What is WSUS

In this lecture, we are going to talk about Windows Server Update Services or WSUS.

In short Windows Service Update Services or WSUS is a Server Role that allows administrators to control Windows Updates within their domain.

So, Microsoft will release patches on a monthly basis that address different vulnerabilities and bug fixes to the Microsoft operating system. You as an administrator can control whether or not your computers install certain updates, whether they are required or optional updates, etc.

It is really important that you install a WSUS Server within your domain and you use it to control and keep your network safe.

Now there are a couple of different ways that WSUS can acquire updates.

First, you can download updates directly from Microsoft. Now, this is a viable option if your network has Internet connectivity.

Second, you can download updates from another WSUS Server which would be called an upstream server.

You can also import files directly to your WSUS Servers. If your server is disconnected from the Internet you can download the files onto a CD Drive and then transfer those files to your offline WSUS Servers and then import them to your WSUS Server which would allow you now to push them out to all your clients machines.

The most important bullet point in this slide is that the WSUS Server Role should never be installed on a Domain Controller because you’ll have access issues with the database.

Here’s an example of Importing WSUS Updates.

On the left, you can see we have an isolated network…