Need help with WSUS... where to begin?
-
I have a WSUS server that was configured by my predecessor. I am not sure if the configuration is set correctly or not. Do I need to interact with WSUS server at all? Not even sure where to start
-
Knowing how to configure it step by step is a good start to understanding it.
-
@IRJ said:
Knowing how to configure it step by step is a good start to understanding it.
Not to assume,.. but look at it from it's done inefficiently and go through the config and you'll find anything out of place while setting it right.
-
@gjacobse said:
@IRJ said:
Knowing how to configure it step by step is a good start to understanding it.
Not to assume,.. but look at it from it's done inefficiently and go through the config and you'll find anything out of place while setting it right.
If his computers and servers are fairly up to date, he can just rebuild it from scratch, too. It's not that big of a deal
-
WSUS definitely requires hand holding, otherwise it will eat a TB of storage in no time.
-
@Dashrender Definitely make sure that you only select OS versions that you use so that it doesn't eat up unnecessary space and other resources.
-
@wrx7m said:
@Dashrender Definitely make sure that you only select OS versions that you use so that it doesn't eat up unnecessary space and other resources.
Definitely, but you need to run the Cleanup process on it regularly also to delete no longer needed updates.
-
- Go through the settings
WSUS console --> Update Services --> Server --> Options
- Products and Classifications
- Automatic Approvals
- Sync Schedule
- etc
- Check the servers scheduled tasks (Windows) for WSUS related scripts
- What do they do? Document them
- If there is no script scheduled to decline updates, GET ONE. This will cut down the time spent managing it. Here is one I prepared earlier: http://community.spiceworks.com/scripts/show/2795-decline-wsus-updates
-
Run a clean up
WSUS console --> Update Services --> Server --> Options --> Server Cleanup Wizard -
Find out what your deployment method is (GPO, System Center...)
- If GPO, which one? What are its settings? Document it. You will want this later when you need to make changes.
- Go through the settings
-
@nadnerB said:
- Run a clean up
WSUS console --> Update Services --> Server --> Options --> Server Cleanup Wizard
Be prepared for this to take hours and more likely fail.
- Run a clean up
-
@JaredBusch said:
@nadnerB said:
- Run a clean up
WSUS console --> Update Services --> Server --> Options --> Server Cleanup Wizard
Be prepared for this to take hours and more likely fail.
Really? I haven't had it fail except for the first time I ran it. And frankly I think it failed because I was impatient.
I think the first time I ran it, which was something like 5 years into it running, it would have taken 2-3 days to complete.
Now I run it monthly - still takes around 20 mins on average, but it never fails.
- Run a clean up
-
@Dashrender said:
@JaredBusch said:
@nadnerB said:
- Run a clean up
WSUS console --> Update Services --> Server --> Options --> Server Cleanup Wizard
Be prepared for this to take hours and more likely fail.
Really? I haven't had it fail except for the first time I ran it. And frankly I think it failed because I was impatient.
I think the first time I ran it, which was something like 5 years into it running, it would have taken 2-3 days to complete.
Now I run it monthly - still takes around 20 mins on average, but it never fails.
I have a server at one client that had cleanup ran monthly. then 2 months were missed. then cleanup never successfully ran again. I ended up having to install SQL Management Studio and then running some specific stored procedures on the native database to clean it up. Running those still took 2 days. The system now functions normally again.
- Run a clean up
