We help IT Professionals succeed at work.

automatic updates feature windows server

What role does "automatic updates" play on windows server in relation to WSUS. I have run some MBSA reports over windows file servers, and the only server massively behind on patch status does not have the automatic updates feature  configured. I am guessing this plays a role in interacting with WSUS? Can anyone give an example on the role it plays with WSUS?
Comment
Watch Question

Simple Geek from the '70s
Distinguished Expert 2019
Commented:
automatic updates work exactly the same with wsus as with Microsoft update .. it is a pull process not a push process. The difference being is that WSUS you can put off certain updates until they are approved or deny specific updates and depending upon the setting either download 1 copy of the update and client machines get from the local server or each client goes to microsoft and downloads their own copy.

Author

Commented:
So are you saying automatic updates are configured to "pull" approved updates from your WSUS server, as opposed to directly from Microsoft?

And ultimately, if automatic updates is not configured on a server, it wont be "pulling" updates from your WSUS Server, so will ultimately fall behind on patch status?
Seth SimmonsSr. Systems Administrator
Commented:
So are you saying automatic updates are configured to "pull" approved updates from your WSUS server, as opposed to directly from Microsoft?

If you have WSUS configured and there is a GPO in place to configure your systems to use the internal WSUS server, then yes

if automatic updates is not configured on a server, it wont be "pulling" updates from your WSUS Server, so will ultimately fall behind on patch status?

by default it will download and install at 3am
if you don't have WSUS, suggested to still use GPO to control the update process with windows update so it doesn't automatically reboot such as download and notify for install so you can do it when you are ready.  of course, if you don't spend time to do it manually, the number of updates required will start to pile up as time go on
David Johnson, CDSimple Geek from the '70s
Distinguished Expert 2019
Commented:
So are you saying automatic updates are configured to "pull" approved updates from your WSUS server, as opposed to directly from Microsoft? that is one of the purposes of WSUS .. WSUS client settings are normally managed by group policy.
WSUS and Microsoft Update are just 2 locations that the Update client can check for updates it is then up to the client to select and download and install the updates. As stated before WSUS can save the updates locally so that in a large organization you only download 1 copy over the internet and then clients get it via the local lan (intranet)  OR the clients can only use WSUS to see what updates are available and then download these from Microsoft servers.

And ultimately, if automatic updates is not configured on a server, it wont be "pulling" updates from your WSUS Server, so will ultimately fall behind on patch status? Correct