But as usual, before we start, let me explain a little bit about WSUS (Windows Server Update Services).<\/p>\n\n\n\n
What Is WSUS?<\/strong><\/p>\n\n\n\n WSUS is a server role included in the Windows Server 2012 R2 OS, and that downloads and distributes updates to Windows clients and servers.<\/strong><\/p>\n\n\n\n WSUS can obtain updates <\/strong>that are applicable to the OS and common Microsoft applications such as Microsoft Office and Microsoft SQL Server.<\/strong><\/p>\n\n\n\n In the simplest configuration, a small organization can have a single WSUS server that downloads updates from Microsoft Update.<\/p>\n\n\n\n The WSUS server then distributes the updates to computers that are configured to obtain automatic updates from the WSUS server. You must approve the updates before clients can download them.<\/p>\n\n\n\n So for this WSUS demo, I will be using my Domain Server which is DC01.comsys.local and my client Surface01.comsys.local.<\/p>\n\n\n\n Before we start, please do understand that, all this implementation & configuration of this WSUS is happening in Hyper-V, and all my small infra is running fully virtualization, and since this WSUS is involve with internet connection, please do remind also that you need an internet connection attach to VM.<\/strong><\/p>\n\n\n\n If you\u2019re not sure please refer to this print screen :<\/p>\n\n\n\n So, once you confirm that your WSUS Server having internet connection, lets proceed with the WSUS installation Process.<\/strong><\/p>\n\n\n\n 1 \u2013 On your Server, open Server Manager, on the Dashboard, click Add Roles and Features then click next 3 times till you get Select server roles box, in Select server roles box, select the Windows Server Update Services<\/strong> (In the pop-up window, click Add Features)\u2026 then click Next<\/strong>\u2026<\/p>\n\n\n\n 2 \u2013 On the Select features<\/strong> box, click Next\u2026<\/p>\n\n\n\n 3 \u2013 On the Windows Server Update Services<\/strong> box, click Next\u2026<\/p>\n\n\n\n 4 \u2013 On the Select role services box, verify that both WID Database<\/strong> and WSUS Services<\/strong> are selected, and then click Next<\/strong>\u2026<\/p>\n\n\n\n 5 \u2013 On the Content location selection box, type C:\\Comsys WSUS<\/strong>, and then click Next<\/strong>\u2026<\/p>\n\n\n\n 6 \u2013 On the Web Server Role (IIS)<\/strong> box, click Next\u2026<\/p>\n\n\n\n 7 \u2013 On the Select role services<\/strong> box, click Next\u2026<\/p>\n\n\n\n 8 \u2013 On the Confirm installation<\/strong> selections box, click Install\u2026<\/p>\n\n\n\n 9 \u2013 When the installation completes, click Close<\/strong>\u2026<\/p>\n\n\n\n 10 \u2013 Open Windows Server Update Services console, in the Complete WSUS Installation window, click Run<\/strong>, and wait for the task to complete then click Close\u2026<\/p>\n\n\n\n We had successfully installed WSUS on DC01.comsys.local now, our next task is to configure WSUS to synchronize with Windows Updates\u2026<\/strong><\/p>\n\n\n\n 11 \u2013 In the Windows Server Update Services Configuration Wizard window, on the Before You Begin, click Next to proceed\u2026<\/p>\n\n\n\n 12 \u2013 On the Join the Microsoft Update Improvement Program, just click Next\u2026<\/p>\n\n\n\n 13 \u2013 On the Choose Upstream Server box, click the Synchronize from Microsoft Update<\/strong> option and then click Next\u2026<\/p>\n\n\n\n 14 \u2013 On the Specify Proxy Server box, click Next<\/strong>\u2026<\/p>\n\n\n\n 15 \u2013 On the Connect to Upstream Server box, click Start Connecting<\/strong>. Wait for the Windows Update to be applied, and then click Next\u2026<\/p>\n\n\n\n 16 \u2013 On the Choose Languages<\/strong> box, click Next\u2026<\/p>\n\n\n\n 17 \u2013 On the Choose Products<\/strong> box, I choose Windows 8 and Windows Server 2012 R2<\/strong> (you can use any Updates follow by you existing application), and click Next\u2026<\/p>\n\n\n\n 18 \u2013 On the Choose Classifications box, I choose Critical Updates<\/strong> (you can choose all updates classification if you require and your internet is fast) click Next\u2026<\/p>\n\n\n\n 19 \u2013 On the Set Sync Schedule box, I choose Synchronize manually<\/strong>, then click Next\u2026<\/p>\n\n\n\n 20 \u2013 On the Finished box, click the Begin initial synchronization<\/strong> option, and then click Finish\u2026<\/p>\n\n\n\n 21 \u2013 In the Windows Server Update Services console, in the navigation pane, double-click DC01, and please spend few minutes to reviews<\/strong> what you had on the WSUS consoles and the information\u2026<\/p>\n\n\n\n ** If you notice in my WSUS Server, WSUS is synchronizing update information, this might take few minutes\u2026<\/p>\n\n\n\n ** If everything goes well, on the synchronization status you can see that Status is Idle and the Last Synchronization result: Succeeded\u2026 <\/strong><\/p>\n\n\n\n 22 \u2013 Next, let\u2019s add Computer Group to WSUS<\/strong>, this method is to make sure that any computer listed in the Computer Group will get the Updates from WSUS Server\u2026<\/p>\n\n\n\n On the WSUS console, click Options<\/strong> and then double click Computers<\/strong>\u2026<\/p>\n\n\n\n 23 \u2013 In the Computers dialog box, select Use Group Policy or registry settings on computers then click OK\u2026<\/strong><\/p>\n\n\n\n ** I choose Use Group Policy because I wanted all my Clients getting windows updates by GPO\u2026<\/p>\n\n\n\n 24 \u2013 Next, click All Computers, and then, in the Actions pane, click Add Computer Group\u2026<\/strong><\/p>\n\n\n\n 25 \u2013 In the Add Computer Group dialog box, in the Name text box, type Comsystem Laptop, and then click Add\u2026<\/strong><\/p>\n\n\n\n 26 \u2013 Once you successfully add a New Computer Group to WSUS, now we need to create new GPO and configure it so that all our clients will be effected by this GPO to get the Windows Updates\u2026<\/strong><\/p>\n\n\n\n ** On the Domain Server, open Group Policy Management, right click Comsystem Laptop and then click Create a GPO in this domain, and Link it here\u2026<\/p>\n\n\n\n 27 \u2013 In the New GPO dialog box, type WSUS Comsystem Laptop ,and then click OK\u2026<\/strong><\/p>\n\n\n\n 28 \u2013 Next, right-click WSUS Comsystem Laptop, and then click Edit\u2026<\/strong><\/p>\n\n\n\n 29 \u2013 Next, in the Group Policy Management Editor, under Computer Configuration, double-click Policies, double-click Administrative Templates, double-click Windows Components, and then click Windows Update\u2026<\/strong><\/p>\n\n\n\n 30 \u2013 Next, in the Setting pane, double-click Configure Automatic Updates, and then click the Enabled option, under Options, in the Configure automatic updating field, click and select 3 \u2013 Auto download and notify for install, and then click OK\u2026<\/strong><\/p>\n\n\n\n 31 \u2013 In the Setting pane, double-click Specify intranet Microsoft update service location, and then click the Enabled option, then in the Set the intranet update service for detecting updates and the Set the intranet statistics server text boxes, type http:\/\/dc01.comsys.local:8530<\/a>, and then click OK\u2026<\/strong><\/p>\n\n\n\n 32 \u2013 In the Setting pane, double click Enable client-side targeting, in the Enable client-side targeting dialog box, click the Enabled option, in the Target group name for this computer text box, type Comsystem Laptop, and then click OK\u2026<\/strong><\/p>\n\n\n\n 33 \u2013 Next, let\u2019s log in to our client PC as domain administrator and verify that our client is receiving the GPO by typing gpresult \/r<\/strong>in the command prompt, In the output of the command, confirm that, under COMPUTER SETTINGS, WSUS Comsystem Laptop is listed under Applied Group Policy Objects\u2026<\/strong><\/p>\n\n\n\n 34 \u2013 Next, we need to Initialize the Windows Update by typing Wuauclt.exe \/reportnow \/detectnow in the cmd\u2026<\/strong><\/p>\n\n\n\n 35 \u2013 Next, we need to Approve and at the same time deploy an Update to our client PC\u2026<\/strong><\/p>\n\n\n\n in WSUS console, under Updates, click Critical Updates, right click any updates you prefer for your client PC and then click Approve\u2026<\/strong><\/p>\n\n\n\n 36 \u2013 In the Approve Updates window, in the Comsystem Laptop drop-down list box, select Approved for Install\u2026<\/strong><\/p>\n\n\n\n 37 \u2013 Next, Click OK and then click Close\u2026<\/p>\n\n\n\n 38 \u2013 Now, to deploy the selected updates<\/strong>, on the Client PC, in the cmd type Wuauclt.exe \/detectnow\u2026<\/strong><\/p>\n\n\n\n 39 \u2013 before you confirm the client can receive the update from the WSUS Server, return to WSUS Server and the on the WSUS console, on the Download Status, verify that the necessary \/ selected updates is finish downloading\u2026<\/strong><\/p>\n\n\n\n 40 \u2013 Next, Click Critical Updates, an the right panes, verify that few updates is stated 100%\u2026<\/strong><\/p>\n\n\n\n![\"NIC](\"https:\/\/mizitechinfo.files.wordpress.com\/2013\/08\/nic-for-wsus.png\")
<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n<\/a><\/figure>\n\n\n\n