wsus registry backup

Posted on 2013-11-11
Last Modified: 2016-02-20
hi ive backed up wsus 3.0 sometime ago as per a previous thread where i received advice:

2013-04-17 at 16:58:01ID28100400

the below is what i backed up:

I carried out a single backup on the following and saved backup also in the d: drive as below:

system state - which includes
- boot files
- com + class registry files
- registry files

- c:\program files\update services
- c:\program files\windowsupdate
 - & systemstate
- c:\windows\softwaredistribution

d:\wsus - which holds the following:

- updateservicesdbfiles
- updateservicespackages
- wsuscontent

note: although my database is located on my 2nd d: partition, it is large enough so i have located my backup there also at least temporarily

question1.  as i have configured my wsus 3.0 for port: 8530 i will now backup all of the above as i wish to temporarily install exchange 2003 to use port: 80 on same machine and then do another backup of both wsus & exchange.  but if i had an issue and i then wished to remove exchange 2003 completely, would i do the following in that order:    ?

-  1st uninstall exchange 2003
-  2nd complete a (restore) to rewind it back back to just using (wsus)
- 3rd check the explorer and registry for any residual items that may have not fully uninstalled completely

question 2.  i only have 1 current backup of all of the above located on my d:\backup folder, so if i do another backup shall i select (incremental) so it integrates and adds new changes/updates to the same old previous backup or shall i just delete it and add a fresh new backup or shall i choose (differential)  and shall i also select (verify data after backup  ?
Question by:mikey250
  • 4
  • 3
LVL 24

Accepted Solution

Sandeshdubey earned 500 total points
ID: 39643624
It is not recommend to have WSUS role on exchange server.Instead you can have another member server to have exchange role.

If you want to use exiting server for exchange uninstall the wsus role and configure Exchange.You can install new wsus server on member server or move wsus to new server as this:

I normally prefer creating replica server of wsus and remove the primary server from network and point replica server to microsoft for update to make it primary.

Author Comment

ID: 39644019

yes i have been told that it is preferred wsus & exchange should not be together but was advised if i do that i should use port: 8530 during wsus install and leave port: 80 free.

note: it is only a temporary measure due to not having a spare server to separate.

question 1.  so i just want to know if my steps are correct or am i missing something else  ?

note:  currently my single master wsus member server is pointing to microsoft windows update and have no multiple wsus to do replica  ?

question 2.

ive read the 'replica' url and assumed the below means i cannot create my own gpo folders  ?

"a wsus server running in replica mode inherits the update approvals and computer groups created on its parent wsus administration server."  ?
LVL 24

Assisted Solution

Sandeshdubey earned 500 total points
ID: 39646830
Yes you can change wsus port see this:

Wsus server running in replica mode inherits the update approvals and computer groups created on its parent wsus administration server."  ?  The answer is yes

I will recommend to avoid wsus and exchange to be on same server evn for testing.
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.


Author Comment

ID: 39648192
"  i normally prefer creating replica server of wsus and remove the primary server from network and point replica server to microsoft for update to make it primary.

currently my wsus is setup with gpo:

domain controller
members servers

my updates have been installed as the above names match the (ou) located on my win 2003 master domain controller/dns/dhcp server - successfully.

question 1.  so if i set my wsus domain member server to point to microsoft windows update, then "you say i inherit the approvals and computer groups created on its parent", so what happens to my above (ou names above) ?
meaning from the microsoft windows update site as my wsus will become the (replica), but what about my above (ou) as above describes ?

i think i mis-understand you..!!

i was told sometime ago that by making my wsus the master wsus it will speed up the download to other servers or clients machines as all updates that i specifically required are already saved on a separate partition.  i then assumed if i wish to have multiple wsus servers...then i would add the mutiple servers and configure as replicas, but obviously with individual ip addresses - thats my understanding..

keep separate exchange & wsus - ok.
LVL 24

Assisted Solution

Sandeshdubey earned 500 total points
ID: 39650292
You need to keep exchange and WSUS server seperate.Regarding the OU it is created in OU AD you just need to modify the group policy of WSUS to point to new server.Also once the replica server has dowmloaded update from new server by p[ointing to microsoft means it will download pathces from MS as your old server was doing and you can remove old wsus server role.If you have created groups in WSUS the same will be inherited in new server.

For Wsus group polic see this:

Author Comment

ID: 39650546
morning sandeshdubey,  i will keep separate my exchange and wsus!!

ok thankyou for the advice about replica!!!

question 1.  i would like to ask 1 more question regarding how to configure wsus for ssl but i cannot afford a 3rd party certificate so wanting to know also if win 2003 platform can create one automatically for my single domain .  if you can assist let me know and i will create a new thread  ?

note:  i have looked on experts exchange and google and found some info, but (not how to create a certificate without a 3rd party (if possible)  currently i installed my (master wsus) on port: 8530, and wish to leave on this port!

Author Closing Comment

ID: 39674454
i never got the exact answer i wanted regarding backup steps for (wsus & exchange 2003)as advice was to not install together which i have agreed currently not to do.  although the only reason was because i have not got enough machines to go around at the moment.  either way good advice so will allocate points accordingly!!

much appreciated!!

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question