Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


wsus registry backup

Posted on 2013-11-11
Medium Priority
Last Modified: 2016-02-20
hi ive backed up wsus 3.0 sometime ago as per a previous thread where i received advice:

2013-04-17 at 16:58:01ID28100400

the below is what i backed up:

I carried out a single backup on the following and saved backup also in the d: drive as below:

system state - which includes
- boot files
- com + class registry files
- registry files

- c:\program files\update services
- c:\program files\windowsupdate
 - & systemstate
- c:\windows\softwaredistribution

d:\wsus - which holds the following:

- updateservicesdbfiles
- updateservicespackages
- wsuscontent

note: although my database is located on my 2nd d: partition, it is large enough so i have located my backup there also at least temporarily

question1.  as i have configured my wsus 3.0 for port: 8530 i will now backup all of the above as i wish to temporarily install exchange 2003 to use port: 80 on same machine and then do another backup of both wsus & exchange.  but if i had an issue and i then wished to remove exchange 2003 completely, would i do the following in that order:    ?

-  1st uninstall exchange 2003
-  2nd complete a (restore) to rewind it back back to just using (wsus)
- 3rd check the explorer and registry for any residual items that may have not fully uninstalled completely

question 2.  i only have 1 current backup of all of the above located on my d:\backup folder, so if i do another backup shall i select (incremental) so it integrates and adds new changes/updates to the same old previous backup or shall i just delete it and add a fresh new backup or shall i choose (differential)  and shall i also select (verify data after backup  ?
Question by:mikey250
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 24

Accepted Solution

Sandeshdubey earned 2000 total points
ID: 39643624
It is not recommend to have WSUS role on exchange server.Instead you can have another member server to have exchange role.

If you want to use exiting server for exchange uninstall the wsus role and configure Exchange.You can install new wsus server on member server or move wsus to new server as this:

I normally prefer creating replica server of wsus and remove the primary server from network and point replica server to microsoft for update to make it primary.

Author Comment

ID: 39644019

yes i have been told that it is preferred wsus & exchange should not be together but was advised if i do that i should use port: 8530 during wsus install and leave port: 80 free.

note: it is only a temporary measure due to not having a spare server to separate.

question 1.  so i just want to know if my steps are correct or am i missing something else  ?

note:  currently my single master wsus member server is pointing to microsoft windows update and have no multiple wsus to do replica  ?

question 2.

ive read the 'replica' url and assumed the below means i cannot create my own gpo folders  ?

"a wsus server running in replica mode inherits the update approvals and computer groups created on its parent wsus administration server."  ?
LVL 24

Assisted Solution

Sandeshdubey earned 2000 total points
ID: 39646830
Yes you can change wsus port see this:

Wsus server running in replica mode inherits the update approvals and computer groups created on its parent wsus administration server."  ?  The answer is yes

I will recommend to avoid wsus and exchange to be on same server evn for testing.
How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.


Author Comment

ID: 39648192
"  i normally prefer creating replica server of wsus and remove the primary server from network and point replica server to microsoft for update to make it primary.

currently my wsus is setup with gpo:

domain controller
members servers

my updates have been installed as the above names match the (ou) located on my win 2003 master domain controller/dns/dhcp server - successfully.

question 1.  so if i set my wsus domain member server to point to microsoft windows update, then "you say i inherit the approvals and computer groups created on its parent", so what happens to my above (ou names above) ?
meaning from the microsoft windows update site as my wsus will become the (replica), but what about my above (ou) as above describes ?

i think i mis-understand you..!!

i was told sometime ago that by making my wsus the master wsus it will speed up the download to other servers or clients machines as all updates that i specifically required are already saved on a separate partition.  i then assumed if i wish to have multiple wsus servers...then i would add the mutiple servers and configure as replicas, but obviously with individual ip addresses - thats my understanding..

keep separate exchange & wsus - ok.
LVL 24

Assisted Solution

Sandeshdubey earned 2000 total points
ID: 39650292
You need to keep exchange and WSUS server seperate.Regarding the OU it is created in OU AD you just need to modify the group policy of WSUS to point to new server.Also once the replica server has dowmloaded update from new server by p[ointing to microsoft means it will download pathces from MS as your old server was doing and you can remove old wsus server role.If you have created groups in WSUS the same will be inherited in new server.

For Wsus group polic see this:

Author Comment

ID: 39650546
morning sandeshdubey,  i will keep separate my exchange and wsus!!

ok thankyou for the advice about replica!!!

question 1.  i would like to ask 1 more question regarding how to configure wsus for ssl but i cannot afford a 3rd party certificate so wanting to know also if win 2003 platform can create one automatically for my single domain .  if you can assist let me know and i will create a new thread  ?

note:  i have looked on experts exchange and google and found some info, but (not how to create a certificate without a 3rd party (if possible)  currently i installed my (master wsus) on port: 8530, and wish to leave on this port!

Author Closing Comment

ID: 39674454
i never got the exact answer i wanted regarding backup steps for (wsus & exchange 2003)as advice was to not install together which i have agreed currently not to do.  although the only reason was because i have not got enough machines to go around at the moment.  either way good advice so will allocate points accordingly!!

much appreciated!!

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question