How To Install WSUS on Windows Server 2008


Free Server 2008 patch management solution

WSUS allows administrators to control and distribute Windows updates from a central location. This free patch management solution can be installed on Server 2003 SP1 or Server 2008.


WSUS Prerequisites:

  1. Server 2008 or Server 2003 SP1
  2. BITS (Background Intelligent Transfer Service)
  3. IIS (Internet Information Services)
  4. MSDE database or SQL 2005 Database
  5. .NET Framework 2.0 or higher

Install WSUS on Windows Server 2008

  1. Open Server Manager > Add Roles
  2. Install “Windows Server Update Services” Role



Configure on Windows Server 2008

  1. On “Select Update Source” screen, check “Store updates locally” (ensure you have enough space to store large amounts of updates)
  2. Use existing SQL 2005 Server or choose Windows Internal Database
  3. Use the existing IIS site, click Next
  4. Click Finish

Now you can further configure WSUS by using WSUS MMC. WSUS MMC can be accessed from Administrative Tools or Server manager.

Configure Automatic Update client via Group Policy
Use Group Policy to configure Automatic Update client to download from WSUS server.

  1. Create a new Domain Policy on Computers OU
  2. Expand to Computer Configuration>Administrative Templates>Windows Components>Windows Update
  3. Click on “Configure Automatic Updates setting”, here configure Automatic Updates as you desire. Click OK
  4. Click on “Specify intranet Microsoft update service location”, choose “Enabled ”, Configure intranet server in this format: http://WSUSSERVER
  5. Once this Group Policy is propagated to the clients, clients will start to download from the WSUS server