WSUS for Server Patching

Posted on 2012-09-14
Last Modified: 2012-09-25
I'm looking to deploy WSUS 3.0 SP2 with the specific intention of updating my many servers in the environment.

I would like to have 3 tiers:

Tier1 - Download, Patch and Reboot.
Tier2 - Download, Patch do NOT Reboot
Tier3 - Do nothing, these servers will be manually patched.

Does anyone have a decent document outlining how to do this via WSUS?
Question by:trecool
    LVL 18

    Expert Comment

    by:Sushil Sonawane
    Please follow the link about wsus configuration.


    Install and configure WSUS 3.0 SP2 – Step-By-Step with screen shot


    To configure Configure Automatic Updates by Using Group Policy for wsus server.

    LVL 47

    Accepted Solution

    Actually what you are looking for is whats called client side targeting

    Then you want to go over:

    Managing the WSUS Automatic Updates Client Download, Install, and Reboot Behavior with Group Policy


    Best Practices with Windows Server Update Services 3.0

    Author Comment

    So the guides were very useful, however, I can't apply the policies to the servers without a reboot.  gpupdate /force is not working when I examine the local policy of each machine, under Computer Accounts > Admin Templates > Windows Components there is no Windows Update entry.

    The only server that showed up in the WSUS is one I had manually rebooted.  Is this the case, or should GPUpdate / Force actually work?
    LVL 47

    Expert Comment

    when I examine the local policy of each machine, under Computer Accounts > Admin Templates > Windows Components there is no Windows Update entry.

    That is not the way to verify WSUS settings, you should from command prompt type:

    Reg query HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    LVL 47

    Expert Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Want to promote your upcoming event?

    Is your company attending an event or exhibiting at a trade show soon? Are you speaking at a conference? Spread the word by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
    This tutorial will show how to inventory, catalog, and restore media from legacy versions of Backup Exec into both 2012 and 2014 versions of the software. Select Storage from the tabs along the ribbon bar as the top: Ensure the proper storage devi…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now