> For the complete documentation index, see [llms.txt](https://shahidmobin.gitbook.io/linux/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://shahidmobin.gitbook.io/linux/learn-cybersecurity-with-shahid-mobin/windows/windows-server-update-services-wsus.md).

# Windows Server Update Services (WSUS)

{% embed url="<https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus>" %}

The WSUS server that acts as an update source is called an upstream server.

In a WSUS implementation, at least one WSUS server in the network must connect to Microsoft Update to get available update information.

The core scenarios where WSUS adds value to your business are:

* Centralized update management
* Update management automation

Windows Server Update Services is a built-in server role that includes the following enhancements:

* Can be added and removed by using the Server Manager
* Includes Windows PowerShell cmdlets to manage the most important administrative tasks in WSUS
* Adds SHA256 hash capability for additional security
* Provides client and server separation: versions of the Windows Update Agent (WUA) can ship independently of WSUS

## Deploy Windows Server Update Services <a href="#deploy-windows-server-update-services" id="deploy-windows-server-update-services"></a>

This guide provides conceptual information for planning and deploying Windows Server Update Service.

* [Plan your WSUS deployment](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment)
* [Step 1: Install the WSUS Server Role](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/1-install-the-wsus-server-role)
* [Step 2: Configure WSUS](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus)
* [Step 3: Approve and Deploy Updates in WSUS](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/3-approve-and-deploy-updates-in-wsus)
* [Step 4: Configure Group Policy Settings for Automatic Updates](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates)

### Plan your WSUS deployment <a href="#plan-your-wsus-deployment" id="plan-your-wsus-deployment"></a>

The first step in the deployment of Windows Server Update Services (WSUS) is to make important decisions, such as deciding the WSUS deployment scenario, choosing a network topology, and understanding the system requirements. The following checklist summarizes the steps that are involved in preparing for your deployment.

| Task                                                                                                                                                                                                                                                       | Description                                                                                                                               |
| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- |
| [1.1. Review considerations and system requirements](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#11-review-considerations-and-system-requirements)                        | Review the list of considerations and system requirements to ensure that you have all the necessary hardware and software to deploy WSUS. |
| [1.2. Choose a WSUS deployment scenario](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#12-choose-a-wsus-deployment-scenario)                                                | Decide which WSUS deployment scenario will be used.                                                                                       |
| [1.3. Choose a WSUS storage strategy](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#13-choose-a-wsus-storage-strategy)                                                      | Decide which WSUS storage strategy best fits your deployment.                                                                             |
| [1.4. Choose WSUS update languages](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#14-choose-wsus-update-languages)                                                          | Decide which WSUS update languages will be installed.                                                                                     |
| [1.5. Plan WSUS computer groups](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#15-plan-wsus-computer-groups)                                                                | Plan the WSUS computer group approach that you will use for your deployment.                                                              |
| [1.6. Plan WSUS Performance Considerations: Background Intelligent Transfer Service](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#16-plan-wsus-performance-considerations) | Plan a WSUS design for optimized performance.                                                                                             |
| [1.7. Plan Automatic Updates settings](https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#17-plan-automatic-updates-settings)                                                    | Plan how you will configure the automatic updates settings for your scenario.                                                             |