Windows 2008 R2 Domain Controller - WSUS - install on same server?

Posted on 2011-04-25
Last Modified: 2012-05-11
Ok. I have used WSUS on Windows 2003 domain controllers in the past. Looking to see what if it is ok....recommended  with Windows 208 R2.

According to the link below MS is saying there are problems using WSUS on a Windows 2008 R2 DC, wanted to ask if anyone is running a DC and WSUS without issues.

WSUS on Domain Controller – Windows 2008 R2,

WSUS is installed on a domain controller.

If WSUS is installed a domain controller, this will cause database access issues due to how the database is configured.
Installing WSUS on a domain controller can also cause problems upgrading or installing WSUS in the future.

Uninstall WSUS from the domain controller, demote the server to a non-domain controller, and reinstall WSUS.

Alternately, you can install WSUS on a different non-domain controller machine.
For detailed instructions about how to remove WSUS 3.0 SP2, see the Removal section in the Microsoft Support Article 972455: Description of Windows Server Update Services 3.0 Service Pack 2 (

Question by:markpalinux
    LVL 57

    Expert Comment

    by:Mike Kline
    It also wasn't recommended in 2003, see this blog entry

    I've personally never run WSUS on a DC, then you have to have IIS on a DC on top of that.  I just like putting WSUS on its own box.  So it is not officially supported but doesn't mean it won't work but if you have a member server I'd put it there.

    Common apps services on a DC are

    SCOM agent  
    Backup Agents

    Those are just common ones...not all


    LVL 38

    Accepted Solution

    We have been running WSUS on a DC, in this case Windows Small Business Server, since WSUS v2.

    We also have done the upgrade from v2 to v3 on that same DC, and are now running WSUS v3 SP2 on both SBS 2008 and SBS 2011.

    We also run WSUS on a DC in most of our client's larger remote offices to reduce update traffic across the WAN.

    We tend to bend things a bit in the SMB space. ;-)

    LVL 13

    Assisted Solution

    by:Felix Leven
    In times where virtualization is pretty common, i don't think it's still necessary to mix services and DB,s. I would prefer a DC as a core server (no WSUS possible) and WSUS on a second "Full" server.
    LVL 6

    Assisted Solution

    I am with MPECSInc, in that I have many SMB as clients running WSUS on SBS 2003/2008 DCs.

    I am sure it would be great to have the flexibility to have separate servers for some services, but with $$$ limited, decisions to bunch services onto same hardware is required.

    These are all decisions that need to be made based on the individual business.
    LVL 15

    Author Closing Comment

    Thanks for the responses

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Suggested Solutions

    It’s 2016. Password authentication should be dead — or at least close to dying. But, unfortunately, it has not traversed Quagga stage yet. Using password authentication is like laundering hotel guest linens with a washboard — it’s Passé.
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now