wsus registry backup

Posted on 2013-11-11
Last Modified: 2016-02-20
hi ive backed up wsus 3.0 sometime ago as per a previous thread where i received advice:

2013-04-17 at 16:58:01ID28100400

the below is what i backed up:

I carried out a single backup on the following and saved backup also in the d: drive as below:

system state - which includes
- boot files
- com + class registry files
- registry files

- c:\program files\update services
- c:\program files\windowsupdate
 - & systemstate
- c:\windows\softwaredistribution

d:\wsus - which holds the following:

- updateservicesdbfiles
- updateservicespackages
- wsuscontent

note: although my database is located on my 2nd d: partition, it is large enough so i have located my backup there also at least temporarily

question1.  as i have configured my wsus 3.0 for port: 8530 i will now backup all of the above as i wish to temporarily install exchange 2003 to use port: 80 on same machine and then do another backup of both wsus & exchange.  but if i had an issue and i then wished to remove exchange 2003 completely, would i do the following in that order:    ?

-  1st uninstall exchange 2003
-  2nd complete a (restore) to rewind it back back to just using (wsus)
- 3rd check the explorer and registry for any residual items that may have not fully uninstalled completely

question 2.  i only have 1 current backup of all of the above located on my d:\backup folder, so if i do another backup shall i select (incremental) so it integrates and adds new changes/updates to the same old previous backup or shall i just delete it and add a fresh new backup or shall i choose (differential)  and shall i also select (verify data after backup  ?
Question by:mikey250
  • 4
  • 3
LVL 24

Accepted Solution

Sandeshdubey earned 500 total points
ID: 39643624
It is not recommend to have WSUS role on exchange server.Instead you can have another member server to have exchange role.

If you want to use exiting server for exchange uninstall the wsus role and configure Exchange.You can install new wsus server on member server or move wsus to new server as this:

I normally prefer creating replica server of wsus and remove the primary server from network and point replica server to microsoft for update to make it primary.

Author Comment

ID: 39644019

yes i have been told that it is preferred wsus & exchange should not be together but was advised if i do that i should use port: 8530 during wsus install and leave port: 80 free.

note: it is only a temporary measure due to not having a spare server to separate.

question 1.  so i just want to know if my steps are correct or am i missing something else  ?

note:  currently my single master wsus member server is pointing to microsoft windows update and have no multiple wsus to do replica  ?

question 2.

ive read the 'replica' url and assumed the below means i cannot create my own gpo folders  ?

"a wsus server running in replica mode inherits the update approvals and computer groups created on its parent wsus administration server."  ?
LVL 24

Assisted Solution

Sandeshdubey earned 500 total points
ID: 39646830
Yes you can change wsus port see this:

Wsus server running in replica mode inherits the update approvals and computer groups created on its parent wsus administration server."  ?  The answer is yes

I will recommend to avoid wsus and exchange to be on same server evn for testing.
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.


Author Comment

ID: 39648192
"  i normally prefer creating replica server of wsus and remove the primary server from network and point replica server to microsoft for update to make it primary.

currently my wsus is setup with gpo:

domain controller
members servers

my updates have been installed as the above names match the (ou) located on my win 2003 master domain controller/dns/dhcp server - successfully.

question 1.  so if i set my wsus domain member server to point to microsoft windows update, then "you say i inherit the approvals and computer groups created on its parent", so what happens to my above (ou names above) ?
meaning from the microsoft windows update site as my wsus will become the (replica), but what about my above (ou) as above describes ?

i think i mis-understand you..!!

i was told sometime ago that by making my wsus the master wsus it will speed up the download to other servers or clients machines as all updates that i specifically required are already saved on a separate partition.  i then assumed if i wish to have multiple wsus servers...then i would add the mutiple servers and configure as replicas, but obviously with individual ip addresses - thats my understanding..

keep separate exchange & wsus - ok.
LVL 24

Assisted Solution

Sandeshdubey earned 500 total points
ID: 39650292
You need to keep exchange and WSUS server seperate.Regarding the OU it is created in OU AD you just need to modify the group policy of WSUS to point to new server.Also once the replica server has dowmloaded update from new server by p[ointing to microsoft means it will download pathces from MS as your old server was doing and you can remove old wsus server role.If you have created groups in WSUS the same will be inherited in new server.

For Wsus group polic see this:

Author Comment

ID: 39650546
morning sandeshdubey,  i will keep separate my exchange and wsus!!

ok thankyou for the advice about replica!!!

question 1.  i would like to ask 1 more question regarding how to configure wsus for ssl but i cannot afford a 3rd party certificate so wanting to know also if win 2003 platform can create one automatically for my single domain .  if you can assist let me know and i will create a new thread  ?

note:  i have looked on experts exchange and google and found some info, but (not how to create a certificate without a 3rd party (if possible)  currently i installed my (master wsus) on port: 8530, and wish to leave on this port!

Author Closing Comment

ID: 39674454
i never got the exact answer i wanted regarding backup steps for (wsus & exchange 2003)as advice was to not install together which i have agreed currently not to do.  although the only reason was because i have not got enough machines to go around at the moment.  either way good advice so will allocate points accordingly!!

much appreciated!!

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Windows Server Update Service (WSUS) is free for everyone, but it lacks of some desirable features like send an e-mail to the administrator with the status of all computers on the WSUS server. This article is based on my PowerShell script …
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question