Windows Server Update Services (WSUS)

The WSUS server that acts as an update source is called an upstream server.

In a WSUS implementation, at least one WSUS server in the network must connect to Microsoft Update to get available update information.

The core scenarios where WSUS adds value to your business are:

  • Centralized update management

  • Update management automation

Windows Server Update Services is a built-in server role that includes the following enhancements:

  • Can be added and removed by using the Server Manager

  • Includes Windows PowerShell cmdlets to manage the most important administrative tasks in WSUS

  • Adds SHA256 hash capability for additional security

  • Provides client and server separation: versions of the Windows Update Agent (WUA) can ship independently of WSUS

Deploy Windows Server Update Services

This guide provides conceptual information for planning and deploying Windows Server Update Service.

Plan your WSUS deployment

The first step in the deployment of Windows Server Update Services (WSUS) is to make important decisions, such as deciding the WSUS deployment scenario, choosing a network topology, and understanding the system requirements. The following checklist summarizes the steps that are involved in preparing for your deployment.

TaskDescription

Review the list of considerations and system requirements to ensure that you have all the necessary hardware and software to deploy WSUS.

Decide which WSUS deployment scenario will be used.

Decide which WSUS storage strategy best fits your deployment.

Decide which WSUS update languages will be installed.

Plan the WSUS computer group approach that you will use for your deployment.

Plan a WSUS design for optimized performance.

Plan how you will configure the automatic updates settings for your scenario.

Last updated