• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 174
  • Last Modified:

automatic updates feature windows server

What role does "automatic updates" play on windows server in relation to WSUS. I have run some MBSA reports over windows file servers, and the only server massively behind on patch status does not have the automatic updates feature  configured. I am guessing this plays a role in interacting with WSUS? Can anyone give an example on the role it plays with WSUS?
0
pma111
Asked:
pma111
  • 2
3 Solutions
 
David Johnson, CD, MVPOwnerCommented:
automatic updates work exactly the same with wsus as with Microsoft update .. it is a pull process not a push process. The difference being is that WSUS you can put off certain updates until they are approved or deny specific updates and depending upon the setting either download 1 copy of the update and client machines get from the local server or each client goes to microsoft and downloads their own copy.
0
 
pma111Author Commented:
So are you saying automatic updates are configured to "pull" approved updates from your WSUS server, as opposed to directly from Microsoft?

And ultimately, if automatic updates is not configured on a server, it wont be "pulling" updates from your WSUS Server, so will ultimately fall behind on patch status?
0
 
Seth SimmonsSr. Systems AdministratorCommented:
So are you saying automatic updates are configured to "pull" approved updates from your WSUS server, as opposed to directly from Microsoft?

If you have WSUS configured and there is a GPO in place to configure your systems to use the internal WSUS server, then yes

if automatic updates is not configured on a server, it wont be "pulling" updates from your WSUS Server, so will ultimately fall behind on patch status?

by default it will download and install at 3am
if you don't have WSUS, suggested to still use GPO to control the update process with windows update so it doesn't automatically reboot such as download and notify for install so you can do it when you are ready.  of course, if you don't spend time to do it manually, the number of updates required will start to pile up as time go on
0
 
David Johnson, CD, MVPOwnerCommented:
So are you saying automatic updates are configured to "pull" approved updates from your WSUS server, as opposed to directly from Microsoft? that is one of the purposes of WSUS .. WSUS client settings are normally managed by group policy.
WSUS and Microsoft Update are just 2 locations that the Update client can check for updates it is then up to the client to select and download and install the updates. As stated before WSUS can save the updates locally so that in a large organization you only download 1 copy over the internet and then clients get it via the local lan (intranet)  OR the clients can only use WSUS to see what updates are available and then download these from Microsoft servers.

And ultimately, if automatic updates is not configured on a server, it wont be "pulling" updates from your WSUS Server, so will ultimately fall behind on patch status? Correct
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now