry Editor Version 5.00

    "WUServer"="http://{FQDN of SUS server}"
    "WUStatusServer"="http://{FQDN of SUS server}"


    Just change this value : {FQDN of SUS server} to your own server FQDN less the brackets.

    LVL 23

    Expert Comment

    ah...workgroup environment...

    See here:

    2. For clients in a a workgroup environment, configuration is via the registry or via local policy.

    3. Confirm the the client's AU settings and ensure they are set the way you intend. A simple way is to use the REG.exe command to dump out the policy settings from the client's registry. Use the following syntax:

    Reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /s

    You should see something like this:

    WSUServer REG_SZ http://dc1.nwtraders.msft
    WSUStatusServer REG_SZ http://dc1.nwtraders.msft

    NoAutoUpdate REG_DWORD 0x0
    AUOptions REG_DWORD 0x3
    ScheduledInstallDay REG_DWORD 0x0
    ScheduledInstallTime REG_DWORD 0x3
    UseWSUServer REG_DWORD 0x1
    DetectionFrequencyEnabled REG_DWORD 0x1
    DetectionFrequency REG_DWORD 0x1

    also see this great online documentation:

    There WAS a KB article on scripting this...But I don't see it anymore online (it was 555454).

    LVL 23

    Expert Comment

    Sorry Netman, I should have hit F5 again after leaving my desk for a few minutes and coming back to this question...that's right on the money.
    LVL 51

    Expert Comment

    No problem - at least he's well taken care of ! :o)
    LVL 23

    Expert Comment

    Got it working I assume?

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now