• Contact
  • Homelab
Dimitris Tonias
  • Management
  • Monitoring
  • Cloud
  • Virtualization
  • Networking
  • Productivity
No Result
View All Result
  • Management
  • Monitoring
  • Cloud
  • Virtualization
  • Networking
  • Productivity
No Result
View All Result
Dimitris Tonias
No Result
View All Result

Configure Group Policy to deploy updates using WSUS 2016

Dimitris Tonias by Dimitris Tonias
May 3, 2018 - Updated on April 21, 2024
in Management
Reading Time: 3 mins read
A A
1
Share on FacebookShare on Twitter

One of the first steps you will need to take during the initial configuration of a WSUS Server is to establish communication between WSUS Server and clients. As clients (endpoints) we assume that they can be either Windows clients or Windows Servers.

The most fundamental task is to direct each client to communicate with WSUS Server to check for new updates instead of using Microsoft Update over the Internet. Next, we will go through the individual settings for scheduling updates, configuring alerts, etc.

In general, these settings can be made through Group Policy, Local Policy, or Registry. However, as we refer to an Active Directory infrastructure, we will focus on WSUS policy settings through Group Policy.

In most cases, it is suggested to create a new Group Policy Object that will only apply to WSUS settings. You may use additional policies, such as when assigning clients to different computer groups.

The WSUS settings in the Group Policy Editor are located at:

Computer Configuration / Policies / Administrative Templates / Windows Components / Windows Update

As shown in the picture, there are several policies. Of course, you do not have to enable all of them. In the following steps, we will only focus on the necessary policies you will need in order to establish communication between WSUS Server and clients as well as schedule update installation.

Configure Group Policy to deploy updates using WSUS 2016

Beyond that, take some time to comprehend the other policies and enable what you think is important for your infrastructure. Microsoft, as always, has taken care to publish a fairly detailed article.

The most important policies for WSUS to work properly are:

  • Configure Automatic Updates
  • Specify intranet Microsoft update service location

Configure Automatic Updates

A necessary policy that enables the use of Automatic Updates on the client to install updates.

Configure Group Policy to deploy updates using WSUS 2016

After you turn the switch to Enabled, select one of the four options depending on how much ‘freedom’ you will give the end user to install the updates.

Specify intranet Microsoft update service location

Another necessary policy in which you declare WSUS Server to be detected by clients. After you set the switch to Enabled, type the WSUS Server address in the two fields like http://servername.local:8530 as shown in the figure below.

Configure Group Policy to deploy updates using WSUS 2016

Note: If the Configure Automatic Updates policy is disabled, then this policy is not applicable.

These are the two most important policies for WSUS Server. If you encounter a problem when setting it up initially, then take a look at these policies first.

Finally, do not forget to apply the policy to the OUs of the Active Directory infrastructure.

From now on, in the next few hours, customers will begin to appear in the computer groups of the WSUS administration console. As long as you have synchronized and approved the updates, it will begin installing the updates according to the policies you implemented through the Group Policy.

Tags: Windows Server 2016WSUS
ShareTweetPin
Previous Post

Configure computer groups in WSUS 2016

Next Post

Approve updates in WSUS 2016

Related Posts

Approve updates in WSUS 2016
Management

Approve updates in WSUS 2016

Configure computer groups in WSUS 2016
Management

Configure computer groups in WSUS 2016

The initial configuration of WSUS 2016
Management

The initial configuration of WSUS 2016

Install WSUS in Windows Server 2016
Management

Install WSUS in Windows Server 2016

Error opening Report Viewer on WSUS 2016
Management

Error opening Report Viewer on WSUS 2016

Restart WSUS Service using PowerShell and CMD
Management

Restart WSUS Service using PowerShell and CMD

Comments 1

  1. Zaheer khan says:
    6 years ago

    I have 2 windows server 2016 essential

    1st for ad
    2 for wsus

    All windows 10 clients are added in wsus but ad server(windows server 2016 essential) is not listed in wsus(windows server 2016 essential) any solutions ?

    Or windows server 2016 essential cant update other windows server 2016 essential ?

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

No Result
View All Result
Zabbix server: More than 75% used in the trends cache
Monitoring

Zabbix server: More than 75% used in the trends cache

In Zabbix, "trends" are a type of data storage representing aggregated historical data. Zabbix monitors and collects a vast amount...

Read moreDetails
Check word count on Google Docs

Check word count on Google Docs

Zabbix server: More than 75% used in the configuration cache

Zabbix server: More than 75% used in the configuration cache

Approve updates in WSUS 2016

Approve updates in WSUS 2016

Configure Group Policy to deploy updates using WSUS 2016

Configure Group Policy to deploy updates using WSUS 2016

Configure computer groups in WSUS 2016

Configure computer groups in WSUS 2016

The initial configuration of WSUS 2016

The initial configuration of WSUS 2016

Get more stuff

Subscribe to our mailing list and get interesting stuff and updates to your email inbox.

Thank you for subscribing.

Something went wrong.

we respect your privacy and take protecting it seriously

  • Contact
  • Homelab

© 2024 Dimitris Tonias

No Result
View All Result
  • About
  • Contact
  • Free Tools
  • Home
  • Homelab

© 2024 Dimitris Tonias

This website uses cookies. By continuing to use this website you are giving consent to cookies being used.