Updated 1/23/2007 -
Added new GPO settings for WSUS 3.0
Added registry key information for WSUS settings
http://www.vbshf.com...us/wsus_faq.htm - it is also linked at the bottom of this post just in case you cannot get to it because of Internet filtering, etc.
I think this is an ever-growing work in progress, but I hope it helps someone.
I'd post the complete FAQ here, but all the html tags won't work (because of the board software). Probably the most useful sections are on the extended information about the Automatic Updates GPO, why clients aren't reporting, and how to force the download and installation of approved updates.
Please let me know if you find any inaccurate information or if you'd like to add to it.
Here's an outline of the document:
Q: Where can I get wuau.adm for Automatic Updates?.
. How to configure automatic updates by using Group Policy or registry settings:
. Further information from Microsoft on how to configure Automatic Updates via GPO:
. Wuau.adm policy settings.
. Configure Automatic Updates.
. Specify internet Microsoft update service location.
. Enable client-side targeting.
. Reschedule Automatic Updates Scheduled installations.
. No auto-restart for scheduled Automatic Updates installations.
. Automatic Updates detection frequency.
. Allow Automatic Updates immediate installation.
. Delay Restart for scheduled installations.
. Re-prompt for restart with scheduled installations.
. Allow non-administrators to receive update notifications.
. Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box.
. Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
. Enable recommended updates via Automatic Updates (WSUS 3.0)
. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates (WSUS 3.0)
. Allow signed content from intranet Microsoft update service location (WSUS 3.0)
Q: What registry entries are changed when these policy settings are applied?
Q: Where are the non-GPO Automatic Updates registry keys stored?
Other Windows Update related policy settings.
. Remove access to use all Windows Update features.
Selfupdate and WSUSAdmin folders on WSUS IIS Server
Q: What address should I point my clients to in my GPO for Windows Updates?.
Q: What is the Selfupdate tree for?.
Editing the Client Registry (no AD to apply GPO's)
Q: Is it necessary to edit the registry on the clients? When is it necessary?.
. Applying a GPO in a Windows NT domain environment:.
. Manually configuring AU Client for WSUS in a workgroup environment:.
Updating WSUS clients.
Q: How do you push out updates to clients?.
Q: Why do my computers keep rebooting even though I specified to not reboot them?.
Q: Can I deploy Service Packs?.
Q: How can I force my computer to download updates and install?.
Q: How can I tell if my computer has a pending reboot?.
Q: How do I tell a computer to detect needed updates or check in with the server?.
Q: I've applied my GPO, but no clients are showing up in the WSUS console. What's going on?.
. Not enough time has passed for the clients to check in automatically.
. Potential duplicate clients using the same WSUS SID.
. Invalid GPO settings or GPO not being applied correctly to the clients.
Q: How do I control the bandwidth used by Windows Updates (BITS)
Tools and related resources.
Q: Where can I find tools to report information from my WSUS database?.
Q: Where can I download WSUS?.
Q: Where can I locate diagnostic tools to troubleshoot my client and/or server configuration?.
Q: Where can I download the WSUS API Samples?.
Central reporting for multiple WSUS servers.
Q: How can I extract updates directly from the WSUS database?.
WSUS and WUA Development
Q: Where can I find information on the WSUS (server component) API?.
Q: Where can I find information on the WUA (Windows Update Agent) API?.
Q: Where can I find Microsoft documentation for WSUS?.
Q: I'm having troubles with my WSUS server, what tools are available to help me troubleshoot the problem?
Q: My WSUS content directory is full! How can I clean up unneeded files?.
Q: How do I configure the WSUS console for read-only access for reporting purposes?.
Q: I like to develop VBScripts for administration purposes. Where can I find information on the scripting interface for WSUS?
Q: SUS only took up xGb amount of space! Why does my WSUS content directory have so much more data in it?
Q: I'm getting error code (insert error code here) in my Windows Update logs, what do these errors mean?
Also, I have some patch management testing procedures available here if anyone is willing to take a look:
Number of downloads: 272
This post has been edited by Rob Dunn: 29 Jan 2007, 14:59