Appendix E: Configuring Windows Server Update Services

WSUS can automatically distribute updates to new or existing computers. To configure WSUS, complete these high-level steps:

  1. Create a WSUS architecture.

    For information about doing so, read “Design the WSUS Deployment” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  2. Install the primary WSUS server, and then harden it to reduce security risks.

    For information about doing so, read “Install the WSUS Server” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  3. Configure the primary WSUS server, and deploy any secondary WSUS servers.

    For information about doing so, read “Configure the WSUS Server” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  4. Perform further hardening on the WSUS servers.

    For information about doing so, read “Secure Your WSUS Deployment” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  5. Configure existing client computers to retrieve approved updates from the WSUS server.

    For information about doing so, read “Update and Configure the Automatic Updates Client Component” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

  6. Configure a secondary WSUS server for the deployment network.

    For information about doing so, read “Set Up a Disconnected Network (Import and Export Updates)” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

If the organization has an existing SUS implementation, read Step-by-Step Guide to Migrating from Software Update Services to Windows Server Update Services at http://www.microsoft.com/downloads/details.aspx?FamilyId=150E795E-AE32-4D47-A6B8-E01F918AAE93&displaylang=en and “Migrate from a SUS Server to a WSUS Server” in Deploying Microsoft Windows Server Update Services at http://download.microsoft.com/download/e/3/4/e34fedb2-d9a3-484c-a866-5adb67ccf681/Deploying%20Microsoft%20Windows%20Server%20Update%20Services.doc.

Download

Get the Microsoft Solution Accelerator for Business Desktop Deployment 2007

Update Notifications

Sign up to learn about updates and new releases

Feedback

Send us your comments or suggestions